last executing test programs: 4m51.612332817s ago: executing program 3 (id=909): r0 = syz_create_resource$futex(&(0x7f0000000080)) futex(r0, 0x0, 0x0, 0x0, 0x0, 0x1) futex(r0, 0xd, 0x2, 0x0, 0x0, 0x1) 4m50.762959404s ago: executing program 3 (id=920): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m49.868227662s ago: executing program 3 (id=933): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x0, &(0x7f0000000900)}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa10023ceaeef65bff"], 0x20) 4m49.153735873s ago: executing program 3 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 4m49.153448112s ago: executing program 3 (id=939): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x180) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='3', 0x4e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(0x0, 0x80080) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m49.043957646s ago: executing program 3 (id=940): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 4m34.032615638s ago: executing program 32 (id=940): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 1m51.83369069s ago: executing program 1 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m51.83331619s ago: executing program 1 (id=2646): ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) unshare(0x22020600) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 1m51.743452756s ago: executing program 1 (id=2648): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1m50.85209139s ago: executing program 1 (id=2655): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x54e7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x2, 0x0, 0xffffffff}}]}}}]}, 0x78}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mkdir(&(0x7f0000000100)='./sys\x00', 0x191) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='01:3\'', 0x5) 1m49.990480121s ago: executing program 1 (id=2669): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x10000, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010102}, 0x10) 1m49.990225027s ago: executing program 1 (id=2671): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c9f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4bb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b160600000000000000fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f02558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f52dac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x10}) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = dup(r2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000280), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 1m34.813682362s ago: executing program 33 (id=2671): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c9f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4bb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b160600000000000000fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f02558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f52dac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151d8c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe517892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b56e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a006d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504af58464e433ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6a781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f716d17df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x10}) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = dup(r2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000280), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 49.562373832s ago: executing program 4 (id=3245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340249000600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 49.529736551s ago: executing program 4 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10}, 0x0) 48.593031209s ago: executing program 4 (id=3262): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, 0x0}]) 48.526366265s ago: executing program 4 (id=3265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340249000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300"], 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 48.521097456s ago: executing program 4 (id=3267): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.720794728s ago: executing program 4 (id=3283): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 31.53101223s ago: executing program 34 (id=3283): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 1.462980318s ago: executing program 2 (id=3658): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x0, [], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 1.462518398s ago: executing program 5 (id=3659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000880), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r2, &(0x7f0000000a00)={&(0x7f0000000a40)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 1.46233924s ago: executing program 2 (id=3660): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000500)='testpacketdata', 0xe, 0x0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.409191406s ago: executing program 2 (id=3661): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 1.400496052s ago: executing program 5 (id=3662): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, 0x0) 1.354849549s ago: executing program 2 (id=3663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340249000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffff"], 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1.353897398s ago: executing program 2 (id=3664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, &(0x7f0000000a00)}, 0x20) semop(0x0, 0x0, 0x0) 653.165453ms ago: executing program 6 (id=3666): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) 538.822411ms ago: executing program 6 (id=3667): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) wait4(r0, 0x0, 0x8, &(0x7f0000000240)) 442.846216ms ago: executing program 5 (id=3668): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x0, [], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 332.773062ms ago: executing program 5 (id=3669): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000500)='testpacketdata', 0xe, 0x0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 202.910521ms ago: executing program 6 (id=3670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000880), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r2, &(0x7f0000000a00)={&(0x7f0000000a40)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 141.893745ms ago: executing program 2 (id=3671): syz_usb_connect(0x3, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x202, 0x55, 0xa, 0x3, 0x8, 0x3fd, 0xebbe, 0x38c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1c, 0x1, 0x50, 0x84, "", [{{0x9, 0x4, 0x9d, 0xfc, 0x0, 0x8a, 0x31, 0xb6, 0x4}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 141.775507ms ago: executing program 0 (id=3672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340249000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffff"], 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, 0x0, 0x0) 139.809087ms ago: executing program 0 (id=3673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000006c0), 0x4) 126.248586ms ago: executing program 5 (id=3674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) 99.172988ms ago: executing program 0 (id=3675): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x10041, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'tunl0\x00'}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 58.530889ms ago: executing program 5 (id=3676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @eol, @eol]}}}}}}}, 0x0) 58.332545ms ago: executing program 0 (id=3677): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x0, [], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 55.894772ms ago: executing program 6 (id=3678): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x7}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) 546.565µs ago: executing program 0 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000380), 0x0}, 0x20) 304.053µs ago: executing program 6 (id=3680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0xe, 0x0, &(0x7f0000000980)="e0b9547eec00000000000001ed36", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 147.584µs ago: executing program 0 (id=3681): syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', &(0x7f0000000040)='configfs\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x148) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) 0s ago: executing program 6 (id=3682): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0x1}}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000500)='testpacketdata', 0xe, 0x0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): 338.839236][T14351] region_chg+0x85/0x140 [ 338.839259][T14351] __vma_reservation_common+0x34b/0x6f0 [ 338.839282][T14351] ? find_held_lock+0x2b/0x80 [ 338.839306][T14351] ? __pfx___vma_reservation_common+0x10/0x10 [ 338.839327][T14351] ? filemap_get_entry+0x22d/0x450 [ 338.839360][T14351] alloc_hugetlb_folio+0x594/0x870 [ 338.839391][T14351] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 338.839417][T14351] ? rcu_is_watching+0x13/0xc0 [ 338.839446][T14351] ? __filemap_get_folio_mpol+0x369/0x1280 [ 338.839472][T14351] ? lock_acquire+0x1d1/0x380 [ 338.839497][T14351] hugetlb_no_page+0x1099/0x1c20 [ 338.839521][T14351] ? __pfx_down_read+0x10/0x10 [ 338.839548][T14351] ? __pfx_hugetlb_no_page+0x10/0x10 [ 338.839571][T14351] ? huge_pte_alloc+0x39f/0x5a0 [ 338.839594][T14351] hugetlb_fault+0x5a7/0x1650 [ 338.839619][T14351] ? __pfx_hugetlb_fault+0x10/0x10 [ 338.839635][T14351] ? lock_acquire+0x1d1/0x380 [ 338.839654][T14351] ? hugetlb_vma_lock_read+0xaa/0x120 [ 338.839684][T14351] ? rcu_is_watching+0x13/0xc0 [ 338.839708][T14351] ? __up_read+0x333/0x980 [ 338.839731][T14351] ? __pfx___up_read+0x10/0x10 [ 338.839751][T14351] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 338.839777][T14351] handle_mm_fault+0x604/0xa20 [ 338.839800][T14351] __get_user_pages+0x8ae/0x2c30 [ 338.839833][T14351] ? __pfx___get_user_pages+0x10/0x10 [ 338.839867][T14351] populate_vma_page_range+0x267/0x3f0 [ 338.839893][T14351] ? __pfx_populate_vma_page_range+0x10/0x10 [ 338.839917][T14351] ? __pfx_find_vma_intersection+0x10/0x10 [ 338.839953][T14351] __mm_populate+0x107/0x3a0 [ 338.839980][T14351] ? __pfx___mm_populate+0x10/0x10 [ 338.840028][T14351] ? up_write+0x2dc/0x5b0 [ 338.840056][T14351] vm_mmap_pgoff+0x441/0x470 [ 338.840083][T14351] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 338.840102][T14351] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 338.840131][T14351] ksys_mmap_pgoff+0x285/0x610 [ 338.840158][T14351] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 338.840180][T14351] ? xfd_validate_state+0x129/0x190 [ 338.840204][T14351] __x64_sys_mmap+0x125/0x190 [ 338.840228][T14351] do_syscall_64+0x123/0x790 [ 338.840254][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.840272][T14351] RIP: 0033:0x7fdab3f9e1d9 [ 338.840287][T14351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.840303][T14351] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 338.840342][T14351] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 338.840355][T14351] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 338.840365][T14351] RBP: 00007fdab4035888 R08: ffffffffffffffff R09: 0000000000000000 [ 338.840376][T14351] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 338.840387][T14351] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 338.840412][T14351] [ 338.866172][T14355] FAULT_INJECTION: forcing a failure. [ 338.866172][T14355] name failslab, interval 1, probability 0, space 0, times 0 [ 338.866191][T14355] CPU: 1 UID: 0 PID: 14355 Comm: syz.4.3129 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.866206][T14355] Tainted: [L]=SOFTLOCKUP [ 338.866210][T14355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.866217][T14355] Call Trace: [ 338.866221][T14355] [ 338.866226][T14355] dump_stack_lvl+0x100/0x190 [ 338.866247][T14355] should_fail_ex.cold+0x5/0xa [ 338.866264][T14355] should_failslab+0xc2/0x120 [ 338.866281][T14355] kmem_cache_alloc_noprof+0x92/0x6a0 [ 338.866298][T14355] ? do_getname+0x35/0x390 [ 338.866313][T14355] do_getname+0x35/0x390 [ 338.866326][T14355] __x64_sys_execve+0x76/0xd0 [ 338.866342][T14355] do_syscall_64+0x123/0x790 [ 338.866358][T14355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.866370][T14355] RIP: 0033:0x7fc529b9e1d9 [ 338.866379][T14355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.866390][T14355] RSP: 002b:00007fc52aaea028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 338.866401][T14355] RAX: ffffffffffffffda RBX: 00007fc529e25fa0 RCX: 00007fc529b9e1d9 [ 338.866408][T14355] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000300 [ 338.866414][T14355] RBP: 00007fc529c35888 R08: 0000000000000000 R09: 0000000000000000 [ 338.866421][T14355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.866427][T14355] R13: 00007fc529e26038 R14: 00007fc529e25fa0 R15: 00007ffc1854e858 [ 338.866442][T14355] [ 338.945121][ T43] audit: type=1326 audit(2000000753.805:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.945163][ T43] audit: type=1326 audit(2000000753.805:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.946992][ T43] audit: type=1326 audit(2000000753.805:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.947029][ T43] audit: type=1326 audit(2000000753.805:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.997238][ T43] audit: type=1326 audit(2000000753.805:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.998296][ T43] audit: type=1326 audit(2000000753.855:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.998889][ T43] audit: type=1326 audit(2000000753.855:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.998913][ T43] audit: type=1326 audit(2000000753.855:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 338.998933][ T43] audit: type=1326 audit(2000000753.855:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.5.3128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4379e1d9 code=0x7ffc0000 [ 339.334068][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 339.423712][ T1039] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 339.483933][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 339.484401][ T25] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 339.485214][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.485227][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.485239][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.485268][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.487018][ T25] usb 10-1: config 0 descriptor?? [ 339.574942][ T1039] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.575773][ T1039] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 339.575790][ T1039] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 339.575803][ T1039] usb 9-1: config 0 interface 0 has no altsetting 0 [ 339.577766][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.577776][ T1039] usb 9-1: Product: syz [ 339.577784][ T1039] usb 9-1: Manufacturer: syz [ 339.577791][ T1039] usb 9-1: SerialNumber: syz [ 339.579570][ T1039] usb 9-1: config 0 descriptor?? [ 339.580183][T14376] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 339.582911][ T1039] usb 9-1: selecting invalid altsetting 0 [ 339.784601][T14376] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 339.809191][T14379] FAULT_INJECTION: forcing a failure. [ 339.809191][T14379] name failslab, interval 1, probability 0, space 0, times 0 [ 339.809209][T14379] CPU: 3 UID: 0 PID: 14379 Comm: syz.2.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.809224][T14379] Tainted: [L]=SOFTLOCKUP [ 339.809228][T14379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.809235][T14379] Call Trace: [ 339.809239][T14379] [ 339.809244][T14379] dump_stack_lvl+0x100/0x190 [ 339.809264][T14379] should_fail_ex.cold+0x5/0xa [ 339.809282][T14379] should_failslab+0xc2/0x120 [ 339.809299][T14379] __kmalloc_cache_node_noprof+0x94/0x720 [ 339.809316][T14379] ? sbitmap_queue_init_node+0x291/0x4a0 [ 339.809334][T14379] sbitmap_queue_init_node+0x291/0x4a0 [ 339.809350][T14379] kyber_alloc_sched_data+0x30f/0x7b0 [ 339.809369][T14379] ? __pfx_kyber_alloc_sched_data+0x10/0x10 [ 339.809386][T14379] blk_mq_alloc_sched_res+0x105/0x250 [ 339.809404][T14379] elevator_change+0x136/0x530 [ 339.809420][T14379] elv_iosched_store+0x3be/0x460 [ 339.809436][T14379] ? __pfx_elv_iosched_store+0x10/0x10 [ 339.809455][T14379] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 339.809470][T14379] ? __pfx_elv_iosched_store+0x10/0x10 [ 339.809485][T14379] queue_attr_store+0x25f/0x2f0 [ 339.809498][T14379] ? __pfx_queue_attr_store+0x10/0x10 [ 339.809510][T14379] ? __lock_acquire+0x5c0/0x1f40 [ 339.809528][T14379] ? lock_acquire+0x1d1/0x380 [ 339.809540][T14379] ? sysfs_file_kobj+0x21/0x290 [ 339.809556][T14379] ? find_held_lock+0x2b/0x80 [ 339.809572][T14379] ? sysfs_file_kobj+0xe4/0x290 [ 339.809587][T14379] ? sysfs_file_kobj+0xe4/0x290 [ 339.809604][T14379] ? __pfx_queue_attr_store+0x10/0x10 [ 339.809616][T14379] sysfs_kf_write+0xf2/0x150 [ 339.809632][T14379] kernfs_fop_write_iter+0x3e0/0x5f0 [ 339.809646][T14379] ? __pfx_sysfs_kf_write+0x10/0x10 [ 339.809663][T14379] vfs_write+0x6af/0x1050 [ 339.809677][T14379] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 339.809693][T14379] ? __pfx_vfs_write+0x10/0x10 [ 339.809705][T14379] ? find_held_lock+0x2b/0x80 [ 339.809732][T14379] ksys_write+0x12a/0x250 [ 339.809745][T14379] ? __pfx_ksys_write+0x10/0x10 [ 339.809763][T14379] do_syscall_64+0x123/0x790 [ 339.809781][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.809792][T14379] RIP: 0033:0x7f5e1df9e1d9 [ 339.809802][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.809813][T14379] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.809825][T14379] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 339.809832][T14379] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 339.809839][T14379] RBP: 00007f5e1e035888 R08: 0000000000000000 R09: 0000000000000000 [ 339.809846][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.809860][T14379] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 339.809876][T14379] [ 339.862706][T14382] FAULT_INJECTION: forcing a failure. [ 339.862706][T14382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.862729][T14382] CPU: 2 UID: 0 PID: 14382 Comm: syz.2.3139 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.862753][T14382] Tainted: [L]=SOFTLOCKUP [ 339.862759][T14382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.862770][T14382] Call Trace: [ 339.862777][T14382] [ 339.862784][T14382] dump_stack_lvl+0x100/0x190 [ 339.862826][T14382] should_fail_ex.cold+0x5/0xa [ 339.862852][T14382] strncpy_from_user+0x3b/0x2d0 [ 339.862882][T14382] do_getname+0x78/0x390 [ 339.862903][T14382] __x64_sys_execve+0x76/0xd0 [ 339.862921][T14382] do_syscall_64+0x123/0x790 [ 339.862950][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.862969][T14382] RIP: 0033:0x7f5e1df9e1d9 [ 339.862985][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.863001][T14382] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 339.863016][T14382] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 339.863028][T14382] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000300 [ 339.863039][T14382] RBP: 00007f5e1e035888 R08: 0000000000000000 R09: 0000000000000000 [ 339.863049][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.863059][T14382] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 339.863085][T14382] [ 339.909751][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.000B/input/input31 [ 339.974539][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5011.000B/input/input32 [ 340.023463][ T25] kye 0003:0458:5011.000B: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 341.010255][ C2] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 341.819476][ T3377] usb 10-1: USB disconnect, device number 5 [ 342.189905][T10739] usb 9-1: USB disconnect, device number 34 ** 3697 printk messages dropped ** ** 135 printk messages dropped ** ** 116 printk messages dropped ** ** 113 printk messages dropped ** ** 149 printk messages dropped ** ** 261 printk messages dropped ** ** 136 printk messages dropped ** ** 144 printk messages dropped ** ** 140 printk messages dropped ** ** 142 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 132 printk messages dropped ** ** 139 printk messages dropped ** ** 136 printk messages dropped ** ** 133 printk messages dropped ** ** 134 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 140 printk messages dropped ** ** 131 printk messages dropped ** ** 137 printk messages dropped ** ** 95 printk messages dropped ** ** 4039 printk messages dropped ** ** 17 printk messages dropped ** ** 51 printk messages dropped ** ** 41 printk messages dropped ** ** 51 printk messages dropped ** ** 30 printk messages dropped ** [ 343.390629][T14465] FAULT_INJECTION: forcing a failure. [ 343.390629][T14465] name failslab, interval 1, probability 0, space 0, times 0 [ 343.390649][T14465] CPU: 1 UID: 0 PID: 14465 Comm: syz.5.3170 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.390684][T14465] Tainted: [L]=SOFTLOCKUP [ 343.390691][T14465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.390698][T14465] Call Trace: [ 343.390703][T14465] [ 343.390709][T14465] dump_stack_lvl+0x100/0x190 [ 343.390729][T14465] should_fail_ex.cold+0x5/0xa [ 343.390747][T14465] should_failslab+0xc2/0x120 [ 343.390766][T14465] __kmalloc_cache_noprof+0x91/0x6d0 [ 343.390778][T14465] ? allocate_file_region_entries+0x15d/0x630 [ 343.390793][T14465] ? allocate_file_region_entries+0x1a0/0x630 [ 343.390811][T14465] allocate_file_region_entries+0x1a0/0x630 [ 343.390829][T14465] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 343.390849][T14465] region_chg+0x85/0x140 [ 343.390864][T14465] __vma_reservation_common+0x34b/0x6f0 [ 343.390879][T14465] ? find_held_lock+0x2b/0x80 [ 343.390896][T14465] ? __pfx___vma_reservation_common+0x10/0x10 [ 343.390911][T14465] ? filemap_get_entry+0x22d/0x450 [ 343.390938][T14465] alloc_hugetlb_folio+0x594/0x870 [ 343.390957][T14465] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 343.390976][T14465] ? rcu_is_watching+0x13/0xc0 [ 343.390997][T14465] ? __filemap_get_folio_mpol+0x369/0x1280 [ 343.391014][T14465] ? lock_acquire+0x1d1/0x380 [ 343.391037][T14465] hugetlb_no_page+0x1099/0x1c20 [ 343.391058][T14465] ? __pfx_down_read+0x10/0x10 [ 343.391084][T14465] ? __pfx_hugetlb_no_page+0x10/0x10 [ 343.391102][T14465] ? huge_pte_alloc+0x39f/0x5a0 [ 343.391116][T14465] hugetlb_fault+0x5a7/0x1650 [ 343.391133][T14465] ? __pfx_hugetlb_fault+0x10/0x10 [ 343.391145][T14465] ? lock_acquire+0x1d1/0x380 [ 343.391158][T14465] ? hugetlb_vma_lock_read+0xaa/0x120 [ 343.391196][T14465] ? rcu_is_watching+0x13/0xc0 [ 343.391213][T14465] ? __up_read+0x333/0x980 [ 343.391229][T14465] ? __pfx___up_read+0x10/0x10 [ 343.391243][T14465] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 343.391261][T14465] handle_mm_fault+0x604/0xa20 [ 343.391278][T14465] __get_user_pages+0x8ae/0x2c30 [ 343.391300][T14465] ? __pfx___get_user_pages+0x10/0x10 [ 343.391321][T14465] populate_vma_page_range+0x267/0x3f0 [ 343.391338][T14465] ? __pfx_populate_vma_page_range+0x10/0x10 [ 343.391354][T14465] ? __pfx_find_vma_intersection+0x10/0x10 [ 343.391373][T14465] __mm_populate+0x107/0x3a0 [ 343.391389][T14465] ? __pfx___mm_populate+0x10/0x10 [ 343.391407][T14465] ? up_write+0x2dc/0x5b0 [ 343.391422][T14465] vm_mmap_pgoff+0x441/0x470 [ 343.391439][T14465] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 343.391452][T14465] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 343.391470][T14465] ksys_mmap_pgoff+0x285/0x610 [ 343.391487][T14465] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 343.391502][T14465] ? xfd_validate_state+0x129/0x190 [ 343.391517][T14465] __x64_sys_mmap+0x125/0x190 [ 343.391533][T14465] do_syscall_64+0x123/0x790 [ 343.391549][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.391561][T14465] RIP: 0033:0x7f0f4379e1d9 [ 343.391572][T14465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.391583][T14465] RSP: 002b:00007f0f445a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 343.391594][T14465] RAX: ffffffffffffffda RBX: 00007f0f43a25fa0 RCX: 00007f0f4379e1d9 [ 343.391602][T14465] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 343.391608][T14465] RBP: 00007f0f43835888 R08: ffffffffffffffff R09: 0000000000000000 [ 343.391615][T14465] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 343.391622][T14465] R13: 00007f0f43a26038 R14: 00007f0f43a25fa0 R15: 00007ffde41d2ee8 [ 343.391637][T14465] [ 343.844755][ T5953] net_ratelimit: 120 callbacks suppressed [ 344.144044][ T35] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 344.305376][ T35] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 344.306218][ T35] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.306231][ T35] usb 9-1: config 0 has no interfaces? [ 344.307810][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.307820][ T35] usb 9-1: Product: syz [ 344.307827][ T35] usb 9-1: Manufacturer: syz [ 344.307835][ T35] usb 9-1: SerialNumber: syz [ 344.309735][ T35] usb 9-1: config 0 descriptor?? [ 344.533547][ T30] usb 9-1: USB disconnect, device number 35 [ 345.075116][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 345.075133][ T43] audit: type=1326 audit(2000000759.935:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.2.3201" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1df9e1d9 code=0x0 [ 345.467370][T14550] FAULT_INJECTION: forcing a failure. [ 345.467370][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 345.467389][T14550] CPU: 3 UID: 0 PID: 14550 Comm: syz.0.3203 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.467405][T14550] Tainted: [L]=SOFTLOCKUP [ 345.467410][T14550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.467417][T14550] Call Trace: [ 345.467421][T14550] [ 345.467426][T14550] dump_stack_lvl+0x100/0x190 [ 345.467447][T14550] should_fail_ex.cold+0x5/0xa [ 345.467466][T14550] should_failslab+0xc2/0x120 [ 345.467493][T14550] __kmalloc_noprof+0xfc/0x840 [ 345.467510][T14550] ? __d_alloc+0x650/0xa50 [ 345.467524][T14550] __d_alloc+0x650/0xa50 [ 345.467537][T14550] d_alloc+0x4a/0x1e0 [ 345.467549][T14550] lookup_one_qstr_excl+0x171/0x250 [ 345.467562][T14550] ? mnt_want_write+0x164/0x420 [ 345.467578][T14550] filename_rmdir+0x26b/0x5c0 [ 345.467597][T14550] ? __pfx_filename_rmdir+0x10/0x10 [ 345.467620][T14550] ? do_getname+0x191/0x390 [ 345.467633][T14550] __x64_sys_unlinkat+0xf5/0x130 [ 345.467672][T14550] do_syscall_64+0x123/0x790 [ 345.467691][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.467703][T14550] RIP: 0033:0x7fdab3f9e1d9 [ 345.467714][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.467725][T14550] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 345.467738][T14550] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 345.467745][T14550] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 345.467752][T14550] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 345.467759][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.467765][T14550] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 345.467780][T14550] [ 345.895595][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 346.083774][T14563] netlink: 'syz.5.3210': attribute type 29 has an invalid length. [ 346.083784][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3210'. [ 346.083798][T14563] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 346.275458][T14576] FAULT_INJECTION: forcing a failure. [ 346.275458][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 346.275481][T14576] CPU: 3 UID: 0 PID: 14576 Comm: syz.4.3213 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.275499][T14576] Tainted: [L]=SOFTLOCKUP [ 346.275504][T14576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.275512][T14576] Call Trace: [ 346.275525][T14576] [ 346.275530][T14576] dump_stack_lvl+0x100/0x190 [ 346.275552][T14576] should_fail_ex.cold+0x5/0xa [ 346.275569][T14576] should_failslab+0xc2/0x120 [ 346.275587][T14576] __kmalloc_noprof+0xfc/0x840 [ 346.275602][T14576] ? kobj_map+0x80/0x4b0 [ 346.275622][T14576] kobj_map+0x80/0x4b0 [ 346.275638][T14576] ? __pfx_exact_match+0x10/0x10 [ 346.275652][T14576] ? __pfx_exact_lock+0x10/0x10 [ 346.275670][T14576] cdev_add+0xa7/0x1a0 [ 346.275686][T14576] cdev_device_add+0x10f/0x270 [ 346.275703][T14576] nvme_add_ctrl+0x15c/0x320 [ 346.275718][T14576] nvme_loop_create_ctrl+0x201/0xee0 [ 346.275738][T14576] nvmf_dev_write+0x4ee/0xb60 [ 346.275752][T14576] vfs_write+0x2aa/0x1050 [ 346.275766][T14576] ? __pfx_nvmf_dev_write+0x10/0x10 [ 346.275777][T14576] ? lock_acquire+0x1d1/0x380 [ 346.275790][T14576] ? __fget_files+0x34/0x3d0 [ 346.275805][T14576] ? __pfx_vfs_write+0x10/0x10 [ 346.275826][T14576] ? find_held_lock+0x2b/0x80 [ 346.275842][T14576] ? __fget_files+0x215/0x3d0 [ 346.275857][T14576] ? __fget_files+0x215/0x3d0 [ 346.275876][T14576] ? __fget_files+0x21f/0x3d0 [ 346.275895][T14576] ksys_write+0x12a/0x250 [ 346.275908][T14576] ? __pfx_ksys_write+0x10/0x10 [ 346.275926][T14576] do_syscall_64+0x123/0x790 [ 346.275943][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.275955][T14576] RIP: 0033:0x7fc529b9e1d9 [ 346.275966][T14576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.275976][T14576] RSP: 002b:00007fc52aaea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.275988][T14576] RAX: ffffffffffffffda RBX: 00007fc529e25fa0 RCX: 00007fc529b9e1d9 [ 346.275995][T14576] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000005 [ 346.276001][T14576] RBP: 00007fc529c35888 R08: 0000000000000000 R09: 0000000000000000 [ 346.276008][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.276015][T14576] R13: 00007fc529e26038 R14: 00007fc529e25fa0 R15: 00007ffc1854e858 [ 346.276029][T14576] [ 346.665359][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 347.264526][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 347.476107][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3231'. [ 347.488462][ T43] audit: type=1326 audit(2000000762.345:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.488991][ T43] audit: type=1326 audit(2000000762.345:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.489224][ T43] audit: type=1326 audit(2000000762.345:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.489390][ T43] audit: type=1326 audit(2000000762.345:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.489809][ T43] audit: type=1326 audit(2000000762.345:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.489916][ T43] audit: type=1326 audit(2000000762.345:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.490065][ T43] audit: type=1326 audit(2000000762.345:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.490142][ T43] audit: type=1326 audit(2000000762.345:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.490250][ T43] audit: type=1326 audit(2000000762.345:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.0.3233" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fdab3f9e1d9 code=0x7ffc0000 [ 347.905901][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 347.952164][T14642] geneve2: entered promiscuous mode [ 347.964748][ T5777] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 51764 - 0 [ 347.973842][ T5777] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 51764 - 0 [ 347.973878][ T5777] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 51764 - 0 [ 347.973910][ T5777] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 51764 - 0 [ 348.575261][T14652] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 348.575289][T14652] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 348.575572][T14652] vhci_hcd vhci_hcd.0: Device attached [ 348.707503][T14654] vhci_hcd: connection closed [ 348.709570][ T5777] vhci_hcd vhci_hcd.4: stop threads [ 348.709589][ T5777] vhci_hcd vhci_hcd.4: release socket [ 348.709607][ T5777] vhci_hcd vhci_hcd.4: disconnect device [ 348.782390][T14629] ima: policy update completed [ 348.871524][T14660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 348.883710][ C3] net_ratelimit: 84 callbacks suppressed [ 349.330583][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 349.892716][T14686] syzkaller0: entered promiscuous mode [ 349.892731][T14686] syzkaller0: entered allmulticast mode [ 349.912533][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3255'. [ 350.203366][T14701] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 350.328316][T14716] tipc: Cannot configure node identity twice [ 350.378947][ T43] kauditd_printk_skb: 504 callbacks suppressed [ 350.378958][ T43] audit: type=1800 audit(2000000765.235:2281): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34978 res=0 errno=0 [ 350.381306][ T43] audit: type=1800 audit(2000000765.235:2282): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35001 res=0 errno=0 [ 350.403846][T14720] syz.2.3266 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 350.403867][T14720] CPU: 3 UID: 0 PID: 14720 Comm: syz.2.3266 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.403890][T14720] Tainted: [L]=SOFTLOCKUP [ 350.403895][T14720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.403903][T14720] Call Trace: [ 350.403908][T14720] [ 350.403913][T14720] dump_stack_lvl+0x100/0x190 [ 350.403935][T14720] dump_header+0xfb/0x606 [ 350.403949][T14720] oom_kill_process.cold+0xd/0x380 [ 350.403964][T14720] out_of_memory+0x340/0x14f0 [ 350.403992][T14720] ? __pfx_out_of_memory+0x10/0x10 [ 350.404014][T14720] mem_cgroup_out_of_memory+0xc6/0x130 [ 350.404031][T14720] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 350.404046][T14720] ? find_held_lock+0x2b/0x80 [ 350.404079][T14720] ? do_raw_spin_unlock+0x145/0x1e0 [ 350.404098][T14720] ? _raw_spin_unlock+0x28/0x50 [ 350.404115][T14720] try_charge_memcg+0x783/0xf60 [ 350.404131][T14720] ? __pfx_try_charge_memcg+0x10/0x10 [ 350.404143][T14720] ? find_held_lock+0x2b/0x80 [ 350.404160][T14720] ? rcu_read_unlock+0x17/0x60 [ 350.404173][T14720] ? rcu_read_unlock+0x17/0x60 [ 350.404191][T14720] obj_cgroup_charge_pages+0x2b/0x1f0 [ 350.404205][T14720] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 350.404222][T14720] ? kasan_unpoison+0x27/0x60 [ 350.404237][T14720] __kmalloc_cache_noprof+0x52a/0x6d0 [ 350.404251][T14720] ? kvm_init_irq_routing+0x43/0xf0 [ 350.404283][T14720] kvm_init_irq_routing+0x43/0xf0 [ 350.404297][T14720] kvm_dev_ioctl+0x7ca/0x1b50 [ 350.404318][T14720] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 350.404335][T14720] ? selinux_file_ioctl+0x13b/0x290 [ 350.404351][T14720] ? selinux_file_ioctl+0xb6/0x290 [ 350.404368][T14720] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 350.404383][T14720] __x64_sys_ioctl+0x18e/0x210 [ 350.404398][T14720] do_syscall_64+0x123/0x790 [ 350.404415][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.404428][T14720] RIP: 0033:0x7f5e1df9e1d9 [ 350.404438][T14720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.404448][T14720] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.404460][T14720] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 350.404467][T14720] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 350.404474][T14720] RBP: 00007f5e1e035888 R08: 0000000000000000 R09: 0000000000000000 [ 350.404480][T14720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.404487][T14720] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 350.404502][T14720] [ 350.404572][T14720] memory: usage 96kB, limit 96kB, failcnt 142 [ 350.404581][T14720] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 350.404588][T14720] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 350.404595][T14720] Memory cgroup stats for /syz2/test: [ 350.404658][T14720] cache 0 [ 350.404663][T14720] rss 0 [ 350.404670][T14720] rss_huge 0 [ 350.404674][T14720] shmem 0 [ 350.404678][T14720] mapped_file 0 [ 350.404683][T14720] dirty 0 [ 350.404687][T14720] writeback 0 [ 350.404691][T14720] workingset_refault_anon 0 [ 350.404696][T14720] workingset_refault_file 0 [ 350.404700][T14720] swap 0 [ 350.404704][T14720] swapcached 0 [ 350.404709][T14720] pgpgin 0 [ 350.404713][T14720] pgpgout 0 [ 350.404717][T14720] pgfault 0 [ 350.404721][T14720] pgmajfault 0 [ 350.404725][T14720] inactive_anon 0 [ 350.404729][T14720] active_anon 0 [ 350.404733][T14720] inactive_file 0 [ 350.404737][T14720] active_file 0 [ 350.404741][T14720] unevictable 0 [ 350.404745][T14720] hierarchical_memory_limit 98304 [ 350.404749][T14720] hierarchical_memsw_limit 9223372036854771712 [ 350.404754][T14720] total_cache 0 [ 350.404758][T14720] total_rss 0 [ 350.404762][T14720] total_rss_huge 0 [ 350.404766][T14720] total_shmem 0 [ 350.404770][T14720] total_mapped_file 0 [ 350.404774][T14720] total_dirty 0 [ 350.404778][T14720] total_writeback 0 [ 350.404782][T14720] total_workingset_refault_anon 0 [ 350.404786][T14720] total_workingset_refault_file 0 [ 350.404791][T14720] total_swap 0 [ 350.404795][T14720] total_swapcached 0 [ 350.404799][T14720] total_pgpgin 0 [ 350.404803][T14720] total_pgpgout 0 [ 350.404807][T14720] total_pgfault 0 [ 350.404811][T14720] total_pgmajfault 0 [ 350.404815][T14720] total_inactive_anon 0 [ 350.404819][T14720] total_active_anon 0 [ 350.404823][T14720] total_inactive_file 0 [ 350.404827][T14720] total_active_file 0 [ 350.404831][T14720] total_unevictable 0 [ 350.404835][T14720] anon_cost 0 [ 350.404839][T14720] file_cost 0 [ 350.404843][T14720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3266,pid=14719,uid=0 [ 350.404908][T14720] Memory cgroup out of memory: Killed process 14719 (syz.2.3266) total-vm:102260kB, anon-rss:1432kB, file-rss:23760kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 350.613888][ T1039] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 350.773750][ T1039] usb 9-1: Using ep0 maxpacket: 32 [ 350.774326][ T1039] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 350.775228][ T1039] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 350.775248][ T1039] usb 9-1: config 0 has no interface number 0 [ 350.780869][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.781016][ T1039] usb 9-1: Product: syz [ 350.781080][ T1039] usb 9-1: Manufacturer: syz [ 350.781143][ T1039] usb 9-1: SerialNumber: syz [ 350.786266][ T1039] usb 9-1: config 0 descriptor?? [ 350.786300][ T43] audit: type=1800 audit(2000000765.645:2283): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198261 res=0 errno=0 [ 350.792589][ T43] audit: type=1800 audit(2000000765.645:2284): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=198293 res=0 errno=0 [ 350.793603][ T43] audit: type=1800 audit(2000000765.645:2285): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=198268 res=0 errno=0 [ 350.795507][ T43] audit: type=1800 audit(2000000765.655:2286): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=198269 res=0 errno=0 [ 351.595018][ T1039] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 351.595032][ T1039] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 351.595343][ T1039] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 351.595445][ T1039] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 351.598830][ T43] audit: type=1800 audit(2000000766.455:2287): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=198290 res=0 errno=0 [ 351.599006][ T1039] usb 9-1: USB disconnect, device number 36 [ 351.603089][ T43] audit: type=1800 audit(2000000766.455:2288): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=198291 res=0 errno=0 [ 352.511306][ T43] audit: type=1800 audit(2000000767.365:2289): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35028 res=0 errno=0 [ 352.511812][ T43] audit: type=1800 audit(2000000767.365:2290): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35051 res=0 errno=0 [ 352.703933][T14790] overlayfs: failed to resolve './bus': -2 [ 352.755809][ T35] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 352.906128][ T35] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 352.908795][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.908811][ T35] usb 10-1: Product: syz [ 352.908823][ T35] usb 10-1: Manufacturer: syz [ 352.908836][ T35] usb 10-1: SerialNumber: syz [ 352.911294][ T35] usb 10-1: config 0 descriptor?? [ 352.940312][ T35] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 353.117289][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.117603][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.319345][ T35] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 353.319354][ T35] sq905c 10-1:0.0: Reading version command failed [ 353.319389][ T35] sq905c 10-1:0.0: probe with driver sq905c failed with error -71 [ 353.323806][ T35] usb 10-1: USB disconnect, device number 6 [ 353.923731][ C2] net_ratelimit: 90 callbacks suppressed [ 354.190205][T14815] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 354.203498][T14815] ip6gre1: entered promiscuous mode [ 354.203514][T14815] ip6gre1: entered allmulticast mode [ 354.205583][ T5777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.205770][ T5777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.233882][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.553891][ T30] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 354.615465][ T1039] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.893784][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 354.921487][ T30] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 354.969776][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 355.070719][ T30] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 355.070731][ T30] usb 5-1: Product: syz [ 355.070739][ T30] usb 5-1: Manufacturer: syz [ 355.070748][ T30] usb 5-1: SerialNumber: syz [ 355.261940][ T5518] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.270532][ T30] usb 5-1: config 0 descriptor?? [ 355.276222][T14817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.277424][ T30] hub 5-1:0.0: bad descriptor, ignoring hub [ 355.277436][ T30] hub 5-1:0.0: probe with driver hub failed with error -5 [ 356.257927][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 356.257940][ T43] audit: type=1800 audit(2000000771.115:2311): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198992 res=0 errno=0 [ 356.552805][T14832] syzkaller0: entered promiscuous mode [ 356.552819][T14832] syzkaller0: entered allmulticast mode [ 356.570355][ T30] usb 5-1: USB disconnect, device number 43 [ 356.724863][ T30] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 356.874683][ T30] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 356.877952][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 356.879570][ T30] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 356.879581][ T30] usb 5-1: Product: syz [ 356.879589][ T30] usb 5-1: Manufacturer: syz [ 356.879596][ T30] usb 5-1: SerialNumber: syz [ 356.881577][ T30] usb 5-1: config 0 descriptor?? [ 356.883884][T14824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.884937][ T30] hub 5-1:0.0: bad descriptor, ignoring hub [ 356.884948][ T30] hub 5-1:0.0: probe with driver hub failed with error -5 [ 356.885294][ T43] audit: type=1800 audit(2000000771.745:2312): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199173 res=0 errno=0 [ 356.887123][ T43] audit: type=1800 audit(2000000771.745:2313): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199205 res=0 errno=0 [ 356.888000][ T43] audit: type=1800 audit(2000000771.745:2314): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199180 res=0 errno=0 [ 356.888560][ T43] audit: type=1800 audit(2000000771.745:2315): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199181 res=0 errno=0 [ 356.890622][ T43] audit: type=1800 audit(2000000771.745:2316): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=199202 res=0 errno=0 [ 356.891328][ T43] audit: type=1800 audit(2000000771.745:2317): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=199203 res=0 errno=0 [ 356.893670][ T43] audit: type=1800 audit(2000000771.745:2318): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=199182 res=0 errno=0 [ 356.893696][ T43] audit: type=1800 audit(2000000771.745:2319): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=199204 res=0 errno=0 [ 356.895940][ T43] audit: type=1800 audit(2000000771.755:2320): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199224 res=0 errno=0 [ 357.194219][ T5518] usb 5-1: USB disconnect, device number 44 [ 357.297968][ T5104] block nbd3: Possible stuck request ffff88802a2e1880: control (read@0,4096B). Runtime 270 seconds [ 357.591662][T14861] FAULT_INJECTION: forcing a failure. [ 357.591662][T14861] name failslab, interval 1, probability 0, space 0, times 0 [ 357.591683][T14861] CPU: 3 UID: 0 PID: 14861 Comm: syz.2.3318 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.591701][T14861] Tainted: [L]=SOFTLOCKUP [ 357.591706][T14861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.591714][T14861] Call Trace: [ 357.591719][T14861] [ 357.591725][T14861] dump_stack_lvl+0x100/0x190 [ 357.591746][T14861] should_fail_ex.cold+0x5/0xa [ 357.591765][T14861] should_failslab+0xc2/0x120 [ 357.591798][T14861] __kmalloc_cache_noprof+0x91/0x6d0 [ 357.591812][T14861] ? allocate_file_region_entries+0x15d/0x630 [ 357.591829][T14861] ? allocate_file_region_entries+0x1a0/0x630 [ 357.591848][T14861] allocate_file_region_entries+0x1a0/0x630 [ 357.591868][T14861] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 357.591888][T14861] region_chg+0x85/0x140 [ 357.591904][T14861] __vma_reservation_common+0x34b/0x6f0 [ 357.591919][T14861] ? find_held_lock+0x2b/0x80 [ 357.591936][T14861] ? __pfx___vma_reservation_common+0x10/0x10 [ 357.591951][T14861] ? filemap_get_entry+0x22d/0x450 [ 357.591973][T14861] alloc_hugetlb_folio+0x594/0x870 [ 357.591993][T14861] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 357.592010][T14861] ? rcu_is_watching+0x13/0xc0 [ 357.592029][T14861] ? __filemap_get_folio_mpol+0x369/0x1280 [ 357.592045][T14861] ? lock_acquire+0x1d1/0x380 [ 357.592061][T14861] hugetlb_no_page+0x1099/0x1c20 [ 357.592076][T14861] ? __pfx_down_read+0x10/0x10 [ 357.592093][T14861] ? __pfx_hugetlb_no_page+0x10/0x10 [ 357.592106][T14861] ? huge_pte_alloc+0x39f/0x5a0 [ 357.592119][T14861] hugetlb_fault+0x5a7/0x1650 [ 357.592134][T14861] ? __pfx_hugetlb_fault+0x10/0x10 [ 357.592145][T14861] ? lock_acquire+0x1d1/0x380 [ 357.592157][T14861] ? hugetlb_vma_lock_read+0xaa/0x120 [ 357.592176][T14861] ? rcu_is_watching+0x13/0xc0 [ 357.592192][T14861] ? __up_read+0x333/0x980 [ 357.592207][T14861] ? __pfx___up_read+0x10/0x10 [ 357.592220][T14861] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 357.592263][T14861] handle_mm_fault+0x604/0xa20 [ 357.592280][T14861] __get_user_pages+0x8ae/0x2c30 [ 357.592303][T14861] ? __pfx___get_user_pages+0x10/0x10 [ 357.592325][T14861] populate_vma_page_range+0x267/0x3f0 [ 357.592343][T14861] ? __pfx_populate_vma_page_range+0x10/0x10 [ 357.592359][T14861] ? __pfx_find_vma_intersection+0x10/0x10 [ 357.592380][T14861] __mm_populate+0x107/0x3a0 [ 357.592396][T14861] ? __pfx___mm_populate+0x10/0x10 [ 357.592413][T14861] ? up_write+0x2dc/0x5b0 [ 357.592429][T14861] vm_mmap_pgoff+0x441/0x470 [ 357.592445][T14861] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 357.592458][T14861] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 357.592476][T14861] ksys_mmap_pgoff+0x285/0x610 [ 357.592492][T14861] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 357.592506][T14861] ? fput+0x7c/0x100 [ 357.592522][T14861] ? __pfx___x64_sys_futex+0x10/0x10 [ 357.592538][T14861] ? ksys_write+0x1ac/0x250 [ 357.592552][T14861] ? __pfx_ksys_write+0x10/0x10 [ 357.592567][T14861] __x64_sys_mmap+0x125/0x190 [ 357.592582][T14861] do_syscall_64+0x123/0x790 [ 357.592599][T14861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.592611][T14861] RIP: 0033:0x7f5e1df9e1d9 [ 357.592622][T14861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.592633][T14861] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 357.592645][T14861] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 357.592652][T14861] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 357.592659][T14861] RBP: 00007f5e1e035888 R08: ffffffffffffffff R09: 0000000000000000 [ 357.592666][T14861] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 357.592672][T14861] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 357.592687][T14861] [ 358.083849][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.408821][T14886] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 358.563965][ T11] block nbd1: Possible stuck request ffff88802a200000: control (read@0,1024B). Runtime 270 seconds [ 358.563987][ T11] block nbd1: Possible stuck request ffff88802a2001c0: control (read@1024,1024B). Runtime 270 seconds [ 358.564001][ T11] block nbd1: Possible stuck request ffff88802a200380: control (read@2048,1024B). Runtime 270 seconds [ 358.564015][ T11] block nbd1: Possible stuck request ffff88802a200540: control (read@3072,1024B). Runtime 270 seconds [ 358.614818][T14898] FAULT_INJECTION: forcing a failure. [ 358.614818][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 358.614837][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.0.3330 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.614852][T14898] Tainted: [L]=SOFTLOCKUP [ 358.614856][T14898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.614862][T14898] Call Trace: [ 358.614867][T14898] [ 358.614872][T14898] dump_stack_lvl+0x100/0x190 [ 358.614893][T14898] should_fail_ex.cold+0x5/0xa [ 358.614911][T14898] should_failslab+0xc2/0x120 [ 358.614928][T14898] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 358.614945][T14898] ? sock_alloc_inode+0x26/0x2c0 [ 358.614958][T14898] ? __pfx_sock_alloc_inode+0x10/0x10 [ 358.614971][T14898] sock_alloc_inode+0x26/0x2c0 [ 358.614983][T14898] ? __pfx_sock_alloc_inode+0x10/0x10 [ 358.614995][T14898] alloc_inode+0x68/0x250 [ 358.615008][T14898] sock_alloc+0x44/0x280 [ 358.615018][T14898] ? security_socket_create+0x7f/0x250 [ 358.615034][T14898] __sock_create+0xc2/0x860 [ 358.615051][T14898] __sys_socket+0x14d/0x260 [ 358.615066][T14898] ? __pfx___sys_socket+0x10/0x10 [ 358.615084][T14898] __x64_sys_socket+0x72/0xb0 [ 358.615098][T14898] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.615113][T14898] do_syscall_64+0x123/0x790 [ 358.615130][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.615142][T14898] RIP: 0033:0x7fdab3f9e1d9 [ 358.615151][T14898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.615162][T14898] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 358.615173][T14898] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 358.615180][T14898] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 358.615187][T14898] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 358.615193][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.615200][T14898] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 358.615215][T14898] [ 358.699518][T14901] ip6gretap1: entered allmulticast mode [ 359.123855][ C2] net_ratelimit: 90 callbacks suppressed [ 359.647500][T14935] FAULT_INJECTION: forcing a failure. [ 359.647500][T14935] name failslab, interval 1, probability 0, space 0, times 0 [ 359.647518][T14935] CPU: 3 UID: 0 PID: 14935 Comm: syz.5.3339 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.647534][T14935] Tainted: [L]=SOFTLOCKUP [ 359.647538][T14935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.647544][T14935] Call Trace: [ 359.647549][T14935] [ 359.647553][T14935] dump_stack_lvl+0x100/0x190 [ 359.647574][T14935] should_fail_ex.cold+0x5/0xa [ 359.647591][T14935] should_failslab+0xc2/0x120 [ 359.647608][T14935] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 359.647624][T14935] ? sock_alloc_inode+0x26/0x2c0 [ 359.647639][T14935] ? __pfx_sock_alloc_inode+0x10/0x10 [ 359.647654][T14935] sock_alloc_inode+0x26/0x2c0 [ 359.647666][T14935] ? __pfx_sock_alloc_inode+0x10/0x10 [ 359.647678][T14935] alloc_inode+0x68/0x250 [ 359.647691][T14935] sock_alloc+0x44/0x280 [ 359.647701][T14935] ? security_socket_create+0x7f/0x250 [ 359.647715][T14935] __sock_create+0xc2/0x860 [ 359.647731][T14935] __sys_socket+0x14d/0x260 [ 359.647745][T14935] ? __pfx___sys_socket+0x10/0x10 [ 359.647784][T14935] __x64_sys_socket+0x72/0xb0 [ 359.647799][T14935] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.647815][T14935] do_syscall_64+0x123/0x790 [ 359.647832][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.647844][T14935] RIP: 0033:0x7f0f4379e1d9 [ 359.647854][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.647865][T14935] RSP: 002b:00007f0f445a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 359.647876][T14935] RAX: ffffffffffffffda RBX: 00007f0f43a25fa0 RCX: 00007f0f4379e1d9 [ 359.647883][T14935] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 359.647890][T14935] RBP: 00007f0f43835888 R08: 0000000000000000 R09: 0000000000000000 [ 359.647897][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.647904][T14935] R13: 00007f0f43a26038 R14: 00007f0f43a25fa0 R15: 00007ffde41d2ee8 [ 359.647920][T14935] [ 360.081689][T14962] FAULT_INJECTION: forcing a failure. [ 360.081689][T14962] name failslab, interval 1, probability 0, space 0, times 0 [ 360.081708][T14962] CPU: 2 UID: 0 PID: 14962 Comm: syz.0.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.081724][T14962] Tainted: [L]=SOFTLOCKUP [ 360.081728][T14962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.081734][T14962] Call Trace: [ 360.081739][T14962] [ 360.081743][T14962] dump_stack_lvl+0x100/0x190 [ 360.081764][T14962] should_fail_ex.cold+0x5/0xa [ 360.081782][T14962] should_failslab+0xc2/0x120 [ 360.081800][T14962] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 360.081815][T14962] ? sock_alloc_inode+0x26/0x2c0 [ 360.081829][T14962] ? __pfx_sock_alloc_inode+0x10/0x10 [ 360.081842][T14962] sock_alloc_inode+0x26/0x2c0 [ 360.081854][T14962] ? __pfx_sock_alloc_inode+0x10/0x10 [ 360.081866][T14962] alloc_inode+0x68/0x250 [ 360.081879][T14962] sock_alloc+0x44/0x280 [ 360.081889][T14962] ? security_socket_create+0x7f/0x250 [ 360.081922][T14962] __sock_create+0xc2/0x860 [ 360.081941][T14962] __sys_socket+0x14d/0x260 [ 360.081957][T14962] ? __pfx___sys_socket+0x10/0x10 [ 360.081976][T14962] __x64_sys_socket+0x72/0xb0 [ 360.081991][T14962] ? lockdep_hardirqs_on+0x7d/0x110 [ 360.082008][T14962] do_syscall_64+0x123/0x790 [ 360.082025][T14962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.082037][T14962] RIP: 0033:0x7fdab3f9e1d9 [ 360.082047][T14962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.082058][T14962] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 360.082070][T14962] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 360.082078][T14962] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 360.082085][T14962] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 360.082092][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.082099][T14962] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 360.082115][T14962] [ 360.778479][T14976] kvm: pic: non byte write [ 361.195413][T14983] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 361.230919][T14985] FAULT_INJECTION: forcing a failure. [ 361.230919][T14985] name failslab, interval 1, probability 0, space 0, times 0 [ 361.230949][T14985] CPU: 1 UID: 0 PID: 14985 Comm: syz.0.3357 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.230975][T14985] Tainted: [L]=SOFTLOCKUP [ 361.230982][T14985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.230992][T14985] Call Trace: [ 361.231001][T14985] [ 361.231008][T14985] dump_stack_lvl+0x100/0x190 [ 361.231040][T14985] should_fail_ex.cold+0x5/0xa [ 361.231067][T14985] should_failslab+0xc2/0x120 [ 361.231098][T14985] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 361.231124][T14985] ? sock_alloc_inode+0x26/0x2c0 [ 361.231148][T14985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 361.231171][T14985] sock_alloc_inode+0x26/0x2c0 [ 361.231192][T14985] ? __pfx_sock_alloc_inode+0x10/0x10 [ 361.231212][T14985] alloc_inode+0x68/0x250 [ 361.231233][T14985] sock_alloc+0x44/0x280 [ 361.231251][T14985] ? security_socket_create+0x7f/0x250 [ 361.231277][T14985] __sock_create+0xc2/0x860 [ 361.231305][T14985] __sys_socket+0x14d/0x260 [ 361.231328][T14985] ? fput+0x7c/0x100 [ 361.231355][T14985] ? __pfx___sys_socket+0x10/0x10 [ 361.231378][T14985] ? ksys_write+0x1ac/0x250 [ 361.231400][T14985] ? __pfx_ksys_write+0x10/0x10 [ 361.231429][T14985] __x64_sys_socket+0x72/0xb0 [ 361.231452][T14985] ? lockdep_hardirqs_on+0x7d/0x110 [ 361.231479][T14985] do_syscall_64+0x123/0x790 [ 361.231508][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.231528][T14985] RIP: 0033:0x7fdab3f9e1d9 [ 361.231544][T14985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.231563][T14985] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 361.231583][T14985] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 361.231596][T14985] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 361.231608][T14985] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 361.231620][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.231632][T14985] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 361.231658][T14985] [ 361.271302][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 361.271324][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 361.300372][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 361.300386][ T43] audit: type=1800 audit(2000000776.155:2334): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200072 res=0 errno=0 [ 361.809817][T15010] FAULT_INJECTION: forcing a failure. [ 361.809817][T15010] name failslab, interval 1, probability 0, space 0, times 0 [ 361.809837][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.2.3366 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.809857][T15010] Tainted: [L]=SOFTLOCKUP [ 361.809861][T15010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.809868][T15010] Call Trace: [ 361.809872][T15010] [ 361.809877][T15010] dump_stack_lvl+0x100/0x190 [ 361.809897][T15010] should_fail_ex.cold+0x5/0xa [ 361.809914][T15010] should_failslab+0xc2/0x120 [ 361.809932][T15010] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 361.809948][T15010] ? sock_alloc_inode+0x26/0x2c0 [ 361.809962][T15010] ? __pfx_sock_alloc_inode+0x10/0x10 [ 361.809976][T15010] sock_alloc_inode+0x26/0x2c0 [ 361.809989][T15010] ? __pfx_sock_alloc_inode+0x10/0x10 [ 361.810001][T15010] alloc_inode+0x68/0x250 [ 361.810014][T15010] sock_alloc+0x44/0x280 [ 361.810024][T15010] ? security_socket_create+0x7f/0x250 [ 361.810039][T15010] __sock_create+0xc2/0x860 [ 361.810055][T15010] __sys_socket+0x14d/0x260 [ 361.810070][T15010] ? __pfx___sys_socket+0x10/0x10 [ 361.810087][T15010] __x64_sys_socket+0x72/0xb0 [ 361.810101][T15010] ? lockdep_hardirqs_on+0x7d/0x110 [ 361.810116][T15010] do_syscall_64+0x123/0x790 [ 361.810133][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.810145][T15010] RIP: 0033:0x7f5e1df9e1d9 [ 361.810155][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.810166][T15010] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 361.810178][T15010] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 361.810185][T15010] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 361.810192][T15010] RBP: 00007f5e1e035888 R08: 0000000000000000 R09: 0000000000000000 [ 361.810199][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.810205][T15010] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 361.810220][T15010] [ 362.234515][ T43] audit: type=1800 audit(2000000777.095:2335): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3371" name="rotate_all" dev="sysfs" ino=1604 res=0 errno=0 [ 362.254912][T15028] FAULT_INJECTION: forcing a failure. [ 362.254912][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 362.254932][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.0.3374 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.254951][T15028] Tainted: [L]=SOFTLOCKUP [ 362.254955][T15028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.254962][T15028] Call Trace: [ 362.254967][T15028] [ 362.254972][T15028] dump_stack_lvl+0x100/0x190 [ 362.254993][T15028] should_fail_ex.cold+0x5/0xa [ 362.255010][T15028] should_failslab+0xc2/0x120 [ 362.255027][T15028] __kmalloc_noprof+0xfc/0x840 [ 362.255042][T15028] ? video_usercopy+0x1a3/0x1730 [ 362.255058][T15028] video_usercopy+0x1a3/0x1730 [ 362.255071][T15028] ? __pfx___video_do_ioctl+0x10/0x10 [ 362.255083][T15028] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 362.255102][T15028] ? __pfx_video_usercopy+0x10/0x10 [ 362.255123][T15028] v4l2_ioctl+0x1bd/0x250 [ 362.255135][T15028] ? __pfx_v4l2_ioctl+0x10/0x10 [ 362.255149][T15028] __x64_sys_ioctl+0x18e/0x210 [ 362.255165][T15028] do_syscall_64+0x123/0x790 [ 362.255182][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.255193][T15028] RIP: 0033:0x7fdab3f9e1d9 [ 362.255203][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.255214][T15028] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.255225][T15028] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 362.255233][T15028] RDX: 0000200000000100 RSI: 00000000c0d05605 RDI: 0000000000000006 [ 362.255239][T15028] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 362.255246][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.255252][T15028] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 362.255268][T15028] [ 362.354712][T15031] FAULT_INJECTION: forcing a failure. [ 362.354712][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 362.354788][T15031] CPU: 1 UID: 0 PID: 15031 Comm: syz.0.3375 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.354830][T15031] Tainted: [L]=SOFTLOCKUP [ 362.354837][T15031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.354849][T15031] Call Trace: [ 362.354857][T15031] [ 362.354866][T15031] dump_stack_lvl+0x100/0x190 [ 362.354898][T15031] should_fail_ex.cold+0x5/0xa [ 362.354926][T15031] should_failslab+0xc2/0x120 [ 362.354956][T15031] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 362.354982][T15031] ? sock_alloc_inode+0x26/0x2c0 [ 362.355006][T15031] ? __pfx_sock_alloc_inode+0x10/0x10 [ 362.355028][T15031] sock_alloc_inode+0x26/0x2c0 [ 362.355049][T15031] ? __pfx_sock_alloc_inode+0x10/0x10 [ 362.355069][T15031] alloc_inode+0x68/0x250 [ 362.355093][T15031] sock_alloc+0x44/0x280 [ 362.355111][T15031] ? security_socket_create+0x7f/0x250 [ 362.355137][T15031] __sock_create+0xc2/0x860 [ 362.355165][T15031] __sys_socket+0x14d/0x260 [ 362.355188][T15031] ? fput+0x7c/0x100 [ 362.355215][T15031] ? __pfx___sys_socket+0x10/0x10 [ 362.355241][T15031] ? rcu_is_watching+0x13/0xc0 [ 362.355268][T15031] ? trace_hardirqs_off+0x70/0x170 [ 362.355299][T15031] __x64_sys_socket+0x72/0xb0 [ 362.355322][T15031] ? lockdep_hardirqs_on+0x7d/0x110 [ 362.355348][T15031] do_syscall_64+0x123/0x790 [ 362.355377][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.355398][T15031] RIP: 0033:0x7fdab3f9e1d9 [ 362.355415][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.355434][T15031] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 362.355454][T15031] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 362.355468][T15031] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 362.355486][T15031] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 362.355499][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.355511][T15031] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 362.355539][T15031] [ 363.048638][ T43] audit: type=1400 audit(2000000777.905:2336): avc: denied { create } for pid=15043 comm="syz.0.3379" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.050830][ T43] audit: type=1800 audit(2000000777.905:2337): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200322 res=0 errno=0 [ 363.134055][ T43] audit: type=1400 audit(2000000777.985:2338): avc: denied { unlink } for pid=12493 comm="syz-executor" name="file0" dev="tmpfs" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.367612][T15059] FAULT_INJECTION: forcing a failure. [ 363.367612][T15059] name failslab, interval 1, probability 0, space 0, times 0 [ 363.367630][T15059] CPU: 3 UID: 0 PID: 15059 Comm: syz.5.3384 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.367646][T15059] Tainted: [L]=SOFTLOCKUP [ 363.367650][T15059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.367656][T15059] Call Trace: [ 363.367660][T15059] [ 363.367665][T15059] dump_stack_lvl+0x100/0x190 [ 363.367685][T15059] should_fail_ex.cold+0x5/0xa [ 363.367703][T15059] should_failslab+0xc2/0x120 [ 363.367720][T15059] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 363.367737][T15059] ? sock_alloc_inode+0x26/0x2c0 [ 363.367751][T15059] ? __pfx_sock_alloc_inode+0x10/0x10 [ 363.367764][T15059] sock_alloc_inode+0x26/0x2c0 [ 363.367776][T15059] ? __pfx_sock_alloc_inode+0x10/0x10 [ 363.367787][T15059] alloc_inode+0x68/0x250 [ 363.367800][T15059] sock_alloc+0x44/0x280 [ 363.367811][T15059] ? security_socket_create+0x7f/0x250 [ 363.367826][T15059] __sock_create+0xc2/0x860 [ 363.367843][T15059] __sys_socket+0x14d/0x260 [ 363.367856][T15059] ? fput+0x7c/0x100 [ 363.367872][T15059] ? __pfx___sys_socket+0x10/0x10 [ 363.367886][T15059] ? ksys_write+0x1ac/0x250 [ 363.367899][T15059] ? __pfx_ksys_write+0x10/0x10 [ 363.367915][T15059] __x64_sys_socket+0x72/0xb0 [ 363.367929][T15059] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.367944][T15059] do_syscall_64+0x123/0x790 [ 363.367961][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.367972][T15059] RIP: 0033:0x7f0f4379e1d9 [ 363.367983][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.367993][T15059] RSP: 002b:00007f0f445a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 363.368005][T15059] RAX: ffffffffffffffda RBX: 00007f0f43a25fa0 RCX: 00007f0f4379e1d9 [ 363.368012][T15059] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 363.368019][T15059] RBP: 00007f0f43835888 R08: 0000000000000000 R09: 0000000000000000 [ 363.368027][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.368034][T15059] R13: 00007f0f43a26038 R14: 00007f0f43a25fa0 R15: 00007ffde41d2ee8 [ 363.368050][T15059] [ 364.163713][ C1] net_ratelimit: 148 callbacks suppressed [ 364.171509][ T43] audit: type=1800 audit(2000000779.025:2339): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200418 res=0 errno=0 [ 364.267081][ T43] audit: type=1800 audit(2000000779.125:2340): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34878 res=0 errno=0 [ 364.268024][ T43] audit: type=1800 audit(2000000779.125:2341): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34901 res=0 errno=0 [ 365.176988][ T43] audit: type=1800 audit(2000000780.035:2342): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3401" name="new_array" dev="sysfs" ino=64731 res=0 errno=0 [ 365.178013][T15104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 365.180403][ T43] audit: type=1800 audit(2000000780.035:2343): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3401" name="level" dev="sysfs" ino=113705 res=0 errno=0 [ 365.195669][T15106] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 365.391555][T15107] md: invalid raid superblock magic on ram1 [ 365.391569][T15107] md: ram1 does not have a valid v0.0 superblock, not importing! [ 365.391895][T15104] md: invalid raid superblock magic on ram0 [ 365.391904][T15104] md: ram0 does not have a valid v0.0 superblock, not importing! [ 366.249663][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.618850][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 366.618858][ T43] audit: type=1800 audit(2000000781.465:2348): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3406" name="remove" dev="sysfs" ino=192439 res=0 errno=0 [ 366.681029][ T43] audit: type=1800 audit(2000000781.535:2349): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3406" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 ** 16 printk messages dropped ** ** 231 printk messages dropped ** ** 254 printk messages dropped ** ** 257 printk messages dropped ** ** 248 printk messages dropped ** ** 227 printk messages dropped ** ** 232 printk messages dropped ** ** 220 printk messages dropped ** [ 366.922200][ T43] audit: type=1800 audit(2000000781.775:2350): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=192437 res=0 errno=0 [ 367.078568][T15121] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 367.092439][T15121] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 367.092725][T15121] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 367.092822][T15121] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 367.093011][T15121] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 367.096931][T15121] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 367.127700][ T43] audit: type=1800 audit(2000000781.985:2351): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200548 res=0 errno=0 [ 367.247052][T15121] pci 0000:00:01.0: Adding to iommu group 1 [ 367.259079][T15121] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 367.259090][T15121] pci 0000:00:01.0: vgaarb: bridge control possible [ 367.259098][T15121] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 367.263345][ T43] audit: type=1800 audit(2000000782.115:2352): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200563 res=0 errno=0 [ 367.309963][T15121] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 367.310111][T15121] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 367.317472][T15121] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 367.374390][T15125] FAULT_INJECTION: forcing a failure. [ 367.374390][T15125] name failslab, interval 1, probability 0, space 0, times 0 [ 367.374422][T15125] CPU: 3 UID: 0 PID: 15125 Comm: syz.2.3407 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.374448][T15125] Tainted: [L]=SOFTLOCKUP [ 367.374455][T15125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.374468][T15125] Call Trace: [ 367.374475][T15125] [ 367.374483][T15125] dump_stack_lvl+0x100/0x190 [ 367.374574][T15125] should_fail_ex.cold+0x5/0xa [ 367.374603][T15125] should_failslab+0xc2/0x120 [ 367.374656][T15125] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 367.374686][T15125] ? sock_alloc_inode+0x26/0x2c0 [ 367.374733][T15125] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.374758][T15125] sock_alloc_inode+0x26/0x2c0 [ 367.374786][T15125] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.374806][T15125] alloc_inode+0x68/0x250 [ 367.374831][T15125] sock_alloc+0x44/0x280 [ 367.374850][T15125] ? security_socket_create+0x7f/0x250 [ 367.374876][T15125] __sock_create+0xc2/0x860 [ 367.374906][T15125] __sys_socket+0x14d/0x260 [ 367.374932][T15125] ? __pfx___sys_socket+0x10/0x10 [ 367.374965][T15125] __x64_sys_socket+0x72/0xb0 [ 367.374990][T15125] ? lockdep_hardirqs_on+0x7d/0x110 [ 367.375045][T15125] do_syscall_64+0x123/0x790 [ 367.375076][T15125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.375096][T15125] RIP: 0033:0x7f5e1df9e1d9 [ 367.375113][T15125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.375132][T15125] RSP: 002b:00007f5e1ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 367.375152][T15125] RAX: ffffffffffffffda RBX: 00007f5e1e225fa0 RCX: 00007f5e1df9e1d9 [ 367.375165][T15125] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 367.375177][T15125] RBP: 00007f5e1e035888 R08: 0000000000000000 R09: 0000000000000000 [ 367.375189][T15125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.375200][T15125] R13: 00007f5e1e226038 R14: 00007f5e1e225fa0 R15: 00007fff63cf3bb8 [ 367.375227][T15125] [ 367.473382][ T43] audit: type=1800 audit(2000000782.325:2353): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200618 res=0 errno=0 [ 367.476824][T15121] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 367.476909][T15121] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 367.477684][T15121] [drm] features: -virgl +edid -resource_blob -host_visible [ 367.477692][T15121] [drm] features: -context_init -blob_alignment [ 367.484898][T15121] [drm] number of scanouts: 1 [ 367.484930][T15121] [drm] number of cap sets: 0 [ 367.486127][T15121] [drm:virtio_gpu_init.cold] *ERROR* modeset init failed [ 367.618538][ T43] audit: type=1800 audit(2000000782.475:2354): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200696 res=0 errno=0 [ 367.873737][ T43] audit: type=1800 audit(2000000782.595:2355): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200707 res=0 errno=0 [ 367.873933][ T43] audit: type=1800 audit(2000000782.615:2356): pid=15135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3411" name="in_ports" dev="configfs" ino=57894 res=0 errno=0 [ 368.002746][ T5735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.011640][ T5735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.013545][ T5735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.033106][ T5735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.041967][ T5735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.076790][ T43] audit: type=1800 audit(2000000782.935:2357): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22537 res=0 errno=0 [ 368.147362][ T5734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.166410][ T5734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.169668][ T5734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.184272][ T5734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.192302][ T5734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.380651][T15121] virtio_gpu virtio0: probe with driver virtio_gpu failed with error -4 [ 368.962238][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.962362][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.962487][T15133] bridge_slave_0: entered allmulticast mode [ 368.963336][T15133] bridge_slave_0: entered promiscuous mode [ 368.964731][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.964795][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.964866][T15133] bridge_slave_1: entered allmulticast mode [ 368.965767][T15133] bridge_slave_1: entered promiscuous mode [ 369.002179][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.006036][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.038487][T15133] team0: Port device team_slave_0 added [ 369.041056][T15133] team0: Port device team_slave_1 added [ 369.079090][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.079096][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.079109][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.080044][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.080050][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.080062][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.128641][T15133] hsr_slave_0: entered promiscuous mode [ 369.129596][T15133] hsr_slave_1: entered promiscuous mode [ 369.130385][T15133] debugfs: 'hsr0' already exists in 'hsr' [ 369.130399][T15133] Cannot create hsr debugfs directory [ 369.203699][ C2] net_ratelimit: 141 callbacks suppressed [ 369.237294][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3418'. [ 369.289382][T15171] FAULT_INJECTION: forcing a failure. [ 369.289382][T15171] name failslab, interval 1, probability 0, space 0, times 0 [ 369.289400][T15171] CPU: 1 UID: 0 PID: 15171 Comm: syz.5.3419 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.289422][T15171] Tainted: [L]=SOFTLOCKUP [ 369.289426][T15171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.289432][T15171] Call Trace: [ 369.289437][T15171] [ 369.289441][T15171] dump_stack_lvl+0x100/0x190 [ 369.289461][T15171] should_fail_ex.cold+0x5/0xa [ 369.289478][T15171] should_failslab+0xc2/0x120 [ 369.289497][T15171] kmem_cache_alloc_noprof+0x92/0x6a0 [ 369.289510][T15171] ? __pfx_map_id_range_down+0x10/0x10 [ 369.289524][T15171] ? rcu_is_watching+0x13/0xc0 [ 369.289540][T15171] ? security_inode_alloc+0x3b/0x2c0 [ 369.289558][T15171] security_inode_alloc+0x3b/0x2c0 [ 369.289572][T15171] inode_init_always_gfp+0xc6f/0xfb0 [ 369.289598][T15171] alloc_inode+0x8e/0x250 [ 369.289618][T15171] sock_alloc+0x44/0x280 [ 369.289636][T15171] ? security_socket_create+0x7f/0x250 [ 369.289661][T15171] __sock_create+0xc2/0x860 [ 369.289689][T15171] __sys_socket+0x14d/0x260 [ 369.289714][T15171] ? __pfx___sys_socket+0x10/0x10 [ 369.289757][T15171] __x64_sys_socket+0x72/0xb0 [ 369.289774][T15171] ? lockdep_hardirqs_on+0x7d/0x110 [ 369.289790][T15171] do_syscall_64+0x123/0x790 [ 369.289808][T15171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.289820][T15171] RIP: 0033:0x7f0f4379e1d9 [ 369.289831][T15171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.289842][T15171] RSP: 002b:00007f0f445a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 369.289854][T15171] RAX: ffffffffffffffda RBX: 00007f0f43a25fa0 RCX: 00007f0f4379e1d9 [ 369.289861][T15171] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 369.289867][T15171] RBP: 00007f0f43835888 R08: 0000000000000000 R09: 0000000000000000 [ 369.289874][T15171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.289880][T15171] R13: 00007f0f43a26038 R14: 00007f0f43a25fa0 R15: 00007ffde41d2ee8 [ 369.289895][T15171] [ 369.289945][T15171] socket: no more sockets [ 369.420879][T15133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.568125][T15133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.571686][T15133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.604918][T15133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.609063][T15133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.641992][T15133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.642677][T15133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.672997][T15133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.325418][ T5735] Bluetooth: hci5: command tx timeout [ 371.221685][T15205] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 372.151407][T15212] FAULT_INJECTION: forcing a failure. [ 372.151407][T15212] name failslab, interval 1, probability 0, space 0, times 0 [ 372.151426][T15212] CPU: 2 UID: 0 PID: 15212 Comm: syz.0.3434 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.151442][T15212] Tainted: [L]=SOFTLOCKUP [ 372.151446][T15212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.151453][T15212] Call Trace: [ 372.151457][T15212] [ 372.151462][T15212] dump_stack_lvl+0x100/0x190 [ 372.151481][T15212] should_fail_ex.cold+0x5/0xa [ 372.151497][T15212] should_failslab+0xc2/0x120 [ 372.151514][T15212] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 372.151530][T15212] ? sock_alloc_inode+0x26/0x2c0 [ 372.151543][T15212] ? __pfx_sock_alloc_inode+0x10/0x10 [ 372.151556][T15212] sock_alloc_inode+0x26/0x2c0 [ 372.151569][T15212] ? __pfx_sock_alloc_inode+0x10/0x10 [ 372.151581][T15212] alloc_inode+0x68/0x250 [ 372.151594][T15212] sock_alloc+0x44/0x280 [ 372.151604][T15212] ? security_socket_create+0x7f/0x250 [ 372.151618][T15212] __sock_create+0xc2/0x860 [ 372.151634][T15212] __sys_socket+0x14d/0x260 [ 372.151648][T15212] ? fput+0x7c/0x100 [ 372.151663][T15212] ? __pfx___sys_socket+0x10/0x10 [ 372.151677][T15212] ? ksys_write+0x1ac/0x250 [ 372.151690][T15212] ? __pfx_ksys_write+0x10/0x10 [ 372.151706][T15212] __x64_sys_socket+0x72/0xb0 [ 372.151719][T15212] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.151734][T15212] do_syscall_64+0x123/0x790 [ 372.151751][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.151763][T15212] RIP: 0033:0x7fdab3f9e1d9 [ 372.151772][T15212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.151783][T15212] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 372.151794][T15212] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 372.151801][T15212] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 372.151809][T15212] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 372.151816][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.151823][T15212] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 372.151839][T15212] [ 372.196755][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 372.196768][ T43] audit: type=1800 audit(2000000787.055:2376): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206911 res=0 errno=0 [ 372.403815][ T5735] Bluetooth: hci5: command tx timeout [ 372.601686][T15173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.676238][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.688608][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.693095][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.693137][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.709409][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.709510][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.763958][ T43] audit: type=1800 audit(2000000787.615:2377): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209237 res=0 errno=0 [ 372.791847][T15230] infiniband syz0: set down [ 372.791864][T15230] infiniband syz0: added team_slave_0 [ 372.813064][T15230] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 372.813084][T15230] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 372.813106][T15230] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 372.818663][ T43] audit: type=1800 audit(2000000787.675:2378): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210221 res=0 errno=0 [ 372.832893][ T43] audit: type=1800 audit(2000000787.685:2379): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210235 res=0 errno=0 [ 372.833544][T15230] RDS/IB: syz0: added [ 372.833901][T15230] smc: adding ib device syz0 with port count 1 [ 372.833965][T15230] smc: ib device syz0 port 1 has no pnetid [ 372.837469][ T43] audit: type=1800 audit(2000000787.695:2380): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210249 res=0 errno=0 [ 372.982808][T15133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.080567][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3446'. [ 373.174768][T15133] veth0_vlan: entered promiscuous mode [ 373.182525][T15133] veth1_vlan: entered promiscuous mode [ 373.215335][T15133] veth0_macvtap: entered promiscuous mode [ 373.218230][T15133] veth1_macvtap: entered promiscuous mode [ 373.230117][T15133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.236287][T15133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.266904][ T5804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.267117][ T5804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.268313][ T5804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.288937][ T43] audit: type=1800 audit(2000000788.155:2381): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222360 res=0 errno=0 [ 373.331092][ T5777] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.375932][ T9707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.375942][ T9707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.378964][ T43] audit: type=1800 audit(2000000788.235:2382): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222902 res=0 errno=0 [ 373.418130][ T9696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.418139][ T9696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.528457][ T43] audit: type=1800 audit(2000000788.385:2383): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227105 res=0 errno=0 [ 373.608038][T15281] Bluetooth: MGMT ver 1.23 [ 373.608917][T15281] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3452'. [ 373.862387][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 373.998664][ T43] audit: type=1800 audit(2000000788.855:2384): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207007 res=0 errno=0 [ 374.243745][ C1] net_ratelimit: 187 callbacks suppressed [ 374.483717][ T5735] Bluetooth: hci5: command tx timeout [ 374.585630][ T43] audit: type=1800 audit(2000000789.445:2385): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238632 res=0 errno=0 [ 374.624880][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3463'. [ 375.236563][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3472'. [ 375.842756][T15351] netlink: 'syz.5.3479': attribute type 4 has an invalid length. [ 376.563844][ T5735] Bluetooth: hci5: command tx timeout [ 376.766886][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3481'. [ 377.271795][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 377.271806][ T43] audit: type=1400 audit(2000000792.125:2418): avc: denied { ioctl } for pid=15371 comm="syz.0.3488" path="socket:[59203]" dev="sockfs" ino=59203 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 377.339781][ T43] audit: type=1400 audit(2000000792.185:2419): avc: denied { connect } for pid=15371 comm="syz.0.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 377.354056][ T43] audit: type=1400 audit(2000000792.205:2420): avc: denied { search } for pid=15376 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.785862][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'. [ 378.415063][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.065604][ T43] audit: type=1326 audit(2000000793.575:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa2d9e1d9 code=0x7ffc0000 [ 379.065771][ T43] audit: type=1326 audit(2000000793.575:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa2d9e1d9 code=0x7ffc0000 [ 379.065948][ T43] audit: type=1326 audit(2000000793.575:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa2d5ea0e code=0x7ffc0000 [ 379.066088][ T43] audit: type=1326 audit(2000000793.575:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa2d5ea0e code=0x7ffc0000 [ 379.066170][ T43] audit: type=1326 audit(2000000793.585:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa2d5ea0e code=0x7ffc0000 [ 379.066359][ T43] audit: type=1326 audit(2000000793.585:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa2d5ea0e code=0x7ffc0000 [ 379.066526][ T43] audit: type=1326 audit(2000000793.585:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.6.3498" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3aa2d5ea0e code=0x7ffc0000 [ 379.186853][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3499'. [ 379.694257][ T9696] net_ratelimit: 223 callbacks suppressed [ 380.843841][ T57] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 381.016637][ T57] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 381.017623][ T57] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 381.017639][ T57] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 381.017651][ T57] usb 10-1: config 4 has no interface number 0 [ 381.017675][ T57] usb 10-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.020187][ T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.020203][ T57] usb 10-1: Product: syz [ 381.020216][ T57] usb 10-1: Manufacturer: syz [ 381.020228][ T57] usb 10-1: SerialNumber: syz [ 381.257164][ T57] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 381.265276][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 381.265306][ T57] dib0700: firmware download failed at 7 with -22 [ 381.718876][T15460] loop5: detected capacity change from 0 to 7 [ 381.721158][T15460] Dev loop5: unable to read RDB block 7 [ 381.721181][T15460] loop5: AHDI p1 p2 p3 [ 381.721205][T15460] loop5: partition table partially beyond EOD, truncated [ 381.722499][T15460] loop5: p1 start 1601398130 is beyond EOD, truncated [ 381.722519][T15460] loop5: p2 start 1702059890 is beyond EOD, truncated [ 382.243764][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.629768][ T43] kauditd_printk_skb: 250 callbacks suppressed [ 382.629777][ T43] audit: type=1800 audit(2000000797.485:2678): pid=15486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3521" name="match_busid" dev="sysfs" ino=44362 res=0 errno=0 [ 383.590529][ T57] usb 10-1: USB disconnect, device number 7 [ 383.697036][ T43] audit: type=1400 audit(2000000798.555:2679): avc: denied { watch } for pid=15507 comm="syz.5.3530" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 383.773353][T15512] FAULT_INJECTION: forcing a failure. [ 383.773353][T15512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 383.773383][T15512] CPU: 1 UID: 0 PID: 15512 Comm: syz.5.3532 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.773405][T15512] Tainted: [L]=SOFTLOCKUP [ 383.773412][T15512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 383.773423][T15512] Call Trace: [ 383.773429][T15512] [ 383.773436][T15512] dump_stack_lvl+0x100/0x190 [ 383.773467][T15512] should_fail_ex.cold+0x5/0xa [ 383.773491][T15512] get_futex_key+0x1d0/0x14f0 [ 383.773516][T15512] ? __pfx_get_futex_key+0x10/0x10 [ 383.773536][T15512] ? get_pid_task+0x2a/0x250 [ 383.773559][T15512] ? find_held_lock+0x2b/0x80 [ 383.773584][T15512] ? get_pid_task+0xfc/0x250 [ 383.773621][T15512] ? get_pid_task+0xfc/0x250 [ 383.773649][T15512] futex_wake+0xf4/0x5e0 [ 383.773674][T15512] ? find_held_lock+0x2b/0x80 [ 383.773699][T15512] ? __pfx_futex_wake+0x10/0x10 [ 383.773721][T15512] ? rcu_read_lock_any_held+0x6a/0x90 [ 383.773745][T15512] ? find_held_lock+0x2b/0x80 [ 383.773769][T15512] ? ksys_write+0x190/0x250 [ 383.773796][T15512] ? ksys_write+0x190/0x250 [ 383.773819][T15512] do_futex+0x2b2/0x440 [ 383.773844][T15512] ? __pfx_do_futex+0x10/0x10 [ 383.773869][T15512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 383.773896][T15512] __x64_sys_futex+0x34f/0x4d0 [ 383.773921][T15512] ? fput+0x7c/0x100 [ 383.773944][T15512] ? __pfx___x64_sys_futex+0x10/0x10 [ 383.773966][T15512] ? ksys_write+0x1ac/0x250 [ 383.773984][T15512] ? __pfx_ksys_write+0x10/0x10 [ 383.774010][T15512] do_syscall_64+0x123/0x790 [ 383.774034][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.774051][T15512] RIP: 0033:0x7f0f4379e1d9 [ 383.774065][T15512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.774080][T15512] RSP: 002b:00007f0f445a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 383.774098][T15512] RAX: ffffffffffffffda RBX: 00007f0f43a25fa8 RCX: 00007f0f4379e1d9 [ 383.774110][T15512] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f43a25fac [ 383.774120][T15512] RBP: 00007f0f43a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 383.774130][T15512] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 383.774137][T15512] R13: 00007f0f43a26038 R14: 00007ffde41d2e00 R15: 00007ffde41d2ee8 [ 383.774152][T15512] [ 383.997537][T15523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 384.071523][T15437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.157233][T15529] FAULT_INJECTION: forcing a failure. [ 384.157233][T15529] name fail_futex, interval 1, probability 0, space 0, times 0 [ 384.157258][T15529] CPU: 3 UID: 0 PID: 15529 Comm: syz.5.3539 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.157281][T15529] Tainted: [L]=SOFTLOCKUP [ 384.157288][T15529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.157298][T15529] Call Trace: [ 384.157305][T15529] [ 384.157313][T15529] dump_stack_lvl+0x100/0x190 [ 384.157343][T15529] should_fail_ex.cold+0x5/0xa [ 384.157369][T15529] get_futex_key+0x1d0/0x14f0 [ 384.157396][T15529] ? __pfx_get_futex_key+0x10/0x10 [ 384.157428][T15529] futex_wait_setup+0x91/0x540 [ 384.157455][T15529] __futex_wait+0x19f/0x300 [ 384.157476][T15529] ? __pfx___futex_wait+0x10/0x10 [ 384.157492][T15529] ? __pfx_try_to_wake_up+0x10/0x10 [ 384.157513][T15529] ? futex_hash+0x311/0x400 [ 384.157539][T15529] ? __pfx_futex_wake_mark+0x10/0x10 [ 384.157562][T15529] ? find_held_lock+0x2b/0x80 [ 384.157585][T15529] ? futex_wake+0x4ea/0x5e0 [ 384.157609][T15529] futex_wait+0xe6/0x370 [ 384.157629][T15529] ? __pfx_futex_wait+0x10/0x10 [ 384.157652][T15529] ? percpu_counter_add_batch+0xb9/0x230 [ 384.157685][T15529] ? errseq_sample+0x51/0x70 [ 384.157710][T15529] ? file_init_path+0x48e/0x670 [ 384.157742][T15529] do_futex+0x265/0x440 [ 384.157770][T15529] ? __pfx_do_futex+0x10/0x10 [ 384.157796][T15529] ? fd_install+0x223/0x580 [ 384.157825][T15529] __x64_sys_futex+0x34f/0x4d0 [ 384.157851][T15529] ? __sys_socket+0xac/0x260 [ 384.157875][T15529] ? __pfx___x64_sys_futex+0x10/0x10 [ 384.157909][T15529] do_syscall_64+0x123/0x790 [ 384.157958][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.157979][T15529] RIP: 0033:0x7f0f4379e1d9 [ 384.157996][T15529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.158014][T15529] RSP: 002b:00007f0f445a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 384.158033][T15529] RAX: ffffffffffffffda RBX: 00007f0f43a25fa8 RCX: 00007f0f4379e1d9 [ 384.158044][T15529] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f43a25fa8 [ 384.158055][T15529] RBP: 00007f0f43a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 384.158066][T15529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.158077][T15529] R13: 00007f0f43a26038 R14: 00007ffde41d2e00 R15: 00007ffde41d2ee8 [ 384.158102][T15529] [ 384.287858][T15539] netlink: 'syz.2.3543': attribute type 1 has an invalid length. [ 384.444624][ T43] audit: type=1800 audit(2000000799.305:2680): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239344 res=0 errno=0 [ 384.724031][ T9696] net_ratelimit: 143 callbacks suppressed [ 384.925496][T15575] ip6gretap1: entered allmulticast mode [ 384.955670][ T43] audit: type=1400 audit(2000000799.815:2681): avc: denied { nlmsg_write } for pid=15577 comm="syz.0.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 385.035566][ T43] audit: type=1800 audit(2000000799.895:2682): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239437 res=0 errno=0 [ 385.507720][T15596] ima: policy update failed [ 385.507937][ T43] audit: type=1802 audit(2000000800.365:2683): pid=15596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.3568" res=0 errno=0 [ 385.767649][ T43] audit: type=1800 audit(2000000800.625:2684): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239533 res=0 errno=0 [ 386.012927][ T43] audit: type=1400 audit(2000000800.865:2685): avc: denied { unmount } for pid=11360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 386.993701][ T57] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 387.078255][ T43] audit: type=1800 audit(2000000801.935:2686): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239560 res=0 errno=0 [ 387.148405][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.148429][ T57] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 387.149267][ T57] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.149281][ T57] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 387.149320][ T57] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 387.149351][ T57] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 387.149369][ T57] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.149383][ T57] usb 5-1: config 1 interface 1 has no altsetting 0 [ 387.151673][ T57] usb 5-1: string descriptor 0 read error: -22 [ 387.151737][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.161291][ T43] audit: type=1800 audit(2000000802.015:2687): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239598 res=0 errno=0 [ 387.309910][T15662] FAULT_INJECTION: forcing a failure. [ 387.309910][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 387.309932][T15662] CPU: 1 UID: 0 PID: 15662 Comm: syz.6.3595 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.309950][T15662] Tainted: [L]=SOFTLOCKUP [ 387.309954][T15662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.309961][T15662] Call Trace: [ 387.309966][T15662] [ 387.309971][T15662] dump_stack_lvl+0x100/0x190 [ 387.309992][T15662] should_fail_ex.cold+0x5/0xa [ 387.310012][T15662] should_failslab+0xc2/0x120 [ 387.310037][T15662] __kmalloc_cache_noprof+0x91/0x6d0 [ 387.310051][T15662] ? allocate_file_region_entries+0x15d/0x630 [ 387.310067][T15662] ? allocate_file_region_entries+0x1a0/0x630 [ 387.310086][T15662] allocate_file_region_entries+0x1a0/0x630 [ 387.310106][T15662] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 387.310133][T15662] region_chg+0x85/0x140 [ 387.310148][T15662] __vma_reservation_common+0x34b/0x6f0 [ 387.310164][T15662] ? find_held_lock+0x2b/0x80 [ 387.310182][T15662] ? __pfx___vma_reservation_common+0x10/0x10 [ 387.310198][T15662] ? filemap_get_entry+0x22d/0x450 [ 387.310222][T15662] alloc_hugetlb_folio+0x594/0x870 [ 387.310242][T15662] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 387.310259][T15662] ? rcu_is_watching+0x13/0xc0 [ 387.310278][T15662] ? __filemap_get_folio_mpol+0x369/0x1280 [ 387.310295][T15662] ? lock_acquire+0x1d1/0x380 [ 387.310311][T15662] hugetlb_no_page+0x1099/0x1c20 [ 387.310327][T15662] ? __pfx_down_read+0x10/0x10 [ 387.310344][T15662] ? __pfx_hugetlb_no_page+0x10/0x10 [ 387.310358][T15662] ? huge_pte_alloc+0x39f/0x5a0 [ 387.310371][T15662] hugetlb_fault+0x5a7/0x1650 [ 387.310386][T15662] ? __pfx_hugetlb_fault+0x10/0x10 [ 387.310397][T15662] ? lock_acquire+0x1d1/0x380 [ 387.310409][T15662] ? hugetlb_vma_lock_read+0xaa/0x120 [ 387.310427][T15662] ? rcu_is_watching+0x13/0xc0 [ 387.310443][T15662] ? __up_read+0x333/0x980 [ 387.310458][T15662] ? __pfx___up_read+0x10/0x10 [ 387.310472][T15662] ? hugetlb_vma_unlock_read+0xaa/0x120 [ 387.310489][T15662] handle_mm_fault+0x604/0xa20 [ 387.310504][T15662] __get_user_pages+0x8ae/0x2c30 [ 387.310525][T15662] ? __pfx___get_user_pages+0x10/0x10 [ 387.310546][T15662] populate_vma_page_range+0x267/0x3f0 [ 387.310563][T15662] ? __pfx_populate_vma_page_range+0x10/0x10 [ 387.310579][T15662] ? __pfx_find_vma_intersection+0x10/0x10 [ 387.310598][T15662] __mm_populate+0x107/0x3a0 [ 387.310614][T15662] ? __pfx___mm_populate+0x10/0x10 [ 387.310633][T15662] ? up_write+0x2dc/0x5b0 [ 387.310649][T15662] vm_mmap_pgoff+0x441/0x470 [ 387.310666][T15662] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 387.310679][T15662] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 387.310697][T15662] ksys_mmap_pgoff+0x285/0x610 [ 387.310714][T15662] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 387.310729][T15662] ? xfd_validate_state+0x129/0x190 [ 387.310745][T15662] __x64_sys_mmap+0x125/0x190 [ 387.310760][T15662] do_syscall_64+0x123/0x790 [ 387.310776][T15662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.310788][T15662] RIP: 0033:0x7f3aa2d9e1d9 [ 387.310799][T15662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.310809][T15662] RSP: 002b:00007f3aa3d02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 387.310821][T15662] RAX: ffffffffffffffda RBX: 00007f3aa3025fa0 RCX: 00007f3aa2d9e1d9 [ 387.310828][T15662] RDX: 0000000001000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 387.310835][T15662] RBP: 00007f3aa2e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 387.310841][T15662] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 387.310848][T15662] R13: 00007f3aa3026038 R14: 00007f3aa3025fa0 R15: 00007ffc56ef1ad8 [ 387.310863][T15662] [ 387.369563][ T5104] block nbd3: Possible stuck request ffff88802a2e1880: control (read@0,4096B). Runtime 300 seconds [ 387.533895][ T42] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 387.683714][ T42] usb 10-1: Using ep0 maxpacket: 16 [ 387.684181][ T42] usb 10-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 387.684998][ T42] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.685011][ T42] usb 10-1: config 0 interface 0 has no altsetting 0 [ 387.685036][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.724698][ T42] usb 10-1: config 0 descriptor?? [ 387.824479][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 387.824496][ T43] audit: type=1800 audit(2000000802.685:2700): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239736 res=0 errno=0 [ 387.825921][ T43] audit: type=1800 audit(2000000802.685:2701): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239765 res=0 errno=0 [ 387.826627][ T43] audit: type=1800 audit(2000000802.685:2702): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=239743 res=0 errno=0 [ 387.827177][ T43] audit: type=1800 audit(2000000802.685:2703): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=239744 res=0 errno=0 [ 387.828227][ T43] audit: type=1800 audit(2000000802.685:2704): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=239745 res=0 errno=0 [ 387.832065][ T43] audit: type=1800 audit(2000000802.685:2705): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239785 res=0 errno=0 [ 387.859865][ T57] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 387.859877][ T57] usb 5-1: Warning! Unlikely small volume range (=94), linear volume or custom curve? [ 387.859886][ T57] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/94/1 [ 387.869209][ T43] audit: type=1800 audit(2000000802.735:2706): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239804 res=0 errno=0 [ 387.900329][ T43] audit: type=1800 audit(2000000802.765:2707): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239817 res=0 errno=0 [ 387.915244][ T43] audit: type=1800 audit(2000000802.775:2708): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239858 res=0 errno=0 [ 387.922467][ T57] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 387.926654][ T43] audit: type=1800 audit(2000000802.785:2709): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=239706 res=0 errno=0 [ 387.946642][ T57] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 387.950462][ T57] usb 5-1: USB disconnect, device number 45 [ 388.151858][ T42] hid_parser_main: 2 callbacks suppressed [ 388.151867][ T42] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 388.151879][ T42] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 388.151891][ T42] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 388.151902][ T42] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 388.151914][ T42] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 388.174100][ T5734] Bluetooth: hci5: command 0x0405 tx timeout [ 388.178588][ T42] uclogic 0003:5543:0064.000C: hiddev0,hidraw1: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 388.350416][ T3377] usb 10-1: USB disconnect, device number 8 [ 388.648251][ T11] block nbd1: Possible stuck request ffff88802a200000: control (read@0,1024B). Runtime 300 seconds [ 388.648274][ T11] block nbd1: Possible stuck request ffff88802a2001c0: control (read@1024,1024B). Runtime 300 seconds [ 388.648288][ T11] block nbd1: Possible stuck request ffff88802a200380: control (read@2048,1024B). Runtime 300 seconds [ 388.648302][ T11] block nbd1: Possible stuck request ffff88802a200540: control (read@3072,1024B). Runtime 300 seconds [ 388.817105][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 388.820795][T15701] FAULT_INJECTION: forcing a failure. [ 388.820795][T15701] name failslab, interval 1, probability 0, space 0, times 0 [ 388.820815][T15701] CPU: 3 UID: 0 PID: 15701 Comm: syz.0.3608 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.820831][T15701] Tainted: [L]=SOFTLOCKUP [ 388.820836][T15701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.820843][T15701] Call Trace: [ 388.820847][T15701] [ 388.820852][T15701] dump_stack_lvl+0x100/0x190 [ 388.820873][T15701] should_fail_ex.cold+0x5/0xa [ 388.820892][T15701] should_failslab+0xc2/0x120 [ 388.820909][T15701] __kmalloc_cache_noprof+0x91/0x6d0 [ 388.820922][T15701] ? snd_seq_port_use_ptr+0x3c/0x300 [ 388.820940][T15701] ? snd_seq_port_connect+0x61/0x540 [ 388.820953][T15701] snd_seq_port_connect+0x61/0x540 [ 388.820964][T15701] ? check_subscription_permission.isra.0+0x146/0x240 [ 388.820985][T15701] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 388.820999][T15701] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 388.821013][T15701] ? lock_acquire+0x1d1/0x380 [ 388.821026][T15701] ? clientptr+0x20/0x190 [ 388.821042][T15701] ? find_held_lock+0x2b/0x80 [ 388.821059][T15701] ? clientptr+0x80/0x190 [ 388.821077][T15701] call_seq_client_ctl+0xa3/0x130 [ 388.821095][T15701] snd_seq_kernel_client_ctl+0x35/0x50 [ 388.821114][T15701] snd_seq_oss_midi_open+0x465/0x680 [ 388.821129][T15701] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 388.821144][T15701] ? find_held_lock+0x2b/0x80 [ 388.821163][T15701] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.821178][T15701] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 388.821195][T15701] snd_seq_oss_synth_setup_midi+0x131/0x590 [ 388.821213][T15701] snd_seq_oss_open+0x82e/0xa10 [ 388.821227][T15701] odev_open+0x6f/0x90 [ 388.821236][T15701] ? __pfx_odev_open+0x10/0x10 [ 388.821246][T15701] soundcore_open+0x2e3/0x5a0 [ 388.821258][T15701] ? __pfx_soundcore_open+0x10/0x10 [ 388.821268][T15701] chrdev_open+0x234/0x6a0 [ 388.821285][T15701] ? __pfx_chrdev_open+0x10/0x10 [ 388.821303][T15701] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 388.821318][T15701] do_dentry_open+0x6ab/0x14d0 [ 388.821332][T15701] ? __pfx_chrdev_open+0x10/0x10 [ 388.821351][T15701] vfs_open+0x82/0x3f0 [ 388.821370][T15701] path_openat+0x19fa/0x2440 [ 388.821388][T15701] ? __pfx_path_openat+0x10/0x10 [ 388.821408][T15701] do_file_open+0x20e/0x430 [ 388.821425][T15701] ? __pfx_do_file_open+0x10/0x10 [ 388.821451][T15701] ? _raw_spin_unlock+0x28/0x50 [ 388.821464][T15701] ? alloc_fd+0x471/0x7a0 [ 388.821485][T15701] do_sys_openat2+0x10f/0x1e0 [ 388.821495][T15701] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.821512][T15701] __x64_sys_openat+0x12d/0x210 [ 388.821591][T15701] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.821610][T15701] do_syscall_64+0x123/0x790 [ 388.821628][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.821641][T15701] RIP: 0033:0x7fdab3f9e1d9 [ 388.821691][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.821709][T15701] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.821722][T15701] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 388.821730][T15701] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 388.821737][T15701] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 388.821744][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.821751][T15701] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 388.821767][T15701] [ 388.985205][ T25] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 388.990888][ T25] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 388.991024][ T25] usb 11-1: config 1 has no interface number 0 [ 389.019214][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.019228][ T25] usb 11-1: Product: syz [ 389.019236][ T25] usb 11-1: Manufacturer: syz [ 389.019244][ T25] usb 11-1: SerialNumber: syz [ 389.094304][ T25] usb 11-1: 3:0 : does not exist [ 389.094313][ T25] usb 11-1: 3:0 : does not exist [ 389.923696][ C1] net_ratelimit: 148 callbacks suppressed [ 390.192828][ T25] usb 11-1: USB disconnect, device number 2 [ 390.723229][ T8299] udevd[8299]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.856329][T15738] md: invalid raid superblock magic on ram0 [ 390.856339][T15738] md: ram0 does not have a valid v0.0 superblock, not importing! [ 390.905310][T15738] md: invalid raid superblock magic on ram1 [ 390.905321][T15738] md: ram1 does not have a valid v0.0 superblock, not importing! [ 393.765491][T15732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.031510][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 394.031525][ T43] audit: type=1800 audit(2000000808.885:2751): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240554 res=0 errno=0 [ 394.890157][ T43] audit: type=1800 audit(2000000809.745:2752): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240573 res=0 errno=0 [ 394.906394][ T43] audit: type=1800 audit(2000000809.765:2753): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240583 res=0 errno=0 [ 394.974009][ T43] audit: type=1800 audit(2000000809.825:2754): pid=15805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3639" name="binary_runtime_measurements_sha1" dev="securityfs" ino=3662 res=0 errno=0 [ 395.043740][ C2] net_ratelimit: 118 callbacks suppressed [ 395.513690][T10739] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 395.663724][T10739] usb 10-1: Using ep0 maxpacket: 16 [ 395.666049][T10739] usb 10-1: unable to get BOS descriptor or descriptor too short [ 395.666086][T10739] usb 10-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 395.667228][T10739] usb 10-1: config 2 has an invalid interface number: 200 but max is 0 [ 395.667248][T10739] usb 10-1: config 2 has no interface number 0 [ 395.667271][T10739] usb 10-1: config 2 interface 200 has no altsetting 0 [ 395.669496][T10739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.669513][T10739] usb 10-1: Product: syz [ 395.669525][T10739] usb 10-1: Manufacturer: syz [ 395.669538][T10739] usb 10-1: SerialNumber: syz [ 395.691899][ T43] audit: type=1800 audit(2000000810.535:2755): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240687 res=0 errno=0 [ 395.691926][ T43] audit: type=1800 audit(2000000810.535:2756): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=240719 res=0 errno=0 [ 395.691946][ T43] audit: type=1800 audit(2000000810.535:2757): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=240694 res=0 errno=0 [ 395.691965][ T43] audit: type=1800 audit(2000000810.535:2758): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=240695 res=0 errno=0 [ 395.973733][ T6531] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 396.085040][T10739] gspca_main: pac7311-2.14.0 probing 093a:260e [ 396.134732][ T6531] usb 5-1: Using ep0 maxpacket: 16 [ 396.135223][ T6531] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 396.136156][ T6531] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.136172][ T6531] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.138033][ T6531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.138043][ T6531] usb 5-1: Product: syz [ 396.138050][ T6531] usb 5-1: Manufacturer: syz [ 396.138058][ T6531] usb 5-1: SerialNumber: syz [ 396.141063][ T6531] usb 5-1: config 0 descriptor?? [ 396.143398][ T43] audit: type=1800 audit(2000000810.995:2759): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240766 res=0 errno=0 [ 396.144834][ T43] audit: type=1800 audit(2000000811.005:2760): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=240798 res=0 errno=0 [ 396.357085][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 396.368505][ T6531] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input34 [ 396.369426][T15833] xt_hashlimit: size too large, truncated to 1048576 [ 396.397207][ T6531] imon:send_packet: packet tx failed (-71) [ 396.415121][ T6531] imon 5-1:0.0: panel buttons/knobs setup failed [ 396.463709][ T6531] rc_core: IR keymap rc-imon-pad not found [ 396.463721][ T6531] Registered IR keymap rc-empty [ 396.463785][ T6531] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 396.463793][ T6531] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 396.465737][ T6531] imon:send_packet: packet tx failed (-71) [ 396.485241][ T6531] imon 5-1:0.0: remote input dev register failed [ 396.485535][ T6531] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 396.487300][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.488584][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.493889][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.494184][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.499578][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.499876][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.513311][ T6531] imon 5-1:0.0: unable to initialize intf0, err 0 [ 396.513320][ T6531] imon:imon_probe: failed to initialize context! [ 396.513326][ T6531] imon 5-1:0.0: unable to register, err -19 [ 396.524657][ T6531] usb 5-1: USB disconnect, device number 46 [ 396.571654][T10739] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 396.571718][T10739] pac7311 10-1:2.200: probe with driver pac7311 failed with error -71 [ 396.584158][T10739] usb 10-1: USB disconnect, device number 9 [ 396.873701][ T6531] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 397.034221][ T6531] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 397.035066][ T6531] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 397.035081][ T6531] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 397.035094][ T6531] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.036839][ T6531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.036849][ T6531] usb 5-1: Product: syz [ 397.036857][ T6531] usb 5-1: Manufacturer: syz [ 397.036864][ T6531] usb 5-1: SerialNumber: syz [ 397.042870][ T6531] usb 5-1: config 0 descriptor?? [ 397.043387][T15823] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 397.248342][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 397.257855][ T6531] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input36 [ 397.514201][ T6531] rc_core: IR keymap rc-imon-pad not found [ 397.514210][ T6531] Registered IR keymap rc-empty [ 397.514316][ T6531] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 397.514324][ T6531] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 397.672884][ T6531] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 397.693144][ T6531] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 397.709608][ T6531] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:47> initialized [ 397.854906][T15823] imon:lcd_write: invalid payload size: 0 (expected 8) [ 397.863770][ T57] usb 5-1: USB disconnect, device number 47 [ 397.875903][T15797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.243191][T15873] syz_tun: entered allmulticast mode [ 398.894724][T15910] async_waiting @ 15910 [ 398.894735][T15910] async_continuing @ 15910 after 0 usec [ 398.894749][T15906] bus: 'gadget': add driver configfs-gadget.g1 [ 398.894775][T15906] kobject: 'configfs-gadget.g1' (ffff88803e0be200): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 398.895042][T15906] gadget gadget.32: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 398.895060][T15906] gadget gadget.32: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 398.895116][T15906] udc usbip-vudc.0: binding gadget driver [g1] [ 398.895194][T15906] configfs-gadget.g1 gadget.32: adding 'uac1_func'/ffff888058cecc00 to config 'c'/ffff88805b860920 [ 398.895264][T15906] ================================================================== [ 398.895269][T15906] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 398.895287][T15906] Read of size 64 at addr ffffffff9ccc96e0 by task syz.0.3681/15906 [ 398.895297][T15906] [ 398.895305][T15906] CPU: 3 UID: 0 PID: 15906 Comm: syz.0.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.895322][T15906] Tainted: [L]=SOFTLOCKUP [ 398.895326][T15906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.895334][T15906] Call Trace: [ 398.895338][T15906] [ 398.895343][T15906] dump_stack_lvl+0x100/0x190 [ 398.895360][T15906] print_report+0x13d/0x4b0 [ 398.895376][T15906] ? __virt_addr_valid+0x239/0x430 [ 398.895390][T15906] ? usb_copy_descriptors+0x18d/0x320 [ 398.895402][T15906] kasan_report+0xdf/0x1c0 [ 398.895419][T15906] ? usb_copy_descriptors+0x18d/0x320 [ 398.895433][T15906] kasan_check_range+0x10f/0x1e0 [ 398.895444][T15906] __asan_memcpy+0x23/0x60 [ 398.895457][T15906] usb_copy_descriptors+0x18d/0x320 [ 398.895469][T15906] usb_assign_descriptors+0xd2/0x470 [ 398.895481][T15906] f_audio_bind+0x243a/0x3950 [ 398.895498][T15906] ? __pfx_f_audio_bind+0x10/0x10 [ 398.895512][T15906] usb_add_function+0x219/0x890 [ 398.895525][T15906] configfs_composite_bind+0xd83/0x1960 [ 398.895540][T15906] gadget_bind_driver+0x28c/0xbf0 [ 398.895556][T15906] ? __pfx_gadget_bind_driver+0x10/0x10 [ 398.895594][T15906] really_probe+0x241/0xa60 [ 398.895612][T15906] __driver_probe_device+0x210/0x460 [ 398.895629][T15906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.895644][T15906] driver_probe_device+0x4a/0x140 [ 398.895660][T15906] __driver_attach+0x21f/0x5b0 [ 398.895676][T15906] ? __pfx___driver_attach+0x10/0x10 [ 398.895691][T15906] bus_for_each_dev+0x13e/0x1d0 [ 398.895704][T15906] ? __pfx_bus_for_each_dev+0x10/0x10 [ 398.895718][T15906] ? bus_add_driver+0x2b5/0x5b0 [ 398.895735][T15906] bus_add_driver+0x305/0x5b0 [ 398.895749][T15906] driver_register+0x1e2/0x360 [ 398.895759][T15906] usb_gadget_register_driver_owner+0x132/0x210 [ 398.895775][T15906] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 398.895787][T15906] configfs_write_iter+0x302/0x4e0 [ 398.895801][T15906] vfs_write+0x6af/0x1050 [ 398.895813][T15906] ? __pfx_configfs_write_iter+0x10/0x10 [ 398.895826][T15906] ? __pfx_vfs_write+0x10/0x10 [ 398.895837][T15906] ? find_held_lock+0x2b/0x80 [ 398.895857][T15906] ksys_write+0x12a/0x250 [ 398.895870][T15906] ? __pfx_ksys_write+0x10/0x10 [ 398.895885][T15906] do_syscall_64+0x123/0x790 [ 398.895900][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.895911][T15906] RIP: 0033:0x7fdab3f9e1d9 [ 398.895920][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.895931][T15906] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 398.895942][T15906] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 398.895950][T15906] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 398.895956][T15906] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 398.895963][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.895969][T15906] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 398.895980][T15906] [ 398.895984][T15906] [ 398.895986][T15906] The buggy address belongs to the variable: [ 398.895990][T15906] ac_header_desc+0x0/0x40 [ 398.896003][T15906] [ 398.896006][T15906] The buggy address belongs to the physical page: [ 398.896010][T15906] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccc9 [ 398.896020][T15906] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 398.896034][T15906] raw: 00fff00000002000 ffffea0000733248 ffffea0000733248 0000000000000000 [ 398.896071][T15906] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 398.896078][T15906] page dumped because: kasan: bad access detected [ 398.896083][T15906] page_owner info is not present (never set?) [ 398.896087][T15906] [ 398.896090][T15906] Memory state around the buggy address: [ 398.896096][T15906] ffffffff9ccc9580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 398.896104][T15906] ffffffff9ccc9600: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 398.896112][T15906] >ffffffff9ccc9680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 398.896118][T15906] ^ [ 398.896125][T15906] ffffffff9ccc9700: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 398.896133][T15906] ffffffff9ccc9780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 398.896140][T15906] ================================================================== [ 398.896147][T15906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.056734][T15906] CPU: 3 UID: 0 PID: 15906 Comm: syz.0.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.059947][T15906] Tainted: [L]=SOFTLOCKUP [ 399.061240][T15906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.064183][T15906] Call Trace: [ 399.065198][T15906] [ 399.066077][T15906] dump_stack_lvl+0x100/0x190 [ 399.067529][T15906] vpanic+0x553/0x970 [ 399.068760][T15906] ? __pfx_vpanic+0x10/0x10 [ 399.070167][T15906] ? __pfx_vprintk_emit+0x10/0x10 [ 399.071698][T15906] ? usb_copy_descriptors+0x18d/0x320 [ 399.073302][T15906] panic+0xd1/0xe0 [ 399.074445][T15906] ? __pfx_panic+0x10/0x10 [ 399.075798][T15906] ? usb_copy_descriptors+0x18d/0x320 [ 399.077408][T15906] check_panic_on_warn.cold+0x19/0x34 [ 399.079015][T15906] end_report.part.0+0x3a/0x90 [ 399.080468][T15906] kasan_report.cold+0xe/0x18 [ 399.081906][T15906] ? usb_copy_descriptors+0x18d/0x320 [ 399.083502][T15906] kasan_check_range+0x10f/0x1e0 [ 399.085017][T15906] __asan_memcpy+0x23/0x60 [ 399.086384][T15906] usb_copy_descriptors+0x18d/0x320 [ 399.087978][T15906] usb_assign_descriptors+0xd2/0x470 [ 399.089597][T15906] f_audio_bind+0x243a/0x3950 [ 399.091024][T15906] ? __pfx_f_audio_bind+0x10/0x10 [ 399.092545][T15906] usb_add_function+0x219/0x890 [ 399.094036][T15906] configfs_composite_bind+0xd83/0x1960 [ 399.095692][T15906] gadget_bind_driver+0x28c/0xbf0 [ 399.097235][T15906] ? __pfx_gadget_bind_driver+0x10/0x10 [ 399.098933][T15906] really_probe+0x241/0xa60 [ 399.100333][T15906] __driver_probe_device+0x210/0x460 [ 399.101952][T15906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.103724][T15906] driver_probe_device+0x4a/0x140 [ 399.105264][T15906] __driver_attach+0x21f/0x5b0 [ 399.106719][T15906] ? __pfx___driver_attach+0x10/0x10 [ 399.108327][T15906] bus_for_each_dev+0x13e/0x1d0 [ 399.109810][T15906] ? __pfx_bus_for_each_dev+0x10/0x10 [ 399.111424][T15906] ? bus_add_driver+0x2b5/0x5b0 [ 399.112927][T15906] bus_add_driver+0x305/0x5b0 [ 399.114376][T15906] driver_register+0x1e2/0x360 [ 399.115859][T15906] usb_gadget_register_driver_owner+0x132/0x210 [ 399.117763][T15906] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 399.119452][T15906] configfs_write_iter+0x302/0x4e0 [ 399.121028][T15906] vfs_write+0x6af/0x1050 [ 399.122628][T15906] ? __pfx_configfs_write_iter+0x10/0x10 [ 399.124724][T15906] ? __pfx_vfs_write+0x10/0x10 [ 399.126189][T15906] ? find_held_lock+0x2b/0x80 [ 399.127652][T15906] ksys_write+0x12a/0x250 [ 399.128971][T15906] ? __pfx_ksys_write+0x10/0x10 [ 399.130439][T15906] do_syscall_64+0x123/0x790 [ 399.131835][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.133598][T15906] RIP: 0033:0x7fdab3f9e1d9 [ 399.134945][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.140729][T15906] RSP: 002b:00007fdab4f08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.143218][T15906] RAX: ffffffffffffffda RBX: 00007fdab4225fa0 RCX: 00007fdab3f9e1d9 [ 399.145627][T15906] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 399.147980][T15906] RBP: 00007fdab4035888 R08: 0000000000000000 R09: 0000000000000000 [ 399.150369][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.152767][T15906] R13: 00007fdab4226038 R14: 00007fdab4225fa0 R15: 00007ffc4e4d9818 [ 399.155163][T15906] [ 399.156731][T15906] Kernel Offset: disabled [ 399.158119][T15906] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:13:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000093a2f3 RBX=ffffffff8fa91580 RCX=ffffffff8bd44235 RDX=0000000000000001 RSI=ffffffff8e3e2df4 RDI=ffffffff8c625080 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd4276f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4947000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f032ca75e9c CR3=000000003fea2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61636f6c2e7374 6e6576652e79726f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde41d33d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde41d33d6 00007ffde41d33dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f43835e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f43835eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4383600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f43835e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88802e908810 RBX=0000000000001000 RCX=0000000000000001 RDX=ffff88804e358000 RSI=ffffffff8263afbb RDI=ffff88804e358000 RBP=0000000000000001 RSP=ffffc90006667780 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00007fb191701000 R13=800000006a26d025 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff820c4a50 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb1913f2e9c CR3=000000002e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa8e3f4e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa8e3f4e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a3db648 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100010b0034010 0011900302080012 b80302080012b003 00000006080612a8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010800401000008 080606016cd40008 0010e00300100010 d00300100010c003 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656b63617074 7365741c08148003 0c80080006100022 1000060a75c80010 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302040018900300 0000060806188803 0004840018840322 0400188003617461 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0128100018800400 10001c1000148004 0100000a08060c01 6d82000001ffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffb0818 a403ffffffffffff 01ffffffffffffff fff3081898030c02 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018960300020018 9403020400189003 0000000608061888 0300048400188403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2204001880036174 616474656b636170 747365741c081480 030c800800061000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000b8d38b RBX=ffff8880202d2580 RCX=ffffffff8bd44235 RDX=0000000000000001 RSI=ffffffff8e3e2df4 RDI=ffffffff8c625080 RBP=ffffed100405a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd4276f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c45496a CR3=000000004d209000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004344552f31672f 7465676461675f62 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4e4d9d06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4e4d9d06 00007ffc4e4d9d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdab4035e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdab4035eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdab403600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdab4035e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306273752e3263 61752f736e6f6974 636e75662f31672f 7465676461675f62 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30352e61616e2f74 65676461675f6273 752f746567726174 2f6769666e6f632f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b29485 RDI=ffffffff9cc7d660 RBP=ffffffff9cc7d620 RSP=ffffc90004da6f40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666652 R12=0000000000000000 R13=0000000000000035 R14=0000000000000009 R15=ffffc90004da7258 RIP=ffffffff85b294af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdab4f086c0 ffffffff 00c00000 GS =0000 ffff8880d4c47000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fe642a5168 CR3=000000004d209000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000