last executing test programs: 5.488049766s ago: executing program 0 (id=336): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a40)='0', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000000000, 0x4000001, 0x0, 0xec0000000000000, 0x3, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xffff, 0x2004, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) 4.621024587s ago: executing program 0 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000131000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073797a30"], 0x120}, 0x1, 0x0, 0x0, 0x5}, 0x20) 4.523756726s ago: executing program 0 (id=345): r0 = socket(0x12, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58}, 0x39) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b8004", 0xd}], 0x1) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = msgget(0x3, 0x710) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x9}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @loopback}, 0x367e}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) getpeername$netlink(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xc) close(0x3) msgctl$IPC_RMID(r5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x870bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 3.351373296s ago: executing program 2 (id=351): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a40)='0', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000000000, 0x4000001, 0x0, 0xec0000000000000, 0x3, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xffff, 0x2004, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) 3.285209183s ago: executing program 0 (id=352): socket(0x10, 0x3, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x6f0, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x628, 0x628, 0x628, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xec, 0x214, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x1, [0x7, 0x5, 0x3, 0x6, 0x5, 0x0, 0x6, 0x4, 0x0, 0x5, 0x2, 0x6, 0x9d6, 0xa, 0x200, 0xf], 0xd}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@uncond, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@frag={{0x30}, {[0x8000, 0x6], 0x3, 0x21, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0x19}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x74c) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xc900) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="4015c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) 3.283915962s ago: executing program 3 (id=353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.146663728s ago: executing program 3 (id=354): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r3}, 0x38) 2.26471351s ago: executing program 3 (id=358): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x401b7b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000500)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x6099, &(0x7f0000000100)={0x0, 0xe9b, 0x4, 0x2, 0x29e, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$ndctl0(0xffffff9c, &(0x7f0000004f00), 0x20402, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r3, 0x0, 0x0, &(0x7f0000004f80)={0x2e, 0x28, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004f40)=@any_dev={0x2, 0x3b2, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xe8}}}, &(0x7f0000005000)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 1.972411298s ago: executing program 2 (id=359): r0 = socket$inet6(0xa, 0x5, 0x5e) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000005c0)={@private0}, &(0x7f0000000600)=0x14) (async) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$read(0xb, r2, &(0x7f0000000280), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r1], 0x7c}}, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0x980903, 0x6}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x9, {{0x2, 0x4e21, @multicast2}}}, 0x84) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000000080001400000000808000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000afee701301e95e04e9bac80a74eaa6e562bb30f627adb2e53485a0f3c0e7c003da7d2af1321aaed9072f48a02c968d30d5a7a17643676d0bc2ce4409e94385111ca1a69721f44d0bf8d4efd58f83f9caad9d1c902b01f06becc1a6f"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4045814) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000020000000b0000"], 0x513300) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x301, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.756500388s ago: executing program 1 (id=360): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9fa0}, 0x1c) sendmsg$netlink(r1, 0x0, 0x40084) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) 1.695793716s ago: executing program 1 (id=361): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x0) write$hidraw(r0, &(0x7f00000000c0)="a7b09ac3cd0fff108a9e05563e759b884ef0dced09ef700f27c87cd71cb0e02499f6738a839603759c4de3374202636df18bbb0493aab9a12f538cb1d64f3d705b6db633cea5b556dbaadfb6816c3bd90ca8ab0c9b0e270eaa0d6f67c975203a7c2d6a52407128262a27bc7bbc2457f22e43dfeb20fde2e010b2629480ff08139126f8650a9db87da4084a343a4831bf253e46", 0x93) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) read(r1, 0x0, 0x0) 1.476370886s ago: executing program 1 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000080)) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) ioprio_get$pid(0x3, 0x0) (async, rerun: 32) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) 1.319992565s ago: executing program 1 (id=363): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x401b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x11d}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000500)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x6099, &(0x7f0000000100)={0x0, 0xe9b, 0x4, 0x2, 0x29e, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xf751, 0x4, 0x2, 0x24d}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5a5, 0x1000, 0x2, 0xdf, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb39b, 0x2000, 0x0, 0x2f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3af, 0x1, 0x3, 0x115, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e55, 0x40000, 0x1, 0x7f}}], 0x4, &(0x7f0000003a80)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8000}, 0x0, 0x0, '\x00', {0x3, 0xb25, 0x0, &(0x7f0000002a80)=@buf_4k="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"}}, &(0x7f0000003b00)) openat$ndctl0(0xffffff9c, &(0x7f0000004f00), 0x20402, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r3, r4, 0x0, 0x0, &(0x7f0000005000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)}, 0x0) 1.314578611s ago: executing program 3 (id=364): syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd}, {0x0, 0x58000, 0xa, 0xcd, 0x5, 0x7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, {0x7000, 0x40000, 0xf6211057e793ec88, 0x8, 0xff, 0x4, 0x8, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x26000, 0xffff1000, 0x8, 0x67, 0x80, 0x1, 0x7, 0x1}, {0x1000, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x7, 0x1, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x1, 0x0, 0x8, 0x86, 0xfe}, {0xffffffff, 0xa000, 0xe, 0x0, 0x7, 0xff, 0x0, 0xf9, 0x0, 0x4}, {0xd000, 0x1000, 0xf, 0x82, 0x0, 0x10, 0x5, 0x8, 0x1}, {0x2000}, {0x1, 0xfffe}, 0xa0000009, 0x0, 0x33360000, 0x10, 0x11, 0x801, 0x900, [0x4000000000000, 0x4, 0x10000, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002f090027bd7000fddbdf250400000008001a80e0d24da0"], 0x1c}}, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0xffffffa1, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) 1.185233184s ago: executing program 2 (id=365): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x3}, {0x0, 0x3}}}, 0x24}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8010) sendmmsg$inet6(r0, 0x0, 0x0, 0x8020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(0x0, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r3, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000040)) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/225, 0xe1}], 0x1) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.146911879s ago: executing program 2 (id=366): unshare(0x64000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000300), 0x80) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x40) write(r1, &(0x7f0000000240), 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) pselect6(0x40, &(0x7f0000000180)={0x8, 0x43a, 0x5, 0xfffffffffffffffd, 0x0, 0x6, 0x7, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000000000001, 0xfffffffffffffffd, 0x20000000009, 0x8, 0x0, 0x7f, 0x7}, 0x0, 0x0) 1.056386286s ago: executing program 0 (id=367): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r6, &(0x7f0000000200)='tag', 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x56, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 906.685293ms ago: executing program 2 (id=368): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000009c0), 0x5b0, r3}, 0x38) 454.478892ms ago: executing program 3 (id=369): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 312.34115ms ago: executing program 0 (id=370): syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd}, {0x0, 0x58000, 0xa, 0xcd, 0x5, 0x7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, {0x7000, 0x40000, 0xf6211057e793ec88, 0x8, 0xff, 0x4, 0x8, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x26000, 0xffff1000, 0x8, 0x67, 0x80, 0x1, 0x7, 0x1}, {0x1000, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x7, 0x1, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x1, 0x0, 0x8, 0x86, 0xfe}, {0xffffffff, 0xa000, 0xe, 0x0, 0x7, 0xff, 0x0, 0xf9, 0x0, 0x4}, {0xd000, 0x1000, 0xf, 0x82, 0x0, 0x10, 0x5, 0x8, 0x1}, {0x2000}, {0x1, 0xfffe}, 0xa0000009, 0x0, 0x33360000, 0x10, 0x11, 0x801, 0x900, [0x4000000000000, 0x4, 0x10000, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8100) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002f090027bd7000fddbdf250400000008001a80e0d24da0"], 0x1c}}, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0xffffffa1, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) 311.372859ms ago: executing program 1 (id=371): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8010, r1, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000075c000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000328000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x7, 0x1, 0x2, 0x0, 0x6, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x140, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x3e, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed2, 0x7ff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0xfffffafd, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x3, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x4, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x1, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0x1, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x646, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x5, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0x4, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8001, 0x9, 0xffffff80, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0x7f, 0x3, 0x2, 0x7, 0x1, 0x3, 0x7, 0x8, 0x6, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x9, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x2a250000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.216438ms ago: executing program 1 (id=372): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x9, &(0x7f0000000040)={0xb, 0x6, 0x3}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 394.144µs ago: executing program 3 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008080) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x23, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xf, 0xff80, 0x3, 0x1, 0x1, 0xc, 0x2}}, {0x8, 0x2, [0x1, 0xfffa]}}, {{0x19, 0x1, {0x2, 0x3, 0x3, 0x0, 0x0, 0x4, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) 0s ago: executing program 2 (id=374): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x629, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x10) (fail_nth: 12) kernel console output (not intermixed with test programs): [ 76.574951][ T1345] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:14708' (ED25519) to the list of known hosts. [ 369.989360][ T5785] cgroup: Unknown subsys name 'net' [ 370.158097][ T5785] cgroup: Unknown subsys name 'cpuset' [ 370.162252][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 371.305635][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 376.021325][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.022583][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.025739][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.026984][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.027797][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.033251][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.033374][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.035391][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.036920][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.037473][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.037670][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.037903][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.038982][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.039030][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.039761][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.044121][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.044265][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.045502][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.047544][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.051534][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.695396][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.695515][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.695612][ T5795] bridge_slave_0: entered allmulticast mode [ 376.696981][ T5795] bridge_slave_0: entered promiscuous mode [ 376.701459][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.701517][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.701577][ T5795] bridge_slave_1: entered allmulticast mode [ 376.702292][ T5795] bridge_slave_1: entered promiscuous mode [ 376.742894][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.743002][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.743099][ T5803] bridge_slave_0: entered allmulticast mode [ 376.744492][ T5803] bridge_slave_0: entered promiscuous mode [ 376.773388][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.773463][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.773556][ T5803] bridge_slave_1: entered allmulticast mode [ 376.774889][ T5803] bridge_slave_1: entered promiscuous mode [ 376.787543][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.804191][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.815692][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.826162][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.827145][ T5795] team0: Port device team_slave_0 added [ 376.842264][ T5795] team0: Port device team_slave_1 added [ 376.906306][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.906318][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.906331][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.907513][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.907521][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.907533][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.913096][ T5803] team0: Port device team_slave_0 added [ 376.914838][ T5803] team0: Port device team_slave_1 added [ 377.012821][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.014160][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.017690][ T5807] bridge_slave_0: entered allmulticast mode [ 377.018980][ T5807] bridge_slave_0: entered promiscuous mode [ 377.044569][ T5795] hsr_slave_0: entered promiscuous mode [ 377.045412][ T5795] hsr_slave_1: entered promiscuous mode [ 377.046814][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.046825][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.046843][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.056065][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.056182][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.056319][ T5807] bridge_slave_1: entered allmulticast mode [ 377.057692][ T5807] bridge_slave_1: entered promiscuous mode [ 377.072650][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.072665][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.072686][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.115487][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.115563][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.115659][ T5796] bridge_slave_0: entered allmulticast mode [ 377.117365][ T5796] bridge_slave_0: entered promiscuous mode [ 377.118765][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.118807][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.118861][ T5796] bridge_slave_1: entered allmulticast mode [ 377.119559][ T5796] bridge_slave_1: entered promiscuous mode [ 377.127560][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.156952][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.191266][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.208080][ T5803] hsr_slave_0: entered promiscuous mode [ 377.208593][ T5803] hsr_slave_1: entered promiscuous mode [ 377.208908][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 377.208956][ T5803] Cannot create hsr debugfs directory [ 377.218622][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.225480][ T5807] team0: Port device team_slave_0 added [ 377.227191][ T5807] team0: Port device team_slave_1 added [ 377.264906][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.264918][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.264930][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.271541][ T5796] team0: Port device team_slave_0 added [ 377.281306][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.281321][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.281341][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.283122][ T5796] team0: Port device team_slave_1 added [ 377.337832][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.337848][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.337867][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.351246][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.351262][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.351282][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.411425][ T5807] hsr_slave_0: entered promiscuous mode [ 377.412291][ T5807] hsr_slave_1: entered promiscuous mode [ 377.412827][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 377.412844][ T5807] Cannot create hsr debugfs directory [ 377.488146][ T5796] hsr_slave_0: entered promiscuous mode [ 377.488593][ T5796] hsr_slave_1: entered promiscuous mode [ 377.489070][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 377.489082][ T5796] Cannot create hsr debugfs directory [ 377.548191][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.556005][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.556818][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.563769][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.577231][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.579638][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.601455][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.605234][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.704593][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.709403][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.721315][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.724549][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.724987][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.727765][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.734635][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.738587][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.811880][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.817472][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.818147][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.821978][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.832889][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.837353][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.839218][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.841021][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.890603][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.892486][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.892958][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.896103][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.903562][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.907986][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.909897][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.911520][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.916792][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.951427][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.958055][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.981506][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.981575][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.982760][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.982810][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.992545][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.005788][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.005917][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.024403][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.024445][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.061347][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.084575][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.094962][ T5813] Bluetooth: hci0: command tx timeout [ 378.095343][ T5813] Bluetooth: hci2: command tx timeout [ 378.095443][ T5813] Bluetooth: hci3: command tx timeout [ 378.095700][ T5813] Bluetooth: hci1: command tx timeout [ 378.099348][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.121557][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.121607][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.133069][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.143198][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.143284][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.161814][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.161859][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.172088][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.172363][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.415520][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.430507][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.456784][ T5803] veth0_vlan: entered promiscuous mode [ 378.463529][ T5803] veth1_vlan: entered promiscuous mode [ 378.485395][ T5795] veth0_vlan: entered promiscuous mode [ 378.491174][ T5795] veth1_vlan: entered promiscuous mode [ 378.496047][ T5803] veth0_macvtap: entered promiscuous mode [ 378.501326][ T5803] veth1_macvtap: entered promiscuous mode [ 378.513419][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.518419][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.520966][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.527745][ T5795] veth0_macvtap: entered promiscuous mode [ 378.533673][ T5795] veth1_macvtap: entered promiscuous mode [ 378.536379][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.551423][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.564740][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.592785][ T5807] veth0_vlan: entered promiscuous mode [ 378.619286][ T5817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.619301][ T5817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.639091][ T5796] veth0_vlan: entered promiscuous mode [ 378.640295][ T5807] veth1_vlan: entered promiscuous mode [ 378.644477][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.644844][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.645065][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.645098][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.645129][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.645159][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.646426][ T5817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.646436][ T5817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.655291][ T5796] veth1_vlan: entered promiscuous mode [ 378.659937][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.659995][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.660581][ T5817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.660593][ T5817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.692170][ T5807] veth0_macvtap: entered promiscuous mode [ 378.701789][ T5819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.701810][ T5819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.708553][ T5807] veth1_macvtap: entered promiscuous mode [ 378.714623][ T5796] veth0_macvtap: entered promiscuous mode [ 378.715714][ T5803] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 378.720085][ T5803] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 378.720580][ T5796] veth1_macvtap: entered promiscuous mode [ 378.722081][ T5803] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 378.723991][ T5803] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 378.736500][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.745386][ T5803] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 378.747546][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.757166][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.763581][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.843218][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.843239][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.845544][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.845720][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.845882][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.846094][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.846288][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.853895][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.853918][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.853935][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.853951][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.870901][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.870922][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.883819][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.886796][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 378.889620][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.889639][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.910799][ T5951] xfs: Unknown parameter 'norecoveryel/security' [ 378.934808][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.934822][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.173413][ T5970] Zero length message leads to an empty skb [ 380.176776][ T5809] Bluetooth: hci1: command tx timeout [ 380.176815][ T5813] Bluetooth: hci3: command tx timeout [ 380.176848][ T5813] Bluetooth: hci2: command tx timeout [ 380.176875][ T5813] Bluetooth: hci0: command tx timeout [ 380.653416][ T5978] loop0: detected capacity change from 0 to 1 [ 380.849811][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 380.912560][ T5987] loop0: p1 [ 380.912674][ T5987] loop0: partition table partially beyond EOD, truncated [ 380.942974][ T5987] loop0: p1 start 2134062548 is beyond EOD, truncated [ 381.003986][ T62] usb 7-1: Using ep0 maxpacket: 32 [ 381.006377][ T62] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.010739][ T62] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 381.027514][ T62] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.027538][ T62] usb 7-1: Product: syz [ 381.027550][ T62] usb 7-1: Manufacturer: syz [ 381.027562][ T62] usb 7-1: SerialNumber: syz [ 381.040340][ T62] usb 7-1: config 0 descriptor?? [ 381.041567][ T5983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.044910][ T62] hub 7-1:0.0: bad descriptor, ignoring hub [ 381.044930][ T62] hub 7-1:0.0: probe with driver hub failed with error -5 [ 381.384779][ T62] usb 7-1: USB disconnect, device number 2 [ 381.743831][ T62] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 381.896139][ T62] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.903292][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 381.906437][ T62] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.906450][ T62] usb 7-1: Product: syz [ 381.906457][ T62] usb 7-1: Manufacturer: syz [ 381.906464][ T62] usb 7-1: SerialNumber: syz [ 381.908514][ T62] usb 7-1: config 0 descriptor?? [ 381.910447][ T5983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.911698][ T62] hub 7-1:0.0: bad descriptor, ignoring hub [ 381.911710][ T62] hub 7-1:0.0: probe with driver hub failed with error -5 [ 382.253991][ T5809] Bluetooth: hci3: command tx timeout [ 382.263770][ T5809] Bluetooth: hci1: command tx timeout [ 382.264028][ T5809] Bluetooth: hci0: command tx timeout [ 382.264051][ T5809] Bluetooth: hci2: command tx timeout [ 382.544078][ T30] usb 7-1: USB disconnect, device number 3 [ 382.790677][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 382.793233][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 382.922596][ T43] audit: type=1326 audit(1789231058.603:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.18" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 384.359245][ T5813] Bluetooth: hci2: command tx timeout [ 384.360719][ T5813] Bluetooth: hci0: command tx timeout [ 384.360789][ T5813] Bluetooth: hci1: command tx timeout [ 384.360811][ T5813] Bluetooth: hci3: command tx timeout [ 387.604795][ T6058] FAULT_INJECTION: forcing a failure. [ 387.604795][ T6058] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 387.604819][ T6058] CPU: 0 UID: 60928 PID: 6058 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 387.604834][ T6058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.604841][ T6058] Call Trace: [ 387.604846][ T6058] [ 387.604851][ T6058] dump_stack_lvl+0x100/0x190 [ 387.604871][ T6058] should_fail_ex.cold+0x5/0xa [ 387.604888][ T6058] _copy_from_user+0x2e/0xd0 [ 387.604905][ T6058] __sys_bpf+0x2f5/0x4a30 [ 387.604923][ T6058] ? __pfx___sys_bpf+0x10/0x10 [ 387.604935][ T6058] ? find_held_lock+0x2b/0x80 [ 387.604973][ T6058] ? futex_wake+0x4ea/0x5e0 [ 387.605011][ T6058] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 387.605027][ T6058] ? xfd_validate_state+0x129/0x190 [ 387.605048][ T6058] ? __ia32_sys_bpf+0xcc/0x170 [ 387.605061][ T6058] __ia32_sys_bpf+0xcc/0x170 [ 387.605081][ T6058] ? __do_fast_syscall_32+0xb3/0x8b0 [ 387.605102][ T6058] __do_fast_syscall_32+0x13a/0x8b0 [ 387.605123][ T6058] do_fast_syscall_32+0x32/0x70 [ 387.605143][ T6058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.605160][ T6058] RIP: 0023:0xf7f23fec [ 387.605174][ T6058] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 387.605179][ T6058] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 387.605192][ T6058] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 387.605199][ T6058] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.605205][ T6058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.605211][ T6058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 387.605218][ T6058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.605232][ T6058] [ 387.915336][ T5527] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 388.114109][ T5527] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.125139][ T5527] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.125164][ T5527] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 388.125185][ T5527] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 388.125204][ T5527] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.125235][ T5527] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.204231][ T5527] usb 8-1: config 0 descriptor?? [ 388.238899][ T6070] 9p: Bad value for 'rfdno' [ 388.475063][ T6070] batman_adv: batadv0: Adding interface: vlan2 [ 388.475074][ T6070] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.475088][ T6070] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 389.163230][ T5527] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 389.452207][ T6087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.515600][ T6089] FAULT_INJECTION: forcing a failure. [ 389.515600][ T6089] name failslab, interval 1, probability 0, space 0, times 1 [ 389.515620][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.2.41 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.515635][ T6089] Tainted: [L]=SOFTLOCKUP [ 389.515639][ T6089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.515645][ T6089] Call Trace: [ 389.515649][ T6089] [ 389.515653][ T6089] dump_stack_lvl+0x100/0x190 [ 389.515671][ T6089] should_fail_ex.cold+0x5/0xa [ 389.515686][ T6089] should_failslab+0xc2/0x120 [ 389.515700][ T6089] __kvmalloc_node_noprof+0x113/0x9b0 [ 389.515714][ T6089] ? bpf_check+0x1b8e/0xa980 [ 389.515731][ T6089] bpf_check+0x1b8e/0xa980 [ 389.515745][ T6089] ? __css_rstat_updated+0x1ce/0x590 [ 389.515761][ T6089] ? __lock_acquire+0x5c0/0x1f40 [ 389.515776][ T6089] ? __pfx___css_rstat_updated+0x10/0x10 [ 389.515799][ T6089] ? __pfx_bpf_check+0x10/0x10 [ 389.515814][ T6089] ? lock_acquire+0x1d1/0x380 [ 389.515828][ T6089] ? bpf_prog_load+0x1a09/0x2a80 [ 389.515842][ T6089] ? find_held_lock+0x2b/0x80 [ 389.515853][ T6089] ? bpf_prog_load+0x1a09/0x2a80 [ 389.515870][ T6089] ? __asan_memset+0x23/0x50 [ 389.515882][ T6089] ? bpf_prog_load+0x1ac3/0x2a80 [ 389.515896][ T6089] bpf_prog_load+0x1ac3/0x2a80 [ 389.515914][ T6089] ? __pfx_bpf_prog_load+0x10/0x10 [ 389.515939][ T6089] __sys_bpf+0x1f46/0x4a30 [ 389.515953][ T6089] ? __pfx___sys_bpf+0x10/0x10 [ 389.515963][ T6089] ? lock_acquire+0x1d1/0x380 [ 389.515976][ T6089] ? get_pid_task+0x2a/0x250 [ 389.515988][ T6089] ? find_held_lock+0x2b/0x80 [ 389.515998][ T6089] ? get_pid_task+0xfc/0x250 [ 389.516008][ T6089] ? get_pid_task+0xfc/0x250 [ 389.516022][ T6089] ? proc_fail_nth_write+0x9f/0x220 [ 389.516034][ T6089] ? find_held_lock+0x2b/0x80 [ 389.516059][ T6089] ? rcu_read_lock_any_held+0x6a/0x90 [ 389.516074][ T6089] ? find_held_lock+0x2b/0x80 [ 389.516085][ T6089] ? ksys_write+0x190/0x250 [ 389.516095][ T6089] ? ksys_write+0x190/0x250 [ 389.516105][ T6089] ? lock_acquire+0x1d1/0x380 [ 389.516131][ T6089] ? fput+0x7c/0x100 [ 389.516152][ T6089] ? __ia32_sys_bpf+0xcc/0x170 [ 389.516167][ T6089] __ia32_sys_bpf+0xcc/0x170 [ 389.516179][ T6089] ? __do_fast_syscall_32+0xb3/0x8b0 [ 389.516197][ T6089] __do_fast_syscall_32+0x13a/0x8b0 [ 389.516213][ T6089] ? lockdep_hardirqs_on+0x7d/0x110 [ 389.516229][ T6089] do_fast_syscall_32+0x32/0x70 [ 389.516246][ T6089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.516260][ T6089] RIP: 0023:0xf7f23fec [ 389.516273][ T6089] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 389.516278][ T6089] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 389.516289][ T6089] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 389.516295][ T6089] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.516301][ T6089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.516307][ T6089] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 389.516313][ T6089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.516325][ T6089] [ 389.718595][ T5906] usb 8-1: USB disconnect, device number 2 [ 390.911044][ T6110] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 391.024007][ T6112] FAULT_INJECTION: forcing a failure. [ 391.024007][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 391.024030][ T6112] CPU: 2 UID: 60928 PID: 6112 Comm: syz.3.45 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.024046][ T6112] Tainted: [L]=SOFTLOCKUP [ 391.024050][ T6112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.024056][ T6112] Call Trace: [ 391.024060][ T6112] [ 391.024064][ T6112] dump_stack_lvl+0x100/0x190 [ 391.024084][ T6112] should_fail_ex.cold+0x5/0xa [ 391.024098][ T6112] should_failslab+0xc2/0x120 [ 391.024114][ T6112] kmem_cache_alloc_noprof+0x92/0x6a0 [ 391.024128][ T6112] ? d_instantiate+0x8a/0xb0 [ 391.024143][ T6112] ? alloc_empty_file+0x5b/0x1c0 [ 391.024165][ T6112] alloc_empty_file+0x5b/0x1c0 [ 391.024181][ T6112] alloc_file_pseudo+0x183/0x290 [ 391.024198][ T6112] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 391.024215][ T6112] ? _raw_spin_unlock+0x28/0x50 [ 391.024230][ T6112] ? alloc_fd+0x471/0x7a0 [ 391.024245][ T6112] __anon_inode_getfile+0xe8/0x280 [ 391.024265][ T6112] __anon_inode_getfd+0x5c/0xe0 [ 391.024283][ T6112] __sys_bpf+0x20c8/0x4a30 [ 391.024293][ T6112] ? plist_check_list+0x1b8/0x280 [ 391.024308][ T6112] ? plist_check_list+0x190/0x280 [ 391.024321][ T6112] ? __pfx___sys_bpf+0x10/0x10 [ 391.024330][ T6112] ? find_held_lock+0x2b/0x80 [ 391.024342][ T6112] ? futex_wake+0x4ea/0x5e0 [ 391.024355][ T6112] ? futex_private_hash_put.part.0+0xdc/0x180 [ 391.024372][ T6112] ? futex_private_hash_put+0x24/0x30 [ 391.024390][ T6112] ? __pfx_futex_wake+0x10/0x10 [ 391.024414][ T6112] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 391.024427][ T6112] ? xfd_validate_state+0x129/0x190 [ 391.024462][ T6112] ? __ia32_sys_bpf+0xcc/0x170 [ 391.024473][ T6112] __ia32_sys_bpf+0xcc/0x170 [ 391.024485][ T6112] ? __do_fast_syscall_32+0xb3/0x8b0 [ 391.024502][ T6112] __do_fast_syscall_32+0x13a/0x8b0 [ 391.024520][ T6112] do_fast_syscall_32+0x32/0x70 [ 391.024537][ T6112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 391.024552][ T6112] RIP: 0023:0xf7f67fec [ 391.024565][ T6112] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 391.024569][ T6112] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 391.024580][ T6112] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 391.024586][ T6112] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.024592][ T6112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.024598][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.024604][ T6112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.024617][ T6112] [ 391.141114][ T6111] netlink: 48 bytes leftover after parsing attributes in process `syz.2.46'. [ 391.226363][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 391.293854][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 392.503521][ T6132] FAULT_INJECTION: forcing a failure. [ 392.503521][ T6132] name failslab, interval 1, probability 0, space 0, times 0 [ 392.503553][ T6132] CPU: 2 UID: 0 PID: 6132 Comm: syz.2.52 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.503612][ T6132] Tainted: [L]=SOFTLOCKUP [ 392.503620][ T6132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.503632][ T6132] Call Trace: [ 392.503638][ T6132] [ 392.503644][ T6132] dump_stack_lvl+0x100/0x190 [ 392.503670][ T6132] should_fail_ex.cold+0x5/0xa [ 392.503691][ T6132] should_failslab+0xc2/0x120 [ 392.503716][ T6132] kmem_cache_alloc_noprof+0x92/0x6a0 [ 392.503737][ T6132] ? alloc_empty_file+0x5b/0x1c0 [ 392.503764][ T6132] alloc_empty_file+0x5b/0x1c0 [ 392.503788][ T6132] path_openat+0xdb/0x2440 [ 392.503812][ T6132] ? __pfx_path_openat+0x10/0x10 [ 392.503839][ T6132] do_file_open+0x20e/0x430 [ 392.503859][ T6132] ? __pfx_do_file_open+0x10/0x10 [ 392.503884][ T6132] ? _raw_spin_unlock+0x28/0x50 [ 392.503898][ T6132] ? alloc_fd+0x471/0x7a0 [ 392.503915][ T6132] do_sys_openat2+0x10f/0x1e0 [ 392.503931][ T6132] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.503949][ T6132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.503969][ T6132] __ia32_compat_sys_openat+0x12d/0x210 [ 392.503986][ T6132] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 392.504003][ T6132] ? xfd_validate_state+0x129/0x190 [ 392.504025][ T6132] __do_fast_syscall_32+0x13a/0x8b0 [ 392.504042][ T6132] ? lockdep_hardirqs_on+0x7d/0x110 [ 392.504059][ T6132] do_fast_syscall_32+0x32/0x70 [ 392.504079][ T6132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.504094][ T6132] RIP: 0023:0xf7f23fec [ 392.504108][ T6132] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 392.504113][ T6132] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 392.504125][ T6132] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 392.504132][ T6132] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.504138][ T6132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.504145][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.504151][ T6132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.504164][ T6132] [ 393.402734][ T6142] netlink: 140 bytes leftover after parsing attributes in process `syz.1.54'. [ 393.546977][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 394.853781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 395.190365][ T6171] netlink: 'syz.3.63': attribute type 7 has an invalid length. [ 395.444144][ T5769] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 395.869261][ T5769] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 395.892740][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 395.892769][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.892788][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 395.892808][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 395.990006][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.990022][ T5769] usb 8-1: Product: syz [ 395.990030][ T5769] usb 8-1: Manufacturer: syz [ 395.990036][ T5769] usb 8-1: SerialNumber: syz [ 396.076266][ T5769] usb 8-1: config 0 descriptor?? [ 396.380857][ T5769] adutux 8-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 396.578111][ T5769] usb 8-1: USB disconnect, device number 3 [ 396.653635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 397.204258][ T6202] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 397.737053][ T6217] program syz.1.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.624237][ T5769] e1000 0000:00:06.0 eth0: Reset adapter [ 398.800476][ T6230] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 398.985585][ T6250] netlink: 'syz.3.84': attribute type 7 has an invalid length. [ 399.081775][ T6252] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 399.081876][ T6252] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 399.247376][ T5906] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 399.343770][ T5769] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 399.515103][ T5769] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 399.519157][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 399.519174][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 399.519185][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 399.519197][ T5769] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 399.522433][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.522452][ T5769] usb 8-1: Product: syz [ 399.522463][ T5769] usb 8-1: Manufacturer: syz [ 399.522474][ T5769] usb 8-1: SerialNumber: syz [ 399.542178][ T5769] usb 8-1: config 0 descriptor?? [ 400.223421][ T5769] adutux 8-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 400.232985][ T5769] usb 8-1: USB disconnect, device number 4 [ 401.134729][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 415.827869][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 416.018048][ T6338] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.063778][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 416.108421][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 416.195642][ T5812] Bluetooth: Frame is too long (len 20, expected len 4) [ 416.224152][ T5906] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 416.225225][ T5906] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.226232][ T5906] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.228153][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.228164][ T5906] usb 5-1: Product: syz [ 416.228171][ T5906] usb 5-1: Manufacturer: syz [ 416.228178][ T5906] usb 5-1: SerialNumber: syz [ 416.232764][ T5906] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 416.256537][ T5906] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 416.259469][ T5906] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 417.478602][ T6359] 9p: Bad value for 'wfdno' [ 417.586748][ T6365] Bluetooth: MGMT ver 1.23 [ 418.503969][ T6328] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 418.570914][ T5810] usb 5-1: USB disconnect, device number 2 [ 418.595545][ T5810] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 418.599318][ T5810] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 418.608371][ T5810] ti_usb_3410_5052 5-1:2.0: device disconnected [ 418.654899][ T5771] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 418.813817][ T5771] usb 6-1: Using ep0 maxpacket: 32 [ 418.816821][ T5771] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 418.821190][ T5771] usb 6-1: config 0 has no interfaces? [ 418.852457][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.852872][ T5771] usb 6-1: Product: syz [ 418.852886][ T5771] usb 6-1: Manufacturer: syz [ 418.852936][ T5771] usb 6-1: SerialNumber: syz [ 418.890886][ T5771] usb 6-1: config 0 descriptor?? [ 419.212781][ T5771] usb 6-1: USB disconnect, device number 2 [ 419.819014][ T6381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.237920][ T6408] netlink: 172 bytes leftover after parsing attributes in process `syz.3.114'. [ 422.224187][ T6420] FAULT_INJECTION: forcing a failure. [ 422.224187][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 422.224219][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.0.118 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.224244][ T6420] Tainted: [L]=SOFTLOCKUP [ 422.224250][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.224260][ T6420] Call Trace: [ 422.224267][ T6420] [ 422.224276][ T6420] dump_stack_lvl+0x100/0x190 [ 422.224321][ T6420] should_fail_ex.cold+0x5/0xa [ 422.224346][ T6420] should_failslab+0xc2/0x120 [ 422.224370][ T6420] __kmalloc_cache_noprof+0x91/0x6d0 [ 422.224399][ T6420] ? tipc_group_create+0xbc/0x660 [ 422.224431][ T6420] tipc_group_create+0xbc/0x660 [ 422.224462][ T6420] tipc_setsockopt+0x611/0xe30 [ 422.224488][ T6420] ? __pfx_tipc_setsockopt+0x10/0x10 [ 422.224507][ T6420] ? lock_acquire+0x1d1/0x380 [ 422.224531][ T6420] ? __fget_files+0x34/0x3d0 [ 422.224560][ T6420] ? __pfx_tipc_setsockopt+0x10/0x10 [ 422.224583][ T6420] do_sock_setsockopt+0xf3/0x1d0 [ 422.224615][ T6420] __sys_setsockopt+0x119/0x190 [ 422.224642][ T6420] __ia32_sys_setsockopt+0xbc/0x160 [ 422.224664][ T6420] ? __do_fast_syscall_32+0xb3/0x8b0 [ 422.224689][ T6420] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.224715][ T6420] __do_fast_syscall_32+0x13a/0x8b0 [ 422.224747][ T6420] do_fast_syscall_32+0x32/0x70 [ 422.224772][ T6420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.224821][ T6420] RIP: 0023:0xf7f87fec [ 422.224849][ T6420] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 422.224858][ T6420] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 422.224875][ T6420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000010f [ 422.224887][ T6420] RDX: 0000000000000087 RSI: 0000000080000040 RDI: 0000000000000010 [ 422.224898][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.224909][ T6420] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.224919][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.224943][ T6420] [ 424.703637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 428.320428][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.131'. [ 428.621026][ T6479] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 428.779398][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 428.780144][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 430.175562][ T6502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 430.175578][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 430.177139][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 430.413632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 430.555626][ T5886] usb 44-1: SetAddress Request (2) to port 0 [ 430.555719][ T5886] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 432.863633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.183647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 433.364996][ T6527] FAULT_INJECTION: forcing a failure. [ 433.364996][ T6527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.365025][ T6527] CPU: 3 UID: 60928 PID: 6527 Comm: syz.2.147 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.365046][ T6527] Tainted: [L]=SOFTLOCKUP [ 433.365051][ T6527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.365059][ T6527] Call Trace: [ 433.365064][ T6527] [ 433.365070][ T6527] dump_stack_lvl+0x100/0x190 [ 433.365095][ T6527] should_fail_ex.cold+0x5/0xa [ 433.365115][ T6527] _copy_from_user+0x2e/0xd0 [ 433.365134][ T6527] __sys_bpf+0x2f5/0x4a30 [ 433.365155][ T6527] ? __pfx___sys_bpf+0x10/0x10 [ 433.365168][ T6527] ? find_held_lock+0x2b/0x80 [ 433.365182][ T6527] ? futex_wake+0x4ea/0x5e0 [ 433.365229][ T6527] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 433.365246][ T6527] ? xfd_validate_state+0x129/0x190 [ 433.365273][ T6527] ? __ia32_sys_bpf+0xcc/0x170 [ 433.365287][ T6527] __ia32_sys_bpf+0xcc/0x170 [ 433.365302][ T6527] ? __do_fast_syscall_32+0xb3/0x8b0 [ 433.365327][ T6527] __do_fast_syscall_32+0x13a/0x8b0 [ 433.365353][ T6527] do_fast_syscall_32+0x32/0x70 [ 433.365384][ T6527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.365403][ T6527] RIP: 0023:0xf7f23fec [ 433.365420][ T6527] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 433.365426][ T6527] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 433.365441][ T6527] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 433.365452][ T6527] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.365462][ T6527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.365470][ T6527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 433.365479][ T6527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.365498][ T6527] [ 433.414655][ T6503] vhci_hcd: connection reset by peer [ 433.419768][ T5850] vhci_hcd vhci_hcd.3: stop threads [ 433.423924][ T5850] vhci_hcd vhci_hcd.3: release socket [ 433.424453][ T5850] vhci_hcd vhci_hcd.3: disconnect device [ 433.805339][ T6533] x_tables: duplicate underflow at hook 3 [ 434.522447][ T6546] fuse: Unknown parameter 'En' [ 434.845117][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 434.918366][ T6552] netlink: 'syz.0.156': attribute type 7 has an invalid length. [ 435.173752][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 435.179163][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 435.236078][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.236406][ T30] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 435.237654][ T30] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.334449][ T5893] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 435.336476][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 435.336500][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 435.336517][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 435.336535][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 435.339499][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.339517][ T5893] usb 5-1: Product: syz [ 435.339528][ T5893] usb 5-1: Manufacturer: syz [ 435.339539][ T5893] usb 5-1: SerialNumber: syz [ 435.387008][ T5893] usb 5-1: config 0 descriptor?? [ 435.399263][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 435.400214][ T30] usb 8-1: Product: syz [ 435.401301][ T30] usb 8-1: Manufacturer: syz [ 435.401360][ T30] usb 8-1: SerialNumber: syz [ 435.681446][ T5886] usb 44-1: device descriptor read/8, error -110 [ 435.703324][ T5893] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 435.708373][ T5893] usb 5-1: USB disconnect, device number 3 [ 436.180419][ T30] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 436.370017][ T5886] usb usb44-port1: attempt power cycle [ 436.398321][ T6590] netlink: 'syz.0.158': attribute type 7 has an invalid length. [ 436.476419][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 436.531670][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 436.542646][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.548627][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.684024][ T1345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 436.795429][ T5893] usb 8-1: USB disconnect, device number 5 [ 436.803222][ T5893] usblp0: removed [ 436.835781][ T1345] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 436.853534][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 436.853552][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 436.853564][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 436.853576][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 436.862926][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.862940][ T1345] usb 5-1: Product: syz [ 436.862947][ T1345] usb 5-1: Manufacturer: syz [ 436.862954][ T1345] usb 5-1: SerialNumber: syz [ 436.873845][ T1345] usb 5-1: config 0 descriptor?? [ 436.988696][ T5886] usb usb44-port1: unable to enumerate USB device [ 437.055337][ T6598] infiniband syz1: set active [ 437.055351][ T6598] infiniband syz1: added syz_tun [ 437.068056][ T6598] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 437.068078][ T6598] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 437.068146][ T6598] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 437.124510][ T6598] RDS/IB: syz1: added [ 437.124839][ T6598] smc: adding ib device syz1 with port count 1 [ 437.124893][ T6598] smc: ib device syz1 port 1 has no pnetid [ 437.170301][ T1345] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 437.176268][ T1345] usb 5-1: USB disconnect, device number 4 [ 440.095815][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.095845][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.143631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 440.203635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 440.453628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 442.181128][ T6633] 0x000000000000-0x000000020000 : "" [ 442.221482][ T6633] ftl_cs: FTL header not found. [ 444.123644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 444.465566][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 444.643894][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 444.645899][ T5886] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.650943][ T5886] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 444.765173][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.765272][ T5886] usb 6-1: Product: syz [ 444.765340][ T5886] usb 6-1: Manufacturer: syz [ 444.767010][ T5886] usb 6-1: SerialNumber: syz [ 444.818831][ T5886] usb 6-1: config 0 descriptor?? [ 444.835828][ T6664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.068426][ T5771] usb 6-1: USB disconnect, device number 3 [ 445.509891][ T6674] mmap: syz.0.182 (6674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 445.633846][ T5771] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 445.787346][ T5771] usb 6-1: Using ep0 maxpacket: 8 [ 445.791800][ T5771] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.796707][ T5771] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 445.796727][ T5771] usb 6-1: config 1 interface 0 has no altsetting 0 [ 445.807982][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.808004][ T5771] usb 6-1: Product: ᡞ炻㚛꧔ࡠꡈ켟胢谤鴐ノξ鍊嗻⻓먹䀯〝붾ꂙ曬쩃飷㳈绒ȶ孽㽔뼕ࠪ鲽臲뢭䕵舞圴ෞ辡苯뜲誷୸哯鴥쩏댿㖿앾㸜✴戹ὐ᷋兊ꋕ栕ℌⶫɃ䈆 [ 445.808027][ T5771] usb 6-1: Manufacturer: 娔렑ﳀ戡ﴯ튊铫벬꦳ਵ镇啙듥⒄슡祀쬁ݺ輤ぼ뀑讽뫔䟆徫즇퓝嵓ܓ躴璉쟮櫫঎녢쥆㢙䍍⼌䄦ᦿ鄼畱碎઎搰ⷁ␜喞ẘ梙뵆⯋཭䷻䧄殲콯㙣휾㦴锅 [ 445.808049][ T5771] usb 6-1: SerialNumber: 姚莍礂廹硦ኃ竄긚鎘瞧닏崔機勩힯⪈决픜崳᧺⺣程ⱒ冐굞ꔣ蚎␴擶덄ട体ᙸ㺕র鑳艬弹굝涾茰ﭳ톹䨥㣑䏨썃爙愈廴Ҽ醝뤎嚕﬉㩗₷뚭謡៥鲁搚ᒾ槊뱫堸䥝即靚㇦뽆썐냣쳤ᦺ⚝牷玚䏂䑿ⷲ讶屎睿㦛儭ﾲ苩䷪挶ݻꦦ⡅໊䋷﹦贲渵쬮惲㪩鋆꞉俪畆볨뿢ꏬ줵抇暢 [ 445.838833][ T6664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.009274][ T6681] process 'syz.2.185' launched '/dev/fd/3' with NULL argv: empty string added [ 446.091708][ T6685] FAULT_INJECTION: forcing a failure. [ 446.091708][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.091766][ T6685] CPU: 3 UID: 60928 PID: 6685 Comm: syz.2.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.091783][ T6685] Tainted: [L]=SOFTLOCKUP [ 446.091787][ T6685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.091793][ T6685] Call Trace: [ 446.091798][ T6685] [ 446.091803][ T6685] dump_stack_lvl+0x100/0x190 [ 446.091821][ T6685] should_fail_ex.cold+0x5/0xa [ 446.091836][ T6685] _copy_from_user+0x2e/0xd0 [ 446.091851][ T6685] __sys_bpf+0x2f5/0x4a30 [ 446.091867][ T6685] ? __pfx___sys_bpf+0x10/0x10 [ 446.091889][ T6685] ? find_held_lock+0x2b/0x80 [ 446.091903][ T6685] ? futex_wake+0x4ea/0x5e0 [ 446.091935][ T6685] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 446.091948][ T6685] ? xfd_validate_state+0x129/0x190 [ 446.091969][ T6685] ? __ia32_sys_bpf+0xcc/0x170 [ 446.091980][ T6685] __ia32_sys_bpf+0xcc/0x170 [ 446.091992][ T6685] ? __do_fast_syscall_32+0xb3/0x8b0 [ 446.092011][ T6685] __do_fast_syscall_32+0x13a/0x8b0 [ 446.092029][ T6685] do_fast_syscall_32+0x32/0x70 [ 446.092045][ T6685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.092059][ T6685] RIP: 0023:0xf7f23fec [ 446.092072][ T6685] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 446.092078][ T6685] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 446.092089][ T6685] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 446.092096][ T6685] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.092103][ T6685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.092109][ T6685] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 446.092115][ T6685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.092128][ T6685] [ 446.382792][ T5771] usb 6-1: USB disconnect, device number 4 [ 446.570069][ T6693] CacheFiles: Empty tag specified [ 446.570247][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'. [ 448.507850][ T6701] nfs: Bad value for 'port' [ 448.509291][ T6703] FAULT_INJECTION: forcing a failure. [ 448.509291][ T6703] name fail_futex, interval 1, probability 0, space 0, times 1 [ 448.509321][ T6703] CPU: 0 UID: 60928 PID: 6703 Comm: syz.0.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.509346][ T6703] Tainted: [L]=SOFTLOCKUP [ 448.509352][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.509363][ T6703] Call Trace: [ 448.509370][ T6703] [ 448.509378][ T6703] dump_stack_lvl+0x100/0x190 [ 448.509407][ T6703] should_fail_ex.cold+0x5/0xa [ 448.509433][ T6703] get_futex_key+0x1d0/0x14f0 [ 448.509466][ T6703] ? __pfx_get_futex_key+0x10/0x10 [ 448.509494][ T6703] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 448.509532][ T6703] futex_wait_setup+0x91/0x540 [ 448.509559][ T6703] __futex_wait+0x19f/0x300 [ 448.509583][ T6703] ? __pfx___futex_wait+0x10/0x10 [ 448.509603][ T6703] ? __pfx_try_to_wake_up+0x10/0x10 [ 448.509631][ T6703] ? futex_hash+0x311/0x400 [ 448.509662][ T6703] ? __pfx_futex_wake_mark+0x10/0x10 [ 448.509691][ T6703] ? find_held_lock+0x2b/0x80 [ 448.509710][ T6703] ? futex_wake+0x4ea/0x5e0 [ 448.509761][ T6703] futex_wait+0xe6/0x370 [ 448.509788][ T6703] ? __pfx_futex_wait+0x10/0x10 [ 448.509834][ T6703] do_futex+0x265/0x440 [ 448.509855][ T6703] ? __pfx_do_futex+0x10/0x10 [ 448.509873][ T6703] ? iput+0x3a/0x40 [ 448.509900][ T6703] ? __sock_release+0x184/0x260 [ 448.509934][ T6703] __ia32_sys_futex_time32+0x2f4/0x470 [ 448.509958][ T6703] ? xfd_validate_state+0x129/0x190 [ 448.509987][ T6703] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 448.510020][ T6703] __do_fast_syscall_32+0x13a/0x8b0 [ 448.510055][ T6703] do_fast_syscall_32+0x32/0x70 [ 448.510083][ T6703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.510107][ T6703] RIP: 0023:0xf7f87fec [ 448.510127][ T6703] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 448.510136][ T6703] RSP: 002b:00000000f54465bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 448.510154][ T6703] RAX: ffffffffffffffda RBX: 00000000f7444f88 RCX: 0000000000000080 [ 448.510165][ T6703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7444f8c [ 448.510176][ T6703] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 448.510187][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.510199][ T6703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.510223][ T6703] [ 448.954920][ T6709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.040571][ T6713] FAULT_INJECTION: forcing a failure. [ 449.040571][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.040593][ T6713] CPU: 0 UID: 60928 PID: 6713 Comm: syz.3.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.040608][ T6713] Tainted: [L]=SOFTLOCKUP [ 449.040612][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.040619][ T6713] Call Trace: [ 449.040623][ T6713] [ 449.040627][ T6713] dump_stack_lvl+0x100/0x190 [ 449.040645][ T6713] should_fail_ex.cold+0x5/0xa [ 449.040688][ T6713] _copy_from_user+0x2e/0xd0 [ 449.040712][ T6713] __sys_bpf+0x2f5/0x4a30 [ 449.040728][ T6713] ? __pfx___sys_bpf+0x10/0x10 [ 449.040739][ T6713] ? find_held_lock+0x2b/0x80 [ 449.040752][ T6713] ? futex_wake+0x4ea/0x5e0 [ 449.040786][ T6713] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 449.040800][ T6713] ? xfd_validate_state+0x129/0x190 [ 449.040819][ T6713] ? __ia32_sys_bpf+0xcc/0x170 [ 449.040829][ T6713] __ia32_sys_bpf+0xcc/0x170 [ 449.040841][ T6713] ? __do_fast_syscall_32+0xb3/0x8b0 [ 449.040860][ T6713] __do_fast_syscall_32+0x13a/0x8b0 [ 449.040878][ T6713] do_fast_syscall_32+0x32/0x70 [ 449.040894][ T6713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.040907][ T6713] RIP: 0023:0xf7f67fec [ 449.040920][ T6713] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 449.040926][ T6713] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 449.040937][ T6713] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 449.040944][ T6713] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.040950][ T6713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.040956][ T6713] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 449.040962][ T6713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.040974][ T6713] [ 449.183147][ T6715] sg_write: data in/out 85/217 bytes for SCSI command 0x0-- guessing data in; [ 449.183147][ T6715] program syz.0.195 not setting count and/or reply_len properly [ 451.877516][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 452.096348][ T5812] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 452.098251][ T5809] Bluetooth: hci4: command 0x1003 tx timeout [ 453.121567][ T6749] syz.0.207 uses obsolete (PF_INET,SOCK_PACKET) [ 453.126974][ T6749] tmpfs: Bad value for 'mpol' [ 453.260510][ T5769] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 454.796248][ T6028] IPVS: starting estimator thread 0... [ 454.906301][ T6768] IPVS: using max 42 ests per chain, 100800 per kthread [ 455.242020][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 455.536314][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 455.691071][ T5893] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.692113][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.692148][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.700435][ T5893] usb 6-1: config 0 descriptor?? [ 455.786863][ T6794] binder: Bad value for 'max' [ 455.992424][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 455.992506][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 455.998200][ T5893] usb 6-1: USB disconnect, device number 5 [ 456.524162][ T5771] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 456.781364][ T5771] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 456.788342][ T5771] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 456.793308][ T5771] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 456.794521][ T5771] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.801579][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.801601][ T5771] usb 6-1: Product: syz [ 456.801613][ T5771] usb 6-1: Manufacturer: syz [ 456.801626][ T5771] usb 6-1: SerialNumber: syz [ 457.316369][ T5771] usb 6-1: USB disconnect, device number 6 [ 458.246657][ T6826] netlink: 'syz.3.217': attribute type 13 has an invalid length. [ 461.014765][ T6850] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 461.379896][ T6854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.302989][ T6862] comedi: valid board names for 8255 driver are: [ 463.303057][ T6862] 8255 [ 463.303154][ T6862] comedi: valid board names for vmk80xx driver are: [ 463.303382][ T6862] vmk80xx [ 463.303386][ T6862] comedi: valid board names for usbduxsigma driver are: [ 463.303450][ T6862] usbduxsigma [ 463.303579][ T6862] comedi: valid board names for usbduxfast driver are: [ 463.322226][ T6862] usbduxfast [ 463.322322][ T6862] comedi: valid board names for usbdux driver are: [ 463.322355][ T6862] usbdux [ 463.322360][ T6862] comedi: valid board names for ni6501 driver are: [ 463.322422][ T6862] ni6501 [ 463.322486][ T6862] comedi: valid board names for dt9812 driver are: [ 463.322517][ T6862] dt9812 [ 463.322522][ T6862] comedi: valid board names for ni_labpc_cs driver are: [ 463.322653][ T6862] ni_labpc_cs [ 463.322748][ T6862] comedi: valid board names for ni_daq_700 driver are: [ 463.322754][ T6862] ni_daq_700 [ 463.322815][ T6862] comedi: valid board names for labpc_pci driver are: [ 463.322945][ T6862] labpc_pci [ 463.322949][ T6862] comedi: valid board names for adl_pci9118 driver are: [ 463.323012][ T6862] pci9118dg [ 463.323042][ T6862] pci9118hg [ 463.323047][ T6862] pci9118hr [ 463.323142][ T6862] comedi: valid board names for 8255_pci driver are: [ 463.375375][ T6862] 8255_pci [ 463.375392][ T6862] comedi: valid board names for s526 driver are: [ 463.375400][ T6862] s526 [ 463.375405][ T6862] comedi: valid board names for multiq3 driver are: [ 463.375413][ T6862] multiq3 [ 463.375419][ T6862] comedi: valid board names for pcmuio driver are: [ 463.375426][ T6862] pcmuio48 [ 463.375431][ T6862] pcmuio96 [ 463.375436][ T6862] comedi: valid board names for pcmmio driver are: [ 463.375444][ T6862] pcmmio [ 463.375449][ T6862] comedi: valid board names for pcmda12 driver are: [ 463.375455][ T6862] pcmda12 [ 463.375460][ T6862] comedi: valid board names for pcmad driver are: [ 463.375466][ T6862] pcmad12 [ 463.375471][ T6862] pcmad16 [ 463.375476][ T6862] comedi: valid board names for ni_labpc driver are: [ 463.375482][ T6862] lab-pc-1200 [ 463.375487][ T6862] lab-pc-1200ai [ 463.375492][ T6862] lab-pc+ [ 463.375497][ T6862] comedi: valid board names for atmio16 driver are: [ 463.375504][ T6862] atmio16 [ 463.375508][ T6862] atmio16d [ 463.375513][ T6862] comedi: valid board names for ni_at_ao driver are: [ 463.375519][ T6862] at-ao-6 [ 463.375524][ T6862] at-ao-10 [ 463.375529][ T6862] comedi: valid board names for ni_at_a2150 driver are: [ 463.375536][ T6862] ni_at_a2150 [ 463.375541][ T6862] comedi: valid board names for adq12b driver are: [ 463.375547][ T6862] adq12b [ 463.375552][ T6862] comedi: valid board names for mpc624 driver are: [ 463.375558][ T6862] mpc624 [ 463.375562][ T6862] comedi: valid board names for c6xdigio driver are: [ 463.375568][ T6862] c6xdigio [ 463.375573][ T6862] comedi: valid board names for aio_iiro_16 driver are: [ 463.375580][ T6862] aio_iiro_16 [ 463.375584][ T6862] comedi: valid board names for aio_aio12_8 driver are: [ 463.375591][ T6862] aio_aio12_8 [ 463.375596][ T6862] aio_ai12_8 [ 463.375601][ T6862] aio_ao12_4 [ 463.375607][ T6862] comedi: valid board names for fl512 driver are: [ 463.375614][ T6862] fl512 [ 463.375619][ T6862] comedi: valid board names for dmm32at driver are: [ 463.375625][ T6862] dmm32at [ 463.375630][ T6862] comedi: valid board names for dt282x driver are: [ 463.375636][ T6862] dt2821 [ 463.375641][ T6862] dt2821-f [ 463.375645][ T6862] dt2821-g [ 463.375650][ T6862] dt2823 [ 463.375655][ T6862] dt2824-pgh [ 463.375660][ T6862] dt2824-pgl [ 463.375665][ T6862] dt2825 [ 463.375669][ T6862] dt2827 [ 463.375674][ T6862] dt2828 [ 463.375678][ T6862] dt2829 [ 463.375683][ T6862] dt21-ez [ 463.375688][ T6862] dt23-ez [ 463.375692][ T6862] dt24-ez [ 463.375697][ T6862] dt24-ez-pgl [ 463.375702][ T6862] comedi: valid board names for dt2817 driver are: [ 463.375708][ T6862] dt2817 [ 463.375713][ T6862] comedi: valid board names for dt2815 driver are: [ 463.375720][ T6862] dt2815 [ 463.375724][ T6862] comedi: valid board names for dt2814 driver are: [ 463.375730][ T6862] dt2814 [ 463.375735][ T6862] comedi: valid board names for dt2811 driver are: [ 463.375741][ T6862] dt2811-pgh [ 463.375746][ T6862] dt2811-pgl [ 463.375751][ T6862] comedi: valid board names for dt2801 driver are: [ 463.375757][ T6862] dt2801 [ 463.375762][ T6862] comedi: valid board names for das6402 driver are: [ 463.375768][ T6862] das6402-12 [ 463.375773][ T6862] das6402-16 [ 463.375778][ T6862] comedi: valid board names for das1800 driver are: [ 463.375785][ T6862] das-1701st [ 463.375790][ T6862] das-1701st-da [ 463.375795][ T6862] das-1702st [ 463.375799][ T6862] das-1702st-da [ 463.375805][ T6862] das-1702hr [ 463.375809][ T6862] das-1702hr-da [ 463.375814][ T6862] das-1701ao [ 463.376293][ T6862] das-1702ao [ 463.376302][ T6862] das-1801st [ 463.376307][ T6862] das-1801st-da [ 463.376313][ T6862] das-1802st [ 463.376318][ T6862] das-1802st-da [ 463.376323][ T6862] das-1802hr [ 463.376329][ T6862] das-1802hr-da [ 463.376334][ T6862] das-1801hc [ 463.376339][ T6862] das-1802hc [ 463.376343][ T6862] das-1801ao [ 463.376348][ T6862] das-1802ao [ 463.376354][ T6862] comedi: valid board names for das800 driver are: [ 463.376360][ T6862] das-800 [ 463.376365][ T6862] cio-das800 [ 463.376370][ T6862] das-801 [ 463.376375][ T6862] cio-das801 [ 463.376380][ T6862] das-802 [ 463.376386][ T6862] cio-das802 [ 463.376391][ T6862] cio-das802/16 [ 463.376397][ T6862] comedi: valid board names for isa-das08 driver are: [ 463.376404][ T6862] isa-das08 [ 463.376409][ T6862] das08-pgm [ 463.376414][ T6862] das08-pgh [ 463.376419][ T6862] das08-pgl [ 463.376423][ T6862] das08-aoh [ 463.376428][ T6862] das08-aol [ 463.376433][ T6862] das08-aom [ 463.376438][ T6862] das08/jr-ao [ 463.376443][ T6862] das08jr-16-ao [ 463.376449][ T6862] pc104-das08 [ 463.376454][ T6862] das08jr/16 [ 463.376459][ T6862] comedi: valid board names for das16m1 driver are: [ 463.376465][ T6862] das16m1 [ 463.376470][ T6862] comedi: valid board names for dac02 driver are: [ 463.376477][ T6862] dac02 [ 463.376482][ T6862] comedi: valid board names for rti802 driver are: [ 463.376487][ T6862] rti802 [ 463.376492][ T6862] comedi: valid board names for rti800 driver are: [ 463.376498][ T6862] rti800 [ 463.376503][ T6862] rti815 [ 463.376508][ T6862] comedi: valid board names for pcm3724 driver are: [ 463.376514][ T6862] pcm3724 [ 463.376519][ T6862] comedi: valid board names for pcl818 driver are: [ 463.376524][ T6862] pcl818l [ 463.376530][ T6862] pcl818h [ 463.376535][ T6862] pcl818hd [ 463.378885][ T6862] pcl818hg [ 463.378895][ T6862] pcl818 [ 463.378901][ T6862] pcl718 [ 463.378906][ T6862] pcm3718 [ 463.378913][ T6862] comedi: valid board names for pcl816 driver are: [ 463.378920][ T6862] pcl816 [ 463.378925][ T6862] pcl814b [ 463.378931][ T6862] comedi: valid board names for pcl812 driver are: [ 463.378938][ T6862] pcl812 [ 463.378942][ T6862] pcl812pg [ 463.378948][ T6862] acl8112pg [ 463.378953][ T6862] acl8112dg [ 463.378957][ T6862] acl8112hg [ 463.378962][ T6862] a821pgl [ 463.378967][ T6862] a821pglnda [ 463.378972][ T6862] a821pgh [ 463.378977][ T6862] a822pgl [ 463.378982][ T6862] a822pgh [ 463.378986][ T6862] a823pgl [ 463.378991][ T6862] a823pgh [ 463.378995][ T6862] pcl813 [ 463.379000][ T6862] pcl813b [ 463.379005][ T6862] acl8113 [ 463.379009][ T6862] iso813 [ 463.379014][ T6862] acl8216 [ 463.379019][ T6862] a826pg [ 463.379024][ T6862] comedi: valid board names for pcl730 driver are: [ 463.379030][ T6862] pcl730 [ 463.379035][ T6862] iso730 [ 463.379040][ T6862] acl7130 [ 463.379045][ T6862] pcm3730 [ 463.379049][ T6862] pcl725 [ 463.379054][ T6862] p8r8dio [ 463.379059][ T6862] acl7225b [ 463.379064][ T6862] p16r16dio [ 463.379069][ T6862] pcl733 [ 463.379074][ T6862] pcl734 [ 463.379079][ T6862] opmm-1616-xt [ 463.379084][ T6862] pearl-mm-p [ 463.379089][ T6862] ir104-pbf [ 463.379094][ T6862] comedi: valid board names for pcl726 driver are: [ 463.379100][ T6862] pcl726 [ 463.379104][ T6862] pcl727 [ 463.379109][ T6862] pcl728 [ 463.379114][ T6862] acl6126 [ 463.379119][ T6862] acl6128 [ 463.379124][ T6862] comedi: valid board names for pcl724 driver are: [ 463.379130][ T6862] pcl724 [ 463.379135][ T6862] pcl722 [ 463.379140][ T6862] pcl731 [ 463.379144][ T6862] acl7122 [ 463.379149][ T6862] acl7124 [ 463.379154][ T6862] pet48dio [ 463.379159][ T6862] pcmio48 [ 463.379163][ T6862] onyx-mm-dio [ 463.379169][ T6862] comedi: valid board names for pcl711 driver are: [ 463.379175][ T6862] pcl711 [ 463.379179][ T6862] pcl711b [ 463.379184][ T6862] acl8112hg [ 463.379189][ T6862] acl8112dg [ 463.379193][ T6862] comedi: valid board names for amplc_pc263 driver are: [ 463.379200][ T6862] pc263 [ 463.379205][ T6862] comedi: valid board names for amplc_pc236 driver are: [ 463.379211][ T6862] pc36at [ 463.379216][ T6862] comedi: valid board names for amplc_dio200 driver are: [ 463.379237][ T6862] pc212e [ 463.379242][ T6862] pc214e [ 463.379247][ T6862] pc215e [ 463.379252][ T6862] pc218e [ 463.379257][ T6862] pc272e [ 463.379261][ T6862] comedi: valid board names for comedi_parport driver are: [ 463.379268][ T6862] comedi_parport [ 463.379273][ T6862] comedi: valid board names for comedi_test driver are: [ 463.379280][ T6862] comedi_test [ 463.379285][ T6862] comedi: valid board names for comedi_bond driver are: [ 463.379292][ T6862] comedi_bond [ 463.605982][ T6853] Console: switching to colour dummy device 80x25 [ 463.860917][ T6856] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 463.873108][ T6856] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 463.873373][ T6856] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 463.873865][ T6856] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 463.879294][ T6856] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 464.083746][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 464.189750][ T6856] pci 0000:00:01.0: Adding to iommu group 1 [ 464.234475][ T57] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 464.235414][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.235447][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.237515][ T57] usb 8-1: config 0 descriptor?? [ 464.293540][ T6856] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 464.293554][ T6856] pci 0000:00:01.0: vgaarb: bridge control possible [ 464.293562][ T6856] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 464.346956][ T6856] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 464.350092][ T6856] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 464.425256][ T6856] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 464.450442][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 464.450526][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 464.452647][ T57] usb 8-1: USB disconnect, device number 6 [ 464.491220][ T6856] [drm] Found bochs VGA, ID 0xb0c5. [ 464.491236][ T6856] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 464.534674][ T6856] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 464.883697][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 465.063227][ T57] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 465.069639][ T57] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 465.069677][ T57] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 465.069697][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.071887][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.071906][ T57] usb 8-1: Product: syz [ 465.071918][ T57] usb 8-1: Manufacturer: syz [ 465.071930][ T57] usb 8-1: SerialNumber: syz [ 465.789356][ T5991] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 465.789941][ T6887] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 466.013770][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 466.273658][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 466.275013][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 466.277217][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.277229][ T30] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 466.277260][ T30] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.309940][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.309956][ T30] usb 6-1: Product: syz [ 466.309963][ T30] usb 6-1: Manufacturer: syz [ 466.309970][ T30] usb 6-1: SerialNumber: syz [ 466.939841][ T5886] usb 8-1: USB disconnect, device number 7 [ 467.280757][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.281125][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.336779][ T30] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 467.336795][ T30] usb 6-1: clock source 0 is not valid, cannot use [ 467.337254][ T30] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 467.341419][ T30] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 467.412448][ T30] usb 6-1: USB disconnect, device number 7 [ 467.535668][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.301252][ T1345] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 469.502884][ T1345] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 469.510318][ T1345] usb 7-1: config 0 has no interfaces? [ 469.524837][ T1345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.524861][ T1345] usb 7-1: Product: syz [ 469.524918][ T1345] usb 7-1: Manufacturer: syz [ 469.524964][ T1345] usb 7-1: SerialNumber: syz [ 469.570644][ T1345] usb 7-1: config 0 descriptor?? [ 469.669437][ T6918] ======================================================= [ 469.669437][ T6918] WARNING: The mand mount option has been deprecated and [ 469.669437][ T6918] and is ignored by this kernel. Remove the mand [ 469.669437][ T6918] option from the mount to silence this warning. [ 469.669437][ T6918] ======================================================= [ 469.699304][ T6918] overlay: filesystem on ./bus not supported as upperdir [ 470.236305][ T6932] [U]  [ 470.453869][ T1345] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 470.615372][ T1345] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 470.616876][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.616913][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.621273][ T1345] usb 5-1: config 0 descriptor?? [ 470.753781][ T5885] usb 7-1: USB disconnect, device number 4 [ 470.837851][ T1345] usbhid 5-1:0.0: can't add hid device: -71 [ 470.837899][ T1345] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 470.842408][ T6938] bridge0: port 3(team0) entered blocking state [ 470.842592][ T6938] bridge0: port 3(team0) entered disabled state [ 470.842652][ T1345] usb 5-1: USB disconnect, device number 5 [ 470.842842][ T6938] team0: entered allmulticast mode [ 470.842860][ T6938] team_slave_0: entered allmulticast mode [ 470.842890][ T6938] team_slave_1: entered allmulticast mode [ 470.868518][ T6938] team0: entered promiscuous mode [ 470.868537][ T6938] team_slave_0: entered promiscuous mode [ 470.868714][ T6938] team_slave_1: entered promiscuous mode [ 470.871216][ T6938] bridge0: port 3(team0) entered blocking state [ 470.871305][ T6938] bridge0: port 3(team0) entered forwarding state [ 470.934555][ T6940] netlink: 'syz.1.251': attribute type 4 has an invalid length. [ 470.945158][ T6940] netlink: 'syz.1.251': attribute type 4 has an invalid length. [ 471.111274][ T6947] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 471.519101][ T6947] team0 (unregistering): Port device team_slave_0 removed [ 471.523156][ T6947] team0 (unregistering): Port device team_slave_1 removed [ 471.803166][ T6947] netlink: 140 bytes leftover after parsing attributes in process `syz.3.250'. [ 471.803188][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.250'. [ 472.243780][ T1345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 472.494421][ T1345] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 472.499470][ T1345] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 472.499494][ T1345] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 472.499505][ T1345] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.504055][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.504093][ T1345] usb 5-1: Product: syz [ 472.504110][ T1345] usb 5-1: Manufacturer: syz [ 472.504125][ T1345] usb 5-1: SerialNumber: syz [ 473.247804][ T6975] netlink: 'syz.1.258': attribute type 13 has an invalid length. [ 473.730169][ T6979] FAULT_INJECTION: forcing a failure. [ 473.730169][ T6979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.730190][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.2.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.730215][ T6979] Tainted: [L]=SOFTLOCKUP [ 473.730220][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.730227][ T6979] Call Trace: [ 473.730231][ T6979] [ 473.730235][ T6979] dump_stack_lvl+0x100/0x190 [ 473.730303][ T6979] should_fail_ex.cold+0x5/0xa [ 473.730318][ T6979] _copy_to_user+0x32/0xd0 [ 473.730352][ T6979] simple_read_from_buffer+0xcb/0x170 [ 473.730366][ T6979] proc_fail_nth_read+0x1af/0x230 [ 473.730378][ T6979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.730390][ T6979] ? rw_verify_area+0xce/0x6d0 [ 473.730406][ T6979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.730417][ T6979] vfs_read+0x1e4/0xb40 [ 473.730428][ T6979] ? lock_acquire+0x1d1/0x380 [ 473.730443][ T6979] ? __fget_files+0x34/0x3d0 [ 473.730454][ T6979] ? __pfx_vfs_read+0x10/0x10 [ 473.730464][ T6979] ? find_held_lock+0x2b/0x80 [ 473.730476][ T6979] ? __fget_files+0x215/0x3d0 [ 473.730489][ T6979] ? __fget_files+0x21f/0x3d0 [ 473.730505][ T6979] ksys_read+0x12a/0x250 [ 473.730516][ T6979] ? __pfx_ksys_read+0x10/0x10 [ 473.730530][ T6979] do_int80_emulation+0x166/0x650 [ 473.730567][ T6979] asm_int80_emulation+0x1a/0x20 [ 473.730578][ T6979] RIP: 0023:0xf71275ab [ 473.730587][ T6979] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 473.730597][ T6979] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 473.730607][ T6979] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 473.730614][ T6979] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 473.730620][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.730627][ T6979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 473.730634][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.730647][ T6979] [ 473.862053][ T1345] usb 5-1: USB disconnect, device number 6 [ 474.243779][ T5771] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 474.305671][ T6975] netdevsim netdevsim1 netdevsim1: refused to change device tx_queue_len [ 474.305949][ T6975] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 474.331446][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.332984][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.341896][ T6975] syz.1.258 (6975) used greatest stack depth: 19352 bytes left [ 474.413877][ T5771] usb 7-1: Using ep0 maxpacket: 8 [ 474.417176][ T5771] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 474.420461][ T5771] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 474.420482][ T5771] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 474.420497][ T5771] usb 7-1: config 3 has no interface number 0 [ 474.420526][ T5771] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.420570][ T5771] usb 7-1: config 3 interface 45 has no altsetting 0 [ 474.422451][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.422469][ T5771] usb 7-1: Product: syz [ 474.422480][ T5771] usb 7-1: Manufacturer: syz [ 474.422493][ T5771] usb 7-1: SerialNumber: syz [ 474.422596][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.427733][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.685203][ T5850] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.688212][ T5771] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.691195][ T5850] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.695226][ T5850] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.696663][ T5850] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.771296][ T5771] usb 7-1: USB disconnect, device number 5 [ 474.843743][ T5769] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 474.908853][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.994180][ T5769] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 474.997100][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.997119][ T5769] usb 6-1: Product: syz [ 474.997132][ T5769] usb 6-1: Manufacturer: syz [ 474.997142][ T5769] usb 6-1: SerialNumber: syz [ 475.330921][ T6998] netlink: zone id is out of range [ 475.330978][ T6998] netlink: zone id is out of range [ 475.330983][ T6998] netlink: zone id is out of range [ 475.330986][ T6998] netlink: zone id is out of range [ 475.330990][ T6998] netlink: zone id is out of range [ 475.330993][ T6998] netlink: zone id is out of range [ 475.331213][ T6998] netlink: zone id is out of range [ 475.331219][ T6998] netlink: zone id is out of range [ 475.331222][ T6998] netlink: zone id is out of range [ 475.498769][ T5769] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 475.498784][ T5769] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 475.504452][ T5769] usb 6-1: USB disconnect, device number 8 [ 475.512230][ T7005] netlink: 'syz.0.268': attribute type 7 has an invalid length. [ 475.753683][ T62] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 476.084148][ T62] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 476.107672][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 476.107691][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.107702][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 476.107714][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 476.157036][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.157084][ T62] usb 5-1: Product: syz [ 476.157093][ T62] usb 5-1: Manufacturer: syz [ 476.157100][ T62] usb 5-1: SerialNumber: syz [ 476.473099][ T62] usb 5-1: config 0 descriptor?? [ 476.649225][ T6705] IPVS: starting estimator thread 0... [ 476.706958][ T7030] ubi0: attaching mtd0 [ 476.710972][ T7030] ubi0: scanning is finished [ 476.710988][ T7030] ubi0: empty MTD device detected [ 476.743876][ T7029] IPVS: using max 23 ests per chain, 55200 per kthread [ 476.760526][ T62] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 476.762039][ T62] usb 5-1: USB disconnect, device number 7 [ 476.876953][ T7030] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 476.876976][ T7030] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 476.876994][ T7030] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 476.877009][ T7030] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 476.877021][ T7030] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 476.877036][ T7030] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 476.877051][ T7030] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3745315350 [ 476.877064][ T7030] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 476.877177][ T7036] ubi0: background thread "ubi_bgt0d" started, PID 7036 [ 477.277021][ T7041] FAULT_INJECTION: forcing a failure. [ 477.277021][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.277044][ T7041] CPU: 3 UID: 60928 PID: 7041 Comm: syz.1.275 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.277059][ T7041] Tainted: [L]=SOFTLOCKUP [ 477.277063][ T7041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.277069][ T7041] Call Trace: [ 477.277073][ T7041] [ 477.277078][ T7041] dump_stack_lvl+0x100/0x190 [ 477.277096][ T7041] should_fail_ex.cold+0x5/0xa [ 477.277111][ T7041] _copy_from_user+0x2e/0xd0 [ 477.277127][ T7041] __sys_bpf+0x2f5/0x4a30 [ 477.277142][ T7041] ? __pfx___sys_bpf+0x10/0x10 [ 477.277154][ T7041] ? find_held_lock+0x2b/0x80 [ 477.277165][ T7041] ? futex_wake+0x4ea/0x5e0 [ 477.277196][ T7041] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 477.277209][ T7041] ? xfd_validate_state+0x129/0x190 [ 477.277228][ T7041] ? __ia32_sys_bpf+0xcc/0x170 [ 477.277239][ T7041] __ia32_sys_bpf+0xcc/0x170 [ 477.277250][ T7041] ? __do_fast_syscall_32+0xb3/0x8b0 [ 477.277268][ T7041] __do_fast_syscall_32+0x13a/0x8b0 [ 477.277286][ T7041] do_fast_syscall_32+0x32/0x70 [ 477.277302][ T7041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.277315][ T7041] RIP: 0023:0xf6fdefec [ 477.277328][ T7041] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 477.277333][ T7041] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 477.277344][ T7041] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 477.277352][ T7041] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.277358][ T7041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.277365][ T7041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.277371][ T7041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.277384][ T7041] [ 477.920901][ T7053] FAULT_INJECTION: forcing a failure. [ 477.920901][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 477.920933][ T7053] CPU: 2 UID: 0 PID: 7053 Comm: syz.1.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.920957][ T7053] Tainted: [L]=SOFTLOCKUP [ 477.920962][ T7053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.920972][ T7053] Call Trace: [ 477.920978][ T7053] [ 477.920985][ T7053] dump_stack_lvl+0x100/0x190 [ 477.921013][ T7053] should_fail_ex.cold+0x5/0xa [ 477.921036][ T7053] should_failslab+0xc2/0x120 [ 477.921059][ T7053] __kmalloc_cache_noprof+0x91/0x6d0 [ 477.921085][ T7053] ? gadget_bind_driver+0x100/0xbf0 [ 477.921149][ T7053] ? dummy_alloc_request+0xa9/0x1b0 [ 477.921173][ T7053] dummy_alloc_request+0xa9/0x1b0 [ 477.921194][ T7053] usb_ep_alloc_request+0x6e/0x2e0 [ 477.921214][ T7053] gadgetfs_bind+0x154/0x890 [ 477.921234][ T7053] ? kernfs_create_link+0x1bd/0x240 [ 477.921256][ T7053] gadget_bind_driver+0x28c/0xbf0 [ 477.921277][ T7053] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 477.921297][ T7053] ? __pfx_gadget_bind_driver+0x10/0x10 [ 477.921320][ T7053] really_probe+0x241/0xa60 [ 477.921346][ T7053] __driver_probe_device+0x210/0x460 [ 477.921368][ T7053] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 477.921396][ T7053] driver_probe_device+0x4a/0x140 [ 477.921419][ T7053] __driver_attach+0x21f/0x5b0 [ 477.921442][ T7053] ? __pfx___driver_attach+0x10/0x10 [ 477.921465][ T7053] bus_for_each_dev+0x13e/0x1d0 [ 477.921485][ T7053] ? __pfx_bus_for_each_dev+0x10/0x10 [ 477.921502][ T7053] ? bus_add_driver+0x2b5/0x5b0 [ 477.921529][ T7053] bus_add_driver+0x305/0x5b0 [ 477.921558][ T7053] driver_register+0x1e2/0x360 [ 477.921586][ T7053] usb_gadget_register_driver_owner+0x132/0x210 [ 477.921625][ T7053] dev_config+0xdce/0x1610 [ 477.921646][ T7053] ? ksys_write+0xe0/0x250 [ 477.921663][ T7053] ? __pfx_dev_config+0x10/0x10 [ 477.921689][ T7053] vfs_write+0x2aa/0x1050 [ 477.921707][ T7053] ? __pfx_dev_config+0x10/0x10 [ 477.921725][ T7053] ? lock_acquire+0x1d1/0x380 [ 477.921749][ T7053] ? __fget_files+0x34/0x3d0 [ 477.921768][ T7053] ? __pfx_vfs_write+0x10/0x10 [ 477.921784][ T7053] ? find_held_lock+0x2b/0x80 [ 477.921802][ T7053] ? __fget_files+0x215/0x3d0 [ 477.921826][ T7053] ? __fget_files+0x21f/0x3d0 [ 477.921851][ T7053] ksys_write+0x12a/0x250 [ 477.921869][ T7053] ? __pfx_ksys_write+0x10/0x10 [ 477.921885][ T7053] ? ksys_write+0x1ac/0x250 [ 477.921903][ T7053] ? __pfx_ksys_write+0x10/0x10 [ 477.921927][ T7053] __do_fast_syscall_32+0x13a/0x8b0 [ 477.921954][ T7053] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.921982][ T7053] do_fast_syscall_32+0x32/0x70 [ 477.922009][ T7053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.922032][ T7053] RIP: 0023:0xf6fdefec [ 477.922051][ T7053] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 477.922059][ T7053] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 477.922076][ T7053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 477.922087][ T7053] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 477.922097][ T7053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.922107][ T7053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.922117][ T7053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.922142][ T7053] [ 477.923299][ T7053] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 477.923318][ T7053] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 478.103297][ T7053] gadgetfs: bound to dummy_udc driver [ 478.957378][ T7075] FAULT_INJECTION: forcing a failure. [ 478.957378][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.957400][ T7075] CPU: 1 UID: 60928 PID: 7075 Comm: syz.3.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.957415][ T7075] Tainted: [L]=SOFTLOCKUP [ 478.957420][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.957426][ T7075] Call Trace: [ 478.957430][ T7075] [ 478.957435][ T7075] dump_stack_lvl+0x100/0x190 [ 478.957453][ T7075] should_fail_ex.cold+0x5/0xa [ 478.957468][ T7075] _copy_from_user+0x2e/0xd0 [ 478.957484][ T7075] __sys_bpf+0x2f5/0x4a30 [ 478.957499][ T7075] ? __pfx___sys_bpf+0x10/0x10 [ 478.957509][ T7075] ? __pfx_futex_hash+0x10/0x10 [ 478.957524][ T7075] ? __destroy_inode+0x2cd/0x710 [ 478.957540][ T7075] ? __pfx_sock_free_inode+0x10/0x10 [ 478.957578][ T7075] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 478.957591][ T7075] ? xfd_validate_state+0x129/0x190 [ 478.957610][ T7075] ? __ia32_sys_bpf+0xcc/0x170 [ 478.957621][ T7075] __ia32_sys_bpf+0xcc/0x170 [ 478.957632][ T7075] ? __do_fast_syscall_32+0xb3/0x8b0 [ 478.957650][ T7075] __do_fast_syscall_32+0x13a/0x8b0 [ 478.957668][ T7075] do_fast_syscall_32+0x32/0x70 [ 478.957685][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.957698][ T7075] RIP: 0023:0xf7f67fec [ 478.957711][ T7075] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 478.957716][ T7075] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 478.957728][ T7075] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 478.957735][ T7075] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.957741][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.957747][ T7075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 478.957753][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.957765][ T7075] [ 479.513721][ T7082] FAULT_INJECTION: forcing a failure. [ 479.513721][ T7082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.513754][ T7082] CPU: 3 UID: 60928 PID: 7082 Comm: syz.3.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.513780][ T7082] Tainted: [L]=SOFTLOCKUP [ 479.513787][ T7082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 479.513798][ T7082] Call Trace: [ 479.513805][ T7082] [ 479.513812][ T7082] dump_stack_lvl+0x100/0x190 [ 479.513841][ T7082] should_fail_ex.cold+0x5/0xa [ 479.513863][ T7082] _copy_from_user+0x2e/0xd0 [ 479.513888][ T7082] __sys_bpf+0x2f5/0x4a30 [ 479.513916][ T7082] ? __pfx___sys_bpf+0x10/0x10 [ 479.513934][ T7082] ? find_held_lock+0x2b/0x80 [ 479.513952][ T7082] ? futex_wake+0x4ea/0x5e0 [ 479.514026][ T7082] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 479.514051][ T7082] ? xfd_validate_state+0x129/0x190 [ 479.514078][ T7082] ? __ia32_sys_bpf+0xcc/0x170 [ 479.514096][ T7082] __ia32_sys_bpf+0xcc/0x170 [ 479.514116][ T7082] ? __do_fast_syscall_32+0xb3/0x8b0 [ 479.514146][ T7082] __do_fast_syscall_32+0x13a/0x8b0 [ 479.514177][ T7082] do_fast_syscall_32+0x32/0x70 [ 479.514200][ T7082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.514223][ T7082] RIP: 0023:0xf7f67fec [ 479.514243][ T7082] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 479.514250][ T7082] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 479.514268][ T7082] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 0000000080000040 [ 479.514280][ T7082] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.514290][ T7082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.514299][ T7082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 479.514308][ T7082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.514331][ T7082] [ 479.878180][ T7088] fuse: Unknown parameter 'rotmode' [ 480.113761][ T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 480.274243][ T62] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 480.278225][ T62] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.279027][ T62] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.280604][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.280616][ T62] usb 7-1: Product: syz [ 480.280623][ T62] usb 7-1: Manufacturer: syz [ 480.280630][ T62] usb 7-1: SerialNumber: syz [ 480.284873][ T7084] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 480.284891][ T7084] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 480.300868][ T7084] net_ratelimit: 901 callbacks suppressed [ 480.300884][ T7084] netlink: Conntrack attr has 8 unknown bytes [ 480.300903][ T7084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.317410][ T62] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 480.320367][ T62] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 480.331348][ T62] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 480.643952][ T5527] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 481.195530][ T5527] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 481.473543][ T5527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.473560][ T5527] usb 5-1: Product: syz [ 481.473567][ T5527] usb 5-1: Manufacturer: syz [ 481.473574][ T5527] usb 5-1: SerialNumber: syz [ 481.704285][ T7096] FAULT_INJECTION: forcing a failure. [ 481.704285][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 481.704317][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.704340][ T7096] Tainted: [L]=SOFTLOCKUP [ 481.704347][ T7096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.704357][ T7096] Call Trace: [ 481.704363][ T7096] [ 481.704370][ T7096] dump_stack_lvl+0x100/0x190 [ 481.704396][ T7096] should_fail_ex.cold+0x5/0xa [ 481.704420][ T7096] should_failslab+0xc2/0x120 [ 481.704444][ T7096] __kmalloc_noprof+0xfc/0x840 [ 481.704465][ T7096] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 481.704496][ T7096] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 481.704612][ T7096] genl_family_rcv_msg_doit+0xc7/0x300 [ 481.704637][ T7096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 481.704659][ T7096] ? genl_get_cmd+0x3e7/0x760 [ 481.704687][ T7096] ? __dev_queue_xmit+0xa33/0x4970 [ 481.704706][ T7096] ? __radix_tree_lookup+0x217/0x2b0 [ 481.704739][ T7096] genl_rcv_msg+0x560/0x800 [ 481.704769][ T7096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.704797][ T7096] ? __lock_acquire+0x5c0/0x1f40 [ 481.704821][ T7096] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 481.704849][ T7096] netlink_rcv_skb+0x159/0x420 [ 481.704869][ T7096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.704893][ T7096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.704924][ T7096] ? netlink_deliver_tap+0x1ae/0xcc0 [ 481.704947][ T7096] genl_rcv+0x28/0x40 [ 481.704967][ T7096] netlink_unicast+0x585/0x850 [ 481.704992][ T7096] ? __pfx_netlink_unicast+0x10/0x10 [ 481.705011][ T7096] ? __build_skb_around+0x278/0x390 [ 481.705032][ T7096] ? is_vmalloc_addr+0x86/0xa0 [ 481.705071][ T7096] netlink_sendmsg+0x8b0/0xda0 [ 481.705097][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.705120][ T7096] ? apparmor_socket_sendmsg+0x165/0x280 [ 481.705148][ T7096] ____sys_sendmsg+0xa4d/0xbe0 [ 481.705164][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.705186][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.705214][ T7096] ___sys_sendmsg+0x190/0x1e0 [ 481.705233][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.705264][ T7096] ? find_held_lock+0x2b/0x80 [ 481.705298][ T7096] __sys_sendmsg+0x160/0x210 [ 481.705319][ T7096] ? __pfx___sys_sendmsg+0x10/0x10 [ 481.705343][ T7096] ? __pfx_ksys_write+0x10/0x10 [ 481.705366][ T7096] __do_fast_syscall_32+0x13a/0x8b0 [ 481.705392][ T7096] ? lockdep_hardirqs_on+0x7d/0x110 [ 481.705436][ T7096] do_fast_syscall_32+0x32/0x70 [ 481.705465][ T7096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.705487][ T7096] RIP: 0023:0xf7f87fec [ 481.705508][ T7096] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 481.705516][ T7096] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 481.705532][ T7096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 481.705543][ T7096] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.705553][ T7096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.705563][ T7096] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.705573][ T7096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.705597][ T7096] [ 481.708261][ T5527] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 481.708272][ T5527] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 481.712150][ T5527] usb 5-1: USB disconnect, device number 8 [ 481.816276][ T43] audit: type=1326 audit(1789231157.493:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816405][ T43] audit: type=1326 audit(1789231157.493:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816479][ T43] audit: type=1326 audit(1789231157.493:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816569][ T43] audit: type=1326 audit(1789231157.493:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816655][ T43] audit: type=1326 audit(1789231157.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816710][ T43] audit: type=1326 audit(1789231157.493:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816731][ T43] audit: type=1326 audit(1789231157.493:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816861][ T43] audit: type=1326 audit(1789231157.503:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816882][ T43] audit: type=1326 audit(1789231157.503:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 481.816961][ T43] audit: type=1326 audit(1789231157.503:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 482.621690][ T7123] netlink: 128 bytes leftover after parsing attributes in process `syz.3.302'. [ 482.942862][ T7129] bond1: entered promiscuous mode [ 483.616400][ T7161] netlink: 48 bytes leftover after parsing attributes in process `syz.3.312'. [ 483.705657][ T7088] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 483.706133][ T7088] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 483.706189][ T7088] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 483.735049][ T7086] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 484.297446][ T7174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 484.835491][ T7086] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 484.912815][ T5527] usb 7-1: USB disconnect, device number 6 [ 485.169407][ T5527] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 485.246584][ T5527] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 485.273898][ T5527] ti_usb_3410_5052 7-1:2.0: device disconnected [ 485.779146][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 485.812747][ T7205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.013690][ T5527] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 486.164847][ T5527] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 486.165829][ T5527] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 486.166727][ T5527] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 486.168715][ T5527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.168774][ T5527] usb 6-1: Product: syz [ 486.168782][ T5527] usb 6-1: Manufacturer: syz [ 486.168790][ T5527] usb 6-1: SerialNumber: syz [ 486.199426][ T5527] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 486.218958][ T5527] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 486.238820][ T5527] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 486.383977][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.322'. [ 487.315983][ T7227] 9p: Bad value for 'wfdno' [ 487.949575][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 487.949587][ T43] audit: type=1326 audit(1789231163.633:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.327" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87fec code=0x0 [ 488.333971][ T7204] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 488.337972][ T5527] usb 6-1: USB disconnect, device number 9 [ 488.349665][ T5527] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 488.352369][ T5527] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 488.352796][ T5527] ti_usb_3410_5052 6-1:2.0: device disconnected [ 488.363204][ T7244] netlink: 'syz.2.328': attribute type 4 has an invalid length. [ 488.367858][ T7244] netlink: 'syz.2.328': attribute type 4 has an invalid length. [ 488.810996][ T7247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.998144][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 489.254547][ T7256] ALSA: mixer_oss: invalid OSS volume '' [ 490.535648][ T7278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.619035][ T7280] FAULT_INJECTION: forcing a failure. [ 490.619035][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 490.619067][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.3.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.619091][ T7280] Tainted: [L]=SOFTLOCKUP [ 490.619097][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.619108][ T7280] Call Trace: [ 490.619114][ T7280] [ 490.619120][ T7280] dump_stack_lvl+0x100/0x190 [ 490.619151][ T7280] should_fail_ex.cold+0x5/0xa [ 490.619174][ T7280] should_failslab+0xc2/0x120 [ 490.619198][ T7280] kmem_cache_alloc_noprof+0x92/0x6a0 [ 490.619218][ T7280] ? __pfx_acct_collect+0x10/0x10 [ 490.619239][ T7280] ? taskstats_exit+0x6d3/0xca0 [ 490.619267][ T7280] taskstats_exit+0x6d3/0xca0 [ 490.619289][ T7280] ? __pfx_acct_update_integrals+0x10/0x10 [ 490.619314][ T7280] ? __pfx_taskstats_exit+0x10/0x10 [ 490.619340][ T7280] ? rcu_read_lock_any_held+0x6a/0x90 [ 490.619364][ T7280] do_exit+0x65c/0x2ae0 [ 490.619388][ T7280] ? __pfx_do_exit+0x10/0x10 [ 490.619406][ T7280] ? do_raw_spin_lock+0x128/0x260 [ 490.619433][ T7280] ? find_held_lock+0x2b/0x80 [ 490.619451][ T7280] ? get_signal+0x7e0/0x21e0 [ 490.619479][ T7280] do_group_exit+0xd5/0x2a0 [ 490.619501][ T7280] get_signal+0x1ec7/0x21e0 [ 490.619531][ T7280] ? vfs_write+0x914/0x1050 [ 490.619551][ T7280] ? __pfx_get_signal+0x10/0x10 [ 490.619578][ T7280] ? do_futex+0x190/0x440 [ 490.619598][ T7280] arch_do_signal_or_restart+0x91/0x7a0 [ 490.619623][ T7280] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 490.619653][ T7280] ? xfd_validate_state+0x129/0x190 [ 490.619684][ T7280] exit_to_user_mode_loop+0x139/0x700 [ 490.619710][ T7280] ? rcu_is_watching+0x13/0xc0 [ 490.619729][ T7280] __do_fast_syscall_32+0x59f/0x8b0 [ 490.619756][ T7280] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.619783][ T7280] do_fast_syscall_32+0x32/0x70 [ 490.619809][ T7280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.619831][ T7280] RIP: 0023:0xf7f67fec [ 490.619850][ T7280] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 490.619858][ T7280] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 490.619875][ T7280] RAX: fffffffffffffe00 RBX: 00000000f7424f88 RCX: 0000000000000080 [ 490.619886][ T7280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 490.619896][ T7280] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 490.619906][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.619916][ T7280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.619939][ T7280] [ 490.763220][ T7286] netlink: 'syz.3.342': attribute type 24 has an invalid length. [ 490.765229][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 491.198137][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.198251][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.198279][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.214121][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.315130][ T7305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.362700][ T7307] netlink: 'syz.1.348': attribute type 11 has an invalid length. [ 491.397463][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.348'. [ 491.397918][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 491.397955][ T7307] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 492.066112][ T7315] x_tables: duplicate underflow at hook 2 [ 492.393674][ T5527] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 492.604807][ T5527] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.625779][ T5527] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.625796][ T5527] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 492.625805][ T5527] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.625826][ T5527] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.625839][ T5527] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.643169][ T7326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.701178][ T5527] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.701196][ T5527] usb 5-1: Product: syz [ 492.701203][ T5527] usb 5-1: Manufacturer: syz [ 493.091928][ T5527] cdc_wdm 5-1:1.0: skipping garbage [ 493.091940][ T5527] cdc_wdm 5-1:1.0: skipping garbage [ 493.094366][ T5527] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 493.094377][ T5527] cdc_wdm 5-1:1.0: Unknown control protocol [ 493.670088][ T7347] serio: Serial port ttynull [ 493.725067][ T57] usb 5-1: USB disconnect, device number 9 [ 493.911555][ T7355] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 494.200231][ T7363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.415265][ T7369] CacheFiles: Empty tag specified [ 494.415436][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.367'. [ 495.376875][ T7386] ================================================================== [ 495.376889][ T7386] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 495.376918][ T7386] Read of size 1 at addr ffff88804c8f5018 by task syz.1.372/7386 [ 495.376933][ T7386] [ 495.376945][ T7386] CPU: 3 UID: 0 PID: 7386 Comm: syz.1.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.376972][ T7386] Tainted: [L]=SOFTLOCKUP [ 495.376980][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.376992][ T7386] Call Trace: [ 495.376999][ T7386] [ 495.377006][ T7386] dump_stack_lvl+0x100/0x190 [ 495.377031][ T7386] print_report+0x13d/0x4b0 [ 495.377059][ T7386] ? __virt_addr_valid+0x239/0x430 [ 495.377082][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.377101][ T7386] kasan_report+0xdf/0x1c0 [ 495.377123][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.377144][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.377164][ T7386] __kasan_check_byte+0x36/0x50 [ 495.377193][ T7386] lock_acquire+0x132/0x380 [ 495.377216][ T7386] ? __pfx_apparmor_file_open+0x10/0x10 [ 495.377242][ T7386] ? _raw_spin_lock_irq+0x45/0x50 [ 495.377265][ T7386] _raw_spin_lock_irq+0x36/0x50 [ 495.377285][ T7386] ? gadget_dev_open+0x44/0x1b0 [ 495.377302][ T7386] gadget_dev_open+0x44/0x1b0 [ 495.377317][ T7386] do_dentry_open+0x6ab/0x14d0 [ 495.377336][ T7386] ? __pfx_gadget_dev_open+0x10/0x10 [ 495.377355][ T7386] vfs_open+0x82/0x3f0 [ 495.377377][ T7386] path_openat+0x19fa/0x2440 [ 495.377398][ T7386] ? __pfx_path_openat+0x10/0x10 [ 495.377420][ T7386] do_file_open+0x20e/0x430 [ 495.377439][ T7386] ? __pfx_do_file_open+0x10/0x10 [ 495.377465][ T7386] ? _raw_spin_unlock+0x28/0x50 [ 495.377485][ T7386] ? alloc_fd+0x471/0x7a0 [ 495.377505][ T7386] do_sys_openat2+0x10f/0x1e0 [ 495.377527][ T7386] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.377552][ T7386] __ia32_compat_sys_openat+0x12d/0x210 [ 495.377576][ T7386] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 495.377604][ T7386] __do_fast_syscall_32+0x13a/0x8b0 [ 495.377652][ T7386] do_fast_syscall_32+0x32/0x70 [ 495.377679][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.377699][ T7386] RIP: 0023:0xf6fdefec [ 495.377717][ T7386] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 495.377725][ T7386] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 495.377742][ T7386] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 495.377754][ T7386] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.377766][ T7386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.377776][ T7386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.377788][ T7386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.377805][ T7386] [ 495.377811][ T7386] [ 495.377815][ T7386] Allocated by task 5803: [ 495.377823][ T7386] kasan_save_stack+0x30/0x50 [ 495.377841][ T7386] kasan_save_track+0x14/0x30 [ 495.377858][ T7386] __kasan_kmalloc+0xaa/0xb0 [ 495.377875][ T7386] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 495.377898][ T7386] gadgetfs_fill_super+0x1da/0x430 [ 495.377912][ T7386] get_tree_single+0xe2/0x190 [ 495.377926][ T7386] vfs_get_tree+0x92/0x320 [ 495.377946][ T7386] path_mount+0x7d0/0x24c0 [ 495.377965][ T7386] __ia32_sys_mount+0x292/0x310 [ 495.377983][ T7386] __do_fast_syscall_32+0x13a/0x8b0 [ 495.378006][ T7386] do_fast_syscall_32+0x32/0x70 [ 495.378028][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.378046][ T7386] [ 495.378049][ T7386] Freed by task 7052: [ 495.378056][ T7386] kasan_save_stack+0x30/0x50 [ 495.378073][ T7386] kasan_save_track+0x14/0x30 [ 495.378089][ T7386] kasan_save_free_info+0x3b/0x70 [ 495.378111][ T7386] __kasan_slab_free+0x5f/0x80 [ 495.378128][ T7386] kfree+0x22b/0x6d0 [ 495.378147][ T7386] put_dev+0xb4/0xd0 [ 495.378159][ T7386] dev_release+0x116/0x1b0 [ 495.378172][ T7386] __fput+0x3ff/0xb50 [ 495.378199][ T7386] task_work_run+0x150/0x240 [ 495.378216][ T7386] exit_to_user_mode_loop+0x1d8/0x700 [ 495.378237][ T7386] __do_fast_syscall_32+0x59f/0x8b0 [ 495.378260][ T7386] do_fast_syscall_32+0x32/0x70 [ 495.378282][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.378300][ T7386] [ 495.378304][ T7386] The buggy address belongs to the object at ffff88804c8f5000 [ 495.378304][ T7386] which belongs to the cache kmalloc-1k of size 1024 [ 495.378316][ T7386] The buggy address is located 24 bytes inside of [ 495.378316][ T7386] freed 1024-byte region [ffff88804c8f5000, ffff88804c8f5400) [ 495.378332][ T7386] [ 495.378336][ T7386] The buggy address belongs to the physical page: [ 495.378343][ T7386] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c8f5000 pfn:0x4c8f0 [ 495.378358][ T7386] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 495.378370][ T7386] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 495.378387][ T7386] page_type: f5(slab) [ 495.378401][ T7386] raw: 04fff00000000240 ffff88801c042dc0 ffffea00013c3010 ffffea0001331010 [ 495.378415][ T7386] raw: ffff88804c8f5000 0000000000100003 00000000f5000000 0000000000000000 [ 495.378431][ T7386] head: 04fff00000000240 ffff88801c042dc0 ffffea00013c3010 ffffea0001331010 [ 495.378447][ T7386] head: ffff88804c8f5000 0000000000100003 00000000f5000000 0000000000000000 [ 495.378463][ T7386] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 495.378477][ T7386] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 495.378486][ T7386] page dumped because: kasan: bad access detected [ 495.378494][ T7386] page_owner tracks the page as allocated [ 495.378499][ T7386] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5803, tgid 5803 (syz-executor), ts 378681828342 [ 495.378524][ T7386] post_alloc_hook+0xfd/0x120 [ 495.378545][ T7386] get_page_from_freelist+0x110d/0x35d0 [ 495.378559][ T7386] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 495.378573][ T7386] new_slab+0xa9/0x6e0 [ 495.378585][ T7386] refill_objects+0xe3/0x410 [ 495.378598][ T7386] __pcs_replace_empty_main+0x35e/0x650 [ 495.378621][ T7386] __kmalloc_noprof+0x67c/0x840 [ 495.378636][ T7386] tomoyo_init_log+0x1224/0x20c0 [ 495.378650][ T7386] tomoyo_supervisor+0x506/0x1340 [ 495.378667][ T7386] tomoyo_path2_perm+0x534/0x700 [ 495.378686][ T7386] security_sb_pivotroot+0xc4/0x210 [ 495.378704][ T7386] path_pivot_root+0x14f/0x1320 [ 495.378724][ T7386] __ia32_sys_pivot_root+0x199/0x1c0 [ 495.378745][ T7386] __do_fast_syscall_32+0x13a/0x8b0 [ 495.378766][ T7386] do_fast_syscall_32+0x32/0x70 [ 495.378788][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.378806][ T7386] page last free pid 5796 tgid 5796 ts 377698476844 stack trace: [ 495.378817][ T7386] __free_frozen_pages+0x79f/0x10f0 [ 495.378837][ T7386] qlist_free_all+0x47/0xf0 [ 495.378851][ T7386] kasan_quarantine_reduce+0x1a0/0x1f0 [ 495.378867][ T7386] __kasan_slab_alloc+0x69/0x90 [ 495.378884][ T7386] __kmalloc_node_track_caller_noprof+0x2da/0x870 [ 495.378902][ T7386] kstrdup+0x51/0xe0 [ 495.378914][ T7386] kstrdup_const+0x63/0x80 [ 495.378925][ T7386] __kernfs_new_node+0x9b/0xa10 [ 495.378944][ T7386] kernfs_create_dir_ns+0xa6/0x2b0 [ 495.378962][ T7386] sysfs_create_dir_ns+0x13a/0x2b0 [ 495.378977][ T7386] kobject_add_internal+0x2c8/0x930 [ 495.378992][ T7386] kobject_init_and_add+0x121/0x180 [ 495.379009][ T7386] netdev_queue_update_kobjects+0x32d/0x6f0 [ 495.379025][ T7386] netdev_register_kobject+0x2e9/0x410 [ 495.379040][ T7386] register_netdevice+0x15b6/0x25a0 [ 495.379062][ T7386] geneve_newlink+0x9a2/0x1250 [ 495.379081][ T7386] [ 495.379085][ T7386] Memory state around the buggy address: [ 495.379093][ T7386] ffff88804c8f4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 495.379103][ T7386] ffff88804c8f4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 495.379114][ T7386] >ffff88804c8f5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.379122][ T7386] ^ [ 495.379130][ T7386] ffff88804c8f5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.379140][ T7386] ffff88804c8f5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.379148][ T7386] ================================================================== [ 495.379157][ T7386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 495.655456][ T7386] CPU: 3 UID: 0 PID: 7386 Comm: syz.1.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.659114][ T7386] Tainted: [L]=SOFTLOCKUP [ 495.660466][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.663551][ T7386] Call Trace: [ 495.664615][ T7386] [ 495.665552][ T7386] dump_stack_lvl+0x100/0x190 [ 495.667034][ T7386] vpanic+0x553/0x970 [ 495.668263][ T7386] ? __pfx_vpanic+0x10/0x10 [ 495.669717][ T7386] ? __pfx_vprintk_emit+0x10/0x10 [ 495.671295][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.672892][ T7386] panic+0xd1/0xe0 [ 495.674071][ T7386] ? __pfx_panic+0x10/0x10 [ 495.675469][ T7386] ? end_report.part.0+0x23/0x90 [ 495.677026][ T7386] ? rcu_is_watching+0x13/0xc0 [ 495.678527][ T7386] ? end_report.part.0+0x23/0x90 [ 495.680104][ T7386] check_panic_on_warn.cold+0x19/0x34 [ 495.681783][ T7386] end_report.part.0+0x3a/0x90 [ 495.683282][ T7386] kasan_report.cold+0xe/0x18 [ 495.684769][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.686339][ T7386] ? _raw_spin_lock_irq+0x36/0x50 [ 495.687905][ T7386] __kasan_check_byte+0x36/0x50 [ 495.689456][ T7386] lock_acquire+0x132/0x380 [ 495.690880][ T7386] ? __pfx_apparmor_file_open+0x10/0x10 [ 495.692611][ T7386] ? _raw_spin_lock_irq+0x45/0x50 [ 495.694178][ T7386] _raw_spin_lock_irq+0x36/0x50 [ 495.695700][ T7386] ? gadget_dev_open+0x44/0x1b0 [ 495.697222][ T7386] gadget_dev_open+0x44/0x1b0 [ 495.698685][ T7386] do_dentry_open+0x6ab/0x14d0 [ 495.700195][ T7386] ? __pfx_gadget_dev_open+0x10/0x10 [ 495.701845][ T7386] vfs_open+0x82/0x3f0 [ 495.703125][ T7386] path_openat+0x19fa/0x2440 [ 495.704589][ T7386] ? __pfx_path_openat+0x10/0x10 [ 495.706134][ T7386] do_file_open+0x20e/0x430 [ 495.707558][ T7386] ? __pfx_do_file_open+0x10/0x10 [ 495.709149][ T7386] ? _raw_spin_unlock+0x28/0x50 [ 495.710667][ T7386] ? alloc_fd+0x471/0x7a0 [ 495.712019][ T7386] do_sys_openat2+0x10f/0x1e0 [ 495.713503][ T7386] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.715116][ T7386] __ia32_compat_sys_openat+0x12d/0x210 [ 495.716840][ T7386] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 495.718784][ T7386] __do_fast_syscall_32+0x13a/0x8b0 [ 495.720574][ T7386] do_fast_syscall_32+0x32/0x70 [ 495.722091][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.724038][ T7386] RIP: 0023:0xf6fdefec [ 495.725327][ T7386] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 495.727367][ T7386] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 495.729960][ T7386] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 495.732399][ T7386] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.734843][ T7386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.737308][ T7386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.739756][ T7386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.742222][ T7386] [ 495.743987][ T7386] Kernel Offset: disabled [ 495.745345][ T7386] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:39:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880285312c8 RCX=0000000000000101 RDX=ffff888026270000 RSI=ffff8880285311a0 RDI=ffff8880285312c8 RBP=0000000000000007 RSP=ffffc90000007de0 R8 =00000000efdbaac0 R9 =0000000000000113 R10=0000000000000200 R11=0000000000000001 R12=dffffc0000000000 R13=ffff888026270000 R14=ffffffff81f07e0b R15=0000000000000006 RIP=ffffffff82996774 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f123ffc CR3=0000000053970000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000038886d RBX=ffff88801cf04b00 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed10039e0960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f5a190 CR3=000000005e8c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003ba175 RBX=ffff88801cf02580 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed10039e04b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056867bd R10=ffff88802b433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055740bab4000 CR3=00000000504ed000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90006c470e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000037 R14=000000000000000e R15=ffffc90006c473f8 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fdf000 CR3=000000004ca59000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000