last executing test programs: 6.715328225s ago: executing program 1 (id=1200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x10) 6.365506034s ago: executing program 1 (id=1196): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x8001007, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f43000) recvmmsg(r0, &(0x7f00000000c0), 0x400000000000046, 0x40000122, 0x0) 4.938133748s ago: executing program 1 (id=1198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.875435873s ago: executing program 1 (id=1210): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='saa7115 0x2', 0xb) 3.865072941s ago: executing program 0 (id=1211): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x48342, 0x1a1) r0 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x141002, 0x15b) write(r1, &(0x7f0000000640)='7', 0x1) setsockopt(r0, 0x0, 0x482, &(0x7f0000000680)="060000007f00000100500000000000006d6800"/33, 0x21) 3.678068995s ago: executing program 0 (id=1212): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bf9000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x490, 0x0, 0xfffffffb}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.176840771s ago: executing program 0 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000800)=0x1) ioctl$PPPIOCSMRU1(r2, 0x80047458, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0xfdef) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) 2.900553753s ago: executing program 0 (id=1217): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x1c) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) sendmsg$can_j1939(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x485daa01e83b44c}, 0x0) 2.298916139s ago: executing program 2 (id=1219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.98224449s ago: executing program 1 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300120100c00109040000010202010005240010010424f801052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyACM0\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.981942146s ago: executing program 0 (id=1223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000000000000b1d4000039459cc397f5685942d30f85c5e3c0974e4958"], 0x0, 0x9034, 0x0, 0x0, 0x41000}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440)=0x2102, 0x4) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x4044840) 1.717004202s ago: executing program 0 (id=1226): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.640405912s ago: executing program 3 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000800)=0x1) ioctl$PPPIOCSMRU1(r2, 0x80047458, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0xfdef) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) 1.501116878s ago: executing program 3 (id=1228): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000480)='27', 0x2) socket$inet(0x2, 0x2, 0x11) write(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x400008001fb, 0x101101) 1.171632975s ago: executing program 3 (id=1229): r0 = socket(0x1d, 0x2, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x840, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vxcan1\x00', 0x0}) bind(r0, &(0x7f0000000900)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000980)={&(0x7f00000009c0)={0x1d, r1}, 0x10, &(0x7f0000000a00)={&(0x7f0000000a40)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x1) read(r0, &(0x7f0000000a80)=""/100, 0x64) 952.559919ms ago: executing program 2 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) read$snapshot(r0, &(0x7f0000000900)=""/47, 0x2f) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) 905.114996ms ago: executing program 3 (id=1231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000004c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) 648.480006ms ago: executing program 2 (id=1232): mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000500), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x0, @local}, 0x10) 345.518841ms ago: executing program 2 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x16, 0x91, 0x0, @empty}}}}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={0x44, 0x1, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_PAYLOAD={0x21, 0xa, "e70f5ce057c0a06693a55d489802412dc04aa8665e0ff7d68b317ceca3"}]}, 0x44}}, 0x0) 299.160695ms ago: executing program 3 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaabbaaaaaaaaaaaaaa0806000108000604"], 0x0) 193.681219ms ago: executing program 2 (id=1235): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt\x00', 0x185) mount(0x0, &(0x7f0000000200)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x3000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/timer_list\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x370581ce9cfe164b, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 119.927187ms ago: executing program 3 (id=1236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='3', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000640), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 119.727051ms ago: executing program 1 (id=1237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./proc\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000001340)='27', 0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) kernel console output (not intermixed with test programs): scriptor?? [ 223.941624][ T25] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 224.162182][ T8472] bond0: entered promiscuous mode [ 224.162204][ T8472] bond_slave_0: entered promiscuous mode [ 224.164571][ T8472] batadv0: entered promiscuous mode [ 224.169090][ T8472] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 224.280401][ T8474] bond1: option mode: unable to set because the bond device has slaves [ 224.346019][ T8478] WARNING! power/level is deprecated; use power/control instead [ 224.573181][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.659371][ T44] audit: type=1804 audit(2000000015.410:7141): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.888" name="/newroot/227/trace/trace" dev="tracefs" ino=819 res=1 errno=0 [ 224.797744][ T8489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.814180][ T8489] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -99 [ 225.023498][ T8491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.023708][ T8491] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.024223][ T8491] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.309543][ T44] audit: type=1400 audit(2000000016.060:7142): avc: denied { write } for pid=8503 comm="syz.2.895" name="nullb" dev="configfs" ino=3658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.334066][ T44] audit: type=1400 audit(2000000016.070:7143): avc: denied { write } for pid=8503 comm="syz.2.895" name="nullb" dev="configfs" ino=3658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.334113][ T44] audit: type=1400 audit(2000000016.070:7144): avc: denied { remove_name } for pid=8503 comm="syz.2.895" name="my_nullb" dev="configfs" ino=22182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.334142][ T44] audit: type=1400 audit(2000000016.070:7145): avc: denied { rmdir } for pid=8503 comm="syz.2.895" name="my_nullb" dev="configfs" ino=22182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.885598][ T8496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.887757][ T8496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.888490][ T8496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.899579][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.900609][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.237011][ T5907] usb 8-1: USB disconnect, device number 14 [ 226.246796][ T5907] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 226.808781][ T8522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.809223][ T8522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.809408][ T8522] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.999082][ T8533] FAULT_INJECTION: forcing a failure. [ 226.999082][ T8533] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.999114][ T8533] CPU: 3 UID: 0 PID: 8533 Comm: syz.2.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.999136][ T8533] Tainted: [L]=SOFTLOCKUP [ 226.999141][ T8533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.999151][ T8533] Call Trace: [ 226.999157][ T8533] [ 226.999166][ T8533] dump_stack_lvl+0x100/0x190 [ 226.999200][ T8533] should_fail_ex.cold+0x5/0xa [ 226.999233][ T8533] get_futex_key+0x1c9/0x13e0 [ 226.999262][ T8533] ? __pfx_get_futex_key+0x10/0x10 [ 226.999282][ T8533] ? __mutex_unlock_slowpath+0x35d/0x930 [ 226.999311][ T8533] futex_wake+0xf4/0x5e0 [ 226.999342][ T8533] ? __pfx_futex_wake+0x10/0x10 [ 226.999373][ T8533] ? lock_acquire+0x1d1/0x380 [ 226.999399][ T8533] ? detach_task_ctx_data+0x83/0x490 [ 226.999426][ T8533] do_futex+0x2b2/0x440 [ 226.999453][ T8533] ? __pfx_do_futex+0x10/0x10 [ 226.999477][ T8533] ? __might_fault+0xc5/0x140 [ 226.999509][ T8533] mm_exit_exec_release+0x256/0x2f0 [ 226.999545][ T8533] do_exit+0x6d8/0x2a00 [ 226.999565][ T8533] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.999598][ T8533] ? __pfx_do_exit+0x10/0x10 [ 226.999627][ T8533] ? do_raw_spin_lock+0x128/0x260 [ 226.999648][ T8533] ? find_held_lock+0x2b/0x80 [ 226.999669][ T8533] ? get_signal+0xa28/0x22e0 [ 226.999693][ T8533] do_group_exit+0xd5/0x2a0 [ 226.999721][ T8533] get_signal+0x1f58/0x22e0 [ 226.999740][ T8533] ? __pfx_futex_wait+0x10/0x10 [ 226.999780][ T8533] ? __pfx_get_signal+0x10/0x10 [ 226.999808][ T8533] ? do_futex+0x190/0x440 [ 226.999833][ T8533] arch_do_signal_or_restart+0x91/0x7e0 [ 226.999855][ T8533] ? rcu_is_watching+0x13/0xc0 [ 226.999876][ T8533] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.999915][ T8533] exit_to_user_mode_loop+0x139/0x700 [ 226.999938][ T8533] ? rcu_is_watching+0x13/0xc0 [ 226.999965][ T8533] do_syscall_64+0x661/0x7b0 [ 226.999994][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.000016][ T8533] RIP: 0033:0x7f37b319fb19 [ 227.000035][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.000055][ T8533] RSP: 002b:00007f37b3fda0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.000077][ T8533] RAX: fffffffffffffe00 RBX: 00007f37b3425fa8 RCX: 00007f37b319fb19 [ 227.000090][ T8533] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37b3425fa8 [ 227.000103][ T8533] RBP: 00007f37b3425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.000116][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.000128][ T8533] R13: 00007f37b3426038 R14: 00007ffdc6e51830 R15: 00007ffdc6e51918 [ 227.000159][ T8533] [ 227.532161][ T8547] netlink: 'syz.2.912': attribute type 10 has an invalid length. [ 227.560517][ T5839] net_ratelimit: 79 callbacks suppressed [ 227.560536][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.579800][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.579829][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.688969][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.688999][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.841298][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.841325][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.955059][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.955095][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.075028][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.498471][ T8562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.499569][ T8562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.499843][ T8562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.586393][ T8579] FAULT_INJECTION: forcing a failure. [ 228.586393][ T8579] name failslab, interval 1, probability 0, space 0, times 0 [ 228.586419][ T8579] CPU: 3 UID: 0 PID: 8579 Comm: syz.0.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.586440][ T8579] Tainted: [L]=SOFTLOCKUP [ 228.586446][ T8579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.586455][ T8579] Call Trace: [ 228.586460][ T8579] [ 228.586467][ T8579] dump_stack_lvl+0x100/0x190 [ 228.586500][ T8579] should_fail_ex.cold+0x5/0xa [ 228.586525][ T8579] should_failslab+0xc2/0x120 [ 228.586545][ T8579] __kmalloc_cache_noprof+0x91/0x6d0 [ 228.586567][ T8579] ? find_held_lock+0x2b/0x80 [ 228.586586][ T8579] ? __pollwait+0x2c3/0x490 [ 228.586611][ T8579] __pollwait+0x2c3/0x490 [ 228.586648][ T8579] ? __pfx___pollwait+0x10/0x10 [ 228.586669][ T8579] pipe_poll+0x360/0x6c0 [ 228.586688][ T8579] ? __pfx_pipe_poll+0x10/0x10 [ 228.586706][ T8579] do_sys_poll+0x6e5/0xf00 [ 228.586723][ T8579] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 228.586751][ T8579] ? __pfx_do_sys_poll+0x10/0x10 [ 228.586770][ T8579] ? __lock_acquire+0x5c0/0x1f40 [ 228.586809][ T8579] ? futex_unqueue+0x13d/0x2c0 [ 228.586827][ T8579] ? __pfx___pollwait+0x10/0x10 [ 228.586847][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586866][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586884][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586905][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586925][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586945][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586965][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.586995][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.587016][ T8579] ? __pfx_pollwake+0x10/0x10 [ 228.587037][ T8579] ? do_futex+0x190/0x440 [ 228.587056][ T8579] ? set_user_sigmask+0x1e1/0x270 [ 228.587075][ T8579] ? __pfx_set_user_sigmask+0x10/0x10 [ 228.587093][ T8579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.587120][ T8579] __x64_sys_ppoll+0x2b5/0x350 [ 228.587143][ T8579] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 228.587172][ T8579] do_syscall_64+0x123/0x7b0 [ 228.587194][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.587211][ T8579] RIP: 0033:0x7fc376d9fb19 [ 228.587227][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.587242][ T8579] RSP: 002b:00007fc377d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 228.587261][ T8579] RAX: ffffffffffffffda RBX: 00007fc377025fa0 RCX: 00007fc376d9fb19 [ 228.587272][ T8579] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000001c0 [ 228.587282][ T8579] RBP: 00007fc376e37b70 R08: 0000000000000030 R09: 0000000000000000 [ 228.587291][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.587301][ T8579] R13: 00007fc377026038 R14: 00007fc377025fa0 R15: 00007ffd1b446568 [ 228.587322][ T8579] [ 228.876902][ T8581] capability: warning: `syz.3.927' uses deprecated v2 capabilities in a way that may be insecure [ 229.416623][ T44] audit: type=1400 audit(2000000020.140:7146): avc: denied { append } for pid=8600 comm="syz.3.935" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.569442][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 229.678021][ T8611] FAULT_INJECTION: forcing a failure. [ 229.678021][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 229.678051][ T8611] CPU: 3 UID: 0 PID: 8611 Comm: syz.2.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.678076][ T8611] Tainted: [L]=SOFTLOCKUP [ 229.678083][ T8611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.678093][ T8611] Call Trace: [ 229.678100][ T8611] [ 229.678108][ T8611] dump_stack_lvl+0x100/0x190 [ 229.678141][ T8611] should_fail_ex.cold+0x5/0xa [ 229.678165][ T8611] should_failslab+0xc2/0x120 [ 229.678185][ T8611] kmem_cache_alloc_noprof+0x92/0x6a0 [ 229.678209][ T8611] ? __pfx_vma_merge_new_range+0x10/0x10 [ 229.678230][ T8611] ? vm_area_dup+0x27/0xb60 [ 229.678250][ T8611] vm_area_dup+0x27/0xb60 [ 229.678269][ T8611] copy_vma+0x761/0x1730 [ 229.678298][ T8611] ? __pfx_copy_vma+0x10/0x10 [ 229.678319][ T8611] ? clockevents_program_event+0x1bf/0x820 [ 229.678372][ T8611] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 229.678391][ T8611] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 229.678426][ T8611] ? lock_acquire+0x1d1/0x380 [ 229.678448][ T8611] ? avc_has_perm_noaudit+0x56/0x470 [ 229.678474][ T8611] copy_vma_and_data+0x298/0x850 [ 229.678502][ T8611] ? __pfx_copy_vma_and_data+0x10/0x10 [ 229.678532][ T8611] ? rcu_is_watching+0x13/0xc0 [ 229.678549][ T8611] ? percpu_counter_add_batch+0xb9/0x230 [ 229.678578][ T8611] ? __vm_enough_memory+0x184/0x390 [ 229.678605][ T8611] move_vma+0x2a0/0x11e0 [ 229.678627][ T8611] ? __pfx_mtree_load+0x10/0x10 [ 229.678650][ T8611] ? __pfx_move_vma+0x10/0x10 [ 229.678672][ T8611] ? security_mmap_addr+0x71/0x1e0 [ 229.678690][ T8611] ? __get_unmapped_area+0x255/0x3e0 [ 229.678709][ T8611] ? vrm_set_new_addr+0x1f5/0x2a0 [ 229.678731][ T8611] mremap_to+0x234/0x530 [ 229.678750][ T8611] ? __pfx_mremap_to+0x10/0x10 [ 229.678774][ T8611] __do_sys_mremap+0xc6b/0x17f0 [ 229.678797][ T8611] ? __pfx_futex_wait+0x10/0x10 [ 229.678820][ T8611] ? __pfx___do_sys_mremap+0x10/0x10 [ 229.678842][ T8611] ? rcu_read_lock_any_held+0x6a/0x90 [ 229.678861][ T8611] ? ksys_write+0x190/0x250 [ 229.678883][ T8611] ? do_futex+0x190/0x440 [ 229.678903][ T8611] ? __pfx_do_futex+0x10/0x10 [ 229.678935][ T8611] ? xfd_validate_state+0x129/0x190 [ 229.678967][ T8611] do_syscall_64+0x123/0x7b0 [ 229.678989][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.679015][ T8611] RIP: 0033:0x7f37b319fb19 [ 229.679032][ T8611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.679048][ T8611] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 229.679065][ T8611] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 229.679076][ T8611] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000 [ 229.679086][ T8611] RBP: 00007f37b3237b70 R08: 0000200000a00000 R09: 0000000000000000 [ 229.679095][ T8611] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 229.679105][ T8611] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 229.679126][ T8611] [ 229.817206][ T44] audit: type=1400 audit(2000000020.560:7147): avc: denied { name_bind } for pid=8614 comm="syz.2.941" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 230.008621][ T8607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.008905][ T8607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.009102][ T8607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.243683][ T8622] rxe_eth0 speed is unknown, defaulting to 1000 [ 230.392717][ T8622] lo speed is unknown, defaulting to 1000 [ 231.029539][ T8641] o2cb: This node has not been configured. [ 231.029595][ T8641] o2cb: Cluster check failed. Fix errors before retrying. [ 231.029716][ T8641] (syz.0.949,8641,0):user_dlm_register:674 ERROR: status = -22 [ 231.029742][ T8641] (syz.0.949,8641,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 231.034861][ T44] audit: type=1400 audit(2000000021.770:7148): avc: denied { write } for pid=8640 comm="syz.0.949" name="/" dev="ocfs2_dlmfs" ino=24095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.389303][ T8647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.953'. [ 231.838383][ T44] audit: type=1400 audit(2000000022.590:7149): avc: denied { shutdown } for pid=8658 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.085584][ T69] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.085641][ T5804] Bluetooth: hci3: command 0x041b tx timeout [ 232.636965][ T44] audit: type=1400 audit(2000000023.380:7150): avc: denied { write } for pid=8667 comm="syz.3.961" name="/" dev="9p" ino=71827663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.685930][ T14] net_ratelimit: 85 callbacks suppressed [ 232.685954][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.685976][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.804233][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.804263][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.931666][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.931695][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.044970][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.044998][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.154954][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.154985][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.764987][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.765408][ T8645] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 234.164940][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 234.262981][ T8645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.263359][ T8645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.779561][ T44] audit: type=1400 audit(2000000025.530:7151): avc: denied { ioctl } for pid=8709 comm="syz.3.977" path="socket:[24169]" dev="sockfs" ino=24169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.864895][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 234.925023][ T5907] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 235.026383][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 235.027144][ T43] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.034184][ T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 235.034211][ T43] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 235.034243][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.034275][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.077988][ T5907] usb 7-1: Using ep0 maxpacket: 8 [ 235.079537][ T5907] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.080771][ T5907] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 235.080811][ T5907] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.080829][ T5907] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.080848][ T5907] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.080866][ T5907] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.080894][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.098371][ T43] usbtmc 6-1:16.0: bulk endpoints not found [ 235.327724][ T5907] usb 7-1: usb_control_msg returned -32 [ 235.327827][ T5907] usbtmc 7-1:16.0: can't read capabilities [ 235.596118][ T8723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.596392][ T8723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.596502][ T8723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.682282][ T8729] usbtmc 7-1:16.0: control status returned 0 [ 235.883702][ T5892] usb 7-1: USB disconnect, device number 12 [ 236.048669][ T5907] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 236.213658][ T5907] usb 8-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 236.215069][ T5907] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.215111][ T5907] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 236.215130][ T5907] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.218354][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 236.218375][ T5907] usb 8-1: Product: syz [ 236.218385][ T5907] usb 8-1: Manufacturer: syz [ 236.252942][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 236.277239][ T8731] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 236.296505][ T5907] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 236.328132][ T5907] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 236.541709][ T43] usb 8-1: USB disconnect, device number 15 [ 236.548038][ T43] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 236.548621][ T43] garmin_gps 8-1:1.0: device disconnected [ 236.947479][ T8756] md: array md0 already has disks! [ 236.997525][ T8756] md: md0 stopped. [ 237.545642][ T8751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.545969][ T8751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.546113][ T8751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.649770][ T43] usb 6-1: USB disconnect, device number 12 [ 237.687283][ T14] net_ratelimit: 80 callbacks suppressed [ 237.687304][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.687324][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.819369][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.819400][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.932020][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.932052][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.976083][ T8768] FAULT_INJECTION: forcing a failure. [ 237.976083][ T8768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.976118][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.1.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.976145][ T8768] Tainted: [L]=SOFTLOCKUP [ 237.976168][ T8768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.976181][ T8768] Call Trace: [ 237.976188][ T8768] [ 237.976195][ T8768] dump_stack_lvl+0x100/0x190 [ 237.976233][ T8768] should_fail_ex.cold+0x5/0xa [ 237.976263][ T8768] should_fail_alloc_page+0xeb/0x140 [ 237.976291][ T8768] prepare_alloc_pages+0x1f0/0x5b0 [ 237.976315][ T8768] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 237.976347][ T8768] ? rcu_is_watching+0x13/0xc0 [ 237.976368][ T8768] ? trace_sched_exit_tp+0x120/0x160 [ 237.976390][ T8768] ? __lock_acquire+0x5c0/0x1f40 [ 237.976417][ T8768] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.976450][ T8768] ? __css_rstat_updated+0x1ce/0x590 [ 237.976472][ T8768] ? __pfx___css_rstat_updated+0x10/0x10 [ 237.976490][ T8768] ? xas_create+0x1f4/0x14e0 [ 237.976521][ T8768] ? rcu_is_watching+0x13/0xc0 [ 237.976549][ T8768] ? __lock_acquire+0x5c0/0x1f40 [ 237.976575][ T8768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.976610][ T8768] ? policy_nodemask+0xed/0x5e0 [ 237.976636][ T8768] alloc_pages_mpol+0x201/0x560 [ 237.976661][ T8768] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.976687][ T8768] ? filemap_get_entry+0x22d/0x450 [ 237.976703][ T8768] ? filemap_get_entry+0x22d/0x450 [ 237.976725][ T8768] folio_alloc_noprof+0x22/0x250 [ 237.976751][ T8768] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 237.976779][ T8768] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 237.976809][ T8768] ? rcu_is_watching+0x13/0xc0 [ 237.976829][ T8768] ? trace_kmalloc+0xeb/0x110 [ 237.976852][ T8768] __filemap_get_folio_mpol+0x64e/0x11d0 [ 237.976880][ T8768] ioctx_alloc+0x7e1/0x21d0 [ 237.976914][ T8768] ? __pfx_ioctx_alloc+0x10/0x10 [ 237.976938][ T8768] ? __might_fault+0x111/0x140 [ 237.976966][ T8768] __x64_sys_io_setup+0xc9/0x220 [ 237.976986][ T8768] do_syscall_64+0x123/0x7b0 [ 237.977011][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.977035][ T8768] RIP: 0033:0x7fe48319fb19 [ 237.977054][ T8768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.977073][ T8768] RSP: 002b:00007fe4840e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 237.977093][ T8768] RAX: ffffffffffffffda RBX: 00007fe483425fa0 RCX: 00007fe48319fb19 [ 237.977106][ T8768] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 00000000000003ff [ 237.977119][ T8768] RBP: 00007fe483237b70 R08: 0000000000000000 R09: 0000000000000000 [ 237.977131][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.977142][ T8768] R13: 00007fe483426038 R14: 00007fe483425fa0 R15: 00007ffc9960e478 [ 237.977174][ T8768] [ 238.035652][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.035681][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.159282][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.159313][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.996103][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.996388][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 239.201173][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 239.205506][ T43] usb 6-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 239.208976][ T43] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.209003][ T43] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.209020][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 239.209044][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.243396][ T43] usb 6-1: config 0 descriptor?? [ 239.623359][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 239.623404][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.708928][ T43] hid_parser_main: 5 callbacks suppressed [ 239.708952][ T43] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 239.708982][ T43] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 239.709002][ T43] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 239.709021][ T43] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 239.709041][ T43] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 239.709698][ T43] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 240.115219][ T43] usb 6-1: USB disconnect, device number 13 [ 240.229771][ T8793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.229911][ T8793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.230018][ T8793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.701445][ T44] audit: type=1400 audit(2000000031.450:7152): avc: denied { bind } for pid=8803 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.701497][ T44] audit: type=1400 audit(2000000031.450:7153): avc: denied { node_bind } for pid=8803 comm="syz.1.1009" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 241.742637][ T8822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.742897][ T8822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.743091][ T8822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.756598][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.783986][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.718747][ T14] net_ratelimit: 76 callbacks suppressed [ 242.718770][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.718789][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.849524][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.849553][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.880463][ T44] audit: type=1400 audit(2000000033.620:7154): avc: denied { connect } for pid=8843 comm="syz.1.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.924026][ T8846] FAULT_INJECTION: forcing a failure. [ 242.924026][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 242.924074][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.0.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.924098][ T8846] Tainted: [L]=SOFTLOCKUP [ 242.924104][ T8846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.924126][ T8846] Call Trace: [ 242.924133][ T8846] [ 242.924141][ T8846] dump_stack_lvl+0x100/0x190 [ 242.924171][ T8846] should_fail_ex.cold+0x5/0xa [ 242.924197][ T8846] should_failslab+0xc2/0x120 [ 242.924217][ T8846] __kmalloc_node_noprof+0xff/0x870 [ 242.924242][ T8846] ? get_callchain_buffers+0x1e5/0x380 [ 242.924266][ T8846] get_callchain_buffers+0x1e5/0x380 [ 242.924283][ T8846] ? security_capable+0x80/0x260 [ 242.924304][ T8846] stack_map_alloc+0x316/0x610 [ 242.924320][ T8846] map_create+0x874/0x3150 [ 242.924340][ T8846] ? find_held_lock+0x2b/0x80 [ 242.924355][ T8846] ? avc_has_perm_noaudit+0x11e/0x470 [ 242.924373][ T8846] ? avc_has_perm_noaudit+0x11e/0x470 [ 242.924398][ T8846] ? __pfx_map_create+0x10/0x10 [ 242.924418][ T8846] ? avc_has_perm+0x135/0x1e0 [ 242.924436][ T8846] ? __pfx_avc_has_perm+0x10/0x10 [ 242.924453][ T8846] ? __might_fault+0xc5/0x140 [ 242.924472][ T8846] ? __might_fault+0xc5/0x140 [ 242.924493][ T8846] ? selinux_bpf+0xf6/0x140 [ 242.924516][ T8846] __sys_bpf+0x14cb/0x4b60 [ 242.924536][ T8846] ? __pfx___sys_bpf+0x10/0x10 [ 242.924550][ T8846] ? find_held_lock+0x2b/0x80 [ 242.924565][ T8846] ? futex_wake+0x4ea/0x5e0 [ 242.924599][ T8846] ? rcu_read_lock_any_held+0x6a/0x90 [ 242.924617][ T8846] ? find_held_lock+0x2b/0x80 [ 242.924632][ T8846] ? ksys_write+0x190/0x250 [ 242.924647][ T8846] ? ksys_write+0x190/0x250 [ 242.924677][ T8846] ? __x64_sys_futex+0x34f/0x4d0 [ 242.924696][ T8846] ? __x64_sys_futex+0x358/0x4d0 [ 242.924722][ T8846] ? xfd_validate_state+0x129/0x190 [ 242.924746][ T8846] ? __x64_sys_bpf+0xce/0x140 [ 242.924764][ T8846] __x64_sys_bpf+0xce/0x140 [ 242.924779][ T8846] ? do_syscall_64+0xae/0x7b0 [ 242.924798][ T8846] do_syscall_64+0x123/0x7b0 [ 242.924818][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.924834][ T8846] RIP: 0033:0x7fc376d9fb19 [ 242.924847][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.924862][ T8846] RSP: 002b:00007fc377d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.924878][ T8846] RAX: ffffffffffffffda RBX: 00007fc377025fa0 RCX: 00007fc376d9fb19 [ 242.924887][ T8846] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 242.924902][ T8846] RBP: 00007fc376e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 242.924910][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.924919][ T8846] R13: 00007fc377026038 R14: 00007fc377025fa0 R15: 00007ffd1b446568 [ 242.924940][ T8846] [ 242.955184][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.955214][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.066099][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.066129][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.210972][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 243.211002][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.352834][ T8852] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.802227][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.802263][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 243.802309][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.015508][ T8851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.015711][ T8851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.015838][ T8851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.086739][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 246.086774][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.086795][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.518553][ T5892] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 246.602239][ T8888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.602614][ T8888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.603152][ T8888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.644447][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.654017][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.735505][ T5892] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 246.737434][ T5892] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.737455][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.737468][ T5892] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.737499][ T5892] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.870896][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.870921][ T5892] usb 8-1: Product: syz [ 246.870931][ T5892] usb 8-1: Manufacturer: syz [ 246.877158][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 246.877175][ T5892] cdc_wdm 8-1:1.0: skipping garbage [ 246.880989][ T5892] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 246.881007][ T5892] cdc_wdm 8-1:1.0: Unknown control protocol [ 246.994011][ T5590] usb 5-1: USB disconnect, device number 8 [ 247.772872][ T5879] net_ratelimit: 75 callbacks suppressed [ 247.772896][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.772918][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.804986][ T5892] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 247.843377][ T8917] tipc: Enabled bearer , priority 0 [ 247.846959][ T8917] syzkaller0: entered promiscuous mode [ 247.846984][ T8917] syzkaller0: entered allmulticast mode [ 247.884928][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.884960][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.992360][ T5892] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 247.997896][ T5892] usb 6-1: config index 0 descriptor too short (expected 42268, got 28) [ 247.997919][ T5892] usb 6-1: config 1 has too many interfaces: 63, using maximum allowed: 32 [ 247.997934][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 63 [ 247.997951][ T5892] usb 6-1: config 1 has no interface number 0 [ 248.017853][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.017883][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.050573][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.050648][ T5892] usb 6-1: Product: syz [ 248.050663][ T5892] usb 6-1: Manufacturer: syz [ 248.050674][ T5892] usb 6-1: SerialNumber: syz [ 248.118782][ T5906] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 248.125027][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.125060][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.153869][ T5892] usb 6-1: 3:0 : does not exist [ 248.153942][ T5892] usb 6-1: 3:0 : does not exist [ 248.235034][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.235065][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.299104][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 248.305329][ T5906] usb 5-1: New USB device found: idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 248.310084][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.310116][ T5906] usb 5-1: can't read configurations, error -61 [ 248.436778][ T5906] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.610575][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 248.614434][ T5906] usb 5-1: New USB device found: idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 248.621370][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.621403][ T5906] usb 5-1: can't read configurations, error -61 [ 248.621756][ T5906] usb usb5-port1: attempt power cycle [ 248.645720][ T69] Bluetooth: hci3: command 0x041b tx timeout [ 248.645760][ T69] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.645808][ T69] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.964998][ T5906] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 248.965707][ T5892] tipc: Node number set to 1792319272 [ 248.985448][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 248.986495][ T5906] usb 5-1: New USB device found: idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 248.989142][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.989168][ T5906] usb 5-1: can't read configurations, error -61 [ 249.040010][ T45] usb 6-1: USB disconnect, device number 14 [ 249.127179][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.158863][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 249.159944][ T5906] usb 5-1: New USB device found: idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 249.162456][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 249.162487][ T5906] usb 5-1: can't read configurations, error -61 [ 249.162858][ T5906] usb usb5-port1: unable to enumerate USB device [ 249.212035][ T5906] usb 8-1: USB disconnect, device number 16 [ 249.677740][ T8943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.677764][ T8943] block device autoloading is deprecated and will be removed. [ 249.770951][ T8946] FAULT_INJECTION: forcing a failure. [ 249.770951][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 249.770991][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.2.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.771021][ T8946] Tainted: [L]=SOFTLOCKUP [ 249.771029][ T8946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.771042][ T8946] Call Trace: [ 249.771049][ T8946] [ 249.771058][ T8946] dump_stack_lvl+0x100/0x190 [ 249.771099][ T8946] should_fail_ex.cold+0x5/0xa [ 249.771131][ T8946] should_failslab+0xc2/0x120 [ 249.771157][ T8946] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 249.771193][ T8946] ? alloc_vmap_area+0x643/0x2bc0 [ 249.771220][ T8946] alloc_vmap_area+0x643/0x2bc0 [ 249.771251][ T8946] ? kasan_save_track+0x14/0x30 [ 249.771274][ T8946] ? __kasan_kmalloc+0xaa/0xb0 [ 249.771296][ T8946] ? __pfx_alloc_vmap_area+0x10/0x10 [ 249.771331][ T8946] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.771351][ T8946] ? __get_vm_area_node+0x124/0x350 [ 249.771376][ T8946] __get_vm_area_node+0x1ed/0x350 [ 249.771403][ T8946] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 249.771429][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.771459][ T8946] ? do_syscall_64+0x123/0x7b0 [ 249.771483][ T8946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.771512][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.771548][ T8946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.771582][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.771609][ T8946] __vmalloc_node_noprof+0xad/0xf0 [ 249.771634][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.771664][ T8946] __vmalloc_noprof+0xa3/0x120 [ 249.771686][ T8946] ? __pfx___vmalloc_noprof+0x10/0x10 [ 249.771709][ T8946] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 249.771735][ T8946] ? down_write_killable+0x14d/0x240 [ 249.771760][ T8946] ? alloc_ldt_struct+0x5d/0x1b0 [ 249.771793][ T8946] alloc_ldt_struct+0x14f/0x1b0 [ 249.771822][ T8946] write_ldt+0x62b/0xd40 [ 249.771869][ T8946] ? __pfx_write_ldt+0x10/0x10 [ 249.771902][ T8946] ? xfd_validate_state+0x129/0x190 [ 249.771940][ T8946] __x64_sys_modify_ldt+0xb1/0x170 [ 249.771970][ T8946] do_syscall_64+0x123/0x7b0 [ 249.772025][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.772050][ T8946] RIP: 0033:0x7f37b319fb19 [ 249.772069][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.772087][ T8946] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 249.772109][ T8946] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 249.772123][ T8946] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000001 [ 249.772134][ T8946] RBP: 00007f37b3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 249.772146][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.772157][ T8946] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 249.772185][ T8946] [ 249.772272][ T8946] syz.2.1063: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 249.776297][ T5906] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 249.906972][ T8946] ,cpuset=/,mems_allowed=0-1 [ 249.907031][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.2.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.907058][ T8946] Tainted: [L]=SOFTLOCKUP [ 249.907066][ T8946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.907077][ T8946] Call Trace: [ 249.907083][ T8946] [ 249.907090][ T8946] dump_stack_lvl+0x100/0x190 [ 249.907123][ T8946] warn_alloc.cold+0x9e/0xb2 [ 249.907142][ T8946] ? __pfx_warn_alloc+0x10/0x10 [ 249.907166][ T8946] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.907190][ T8946] ? __get_vm_area_node+0x2f0/0x350 [ 249.907211][ T8946] ? __get_vm_area_node+0x22b/0x350 [ 249.907234][ T8946] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 249.907255][ T8946] ? do_syscall_64+0x123/0x7b0 [ 249.907274][ T8946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.907297][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.907327][ T8946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.907355][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.907378][ T8946] __vmalloc_node_noprof+0xad/0xf0 [ 249.907396][ T8946] ? alloc_ldt_struct+0x14f/0x1b0 [ 249.907422][ T8946] __vmalloc_noprof+0xa3/0x120 [ 249.907440][ T8946] ? __pfx___vmalloc_noprof+0x10/0x10 [ 249.907458][ T8946] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 249.907480][ T8946] ? down_write_killable+0x14d/0x240 [ 249.907500][ T8946] ? alloc_ldt_struct+0x5d/0x1b0 [ 249.907528][ T8946] alloc_ldt_struct+0x14f/0x1b0 [ 249.907552][ T8946] write_ldt+0x62b/0xd40 [ 249.907582][ T8946] ? __pfx_write_ldt+0x10/0x10 [ 249.907608][ T8946] ? xfd_validate_state+0x129/0x190 [ 249.907637][ T8946] __x64_sys_modify_ldt+0xb1/0x170 [ 249.907663][ T8946] do_syscall_64+0x123/0x7b0 [ 249.907686][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.907703][ T8946] RIP: 0033:0x7f37b319fb19 [ 249.907717][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.907733][ T8946] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 249.907749][ T8946] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 249.907761][ T8946] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000001 [ 249.907773][ T8946] RBP: 00007f37b3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 249.907784][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.907794][ T8946] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 249.907841][ T8946] [ 249.907893][ T8946] Mem-Info: [ 249.907903][ T8946] active_anon:11226 inactive_anon:97 isolated_anon:0 [ 249.907903][ T8946] active_file:608 inactive_file:58173 isolated_file:0 [ 249.907903][ T8946] unevictable:1000 dirty:184 writeback:0 [ 249.907903][ T8946] slab_reclaimable:12066 slab_unreclaimable:69732 [ 249.907903][ T8946] mapped:25472 shmem:1970 pagetables:3598 [ 249.907903][ T8946] sec_pagetables:301 bounce:0 [ 249.907903][ T8946] kernel_misc_reclaimable:0 [ 249.907903][ T8946] free:316466 free_pcp:20771 free_cma:0 [ 249.907947][ T8946] Node 0 active_anon:44600kB inactive_anon:388kB active_file:2432kB inactive_file:229520kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:101824kB dirty:736kB writeback:0kB shmem:5880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14296kB pagetables:5004kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 249.907996][ T8946] Node 1 active_anon:304kB inactive_anon:0kB active_file:0kB inactive_file:3172kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:136kB pagetables:9388kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 249.908038][ T8946] Node 0 DMA free:5216kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:368kB local_pcp:136kB free_cma:0kB [ 249.908081][ T8946] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 249.908109][ T8946] Node 0 DMA32 free:93140kB boost:0kB min:27064kB low:33828kB high:40592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44600kB inactive_anon:388kB active_file:2432kB inactive_file:229520kB unevictable:2000kB writepending:736kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:17800kB local_pcp:5204kB free_cma:0kB [ 249.908148][ T8946] lowmem_reserve[]: 0 0 0 0 0 [ 249.908175][ T8946] Node 1 Normal free:1167508kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:304kB inactive_anon:0kB active_file:0kB inactive_file:3172kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:64916kB local_pcp:2328kB free_cma:0kB [ 249.908218][ T8946] lowmem_reserve[]: 0 0 0 0 0 [ 249.908244][ T8946] Node 0 DMA: 0*4kB 2*8kB (UM) 3*16kB (U) 3*32kB (UM) 3*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 5216kB [ 249.908379][ T8946] Node 0 DMA32: 1355*4kB (UME) 298*8kB (UME) 262*16kB (UME) 306*32kB (UME) 145*64kB (UME) 104*128kB (UM) 58*256kB (UM) 26*512kB (UM) 14*1024kB (UM) 3*2048kB (M) 0*4096kB = 93020kB [ 249.908502][ T8946] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 2*32kB (ME) 1*64kB (U) 0*128kB 2*256kB (UM) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UE) 283*4096kB (M) = 1167508kB [ 249.908616][ T8946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.908629][ T8946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.908641][ T8946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 249.908654][ T8946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 249.908666][ T8946] 60747 total pagecache pages [ 249.908672][ T8946] 0 pages in swap cache [ 249.908677][ T8946] Free swap = 124996kB [ 249.908681][ T8946] Total swap = 124996kB [ 249.908687][ T8946] 1048443 pages RAM [ 249.908692][ T8946] 0 pages HighMem/MovableOnly [ 249.908697][ T8946] 291488 pages reserved [ 249.908703][ T8946] 0 pages cma reserved [ 249.945231][ T5906] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 249.950028][ T5906] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 249.950048][ T5906] usb 8-1: config 1 has no interface number 0 [ 249.951974][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.951993][ T5906] usb 8-1: Product: syz [ 249.952002][ T5906] usb 8-1: Manufacturer: syz [ 249.952011][ T5906] usb 8-1: SerialNumber: syz [ 249.983135][ T5906] usb 8-1: 3:1 : does not exist [ 249.983153][ T5906] usb 8-1: 3:2 : does not exist [ 250.240387][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.240777][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.786717][ T8914] tipc: Resetting bearer [ 250.808482][ T5907] usb 8-1: USB disconnect, device number 17 [ 250.879496][ T8914] tipc: Disabling bearer [ 250.928892][ T8961] FAULT_INJECTION: forcing a failure. [ 250.928892][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 250.928928][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.2.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.928954][ T8961] Tainted: [L]=SOFTLOCKUP [ 250.928960][ T8961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.928971][ T8961] Call Trace: [ 250.928978][ T8961] [ 250.928985][ T8961] dump_stack_lvl+0x100/0x190 [ 250.929022][ T8961] should_fail_ex.cold+0x5/0xa [ 250.929053][ T8961] should_failslab+0xc2/0x120 [ 250.929076][ T8961] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 250.929095][ T8961] ? __do_sys_fsconfig+0x834/0xcb0 [ 250.929116][ T8961] ? smb3_parse_devname+0xfd/0x500 [ 250.929149][ T8961] kstrndup+0x64/0x120 [ 250.929174][ T8961] smb3_parse_devname+0xfd/0x500 [ 250.929204][ T8961] smb3_fs_context_parse_param+0x3f02/0x7740 [ 250.929236][ T8961] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 250.929269][ T8961] ? __pfx_selinux_fs_context_parse_param+0x10/0x10 [ 250.929303][ T8961] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 250.929330][ T8961] ? vfs_parse_fs_param+0x200/0x3b0 [ 250.929354][ T8961] vfs_parse_fs_param+0x200/0x3b0 [ 250.929382][ T8961] __do_sys_fsconfig+0x617/0xcb0 [ 250.929404][ T8961] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 250.929436][ T8961] do_syscall_64+0x123/0x7b0 [ 250.929461][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.929481][ T8961] RIP: 0033:0x7f37b319fb19 [ 250.929496][ T8961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.929513][ T8961] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 250.929531][ T8961] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 250.929542][ T8961] RDX: 0000200000001600 RSI: 0000000000000001 RDI: 0000000000000003 [ 250.929583][ T8961] RBP: 00007f37b3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 250.929596][ T8961] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000000 [ 250.929608][ T8961] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 250.929635][ T8961] [ 250.929897][ T8961] CIFS: VFS: Unable to allocate memory for devname [ 251.538442][ T5907] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 251.567014][ T44] audit: type=1400 audit(2000000042.300:7155): avc: denied { map } for pid=8969 comm="syz.0.1071" path="socket:[24961]" dev="sockfs" ino=24961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.590919][ T44] audit: type=1400 audit(2000000042.340:7156): avc: denied { read } for pid=8969 comm="syz.0.1071" path="socket:[24961]" dev="sockfs" ino=24961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.685612][ T5907] usb 7-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 251.710535][ T5907] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 251.710567][ T5907] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.710588][ T5907] usb 7-1: config 0 interface 0 has no altsetting 0 [ 251.710614][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.715914][ T5907] usb 7-1: config 0 descriptor?? [ 251.818827][ T8966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.073402][ T5907] usbhid 7-1:0.0: can't add hid device: -71 [ 252.073493][ T5907] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 252.131270][ T5907] usb 7-1: USB disconnect, device number 13 [ 252.785359][ T14] net_ratelimit: 88 callbacks suppressed [ 252.785387][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.785612][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.901526][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.901555][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.022617][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.022654][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.114054][ T8989] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.114291][ T8989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.114533][ T8989] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.128034][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.128061][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.234882][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.234912][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.264999][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 253.430123][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 253.433708][ T45] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.458311][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.458354][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.471164][ T45] usb 6-1: config 0 descriptor?? [ 253.660644][ T9006] jffs2: notice: (9006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 253.750261][ T45] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 253.775002][ T9009] overlay: ./file0 is not a directory [ 253.806990][ T44] audit: type=1400 audit(2000000044.560:7157): avc: denied { mount } for pid=9010 comm="syz.3.1087" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 253.813968][ T44] audit: type=1400 audit(2000000044.560:7158): avc: denied { search } for pid=9010 comm="syz.3.1087" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 253.814274][ T44] audit: type=1400 audit(2000000044.560:7159): avc: denied { read write } for pid=9010 comm="syz.3.1087" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 253.841686][ T44] audit: type=1400 audit(2000000044.570:7160): avc: denied { open } for pid=9010 comm="syz.3.1087" path="/259/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 254.090507][ T9016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.090702][ T9016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.090934][ T9016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.233309][ T5906] usb 6-1: USB disconnect, device number 15 [ 254.421203][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 254.565814][ T45] usb 5-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 254.566937][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.568870][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 254.568894][ T45] usb 5-1: Product: syz [ 254.568907][ T45] usb 5-1: Manufacturer: syz [ 254.616443][ T45] navman 5-1:1.0: navman converter detected [ 254.620301][ T45] usb 5-1: navman converter now attached to ttyUSB0 [ 254.929338][ T5590] usb 5-1: USB disconnect, device number 13 [ 254.956767][ T5590] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 254.957241][ T5590] navman 5-1:1.0: device disconnected [ 255.745006][ T44] audit: type=1400 audit(2000000046.470:7161): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 255.865084][ T5906] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 255.946996][ T9045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.947151][ T9045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.947279][ T9045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.014935][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 256.015655][ T5906] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.016648][ T5906] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 256.016685][ T5906] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.016705][ T5906] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.016722][ T5906] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.016740][ T5906] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.016770][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.297863][ T5906] usb 7-1: GET_CAPABILITIES returned 0 [ 256.297905][ T5906] usbtmc 7-1:16.0: can't read capabilities [ 256.512794][ T5892] usb 7-1: USB disconnect, device number 14 [ 256.558245][ T9053] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.982661][ T9053] lo speed is unknown, defaulting to 1000 [ 257.795597][ T5879] net_ratelimit: 81 callbacks suppressed [ 257.795621][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.797495][ T44] audit: type=1400 audit(2000000048.550:7162): avc: denied { read } for pid=9062 comm="syz.2.1106" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.822604][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.834838][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.854918][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.882542][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.907195][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.928680][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.946950][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.964909][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.988775][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.016595][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.016638][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 258.016662][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.531021][ T9070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.531192][ T9070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.531365][ T9070] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.751815][ T9075] bq24190-charger 0-0006: Can't get irq info [ 258.751969][ T9075] bq24190-charger 0-0006: probe with driver bq24190-charger failed with error -22 [ 258.754660][ T9075] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 259.051811][ T5811] svc: failed to register nfsdv3 RPC service (errno 5). [ 259.051834][ T5811] failed to unregister tcp with rpcbind [ 260.146369][ T9096] tls_set_device_offload: netdev not found [ 260.412776][ T44] audit: type=1400 audit(2000000051.150:7163): avc: denied { read } for pid=9102 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.579010][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.579047][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.606395][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 260.878996][ T5892] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 261.074491][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 261.084204][ T5892] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 261.085464][ T5892] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 261.085488][ T5892] usb 8-1: config 0 has no interface number 0 [ 261.085521][ T5892] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.085542][ T5892] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 261.085562][ T5892] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.085583][ T5892] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 261.085601][ T5892] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.085636][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.087826][ T5892] usb 8-1: config 0 descriptor?? [ 261.130163][ T5892] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 261.220590][ T9117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.220743][ T9117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.220872][ T9117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.351261][ T9110] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 261.363903][ T5892] usb 8-1: USB disconnect, device number 18 [ 261.366712][ T5892] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 261.697313][ T44] audit: type=1326 audit(2000000052.440:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.0.1127" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc376d9fb19 code=0x0 [ 262.053052][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 262.435700][ T9144] usb usb1: usbfs: process 9144 (syz.2.1133) did not claim interface 0 before use [ 262.597702][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 262.597724][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 262.822968][ T5839] net_ratelimit: 86 callbacks suppressed [ 262.822991][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 262.823012][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 262.936984][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 262.937011][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.052934][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.052967][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.162257][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 263.187405][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.187843][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.220721][ C0] Unknown status report in ack skb [ 263.294572][ T69] Bluetooth: hci3: command 0x041b tx timeout [ 263.294614][ T69] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.294662][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.314586][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 263.314617][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.373724][ T9161] FAULT_INJECTION: forcing a failure. [ 263.373724][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 263.373756][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.1.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.373784][ T9161] Tainted: [L]=SOFTLOCKUP [ 263.373792][ T9161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.373803][ T9161] Call Trace: [ 263.373810][ T9161] [ 263.373817][ T9161] dump_stack_lvl+0x100/0x190 [ 263.373853][ T9161] should_fail_ex.cold+0x5/0xa [ 263.373886][ T9161] should_failslab+0xc2/0x120 [ 263.373910][ T9161] __kmalloc_noprof+0xfc/0x840 [ 263.373941][ T9161] ? handler_new_ref+0x1ab/0xc60 [ 263.373973][ T9161] handler_new_ref+0x1ab/0xc60 [ 263.374008][ T9161] v4l2_ctrl_new+0xe67/0x23a0 [ 263.374047][ T9161] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 263.374090][ T9161] v4l2_ctrl_new_std+0x1bb/0x290 [ 263.374128][ T9161] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 263.374157][ T9161] ? rcu_is_watching+0x13/0xc0 [ 263.374184][ T9161] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 263.388661][ T9161] ? media_request_object_init+0x105/0x180 [ 263.388699][ T9161] vim2m_open+0x140/0x870 [ 263.388732][ T9161] v4l2_open+0x1d2/0x490 [ 263.388763][ T9161] ? __pfx_v4l2_open+0x10/0x10 [ 263.388790][ T9161] chrdev_open+0x234/0x6a0 [ 263.388816][ T9161] ? __pfx_chrdev_open+0x10/0x10 [ 263.388841][ T9161] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 263.388868][ T9161] do_dentry_open+0x674/0x1470 [ 263.388888][ T9161] ? __pfx_chrdev_open+0x10/0x10 [ 263.388917][ T9161] vfs_open_consume+0xcc/0x460 [ 263.388947][ T9161] path_openat+0x1547/0x23f0 [ 263.388975][ T9161] ? __pfx_path_openat+0x10/0x10 [ 263.389004][ T9161] do_file_open+0x20e/0x430 [ 263.389043][ T9161] ? __pfx_do_file_open+0x10/0x10 [ 263.389100][ T9161] ? _raw_spin_unlock+0x28/0x50 [ 263.389120][ T9161] ? alloc_fd+0x471/0x7a0 [ 263.389154][ T9161] do_sys_openat2+0x163/0x1d0 [ 263.389182][ T9161] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.389209][ T9161] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 263.389254][ T9161] __x64_sys_openat+0x12d/0x210 [ 263.389282][ T9161] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.389320][ T9161] do_syscall_64+0x123/0x7b0 [ 263.389350][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.389371][ T9161] RIP: 0033:0x7fe48316034e [ 263.389389][ T9161] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.389408][ T9161] RSP: 002b:00007fe4840e1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.389428][ T9161] RAX: ffffffffffffffda RBX: 00007fe4840e26c0 RCX: 00007fe48316034e [ 263.389439][ T9161] RDX: 0000000000000002 RSI: 00007fe4840e1c00 RDI: ffffffffffffff9c [ 263.389451][ T9161] RBP: 00007fe4840e1c00 R08: 0000000000000000 R09: 0000000000000000 [ 263.389468][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 263.389478][ T9161] R13: 00007fe483426038 R14: 00007fe483425fa0 R15: 00007ffc9960e478 [ 263.389504][ T9161] [ 263.790403][ T9168] raw_sendmsg: syz.1.1143 forgot to set AF_INET. Fix it! [ 263.990743][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 263.990768][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 265.136040][ T5892] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 265.154373][ T44] audit: type=1400 audit(2000000055.900:7165): avc: denied { append } for pid=9199 comm="syz.0.1155" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 265.288616][ T5892] usb 7-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 265.289787][ T5892] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.289825][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.341050][ T5892] as10x_usb: device has been detected [ 265.341622][ T5892] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 265.414107][ T5892] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 265.446319][ T5892] as10x_usb: error during firmware upload part1 [ 265.446743][ T5892] Registered device Abilis Systems DVB-Titan [ 265.752416][ T44] audit: type=1400 audit(2000000056.500:7166): avc: denied { ioctl } for pid=9210 comm="syz.3.1158" path="socket:[26209]" dev="sockfs" ino=26209 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.857762][ T9214] FAULT_INJECTION: forcing a failure. [ 265.857762][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 265.857800][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.3.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.857830][ T9214] Tainted: [L]=SOFTLOCKUP [ 265.857837][ T9214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.857855][ T9214] Call Trace: [ 265.857861][ T9214] [ 265.857869][ T9214] dump_stack_lvl+0x100/0x190 [ 265.857905][ T9214] should_fail_ex.cold+0x5/0xa [ 265.857930][ T9214] ? __pfx_ucma_event_handler+0x10/0x10 [ 265.857947][ T9214] should_failslab+0xc2/0x120 [ 265.857967][ T9214] ? __pfx_ucma_event_handler+0x10/0x10 [ 265.857985][ T9214] __kmalloc_cache_noprof+0x91/0x6d0 [ 265.858010][ T9214] ? lock_acquire+0x1d1/0x380 [ 265.858032][ T9214] ? __rdma_create_id+0x5b/0x8f0 [ 265.858049][ T9214] ? __pfx_ucma_event_handler+0x10/0x10 [ 265.858068][ T9214] __rdma_create_id+0x5b/0x8f0 [ 265.858085][ T9214] ? __pfx_ucma_event_handler+0x10/0x10 [ 265.858104][ T9214] rdma_create_user_id+0x7d/0xe0 [ 265.858121][ T9214] ucma_create_id+0x189/0x380 [ 265.858135][ T9214] ? __pfx_ucma_create_id+0x10/0x10 [ 265.858149][ T9214] ? __might_fault+0xc5/0x140 [ 265.858173][ T9214] ? __pfx_ucma_create_id+0x10/0x10 [ 265.858220][ T9214] ucma_write+0x1f6/0x330 [ 265.858243][ T9214] ? __pfx_ucma_write+0x10/0x10 [ 265.858265][ T9214] ? bpf_lsm_file_permission+0x9/0x10 [ 265.858287][ T9214] ? security_file_permission+0x76/0x210 [ 265.858305][ T9214] ? rw_verify_area+0xce/0x6d0 [ 265.858331][ T9214] vfs_write+0x2aa/0x1040 [ 265.858350][ T9214] ? __pfx_ucma_write+0x10/0x10 [ 265.858372][ T9214] ? lock_acquire+0x1d1/0x380 [ 265.858395][ T9214] ? __fget_files+0x34/0x3d0 [ 265.858419][ T9214] ? __pfx_vfs_write+0x10/0x10 [ 265.858433][ T9214] ? find_held_lock+0x2b/0x80 [ 265.858450][ T9214] ? __fget_files+0x215/0x3d0 [ 265.858472][ T9214] ? __fget_files+0x215/0x3d0 [ 265.858496][ T9214] ? __fget_files+0x21f/0x3d0 [ 265.858519][ T9214] ksys_write+0x1f8/0x250 [ 265.858535][ T9214] ? __pfx_ksys_write+0x10/0x10 [ 265.858560][ T9214] do_syscall_64+0x123/0x7b0 [ 265.858609][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.858630][ T9214] RIP: 0033:0x7f9a2399fb19 [ 265.858647][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.858661][ T9214] RSP: 002b:00007f9a24817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.858680][ T9214] RAX: ffffffffffffffda RBX: 00007f9a23c25fa0 RCX: 00007f9a2399fb19 [ 265.858690][ T9214] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 265.858698][ T9214] RBP: 00007f9a23a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 265.858706][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.858716][ T9214] R13: 00007f9a23c26038 R14: 00007f9a23c25fa0 R15: 00007ffdf0836748 [ 265.858738][ T9214] [ 266.205769][ T9218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.205987][ T9218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.206254][ T9218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.844201][ T9229] FAULT_INJECTION: forcing a failure. [ 266.844201][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 266.844238][ T9229] CPU: 3 UID: 0 PID: 9229 Comm: syz.3.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.844263][ T9229] Tainted: [L]=SOFTLOCKUP [ 266.844270][ T9229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.844281][ T9229] Call Trace: [ 266.844289][ T9229] [ 266.844298][ T9229] dump_stack_lvl+0x100/0x190 [ 266.844336][ T9229] should_fail_ex.cold+0x5/0xa [ 266.844380][ T9229] should_failslab+0xc2/0x120 [ 266.844401][ T9229] __kmalloc_cache_noprof+0x91/0x6d0 [ 266.844431][ T9229] ? __genradix_ptr_alloc+0x215/0x610 [ 266.844461][ T9229] __genradix_ptr_alloc+0x215/0x610 [ 266.844493][ T9229] proc_map_files_readdir+0x356/0xb10 [ 266.844522][ T9229] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 266.844542][ T9229] ? lock_acquire+0x1d1/0x380 [ 266.844581][ T9229] ? down_read_killable+0x358/0x520 [ 266.844604][ T9229] ? __pfx_down_read_killable+0x10/0x10 [ 266.844624][ T9229] ? selinux_file_permission+0x30/0x6a0 [ 266.844649][ T9229] iterate_dir+0x2ba/0xc10 [ 266.844672][ T9229] __x64_sys_getdents+0x13b/0x2b0 [ 266.844692][ T9229] ? __pfx___x64_sys_getdents+0x10/0x10 [ 266.844750][ T9229] ? fput+0x7c/0x100 [ 266.844774][ T9229] ? __pfx_filldir+0x10/0x10 [ 266.844804][ T9229] do_syscall_64+0x123/0x7b0 [ 266.844830][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.844850][ T9229] RIP: 0033:0x7f9a2399fb19 [ 266.844868][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.844885][ T9229] RSP: 002b:00007f9a24817028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 266.844906][ T9229] RAX: ffffffffffffffda RBX: 00007f9a23c25fa0 RCX: 00007f9a2399fb19 [ 266.844919][ T9229] RDX: 0000000000001012 RSI: 0000200000000c00 RDI: 0000000000000004 [ 266.844932][ T9229] RBP: 00007f9a23a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 266.844943][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.844953][ T9229] R13: 00007f9a23c26038 R14: 00007f9a23c25fa0 R15: 00007ffdf0836748 [ 266.844976][ T9229] [ 266.953155][ T5906] usb 7-1: USB disconnect, device number 15 [ 267.068968][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.101395][ T5906] Unregistered device Abilis Systems DVB-Titan [ 267.128530][ T5906] as10x_usb: device has been disconnected [ 267.225672][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 267.226643][ T5892] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 267.228763][ T5892] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 267.228789][ T5892] usb 5-1: config 0 has no interface number 0 [ 267.228824][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.228845][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 267.228867][ T5892] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.228888][ T5892] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 267.228907][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.228943][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.231300][ T5892] usb 5-1: config 0 descriptor?? [ 267.253015][ T5892] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 267.454601][ T9230] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 267.456128][ T45] usb 5-1: USB disconnect, device number 14 [ 267.473792][ T45] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 267.828489][ T9241] tipc: New replicast peer: 172.20.20.187 [ 267.828998][ T9241] tipc: Enabled bearer , priority 10 [ 267.938797][ T5879] net_ratelimit: 78 callbacks suppressed [ 267.938823][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 267.938843][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.065150][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.065180][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.210274][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.210304][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.255555][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.255597][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.255715][ T5140] Bluetooth: hci3: command 0x041b tx timeout [ 268.324964][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.324995][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.446492][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 268.446519][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.510623][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.637651][ T9255] FAULT_INJECTION: forcing a failure. [ 268.637651][ T9255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.637689][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.0.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.637715][ T9255] Tainted: [L]=SOFTLOCKUP [ 268.637722][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.637733][ T9255] Call Trace: [ 268.637741][ T9255] [ 268.637750][ T9255] dump_stack_lvl+0x100/0x190 [ 268.637788][ T9255] should_fail_ex.cold+0x5/0xa [ 268.637817][ T9255] should_fail_alloc_page+0xeb/0x140 [ 268.637845][ T9255] prepare_alloc_pages+0x1f0/0x5b0 [ 268.637871][ T9255] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 268.637898][ T9255] ? __pfx_get_page_from_freelist+0x10/0x10 [ 268.637925][ T9255] ? rcu_is_watching+0x13/0xc0 [ 268.637946][ T9255] ? trace_mm_page_alloc+0x164/0x1c0 [ 268.637967][ T9255] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 268.637995][ T9255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.638026][ T9255] ? stack_trace_save+0x8e/0xc0 [ 268.638048][ T9255] ? __pfx_stack_trace_save+0x10/0x10 [ 268.638071][ T9255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.638103][ T9255] ? __kasan_slab_alloc+0x89/0x90 [ 268.638122][ T9255] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 268.638148][ T9255] ? alloc_vmap_area+0x643/0x2bc0 [ 268.642101][ T9255] ? __get_vm_area_node+0x1ed/0x350 [ 268.642127][ T9255] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 268.642146][ T9255] ? vmalloc_user_noprof+0x9e/0xe0 [ 268.642185][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.642205][ T9255] ? __vb2_queue_alloc+0x8d5/0x1160 [ 268.642223][ T9255] ? vb2_core_reqbufs+0x899/0xf30 [ 268.642240][ T9255] ? vb2_ioctl_reqbufs+0x291/0x450 [ 268.642260][ T9255] ? v4l_reqbufs+0x175/0x1d0 [ 268.642276][ T9255] ? __video_do_ioctl+0xb2a/0xdf0 [ 268.642297][ T9255] ? video_usercopy+0x47a/0x1730 [ 268.642313][ T9255] ? v4l2_ioctl+0x1bd/0x250 [ 268.642342][ T9255] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 268.642382][ T9255] ? policy_nodemask+0xed/0x5e0 [ 268.659747][ T9255] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 268.659807][ T9255] __kasan_populate_vmalloc+0xf0/0x210 [ 268.659843][ T9255] alloc_vmap_area+0x963/0x2bc0 [ 268.659868][ T9255] ? kasan_save_track+0x14/0x30 [ 268.659886][ T9255] ? __kasan_kmalloc+0xaa/0xb0 [ 268.659904][ T9255] ? __pfx_alloc_vmap_area+0x10/0x10 [ 268.659933][ T9255] ? vb2_vmalloc_alloc+0xf9/0x410 [ 268.659952][ T9255] ? __get_vm_area_node+0x124/0x350 [ 268.659974][ T9255] __get_vm_area_node+0x1ed/0x350 [ 268.659998][ T9255] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 268.660020][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.660072][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.660101][ T9255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.660128][ T9255] ? __kasan_kmalloc+0xaa/0xb0 [ 268.660150][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.660173][ T9255] vmalloc_user_noprof+0x9e/0xe0 [ 268.660195][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.660216][ T9255] vb2_vmalloc_alloc+0x135/0x410 [ 268.660235][ T9255] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 268.660256][ T9255] __vb2_queue_alloc+0x8d5/0x1160 [ 268.660288][ T9255] vb2_core_reqbufs+0x899/0xf30 [ 268.660314][ T9255] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 268.660332][ T9255] ? trace_contention_end+0x126/0x160 [ 268.660360][ T9255] ? __mutex_lock+0x267/0x1c10 [ 268.660396][ T9255] ? avc_has_extended_perms+0x4a5/0x10b0 [ 268.660428][ T9255] vb2_ioctl_reqbufs+0x291/0x450 [ 268.660461][ T9255] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 268.660492][ T9255] ? check_fmt+0x230/0x900 [ 268.660514][ T9255] v4l_reqbufs+0x175/0x1d0 [ 268.660539][ T9255] __video_do_ioctl+0xb2a/0xdf0 [ 268.660565][ T9255] ? __might_fault+0xc5/0x140 [ 268.660587][ T9255] ? __pfx___video_do_ioctl+0x10/0x10 [ 268.660623][ T9255] video_usercopy+0x47a/0x1730 [ 268.660650][ T9255] ? __pfx___video_do_ioctl+0x10/0x10 [ 268.660678][ T9255] ? __pfx_video_usercopy+0x10/0x10 [ 268.660720][ T9255] v4l2_ioctl+0x1bd/0x250 [ 268.660744][ T9255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 268.660768][ T9255] __x64_sys_ioctl+0x18e/0x210 [ 268.660788][ T9255] do_syscall_64+0x123/0x7b0 [ 268.660812][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.660829][ T9255] RIP: 0033:0x7fc376d9fb19 [ 268.660846][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.660863][ T9255] RSP: 002b:00007fc377d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.660882][ T9255] RAX: ffffffffffffffda RBX: 00007fc377025fa0 RCX: 00007fc376d9fb19 [ 268.660897][ T9255] RDX: 0000200000000600 RSI: 00000000c0145608 RDI: 0000000000000004 [ 268.660909][ T9255] RBP: 00007fc376e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 268.660920][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.660933][ T9255] R13: 00007fc377026038 R14: 00007fc377025fa0 R15: 00007ffd1b446568 [ 268.660961][ T9255] [ 268.671598][ T9255] syz.0.1174: vmalloc error: size 921600, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.671695][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.0.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.671721][ T9255] Tainted: [L]=SOFTLOCKUP [ 268.671728][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.671739][ T9255] Call Trace: [ 268.671745][ T9255] [ 268.671784][ T9255] dump_stack_lvl+0x100/0x190 [ 268.671822][ T9255] warn_alloc.cold+0x9e/0xb2 [ 268.671845][ T9255] ? __pfx_warn_alloc+0x10/0x10 [ 268.671871][ T9255] ? lockdep_hardirqs_on+0x7d/0x110 [ 268.671897][ T9255] ? __get_vm_area_node+0x2f0/0x350 [ 268.671926][ T9255] ? __get_vm_area_node+0x22b/0x350 [ 268.671953][ T9255] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 268.671986][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.672012][ T9255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.672038][ T9255] ? __kasan_kmalloc+0xaa/0xb0 [ 268.672059][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.672079][ T9255] vmalloc_user_noprof+0x9e/0xe0 [ 268.672098][ T9255] ? vb2_vmalloc_alloc+0x135/0x410 [ 268.672118][ T9255] vb2_vmalloc_alloc+0x135/0x410 [ 268.672137][ T9255] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 268.672157][ T9255] __vb2_queue_alloc+0x8d5/0x1160 [ 268.672186][ T9255] vb2_core_reqbufs+0x899/0xf30 [ 268.672210][ T9255] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 268.672229][ T9255] ? trace_contention_end+0x126/0x160 [ 268.672256][ T9255] ? __mutex_lock+0x267/0x1c10 [ 268.672282][ T9255] ? avc_has_extended_perms+0x4a5/0x10b0 [ 268.672310][ T9255] vb2_ioctl_reqbufs+0x291/0x450 [ 268.672340][ T9255] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 268.672383][ T9255] ? check_fmt+0x230/0x900 [ 268.682240][ T9255] v4l_reqbufs+0x175/0x1d0 [ 268.682276][ T9255] __video_do_ioctl+0xb2a/0xdf0 [ 268.682307][ T9255] ? __might_fault+0xc5/0x140 [ 268.682329][ T9255] ? __pfx___video_do_ioctl+0x10/0x10 [ 268.682364][ T9255] video_usercopy+0x47a/0x1730 [ 268.682398][ T9255] ? __pfx___video_do_ioctl+0x10/0x10 [ 268.682510][ T9255] ? __pfx_video_usercopy+0x10/0x10 [ 268.682547][ T9255] v4l2_ioctl+0x1bd/0x250 [ 268.682569][ T9255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 268.682590][ T9255] __x64_sys_ioctl+0x18e/0x210 [ 268.682608][ T9255] do_syscall_64+0x123/0x7b0 [ 268.682633][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.682650][ T9255] RIP: 0033:0x7fc376d9fb19 [ 268.682665][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.682681][ T9255] RSP: 002b:00007fc377d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.682700][ T9255] RAX: ffffffffffffffda RBX: 00007fc377025fa0 RCX: 00007fc376d9fb19 [ 268.682714][ T9255] RDX: 0000200000000600 RSI: 00000000c0145608 RDI: 0000000000000004 [ 268.682724][ T9255] RBP: 00007fc376e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 268.682734][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.682742][ T9255] R13: 00007fc377026038 R14: 00007fc377025fa0 R15: 00007ffd1b446568 [ 268.682767][ T9255] [ 268.683873][ T9255] Mem-Info: [ 268.683884][ T9255] active_anon:8786 inactive_anon:97 isolated_anon:0 [ 268.683884][ T9255] active_file:608 inactive_file:58181 isolated_file:0 [ 268.683884][ T9255] unevictable:1000 dirty:268 writeback:0 [ 268.683884][ T9255] slab_reclaimable:9371 slab_unreclaimable:71846 [ 268.683884][ T9255] mapped:24912 shmem:1971 pagetables:3527 [ 268.683884][ T9255] sec_pagetables:301 bounce:0 [ 268.683884][ T9255] kernel_misc_reclaimable:0 [ 268.683884][ T9255] free:452057 free_pcp:3956 free_cma:0 [ 268.683931][ T9255] Node 0 active_anon:35124kB inactive_anon:388kB active_file:2432kB inactive_file:229552kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99648kB dirty:1072kB writeback:0kB shmem:5884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14296kB pagetables:4916kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.683983][ T9255] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:3172kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9192kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.684034][ T9255] Node 0 DMA free:15232kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.684081][ T9255] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 268.684112][ T9255] Node 0 DMA32 free:163032kB boost:0kB min:27064kB low:33828kB high:40592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35124kB inactive_anon:388kB active_file:2432kB inactive_file:229552kB unevictable:2000kB writepending:1072kB zspages:0kB present:2080628kB managed:1230580kB mlocked:0kB bounce:0kB free_pcp:15820kB local_pcp:5572kB free_cma:0kB [ 268.684162][ T9255] lowmem_reserve[]: 0 0 0 0 0 [ 268.684281][ T9255] Node 1 Normal free:1629964kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:3172kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 268.684337][ T9255] lowmem_reserve[]: 0 0 0 0 0 [ 268.684373][ T9255] Node 0 DMA: 4*4kB (U) 4*8kB (U) 5*16kB (U) 6*32kB (U) 7*64kB (U) 7*128kB (U) 7*256kB (U) 7*512kB (U) 4*1024kB (U) 2*2048kB (M) 0*4096kB = 15232kB [ 268.684517][ T9255] Node 0 DMA32: 3232*4kB (UME) 839*8kB (UME) 506*16kB (UME) 550*32kB (UME) 295*64kB (UME) 148*128kB (UME) 108*256kB (UME) 52*512kB (UME) 23*1024kB (UM) 1*2048kB (M) 0*4096kB = 163032kB [ 268.684659][ T9255] Node 1 Normal: 265*4kB (UM) 259*8kB (UM) 269*16kB (UME) 268*32kB (UME) 256*64kB (UME) 241*128kB (UME) 230*256kB (UM) 209*512kB (UME) 184*1024kB (UME) 10*2048kB (UME) 291*4096kB (UM) = 1629964kB [ 268.684902][ T9255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.684940][ T9255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.684954][ T9255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.684968][ T9255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.684981][ T9255] 60756 total pagecache pages [ 268.684987][ T9255] 0 pages in swap cache [ 268.684993][ T9255] Free swap = 124996kB [ 268.684999][ T9255] Total swap = 124996kB [ 268.685006][ T9255] 1048443 pages RAM [ 268.685012][ T9255] 0 pages HighMem/MovableOnly [ 268.685018][ T9255] 291488 pages reserved [ 268.685023][ T9255] 0 pages cma reserved [ 269.463030][ T9269] FAULT_INJECTION: forcing a failure. [ 269.463030][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 269.463058][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.1.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.463080][ T9269] Tainted: [L]=SOFTLOCKUP [ 269.463086][ T9269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.463097][ T9269] Call Trace: [ 269.463104][ T9269] [ 269.463112][ T9269] dump_stack_lvl+0x100/0x190 [ 269.463148][ T9269] should_fail_ex.cold+0x5/0xa [ 269.463176][ T9269] should_failslab+0xc2/0x120 [ 269.463199][ T9269] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 269.463229][ T9269] ? proc_alloc_inode+0x25/0x200 [ 269.463247][ T9269] ? __pfx_proc_alloc_inode+0x10/0x10 [ 269.463268][ T9269] proc_alloc_inode+0x25/0x200 [ 269.463285][ T9269] alloc_inode+0x68/0x250 [ 269.463305][ T9269] new_inode+0x22/0x1c0 [ 269.463326][ T9269] proc_pid_make_inode+0x22/0x160 [ 269.463384][ T9269] proc_map_files_instantiate+0x72/0x1a0 [ 269.463414][ T9269] proc_fill_cache+0x2a3/0x3a0 [ 269.463430][ T9269] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 269.463458][ T9269] ? __pfx_proc_fill_cache+0x10/0x10 [ 269.463471][ T9269] ? __pfx___up_read+0x10/0x10 [ 269.463485][ T9269] ? proc_map_files_readdir+0x457/0xb10 [ 269.463505][ T9269] proc_map_files_readdir+0x5b5/0xb10 [ 269.463528][ T9269] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 269.463544][ T9269] ? lock_acquire+0x1d1/0x380 [ 269.463574][ T9269] ? down_read_killable+0x358/0x520 [ 269.463597][ T9269] ? __ww_mutex_lock.constprop.0+0x650/0x3f50 [ 269.463614][ T9269] ? selinux_file_permission+0x30/0x6a0 [ 269.463638][ T9269] iterate_dir+0x2ba/0xc10 [ 269.463663][ T9269] __x64_sys_getdents+0x13b/0x2b0 [ 269.463682][ T9269] ? __pfx___x64_sys_getdents+0x10/0x10 [ 269.463702][ T9269] ? __pfx_filldir+0x10/0x10 [ 269.463731][ T9269] do_syscall_64+0x123/0x7b0 [ 269.463754][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.463774][ T9269] RIP: 0033:0x7fe48319fb19 [ 269.463790][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.463808][ T9269] RSP: 002b:00007fe4840e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 269.463828][ T9269] RAX: ffffffffffffffda RBX: 00007fe483425fa0 RCX: 00007fe48319fb19 [ 269.463839][ T9269] RDX: 0000000000001012 RSI: 0000200000000c00 RDI: 0000000000000004 [ 269.463850][ T9269] RBP: 00007fe483237b70 R08: 0000000000000000 R09: 0000000000000000 [ 269.463861][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.463871][ T9269] R13: 00007fe483426038 R14: 00007fe483425fa0 R15: 00007ffc9960e478 [ 269.463897][ T9269] [ 269.488586][ T9261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.488728][ T9261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.488840][ T9261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.277943][ T9291] FAULT_INJECTION: forcing a failure. [ 270.277943][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 270.277976][ T9291] CPU: 2 UID: 0 PID: 9291 Comm: syz.0.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.296462][ T9291] Tainted: [L]=SOFTLOCKUP [ 270.296471][ T9291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.296483][ T9291] Call Trace: [ 270.296491][ T9291] [ 270.296501][ T9291] dump_stack_lvl+0x100/0x190 [ 270.296539][ T9291] should_fail_ex.cold+0x5/0xa [ 270.296571][ T9291] should_failslab+0xc2/0x120 [ 270.296595][ T9291] kmem_cache_alloc_noprof+0x92/0x6a0 [ 270.296625][ T9291] ? fib_trie_unmerge+0x246/0xc00 [ 270.296651][ T9291] fib_trie_unmerge+0x246/0xc00 [ 270.296677][ T9291] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 270.296701][ T9291] ? lock_acquire+0x1d1/0x380 [ 270.296731][ T9291] fib_unmerge+0xee/0x510 [ 270.296757][ T9291] ? fib_nl2rule_locked+0x3ef/0x740 [ 270.296780][ T9291] fib4_rule_configure+0xaba/0x1160 [ 270.296808][ T9291] ? fib_nl2rule_locked+0x3fe/0x740 [ 270.296830][ T9291] fib_newrule+0x3c3/0x1e50 [ 270.296854][ T9291] ? psi_trigger_create+0x9c1/0xc20 [ 270.296876][ T9291] ? avc_has_perm_noaudit+0x11e/0x470 [ 270.296899][ T9291] ? avc_has_perm_noaudit+0x11e/0x470 [ 270.296923][ T9291] ? __pfx_fib_newrule+0x10/0x10 [ 270.296943][ T9291] ? avc_has_perm_noaudit+0xf0/0x470 [ 270.296986][ T9291] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 270.297013][ T9291] ? find_held_lock+0x2b/0x80 [ 270.297033][ T9291] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 270.297058][ T9291] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 270.297086][ T9291] ? __pfx_fib_nl_newrule+0x10/0x10 [ 270.297106][ T9291] rtnetlink_rcv_msg+0x95e/0xe90 [ 270.297133][ T9291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.297171][ T9291] netlink_rcv_skb+0x159/0x420 [ 270.297196][ T9291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.297225][ T9291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.297258][ T9291] ? netlink_deliver_tap+0x1ae/0xb50 [ 270.297288][ T9291] netlink_unicast+0x668/0x950 [ 270.297317][ T9291] ? __pfx_netlink_unicast+0x10/0x10 [ 270.297349][ T9291] netlink_sendmsg+0x9ac/0x10c0 [ 270.297380][ T9291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.297409][ T9291] ? selinux_socket_sendmsg+0x198/0x2f0 [ 270.297440][ T9291] ? ____sys_sendmsg+0xa99/0xc30 [ 270.297467][ T9291] ____sys_sendmsg+0xa99/0xc30 [ 270.297494][ T9291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.297522][ T9291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.297558][ T9291] ___sys_sendmsg+0x190/0x1e0 [ 270.297586][ T9291] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.297613][ T9291] ? futex_wait+0x11e/0x370 [ 270.297649][ T9291] ? find_held_lock+0x2b/0x80 [ 270.297688][ T9291] __sys_sendmsg+0x160/0x210 [ 270.297710][ T9291] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.297745][ T9291] do_syscall_64+0x123/0x7b0 [ 270.297778][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.297800][ T9291] RIP: 0033:0x7fc376d9fb19 [ 270.297818][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.297836][ T9291] RSP: 002b:00007fc377d18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.297855][ T9291] RAX: ffffffffffffffda RBX: 00007fc377025fa0 RCX: 00007fc376d9fb19 [ 270.297868][ T9291] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 270.297879][ T9291] RBP: 00007fc376e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 270.297890][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.297900][ T9291] R13: 00007fc377026038 R14: 00007fc377025fa0 R15: 00007ffd1b446568 [ 270.297927][ T9291] [ 270.453077][ T9286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.453252][ T9286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.453464][ T9286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.712175][ T9297] FAULT_INJECTION: forcing a failure. [ 270.712175][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 270.712204][ T9297] CPU: 2 UID: 0 PID: 9297 Comm: syz.2.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.712224][ T9297] Tainted: [L]=SOFTLOCKUP [ 270.712229][ T9297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.712238][ T9297] Call Trace: [ 270.712243][ T9297] [ 270.712249][ T9297] dump_stack_lvl+0x100/0x190 [ 270.712280][ T9297] should_fail_ex.cold+0x5/0xa [ 270.712302][ T9297] ? __pfx_ucma_event_handler+0x10/0x10 [ 270.712321][ T9297] should_failslab+0xc2/0x120 [ 270.712340][ T9297] ? __pfx_ucma_event_handler+0x10/0x10 [ 270.712356][ T9297] __kmalloc_cache_noprof+0x91/0x6d0 [ 270.712376][ T9297] ? lock_acquire+0x1d1/0x380 [ 270.712397][ T9297] ? __rdma_create_id+0x5b/0x8f0 [ 270.712414][ T9297] ? __pfx_ucma_event_handler+0x10/0x10 [ 270.712429][ T9297] __rdma_create_id+0x5b/0x8f0 [ 270.712442][ T9297] ? __pfx_ucma_event_handler+0x10/0x10 [ 270.712459][ T9297] rdma_create_user_id+0x7d/0xe0 [ 270.712475][ T9297] ucma_create_id+0x189/0x380 [ 270.712492][ T9297] ? __pfx_ucma_create_id+0x10/0x10 [ 270.712508][ T9297] ? __might_fault+0xc5/0x140 [ 270.712534][ T9297] ? __pfx_ucma_create_id+0x10/0x10 [ 270.712549][ T9297] ucma_write+0x1f6/0x330 [ 270.712570][ T9297] ? __pfx_ucma_write+0x10/0x10 [ 270.712592][ T9297] ? bpf_lsm_file_permission+0x9/0x10 [ 270.712615][ T9297] ? security_file_permission+0x76/0x210 [ 270.712631][ T9297] ? rw_verify_area+0xce/0x6d0 [ 270.712659][ T9297] vfs_write+0x2aa/0x1040 [ 270.712678][ T9297] ? __pfx_ucma_write+0x10/0x10 [ 270.712702][ T9297] ? lock_acquire+0x1d1/0x380 [ 270.712722][ T9297] ? __fget_files+0x34/0x3d0 [ 270.712777][ T9297] ? __pfx_vfs_write+0x10/0x10 [ 270.712795][ T9297] ? find_held_lock+0x2b/0x80 [ 270.712812][ T9297] ? __fget_files+0x215/0x3d0 [ 270.712832][ T9297] ? __fget_files+0x215/0x3d0 [ 270.712853][ T9297] ? __fget_files+0x21f/0x3d0 [ 270.712877][ T9297] ksys_write+0x1f8/0x250 [ 270.712892][ T9297] ? __pfx_ksys_write+0x10/0x10 [ 270.712914][ T9297] do_syscall_64+0x123/0x7b0 [ 270.712935][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.712952][ T9297] RIP: 0033:0x7f37b319fb19 [ 270.712968][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.712983][ T9297] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.713000][ T9297] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 270.713011][ T9297] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 270.713020][ T9297] RBP: 00007f37b3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 270.713028][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.713037][ T9297] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 270.713058][ T9297] [ 271.116554][ T9303] FAULT_INJECTION: forcing a failure. [ 271.116554][ T9303] name failslab, interval 1, probability 0, space 0, times 0 [ 271.116587][ T9303] CPU: 0 UID: 0 PID: 9303 Comm: syz.3.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.116613][ T9303] Tainted: [L]=SOFTLOCKUP [ 271.116619][ T9303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.116630][ T9303] Call Trace: [ 271.116636][ T9303] [ 271.116644][ T9303] dump_stack_lvl+0x100/0x190 [ 271.116679][ T9303] should_fail_ex.cold+0x5/0xa [ 271.116709][ T9303] should_failslab+0xc2/0x120 [ 271.116730][ T9303] kmem_cache_alloc_noprof+0x92/0x6a0 [ 271.116756][ T9303] ? __pfx_map_id_range_down+0x10/0x10 [ 271.116782][ T9303] ? security_inode_alloc+0x3b/0x2c0 [ 271.116812][ T9303] security_inode_alloc+0x3b/0x2c0 [ 271.116836][ T9303] inode_init_always_gfp+0xc75/0xfb0 [ 271.116871][ T9303] alloc_inode+0x8e/0x250 [ 271.116892][ T9303] new_inode+0x22/0x1c0 [ 271.116913][ T9303] proc_pid_make_inode+0x22/0x160 [ 271.116942][ T9303] proc_map_files_instantiate+0x72/0x1a0 [ 271.116971][ T9303] proc_fill_cache+0x2a3/0x3a0 [ 271.117010][ T9303] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 271.117040][ T9303] ? __pfx_proc_fill_cache+0x10/0x10 [ 271.117057][ T9303] ? __pfx___up_read+0x10/0x10 [ 271.117074][ T9303] ? proc_map_files_readdir+0x457/0xb10 [ 271.117098][ T9303] proc_map_files_readdir+0x5b5/0xb10 [ 271.117122][ T9303] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 271.117137][ T9303] ? lock_acquire+0x1d1/0x380 [ 271.117169][ T9303] ? down_read_killable+0x358/0x520 [ 271.117194][ T9303] ? __ww_mutex_lock.constprop.0+0x650/0x3f50 [ 271.117214][ T9303] ? selinux_file_permission+0x30/0x6a0 [ 271.117240][ T9303] iterate_dir+0x2ba/0xc10 [ 271.117263][ T9303] __x64_sys_getdents+0x13b/0x2b0 [ 271.117282][ T9303] ? __pfx___x64_sys_getdents+0x10/0x10 [ 271.117301][ T9303] ? __pfx_filldir+0x10/0x10 [ 271.117329][ T9303] do_syscall_64+0x123/0x7b0 [ 271.117353][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.117369][ T9303] RIP: 0033:0x7f9a2399fb19 [ 271.117385][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.117402][ T9303] RSP: 002b:00007f9a24817028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 271.117420][ T9303] RAX: ffffffffffffffda RBX: 00007f9a23c25fa0 RCX: 00007f9a2399fb19 [ 271.117433][ T9303] RDX: 0000000000001012 RSI: 0000200000000c00 RDI: 0000000000000004 [ 271.117444][ T9303] RBP: 00007f9a23a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 271.117454][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.117464][ T9303] R13: 00007f9a23c26038 R14: 00007f9a23c25fa0 R15: 00007ffdf0836748 [ 271.117489][ T9303] [ 271.758467][ T5906] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 271.906436][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 271.908737][ T5906] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.914918][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.917071][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.917094][ T5906] usb 5-1: Product: syz [ 271.917106][ T5906] usb 5-1: Manufacturer: syz [ 271.917118][ T5906] usb 5-1: SerialNumber: syz [ 272.046642][ T5906] usb 5-1: config 0 descriptor?? [ 272.069788][ T5906] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.069825][ T5906] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 272.335229][ T5906] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 272.421527][ T5906] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 272.421560][ T5906] em28xx 5-1:0.0: board has no eeprom [ 272.485856][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 272.486344][ T69] Bluetooth: hci3: command 0x041b tx timeout [ 272.486378][ T69] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.486400][ T69] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.486958][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 272.499738][ T5906] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 272.499763][ T5906] em28xx 5-1:0.0: dvb set to bulk mode. [ 272.500836][ T5907] em28xx 5-1:0.0: Binding DVB extension [ 272.549668][ T5906] usb 5-1: USB disconnect, device number 15 [ 272.570975][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 272.571110][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571207][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571297][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571398][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571489][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571582][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571675][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571769][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571860][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.571952][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572041][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572133][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572225][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572319][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572422][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572516][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572608][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572700][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572792][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.572881][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.711755][ T5906] em28xx 5-1:0.0: Disconnecting em28xx [ 272.722362][ T9312] em28xx 5-1:0.0: writing to i2c device at 0x4 failed (error=-19) [ 272.722689][ T9312] i2c i2c-2: new_device: Instantiated device saa7115 at 0x02 [ 272.943524][ T5907] em28xx 5-1:0.0: Registering input extension [ 272.943943][ T5906] em28xx 5-1:0.0: Closing input extension [ 273.006541][ T5839] net_ratelimit: 76 callbacks suppressed [ 273.006565][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.006585][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.130611][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.130641][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.197851][ T5906] em28xx: Freeing device [ 273.234959][ T5839] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.234987][ T5839] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.367003][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.367034][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.485159][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 273.485190][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.883829][ T9343] block nbd3: shutting down sockets [ 273.982014][ T9347] FAULT_INJECTION: forcing a failure. [ 273.982014][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 273.982044][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.3.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.982070][ T9347] Tainted: [L]=SOFTLOCKUP [ 273.982078][ T9347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.982088][ T9347] Call Trace: [ 273.982094][ T9347] [ 273.982102][ T9347] dump_stack_lvl+0x100/0x190 [ 273.982174][ T9347] should_fail_ex.cold+0x5/0xa [ 273.982206][ T9347] should_failslab+0xc2/0x120 [ 273.982225][ T9347] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 273.982245][ T9347] ? xas_create+0x1f4/0x14e0 [ 273.982266][ T9347] ? kvasprintf_const+0x66/0x1a0 [ 273.982293][ T9347] kvasprintf+0xbc/0x150 [ 273.982417][ T9347] ? __pfx_kvasprintf+0x10/0x10 [ 273.982445][ T9347] ? find_held_lock+0x2b/0x80 [ 273.982483][ T9347] ? ida_alloc_range+0x70d/0x830 [ 273.982509][ T9347] ? rcu_is_watching+0x13/0xc0 [ 273.982531][ T9347] ? ida_alloc_range+0x70d/0x830 [ 273.982560][ T9347] kvasprintf_const+0x66/0x1a0 [ 273.982587][ T9347] kobject_set_name_vargs+0x5a/0x140 [ 273.982615][ T9347] kobject_init_and_add+0xe7/0x180 [ 273.982632][ T9347] ? __pfx_kobject_init_and_add+0x10/0x10 [ 273.982654][ T9347] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 273.982680][ T9347] ? lockdep_init_map_type+0x5c/0x250 [ 273.982707][ T9347] swnode_register+0x5c9/0x750 [ 273.982732][ T9347] fwnode_create_software_node+0x1c8/0x3f0 [ 273.982755][ T9347] device_create_managed_software_node+0x103/0x270 [ 273.982782][ T9347] iommufd_test+0x3010/0x65f0 [ 273.982801][ T9347] ? __lock_acquire+0x5c0/0x1f40 [ 273.982827][ T9347] ? __lock_acquire+0x5c0/0x1f40 [ 273.982852][ T9347] ? __pfx_iommufd_test+0x10/0x10 [ 273.982869][ T9347] ? tomoyo_path_number_perm+0x188/0x580 [ 273.982901][ T9347] ? lock_acquire+0x1d1/0x380 [ 273.982925][ T9347] ? __might_fault+0xc5/0x140 [ 273.982948][ T9347] ? find_held_lock+0x2b/0x80 [ 273.982966][ T9347] ? __might_fault+0xc5/0x140 [ 273.982997][ T9347] iommufd_fops_ioctl+0x358/0x520 [ 273.983018][ T9347] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 273.983034][ T9347] ? __fget_files+0x34/0x3d0 [ 273.983068][ T9347] ? selinux_file_ioctl+0x1e0/0x290 [ 273.983086][ T9347] ? selinux_file_ioctl+0x1e7/0x290 [ 273.983105][ T9347] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 273.983123][ T9347] __x64_sys_ioctl+0x18e/0x210 [ 273.983145][ T9347] do_syscall_64+0x123/0x7b0 [ 273.983169][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.983190][ T9347] RIP: 0033:0x7f9a2399fb19 [ 273.983207][ T9347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.983224][ T9347] RSP: 002b:00007f9a24817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.983242][ T9347] RAX: ffffffffffffffda RBX: 00007f9a23c25fa0 RCX: 00007f9a2399fb19 [ 273.983254][ T9347] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 273.983264][ T9347] RBP: 00007f9a23a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 273.983274][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.983285][ T9347] R13: 00007f9a23c26038 R14: 00007f9a23c25fa0 R15: 00007ffdf0836748 [ 273.983310][ T9347] [ 273.983441][ T9347] kobject: can not set name properly! [ 273.983505][ T9347] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 274.384875][ T5907] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 274.549046][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 274.550206][ T5907] usb 6-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.551282][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.553328][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.553349][ T5907] usb 6-1: Product: syz [ 274.553361][ T5907] usb 6-1: Manufacturer: syz [ 274.553374][ T5907] usb 6-1: SerialNumber: syz [ 274.640165][ T5907] usb 6-1: config 0 descriptor?? [ 274.659292][ T5907] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.659322][ T5907] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 274.935355][ T5907] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 274.976014][ T9362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.976197][ T9362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.976335][ T9362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.164053][ T5907] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 275.164083][ T5907] em28xx 6-1:0.0: board has no eeprom [ 275.179664][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.180363][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.181609][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.182526][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.183159][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.184303][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.185980][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.187181][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.187518][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.187872][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.188527][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.189085][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.189617][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.190184][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.190754][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.191341][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.191920][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.192617][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.193151][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.193740][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.194689][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.196496][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.197416][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.200156][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.202376][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.203979][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.205457][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.206858][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.207544][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.208167][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.208627][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.209315][ T9350] em28xx 6-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 275.209578][ T9350] i2c i2c-2: new_device: Instantiated device saa7115 at 0x02 [ 275.258841][ T5907] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 275.258870][ T5907] em28xx 6-1:0.0: dvb set to bulk mode. [ 275.259637][ T5906] em28xx 6-1:0.0: Binding DVB extension [ 275.294863][ T5907] usb 6-1: USB disconnect, device number 16 [ 275.296011][ T5907] em28xx 6-1:0.0: Disconnecting em28xx [ 275.639363][ T5906] em28xx 6-1:0.0: Registering input extension [ 275.639581][ T5907] em28xx 6-1:0.0: Closing input extension [ 275.861690][ T5907] em28xx: Freeing device [ 276.375588][ T5892] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 276.559268][ T5892] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 276.560306][ T5892] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 276.560384][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.604826][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.651622][ T9402] FAULT_INJECTION: forcing a failure. [ 276.651622][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 276.651654][ T9402] CPU: 2 UID: 0 PID: 9402 Comm: syz.3.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.651681][ T9402] Tainted: [L]=SOFTLOCKUP [ 276.651687][ T9402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.651698][ T9402] Call Trace: [ 276.651705][ T9402] [ 276.651713][ T9402] dump_stack_lvl+0x100/0x190 [ 276.651757][ T9402] should_fail_ex.cold+0x5/0xa [ 276.651783][ T9402] should_failslab+0xc2/0x120 [ 276.651799][ T9402] __kmalloc_noprof+0xfc/0x840 [ 276.651820][ T9402] ? usb_hcd_submit_urb+0x5e3/0x2140 [ 276.651845][ T9402] usb_hcd_submit_urb+0x5e3/0x2140 [ 276.651874][ T9402] usb_submit_urb+0x827/0x19b0 [ 276.651893][ T9402] ? __init_swait_queue_head+0xca/0x150 [ 276.651918][ T9402] usb_start_wait_urb+0x10e/0x580 [ 276.651934][ T9402] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 276.651957][ T9402] ? __asan_memset+0x23/0x50 [ 276.651982][ T9402] usb_control_msg+0x328/0x4b0 [ 276.651998][ T9402] ? __pfx_usb_control_msg+0x10/0x10 [ 276.652014][ T9402] ? __lock_acquire+0x5c0/0x1f40 [ 276.652038][ T9402] hub_ext_port_status+0x14e/0x690 [ 276.652060][ T9402] hub_activate+0x6e5/0x1c90 [ 276.652082][ T9402] ? __pfx_hub_activate+0x10/0x10 [ 276.652097][ T9402] ? find_held_lock+0x2b/0x80 [ 276.652112][ T9402] ? psi_trigger_create+0x9c0/0xc20 [ 276.652130][ T9402] ? usbdev_ioctl+0x3900/0x3b40 [ 276.652143][ T9402] ? usb_generic_driver_resume+0x70/0xa0 [ 276.652158][ T9402] ? hcd_bus_resume+0x37b/0x810 [ 276.652181][ T9402] hub_resume+0xb0/0x400 [ 276.652198][ T9402] ? __pfx_hub_resume+0x10/0x10 [ 276.652213][ T9402] ? __pfx_hcd_bus_resume+0x10/0x10 [ 276.652236][ T9402] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 276.652257][ T9402] usb_resume_both+0x53a/0x7f0 [ 276.652275][ T9402] ? do_dentry_open+0x674/0x1470 [ 276.652290][ T9402] ? __pfx_usb_resume_both+0x10/0x10 [ 276.652306][ T9402] ? __rpm_callback+0x272/0x620 [ 276.652324][ T9402] ? __pfx_usb_runtime_resume+0x10/0x10 [ 276.652343][ T9402] ? rcu_is_watching+0x13/0xc0 [ 276.652361][ T9402] ? __pfx_usb_runtime_resume+0x10/0x10 [ 276.652382][ T9402] __rpm_callback+0xc8/0x620 [ 276.652398][ T9402] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 276.652419][ T9402] ? __pfx_usb_runtime_resume+0x10/0x10 [ 276.652439][ T9402] rpm_callback+0x11f/0x150 [ 276.652455][ T9402] ? __pfx_usb_runtime_resume+0x10/0x10 [ 276.652474][ T9402] rpm_resume+0xd13/0x1320 [ 276.652493][ T9402] ? usbdev_open+0x1d1/0x860 [ 276.652510][ T9402] ? klist_put+0xcb/0x1d0 [ 276.652533][ T9402] ? __pfx_rpm_resume+0x10/0x10 [ 276.652549][ T9402] ? do_raw_spin_lock+0x128/0x260 [ 276.652563][ T9402] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.652578][ T9402] ? _raw_spin_lock_irqsave+0x52/0x60 [ 276.652596][ T9402] __pm_runtime_resume+0xb6/0x170 [ 276.652616][ T9402] usb_autoresume_device+0x23/0xe0 [ 276.652637][ T9402] usbdev_open+0x228/0x860 [ 276.652657][ T9402] ? kobject_get_unless_zero+0x156/0x200 [ 276.652677][ T9402] ? __pfx_usbdev_open+0x10/0x10 [ 276.652695][ T9402] ? chrdev_open+0x10b/0x6a0 [ 276.652710][ T9402] ? chrdev_open+0x10b/0x6a0 [ 276.652730][ T9402] ? __pfx_usbdev_open+0x10/0x10 [ 276.652755][ T9402] chrdev_open+0x234/0x6a0 [ 276.652775][ T9402] ? __pfx_chrdev_open+0x10/0x10 [ 276.652793][ T9402] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 276.652811][ T9402] do_dentry_open+0x674/0x1470 [ 276.652826][ T9402] ? __pfx_chrdev_open+0x10/0x10 [ 276.652845][ T9402] vfs_open_consume+0xcc/0x460 [ 276.652865][ T9402] path_openat+0x1547/0x23f0 [ 276.652886][ T9402] ? __pfx_path_openat+0x10/0x10 [ 276.652909][ T9402] do_file_open+0x20e/0x430 [ 276.652927][ T9402] ? __pfx_do_file_open+0x10/0x10 [ 276.652960][ T9402] ? _raw_spin_unlock+0x28/0x50 [ 276.652973][ T9402] ? alloc_fd+0x471/0x7a0 [ 276.653022][ T9402] do_sys_openat2+0x163/0x1d0 [ 276.653045][ T9402] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.653066][ T9402] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 276.653095][ T9402] __x64_sys_openat+0x12d/0x210 [ 276.653114][ T9402] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.653141][ T9402] do_syscall_64+0x123/0x7b0 [ 276.653159][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.653174][ T9402] RIP: 0033:0x7f9a2396034e [ 276.653187][ T9402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.653202][ T9402] RSP: 002b:00007f9a24816b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.653218][ T9402] RAX: ffffffffffffffda RBX: 00007f9a248176c0 RCX: 00007f9a2396034e [ 276.653229][ T9402] RDX: 0000000000101101 RSI: 00007f9a24816c00 RDI: ffffffffffffff9c [ 276.653238][ T9402] RBP: 00007f9a24816c00 R08: 0000000000000000 R09: 0000000000000000 [ 276.653246][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 276.653257][ T9402] R13: 00007f9a23c26038 R14: 00007f9a23c25fa0 R15: 00007ffdf0836748 [ 276.653276][ T9402] [ 276.835589][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 276.856713][ T5907] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.861915][ T5907] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 276.862009][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.862028][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.862047][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.862069][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.862101][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.888871][ T44] audit: type=1400 audit(2000000067.520:7167): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.888988][ T44] audit: type=1400 audit(2000000067.590:7168): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889028][ T44] audit: type=1400 audit(2000000067.590:7169): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889066][ T44] audit: type=1400 audit(2000000067.590:7170): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889175][ T44] audit: type=1400 audit(2000000067.590:7171): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889216][ T44] audit: type=1400 audit(2000000067.590:7172): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889253][ T44] audit: type=1400 audit(2000000067.590:7173): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889351][ T44] audit: type=1400 audit(2000000067.610:7174): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889389][ T44] audit: type=1400 audit(2000000067.610:7175): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.889426][ T44] audit: type=1400 audit(2000000067.610:7176): avc: denied { search } for pid=9403 comm="getty" name="/" dev="sda1" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 276.922258][ T5892] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 277.056745][ T69] Bluetooth: hci3: command 0x041b tx timeout [ 277.056780][ T69] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.061839][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.205338][ T45] usb 6-1: USB disconnect, device number 17 [ 277.275913][ T5907] usb 5-1: usb_control_msg returned -32 [ 277.275961][ T5907] usbtmc 5-1:16.0: can't read capabilities syzkaller syzkaller login: [ 277.784697][ T9418] bridge0: port 2(syz_tun) entered blocking state [ 277.785688][ T9418] bridge0: port 2(syz_tun) entered disabled state [ 277.785842][ T9418] syz_tun: entered allmulticast mode [ 277.787666][ T9418] syz_tun: entered promiscuous mode [ 277.790023][ T9418] vlan2: entered promiscuous mode [ 277.790043][ T9418] bond0: entered promiscuous mode [ 277.799146][ T9418] bridge0: port 2(syz_tun) entered blocking state [ 277.799248][ T9418] bridge0: port 2(syz_tun) entered forwarding state [ 278.073472][ T9429] FAULT_INJECTION: forcing a failure. [ 278.073472][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 278.073504][ T9429] CPU: 2 UID: 0 PID: 9429 Comm: syz.2.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.073529][ T9429] Tainted: [L]=SOFTLOCKUP [ 278.073535][ T9429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.073547][ T9429] Call Trace: [ 278.073553][ T9429] [ 278.073559][ T9429] dump_stack_lvl+0x100/0x190 [ 278.073590][ T9429] should_fail_ex.cold+0x5/0xa [ 278.073615][ T9429] should_failslab+0xc2/0x120 [ 278.073634][ T9429] __kmalloc_cache_noprof+0x91/0x6d0 [ 278.073657][ T9429] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 278.073690][ T9429] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 278.073719][ T9429] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 278.073740][ T9429] selinux_socket_post_create+0x363/0x7e0 [ 278.073779][ T9429] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 278.073810][ T9429] ? tcp_v4_init_sock+0x15/0xb0 [ 278.073830][ T9429] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 278.073866][ T9429] ? inet_create+0x962/0x1060 [ 278.073892][ T9429] security_socket_post_create+0xaf/0x270 [ 278.073921][ T9429] __sock_create+0x70b/0x860 [ 278.073952][ T9429] smc_create_clcsk+0x37/0xd0 [ 278.073969][ T9429] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 278.073994][ T9429] inet_create+0x94c/0x1060 [ 278.074020][ T9429] ? inet_create+0x94/0x1060 [ 278.074048][ T9429] __sock_create+0x339/0x860 [ 278.074080][ T9429] __sys_socket+0x14d/0x260 [ 278.074097][ T9429] ? __fget_files+0x21f/0x3d0 [ 278.074139][ T9429] ? __pfx___sys_socket+0x10/0x10 [ 278.074166][ T9429] __x64_sys_socket+0x72/0xb0 [ 278.074184][ T9429] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.074207][ T9429] do_syscall_64+0x123/0x7b0 [ 278.074231][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.074249][ T9429] RIP: 0033:0x7f37b319fb19 [ 278.074264][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.074281][ T9429] RSP: 002b:00007f37b3fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 278.074299][ T9429] RAX: ffffffffffffffda RBX: 00007f37b3425fa0 RCX: 00007f37b319fb19 [ 278.074310][ T9429] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000002 [ 278.074321][ T9429] RBP: 00007f37b3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 278.074330][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.074339][ T9429] R13: 00007f37b3426038 R14: 00007f37b3425fa0 R15: 00007ffdc6e51918 [ 278.074363][ T9429] [ 278.103578][ T5879] net_ratelimit: 79 callbacks suppressed [ 278.103597][ T5879] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 278.103617][ T5879] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.133631][ C2] ================================================================== [ 278.133652][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 278.133698][ C2] Read of size 1 at addr ffff888028f41ce8 by task kworker/u33:2/58 [ 278.133717][ C2] [ 278.133731][ C2] CPU: 2 UID: 0 PID: 58 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.133758][ C2] Tainted: [L]=SOFTLOCKUP [ 278.133766][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.133779][ C2] Workqueue: events_unbound toggle_allocation_gate [ 278.133806][ C2] Call Trace: [ 278.133814][ C2] [ 278.133823][ C2] dump_stack_lvl+0x100/0x190 [ 278.133855][ C2] print_report+0x13d/0x4b0 [ 278.133886][ C2] ? __virt_addr_valid+0x239/0x430 [ 278.133910][ C2] ? find_endpoint+0x2a3/0x2c0 [ 278.133936][ C2] kasan_report+0xdf/0x1c0 [ 278.133960][ C2] ? find_endpoint+0x2a3/0x2c0 [ 278.133990][ C2] find_endpoint+0x2a3/0x2c0 [ 278.134018][ C2] dummy_timer+0x2745/0x3840 [ 278.134040][ C2] ? do_raw_spin_lock+0x128/0x260 [ 278.134061][ C2] ? find_held_lock+0x2b/0x80 [ 278.134082][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 278.134111][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 278.134352][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.134377][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 278.134407][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 278.134438][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 278.134459][ C2] ? mark_held_locks+0x40/0x70 [ 278.134487][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.134510][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 278.134529][ C2] __hrtimer_run_queues+0x448/0x9a0 [ 278.134560][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 278.134588][ C2] handle_softirqs+0x216/0xa20 [ 278.134613][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 278.134636][ C2] ? _raw_spin_unlock+0x28/0x50 [ 278.134656][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 278.134694][ C2] __irq_exit_rcu+0x178/0x220 [ 278.134737][ C2] irq_exit_rcu+0x9/0x30 [ 278.134759][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 278.134784][ C2] [ 278.134790][ C2] [ 278.134798][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.134822][ C2] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 278.134854][ C2] Code: bf 03 00 00 00 e9 38 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 0a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 278.134874][ C2] RSP: 0018:ffffc90000abf898 EFLAGS: 00000202 [ 278.134893][ C2] RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff8201a513 [ 278.134905][ C2] RDX: ffff8880212c4b00 RSI: 0000000000000001 RDI: 0000000000000000 [ 278.134920][ C2] RBP: ffff88806a3447e0 R08: 0000000000000000 R09: 0000000000000001 [ 278.134932][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1004258c13 [ 278.134945][ C2] R13: 0000000000000003 R14: ffffed100d4688fd R15: 0000000000000001 [ 278.134961][ C2] ? smp_call_function_many_cond+0x913/0x18c0 [ 278.134999][ C2] smp_call_function_many_cond+0x913/0x18c0 [ 278.135034][ C2] ? __pfx_do_sync_core+0x10/0x10 [ 278.135069][ C2] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 278.135101][ C2] ? __pfx___text_poke+0x10/0x10 [ 278.135129][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 278.135154][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 278.135175][ C2] smp_text_poke_batch_finish+0x332/0xc60 [ 278.135198][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 278.135219][ C2] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 278.135244][ C2] ? arch_jump_label_transform_queue+0xc0/0x120 [ 278.135273][ C2] ? find_held_lock+0x2b/0x80 [ 278.135300][ C2] arch_jump_label_transform_apply+0x1c/0x30 [ 278.135323][ C2] jump_label_update+0x37a/0x550 [ 278.135348][ C2] static_key_enable_cpuslocked+0x1bc/0x270 [ 278.135374][ C2] static_key_enable+0x1a/0x20 [ 278.135397][ C2] toggle_allocation_gate+0xfe/0x2d0 [ 278.135420][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 278.135441][ C2] ? process_one_work+0xa2c/0x1b10 [ 278.135465][ C2] ? process_one_work+0x906/0x1b10 [ 278.135487][ C2] ? process_one_work+0x906/0x1b10 [ 278.135513][ C2] process_one_work+0xac7/0x1b10 [ 278.135540][ C2] ? __pfx_process_one_work+0x10/0x10 [ 278.135563][ C2] ? lock_acquire+0x1d1/0x380 [ 278.135593][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 278.135617][ C2] worker_thread+0x5ef/0xe50 [ 278.135645][ C2] ? kthread+0x13a/0x450 [ 278.135664][ C2] ? __pfx_worker_thread+0x10/0x10 [ 278.135693][ C2] kthread+0x373/0x450 [ 278.135713][ C2] ? __pfx_kthread+0x10/0x10 [ 278.135735][ C2] ret_from_fork+0x730/0xd60 [ 278.135762][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 278.135788][ C2] ? __switch_to+0x800/0x10e0 [ 278.135807][ C2] ? __pfx_kthread+0x10/0x10 [ 278.135827][ C2] ret_from_fork_asm+0x1a/0x30 [ 278.135860][ C2] [ 278.135868][ C2] [ 278.135872][ C2] Allocated by task 9346: [ 278.135883][ C2] kasan_save_stack+0x30/0x50 [ 278.135904][ C2] kasan_save_track+0x14/0x30 [ 278.135922][ C2] __kasan_kmalloc+0xaa/0xb0 [ 278.135940][ C2] __kmalloc_noprof+0x32f/0x840 [ 278.135966][ C2] security_inode_init_security+0x113/0x370 [ 278.135990][ C2] shmem_symlink+0x163/0xbf0 [ 278.136009][ C2] vfs_symlink+0x17b/0x520 [ 278.136026][ C2] filename_symlinkat+0x2a6/0x5a0 [ 278.136051][ C2] __x64_sys_symlinkat+0x9c/0xe0 [ 278.136075][ C2] do_syscall_64+0x123/0x7b0 [ 278.136096][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.136115][ C2] [ 278.136120][ C2] Freed by task 9346: [ 278.136129][ C2] kasan_save_stack+0x30/0x50 [ 278.136149][ C2] kasan_save_track+0x14/0x30 [ 278.136168][ C2] kasan_save_free_info+0x3b/0x70 [ 278.136192][ C2] __kasan_slab_free+0x5f/0x80 [ 278.136211][ C2] kfree+0x22b/0x6d0 [ 278.136233][ C2] security_inode_init_security+0x2bf/0x370 [ 278.136255][ C2] shmem_symlink+0x163/0xbf0 [ 278.136274][ C2] vfs_symlink+0x17b/0x520 [ 278.136290][ C2] filename_symlinkat+0x2a6/0x5a0 [ 278.136314][ C2] __x64_sys_symlinkat+0x9c/0xe0 [ 278.136340][ C2] do_syscall_64+0x123/0x7b0 [ 278.136359][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.136380][ C2] [ 278.136385][ C2] The buggy address belongs to the object at ffff888028f41c00 [ 278.136385][ C2] which belongs to the cache kmalloc-512 of size 512 [ 278.136400][ C2] The buggy address is located 232 bytes inside of [ 278.136400][ C2] freed 512-byte region [ffff888028f41c00, ffff888028f41e00) [ 278.136420][ C2] [ 278.136425][ C2] The buggy address belongs to the physical page: [ 278.136434][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28f40 [ 278.136453][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.136469][ C2] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.136488][ C2] page_type: f5(slab) [ 278.136506][ C2] raw: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 278.136525][ C2] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 278.136543][ C2] head: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 278.136561][ C2] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 278.136579][ C2] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 278.136596][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 278.136608][ C2] page dumped because: kasan: bad access detected [ 278.136617][ C2] page_owner tracks the page as allocated [ 278.136624][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6996, tgid 6994 (syz.0.308), ts 168222506351 [ 278.136657][ C2] post_alloc_hook+0xfd/0x120 [ 278.136687][ C2] get_page_from_freelist+0x112f/0x3640 [ 278.136712][ C2] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 278.136736][ C2] new_slab+0xb1/0x6d0 [ 278.136759][ C2] refill_objects+0xe3/0x410 [ 278.136781][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 278.136804][ C2] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 278.136827][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 278.136854][ C2] snd_mixer_oss_build_test_all+0x2b4/0x6e0 [ 278.136882][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 278.136907][ C2] snd_mixer_oss_notify_handler+0x4e5/0xa10 [ 278.136925][ C2] snd_card_register+0x2bd/0x780 [ 278.136945][ C2] f_midi2_bind+0x1198/0x2770 [ 278.136967][ C2] usb_add_function+0x219/0x890 [ 278.136992][ C2] configfs_composite_bind+0xd83/0x1960 [ 278.137016][ C2] gadget_bind_driver+0x28c/0xbf0 [ 278.137034][ C2] page last free pid 6889 tgid 6889 ts 163824185091 stack trace: [ 278.137048][ C2] __free_frozen_pages+0x7b4/0x1110 [ 278.137068][ C2] kvm_put_kvm+0x963/0xc00 [ 278.137091][ C2] kvm_vm_release+0x65/0x80 [ 278.137111][ C2] __fput+0x3fb/0xb50 [ 278.137132][ C2] fput_close_sync+0x118/0x250 [ 278.137156][ C2] filp_close_sync+0x75/0xa0 [ 278.137179][ C2] __range_close+0x4a6/0x8b0 [ 278.137203][ C2] __x64_sys_close_range+0x1f8/0x430 [ 278.137226][ C2] do_syscall_64+0x123/0x7b0 [ 278.137246][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.137265][ C2] [ 278.137269][ C2] Memory state around the buggy address: [ 278.137278][ C2] ffff888028f41b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.137292][ C2] ffff888028f41c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.137304][ C2] >ffff888028f41c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.137314][ C2] ^ [ 278.137325][ C2] ffff888028f41d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.137338][ C2] ffff888028f41d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.137347][ C2] ================================================================== [ 278.137358][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 278.139771][ C2] CPU: 2 UID: 0 PID: 58 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.158184][ C2] Tainted: [L]=SOFTLOCKUP [ 279.247409][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.263039][ C2] Workqueue: events_unbound toggle_allocation_gate [ 279.268950][ C2] Call Trace: [ 279.275740][ C2] [ 279.285536][ C2] dump_stack_lvl+0x100/0x190 [ 279.289542][ C2] vpanic+0x2dc/0x6f8 [ 279.293341][ C2] panic+0xd1/0xe0 [ 279.299109][ C2] ? __pfx_panic+0x10/0x10 [ 279.302605][ C2] ? end_report.part.0+0x23/0x90 [ 279.310747][ C2] ? rcu_is_watching+0x13/0xc0 [ 279.315082][ C2] ? end_report.part.0+0x23/0x90 [ 279.328266][ C2] check_panic_on_warn.cold+0x19/0x34 [ 279.343150][ C2] end_report.part.0+0x3a/0x90 [ 279.345193][ C2] kasan_report.cold+0xe/0x18 [ 279.347332][ C2] ? find_endpoint+0x2a3/0x2c0 [ 279.349829][ C2] find_endpoint+0x2a3/0x2c0 [ 279.354585][ C2] dummy_timer+0x2745/0x3840 [ 279.371599][ C2] ? do_raw_spin_lock+0x128/0x260 [ 279.374447][ C2] ? find_held_lock+0x2b/0x80 [ 279.377532][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 279.380112][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 279.382526][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.384694][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 279.402762][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 279.406231][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 279.409101][ C2] ? mark_held_locks+0x40/0x70 [ 279.411761][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 279.415246][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 279.421325][ C2] __hrtimer_run_queues+0x448/0x9a0 [ 279.424198][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 279.429696][ C2] handle_softirqs+0x216/0xa20 [ 279.439630][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 279.443539][ C2] ? _raw_spin_unlock+0x28/0x50 [ 279.447322][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 279.455002][ C2] __irq_exit_rcu+0x178/0x220 [ 279.461643][ C2] irq_exit_rcu+0x9/0x30 [ 279.470245][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 279.474033][ C2] [ 279.476077][ C2] [ 279.479558][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.489951][ C2] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 279.494488][ C2] Code: bf 03 00 00 00 e9 38 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 0a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 279.510548][ C2] RSP: 0018:ffffc90000abf898 EFLAGS: 00000202 [ 279.517506][ C2] RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff8201a513 [ 279.522908][ C2] RDX: ffff8880212c4b00 RSI: 0000000000000001 RDI: 0000000000000000 [ 279.532071][ C2] RBP: ffff88806a3447e0 R08: 0000000000000000 R09: 0000000000000001 [ 279.538828][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1004258c13 [ 279.543925][ C2] R13: 0000000000000003 R14: ffffed100d4688fd R15: 0000000000000001 [ 279.551055][ C2] ? smp_call_function_many_cond+0x913/0x18c0 [ 279.557763][ C2] smp_call_function_many_cond+0x913/0x18c0 [ 279.561998][ C2] ? __pfx_do_sync_core+0x10/0x10 [ 279.565281][ C2] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 279.569521][ C2] ? __pfx___text_poke+0x10/0x10 [ 279.572551][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 279.577233][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 279.584430][ C2] smp_text_poke_batch_finish+0x332/0xc60 [ 279.588222][ C2] ? __kmalloc_cache_node_noprof+0xa9/0x710 [ 279.593720][ C2] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 279.598167][ C2] ? arch_jump_label_transform_queue+0xc0/0x120 [ 279.605354][ C2] ? find_held_lock+0x2b/0x80 [ 279.608115][ C2] arch_jump_label_transform_apply+0x1c/0x30 [ 279.612476][ C2] jump_label_update+0x37a/0x550 [ 279.615746][ C2] static_key_enable_cpuslocked+0x1bc/0x270 [ 279.618594][ C2] static_key_enable+0x1a/0x20 [ 279.621230][ C2] toggle_allocation_gate+0xfe/0x2d0 [ 279.623945][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 279.628841][ C2] ? process_one_work+0xa2c/0x1b10 [ 279.633922][ C2] ? process_one_work+0x906/0x1b10 [ 279.638967][ C2] ? process_one_work+0x906/0x1b10 [ 279.642532][ C2] process_one_work+0xac7/0x1b10 [ 279.644582][ C2] ? __pfx_process_one_work+0x10/0x10 [ 279.646656][ C2] ? lock_acquire+0x1d1/0x380 [ 279.648540][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 279.651529][ C2] worker_thread+0x5ef/0xe50 [ 279.656297][ C2] ? kthread+0x13a/0x450 [ 279.674915][ C2] ? __pfx_worker_thread+0x10/0x10 [ 279.677166][ C2] kthread+0x373/0x450 [ 279.678998][ C2] ? __pfx_kthread+0x10/0x10 [ 279.681093][ C2] ret_from_fork+0x730/0xd60 [ 279.683486][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 279.686180][ C2] ? __switch_to+0x800/0x10e0 [ 279.688293][ C2] ? __pfx_kthread+0x10/0x10 [ 279.704353][ C2] ret_from_fork_asm+0x1a/0x30 [ 279.706745][ C2] [ 281.393146][ C2] Shutting down cpus with NMI [ 281.397770][ C2] Kernel Offset: disabled [ 281.400651][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:09:04 Registers: info registers vcpu 0 CPU#0 RAX=ffff800000000000 RBX=ffffffff90e09310 RCX=ffffffff81ec7485 RDX=0000000000000001 RSI=0000000000000028 RDI=ffffffff90e09310 RBP=ffffffff90e09310 RSP=ffffc90005ee79d8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90e09337 R11=0000000000000000 R12=0000000000000000 R13=ffffffff926b0344 R14=fffffbfff39eae23 R15=ffffffff9cf57118 RIP=ffffffff8288e57c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4471000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555564570a28 CR3=000000005b5eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8177ce08 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b446a56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b446a56 00007ffd1b446a5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376ffa600 00007fc376ffa5e0 00007fc376ffa5e8 00007fc376ffa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376ffa5f8 00007fc376ffa5c8 00007fc376ffa600 00007fc376ffa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff888020abcb00 RSI=ffffffff81b87e9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88806a1243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b87e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4571000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0dc3bea6b0 CR3=000000000fd98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf0836c36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf0836c36 00007ffdf0836c3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000188 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c367d5 RDI=ffffffff9cf57000 RBP=ffffffff9cf56fc0 RSP=ffffc900006583b8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000038 R14=0000000000000004 R15=ffffc900006586d0 RIP=ffffffff85c367ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4671000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f37b3fd9ff8 CR3=000000005b5eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b446a56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b446a56 00007ffd1b446a5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc376e381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ba285 RBX=ffff888020ab8000 RCX=ffffffff8bef7375 RDX=0000000000000001 RSI=ffffffff8e629a5f RDI=ffffffff8c835a80 RBP=ffffed1004157000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d466825 R10=ffff88806a33412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bef580f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d4771000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c41f3cb CR3=0000000024afb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a2475d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf0836c36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf0836c36 00007ffdf0836c3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23a381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23bfa600 00007f9a23bfa5e0 00007f9a23bfa5e8 00007f9a23bfa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a2475d020 00007f9a23bfa5c0 00007f9a23bfa5d0 00007f9a23bfa610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a23bfa5f8 00007f9a23bfa5c8 00007f9a23bfa600 00007f9a23bfa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000