last executing test programs: 4.916159582s ago: executing program 0 (id=872): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0xc804) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') pread64(r1, &(0x7f0000000040)=""/40, 0x28, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000480)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x3, 'syz1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x10, 0xffff}, {0xc, 0xfff2}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xb2, 0x6b}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f00000009c0)='md', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000a40)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") 3.730192626s ago: executing program 0 (id=884): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f00000004c0)='./bus\x00') creat(&(0x7f0000000500)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x1c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000ac0)={0x1, 0x0, [{0x1d9, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file3\x00', 0x1c2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x9, 0x3, 0x2, 0xc274, 0x0, 0xffffffffffffffff, 0x3}, 0x50) renameat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = open(&(0x7f0000000b80)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000bc0)='.\x00', 0x100000, 0x0) flock(r6, 0x1) flock(r5, 0x5) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.669185995s ago: executing program 0 (id=881): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004880)={0xb8, 0xfffffff5, 0x3, [{{0x1, 0x4, 0x8, 0x5, 0x5, 0x6b5, {0x6, 0x7fffffff, 0x29a3, 0xfffffffffffffff0, 0x81, 0x81, 0x8001, 0x1, 0x6, 0xa000, 0x2, 0x0, 0x0, 0xfffffffe, 0x5e72}}, {0x0, 0xdb66, 0xa, 0x7, '/dev/cuse\x00'}}]}, 0xb8) 2.666335948s ago: executing program 3 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 2.352957969s ago: executing program 0 (id=882): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x34, r2, 0x1, 0x0, 0xfffffffe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x69, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x34}}, 0x8008) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r4, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r7, r8}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) fanotify_init(0xef0, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.352483229s ago: executing program 3 (id=885): r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000140)=0x80000001, 0xfffffffa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000100001400128009000100626f6e64000000000400028008000300", @ANYRES32=r5], 0x3c}}, 0x24000840) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x30000001}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r8, 0x2275, &(0x7f0000000340)={0x22, 0x5, 0x48, 0x7}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) 1.20914382s ago: executing program 0 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x16, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r1, 0x0, 0xe, 0x0, &(0x7f0000001100)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.081415536s ago: executing program 0 (id=887): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000940)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000001940)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000019c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000001a00)={"ee65ee1f10dad4f2c63afae3136e0c0d", 0x0, r3, {0xf, 0x6}, {0xe, 0x7}, 0x0, [0x5, 0x1d6, 0x1, 0x800, 0x9, 0x100, 0x8, 0x100000001, 0xa4, 0x0, 0x4, 0x5, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x4, 0x10000000000]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'}) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x20, &(0x7f0000000240)="900100"/32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 669.057867ms ago: executing program 2 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000080000000100010009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f00)={r1}, 0xc) 353.590427ms ago: executing program 3 (id=890): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000004580), 0x180, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000045c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80410, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_SET_GEOMETRY(r0, 0xc138fd0f, &(0x7f0000004980)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0x200, 0x0, 0x0, @by_dev={r1}, {0x36c, 0x20, 0xd7, 0x20, 0x800000000000012, 0x20, 0x1f9d}}) 341.75384ms ago: executing program 1 (id=891): r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@cred={{0x18, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}], 0x18, 0x4}}], 0x2, 0x4040040) 341.47734ms ago: executing program 3 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 337.732949ms ago: executing program 2 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x5c}}, 0x0) 330.201277ms ago: executing program 2 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44840}, 0x24000040) 329.321943ms ago: executing program 3 (id=895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00172233f60ad0b992422bc1ccddeeff13596dbe"}}]}]}, 0x58}}, 0x0) 196.005358ms ago: executing program 2 (id=896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 195.618383ms ago: executing program 3 (id=897): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x242, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xa8200, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x400, 0x0, 0xa7, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '1024', 0x20, '2 high_watermark 50'}}]}) 195.504048ms ago: executing program 1 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 138.333089ms ago: executing program 1 (id=899): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="0d000000010001", 0x7) 66.64582ms ago: executing program 2 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r1, 0x303, 0x70bd29, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4080) 66.532913ms ago: executing program 1 (id=901): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbf9, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0xfffffff8, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x20007], 0x0, [0x1, 0x7ffffffd]}, 0x7, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 66.474267ms ago: executing program 2 (id=902): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000b00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="4600010002"], 0x8) 4.174268ms ago: executing program 1 (id=903): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="578d2dbd7000fbdbdf25020000001400"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 0s ago: executing program 1 (id=904): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = dup(r0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r1, 0x0, 0x1b7) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000000c0), 0x4) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/10, 0xa}], 0x1, &(0x7f0000000500)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000740)="737562d751f911e16c5765f406a35b36743a6d6f643ab6b7d71eadc674100d", 0x1f) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{0x3, 0x1}}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="e8", 0x1}], 0x1}, 0x4800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x2c403) write(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x113) kernel console output (not intermixed with test programs): 23.992098][ T925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 123.995362][ T925] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.995400][ T925] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 123.995419][ T925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.005468][ T925] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.005508][ T925] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 124.005535][ T925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.021288][ T925] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.021310][ T925] usb 7-1: Product: syz [ 124.021321][ T925] usb 7-1: Manufacturer: syz [ 124.021333][ T925] usb 7-1: SerialNumber: syz [ 124.027752][ T925] usb 7-1: config 0 descriptor?? [ 124.028815][ T7008] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 124.029122][ T7008] bridge0: port 3(netdevsim0) entered disabled state [ 124.029303][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.029686][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.040380][ T925] yurex 7-1:0.0: Could not find endpoints [ 124.083653][ T7008] bridge0: port 3(netdevsim0) entered blocking state [ 124.083705][ T7008] bridge0: port 3(netdevsim0) entered forwarding state [ 124.083845][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.083895][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.083997][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.084050][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.160686][ T7008] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.192224][ T25] usb 7-1: USB disconnect, device number 5 [ 125.890369][ T6994] Process accounting resumed [ 126.013923][ T7027] program syz.2.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.655087][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 127.655109][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 128.288005][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 128.401770][ T30] libceph: connect (1)[c::]:6789 error -101 [ 128.401873][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 128.534535][ T7053] overlayfs: missing 'workdir' [ 128.662532][ T30] libceph: connect (1)[c::]:6789 error -101 [ 128.663395][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 128.742110][ T7058] Bluetooth: MGMT ver 1.23 [ 128.792406][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 128.856155][ T10] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.057140][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.057159][ T10] usb 8-1: config 0 has no interface number 0 [ 129.057487][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.057703][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.057717][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.057730][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 129.057742][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.057765][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.170847][ T30] libceph: connect (1)[c::]:6789 error -101 [ 129.171065][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 129.222657][ T7043] ceph: No mds server is up or the cluster is laggy [ 129.230711][ T10] usb 8-1: config 0 descriptor?? [ 129.255636][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 129.451284][ T7037] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 129.885000][ T7065] tipc: Enabling of bearer rejected, failed to enable media [ 129.888505][ T925] usb 8-1: USB disconnect, device number 7 [ 129.897050][ T925] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 130.174319][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.182894][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.186470][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.736645][ T7081] comedi comedi3: board detection failed [ 130.840801][ T7086] bridge0: port 3(netdevsim0) entered blocking state [ 130.841338][ T7086] bridge0: port 3(netdevsim0) entered disabled state [ 130.844298][ T7086] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 130.866326][ T7086] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 130.903297][ T7086] bridge0: port 3(netdevsim0) entered blocking state [ 130.903344][ T7086] bridge0: port 3(netdevsim0) entered forwarding state [ 131.033735][ T7088] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 131.033910][ T7088] bridge0: port 3(netdevsim0) entered disabled state [ 131.034003][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.034368][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.567143][ T7088] bridge0: port 3(netdevsim0) entered blocking state [ 131.567360][ T7088] bridge0: port 3(netdevsim0) entered forwarding state [ 131.567485][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.567535][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.567648][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.567702][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.362291][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.362542][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.495862][ T7088] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 132.741240][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 132.903556][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.903588][ T30] usb 6-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 132.905142][ T30] usb 6-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 132.905155][ T30] usb 6-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 132.921774][ T30] usb 6-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 132.921791][ T30] usb 6-1: Product: syz [ 132.921798][ T30] usb 6-1: Manufacturer: syz [ 132.921806][ T30] usb 6-1: SerialNumber: syz [ 133.081890][ T7126] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 133.273055][ T30] usb 6-1: USB disconnect, device number 9 [ 133.432648][ T7132] tipc: Enabling of bearer rejected, failed to enable media [ 134.337134][ T7148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.363440][ T7143] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888050000000 pfn:0x50000 [ 134.363461][ T7143] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 134.363477][ T7143] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 134.363590][ T7143] raw: ffff888050000000 0000000000000000 00000001ffffffff 0000000000000000 [ 134.363598][ T7143] page dumped because: unmovable page [ 134.363604][ T7143] page_owner tracks the page as allocated [ 134.363608][ T7143] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x44dc0(GFP_KERNEL|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6582, tgid 6579 (syz.0.126), ts 91538998368 [ 134.363629][ T7143] post_alloc_hook+0xfd/0x120 [ 134.363655][ T7143] get_page_from_freelist+0xdae/0x2c80 [ 134.363673][ T7143] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 134.363691][ T7143] alloc_pages_node_noprof+0x93/0x200 [ 134.363709][ T7143] alloc_cpu_data+0x20/0x120 [ 134.363728][ T7143] __rb_allocate_pages+0xac3/0xff0 [ 134.363740][ T7143] ring_buffer_resize+0x826/0x1c10 [ 134.363753][ T7143] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 134.363767][ T7143] tracing_set_tracer+0x5b5/0x7e0 [ 134.363780][ T7143] tracing_set_trace_write+0x14d/0x240 [ 134.363792][ T7143] vfs_write+0x2aa/0x1040 [ 134.363804][ T7143] ksys_write+0x12a/0x250 [ 134.363816][ T7143] __do_fast_syscall_32+0x14d/0x8e0 [ 134.363835][ T7143] do_fast_syscall_32+0x32/0x70 [ 134.363852][ T7143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.363866][ T7143] page last free pid 925 tgid 925 ts 84643527404 stack trace: [ 134.363874][ T7143] __free_frozen_pages+0x7b1/0x10f0 [ 134.363890][ T7143] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 134.363902][ T7143] __apply_to_page_range+0xb1d/0x1520 [ 134.363916][ T7143] __kasan_release_vmalloc+0xd7/0xe0 [ 134.363928][ T7143] purge_vmap_node+0x210/0xb40 [ 134.363939][ T7143] __purge_vmap_area_lazy+0x90a/0xc00 [ 134.363950][ T7143] drain_vmap_area_work+0x27/0x40 [ 134.363962][ T7143] process_one_work+0xac7/0x1b10 [ 134.363979][ T7143] worker_thread+0x5ef/0xe50 [ 134.363995][ T7143] kthread+0x373/0x450 [ 134.364009][ T7143] ret_from_fork+0x730/0xd60 [ 134.364022][ T7143] ret_from_fork_asm+0x1a/0x30 [ 134.910317][ T7151] evm: overlay not supported [ 135.957185][ T7158] device-mapper: table: 248:2: crypt: Not enough arguments (-EINVAL) [ 135.957208][ T7158] device-mapper: ioctl: error adding target to table [ 136.024933][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 136.547062][ T7168] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 136.595964][ T5836] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 136.623432][ T7171] syzkaller1: entered promiscuous mode [ 136.623447][ T7171] syzkaller1: entered allmulticast mode [ 136.681724][ T7168] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 137.213147][ T7179] tipc: Enabling of bearer rejected, failed to enable media [ 137.610422][ T7199] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 137.661430][ T7208] netlink: 120 bytes leftover after parsing attributes in process `syz.0.263'. [ 137.784652][ T7208] /dev/sg0: Can't lookup blockdev [ 139.356092][ T7219] Invalid ELF header type: 3 != 1 [ 139.414201][ T7223] Invalid ELF header magic: != ELF [ 139.995922][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.003468][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.124876][ T7230] netlink: 'syz.2.269': attribute type 39 has an invalid length. [ 140.238680][ T7228] tipc: Enabling of bearer rejected, failed to enable media [ 140.263326][ T7239] can0: slcan on ttyS3. [ 140.372914][ T7254] tipc: Enabling of bearer rejected, failed to enable media [ 140.581467][ T7229] can0 (unregistered): slcan off ttyS3. [ 140.679823][ T6463] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 140.844602][ T6463] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 140.915265][ T6463] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.915309][ T6463] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 140.915331][ T6463] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 140.915435][ T6463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.421196][ T6463] cxacru_cm: 169 callbacks suppressed [ 141.421284][ T6463] cxacru 8-1:1.0: invalid response length to cm 0x90: 32 [ 141.441483][ T7276] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 141.542548][ T7277] input: syz1 as /devices/virtual/input/input13 [ 142.325234][ T5865] usb 5-1: USB disconnect, device number 4 [ 143.124150][ T30] kernel write not supported for file /dsp1 (pid: 30 comm: kworker/1:0) [ 143.130657][ T5865] usb 8-1: USB disconnect, device number 8 [ 143.175576][ T7285] loop7: detected capacity change from 0 to 7 [ 143.354355][ T7285] Dev loop7: unable to read RDB block 7 [ 143.354394][ T7285] loop7: unable to read partition table [ 143.357389][ T7285] loop7: partition table beyond EOD, truncated [ 143.357595][ T7285] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 143.406059][ T7292] input: syz1 as /devices/virtual/input/input14 [ 143.805269][ T7288] Dev loop7: unable to read RDB block 7 [ 143.805315][ T7288] loop7: unable to read partition table [ 143.805553][ T7288] loop7: partition table beyond EOD, truncated [ 143.943630][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'. [ 145.179721][ T5937] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 145.659212][ T5937] usb 8-1: unable to get BOS descriptor or descriptor too short [ 145.659238][ T5937] usb 8-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 145.659278][ T5937] usb 8-1: no configurations [ 145.659286][ T5937] usb 8-1: can't read configurations, error -22 [ 146.101281][ T7316] program syz.0.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.411176][ T7325] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 146.411191][ T7325] UDF-fs: Scanning with blocksize 2048 failed [ 146.413908][ T7325] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 146.413920][ T7325] UDF-fs: Scanning with blocksize 4096 failed [ 146.635094][ T7341] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 146.660308][ T7341] batman_adv: batadv0: Adding interface: dummy0 [ 146.660320][ T7341] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.660337][ T7341] batman_adv: batadv0: Interface activated: dummy0 [ 146.690554][ T7341] net_ratelimit: 100 callbacks suppressed [ 146.690567][ T7341] batadv0: mtu less than device minimum [ 146.691249][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.691744][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.692240][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.692733][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.693225][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.693713][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.694210][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.694695][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.695225][ T7341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 146.695842][ T7342] overlayfs: missing 'lowerdir' [ 146.732448][ T7341] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 146.732461][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'. [ 146.732696][ T7341] batadv0: entered promiscuous mode [ 146.732706][ T7341] batadv0: entered allmulticast mode [ 146.734065][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.734392][ T7341] bridge0: port 4(batadv0) entered blocking state [ 146.734534][ T7341] bridge0: port 4(batadv0) entered disabled state [ 146.751775][ T7341] batadv0: failed to initialize vlan filtering on this port [ 147.051257][ T7341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.051287][ T7341] IPv6: NLM_F_CREATE should be set when creating new route [ 147.051305][ T7341] IPv6: NLM_F_CREATE should be set when creating new route [ 148.114928][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 148.116752][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 148.117087][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 148.117657][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 148.406576][ T43] audit: type=1400 audit(1794349080.503:231): apparmor="STATUS" operation="profile_load" profile="unconfined" name="fo/" pid=7352 comm="syz.3.294" [ 149.102769][ T7373] jffs2: notice: (7373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.278405][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 149.497560][ T7385] netfs: Cache "CacheFiles" added (type cachefiles) [ 149.497579][ T7385] CacheFiles: File cache on CacheFiles registered [ 149.498232][ T7385] CacheFiles: File cache on CacheFiles unregistering [ 149.498241][ T7385] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 149.552730][ T6463] kernel write not supported for file /vcs (pid: 6463 comm: kworker/1:4) [ 149.587118][ T7385] overlayfs: failed lookup in lower (newroot/67, name='file1', err=-40): overlapping layers [ 149.806778][ T7387] netlink: 56 bytes leftover after parsing attributes in process `syz.0.301'. [ 149.967655][ T7387] bridge1: entered promiscuous mode [ 149.967677][ T7387] bridge1: entered allmulticast mode [ 150.158547][ T7399] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 150.159817][ T7391] IPVS: stopping backup sync thread 7399 ... [ 150.355449][ T7404] comedi comedi3: board detection failed [ 151.250075][ T7406] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 151.758197][ T7416] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 151.758223][ T7416] CPU: 3 UID: 0 PID: 7416 Comm: syz.3.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.758267][ T7416] Tainted: [L]=SOFTLOCKUP [ 151.758274][ T7416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.758284][ T7416] Call Trace: [ 151.758291][ T7416] [ 151.758298][ T7416] dump_stack_lvl+0x100/0x190 [ 151.758334][ T7416] sysfs_warn_dup.cold+0x1c/0x28 [ 151.758361][ T7416] sysfs_create_dir_ns+0x24b/0x2b0 [ 151.758389][ T7416] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 151.758414][ T7416] ? find_held_lock+0x2b/0x80 [ 151.758440][ T7416] ? kobject_add_internal+0x25f/0x930 [ 151.758465][ T7416] ? kobject_add_internal+0x25f/0x930 [ 151.758490][ T7416] ? class_dir_child_ns_type+0xd/0x60 [ 151.758518][ T7416] kobject_add_internal+0x2c8/0x930 [ 151.758543][ T7416] kobject_add+0x16a/0x1e0 [ 151.758564][ T7416] ? __pfx_kobject_add+0x10/0x10 [ 151.758586][ T7416] ? get_device_parent+0x1b3/0x4c0 [ 151.758604][ T7416] ? kobject_put+0xb9/0x640 [ 151.758630][ T7416] device_add+0x294/0x1970 [ 151.758650][ T7416] ? lockdep_init_map_type+0x5c/0x250 [ 151.758670][ T7416] ? __pfx_device_add+0x10/0x10 [ 151.758688][ T7416] ? lockdep_init_map_type+0x5c/0x250 [ 151.758708][ T7416] ? __init_waitqueue_head+0xca/0x150 [ 151.758736][ T7416] tty_register_device_attr+0x388/0x810 [ 151.758764][ T7416] ? lockdep_init_map_type+0x5c/0x250 [ 151.758784][ T7416] ? __pfx_tty_register_device_attr+0x10/0x10 [ 151.758840][ T7416] ? tty_port_init+0x156/0x1c0 [ 151.758875][ T7416] gsm_activate_mux+0x155/0x2a0 [ 151.758907][ T7416] gsmld_ioctl+0xbbc/0x15c0 [ 151.758934][ T7416] ? __pfx_gsmld_ioctl+0x10/0x10 [ 151.758981][ T7416] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.759014][ T7416] ? __pfx_gsmld_ioctl+0x10/0x10 [ 151.759033][ T7416] tty_compat_ioctl+0x396/0x420 [ 151.759077][ T7416] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 151.759108][ T7416] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 151.759134][ T7416] __do_fast_syscall_32+0x14d/0x8e0 [ 151.759169][ T7416] do_fast_syscall_32+0x32/0x70 [ 151.759200][ T7416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.759225][ T7416] RIP: 0023:0xf73cefbc [ 151.759242][ T7416] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 151.759261][ T7416] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 151.759281][ T7416] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 151.759293][ T7416] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.759304][ T7416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.759315][ T7416] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 151.759326][ T7416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.759351][ T7416] [ 151.772626][ T7416] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.911532][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 152.100924][ T5882] net_ratelimit: 32 callbacks suppressed [ 152.100939][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 152.100954][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 152.612412][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 152.612442][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 153.040987][ T7420] jffs2: notice: (7420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 153.126906][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 153.126929][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 153.404846][ T7436] netlink: 72 bytes leftover after parsing attributes in process `syz.0.313'. [ 153.435070][ T7436] netlink: 52 bytes leftover after parsing attributes in process `syz.0.313'. [ 153.629644][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 153.629674][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 154.139802][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 154.139825][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 154.502096][ T7463] Invalid ELF header type: 2 != 1 [ 154.546852][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 154.857140][ T7454] tipc: Enabling of bearer rejected, failed to enable media [ 154.876961][ T7463] bond1: entered promiscuous mode [ 154.877362][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.897574][ T7464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.897888][ T7464] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 154.898428][ T7464] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 156.109505][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 157.051804][ T7491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.320'. [ 157.228765][ T5882] net_ratelimit: 10 callbacks suppressed [ 157.228786][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 157.228809][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 157.729949][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 157.729982][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 157.887191][ T7494] ublk3: read batch cmd buffer failed [ 157.887255][ T7494] ublk3: read batch cmd buffer failed [ 157.894928][ T7494] ublk3: read batch cmd buffer failed [ 157.894981][ T7494] ublk3: read batch cmd buffer failed [ 157.949075][ T7499] jffs2: notice: (7499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 158.240783][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 158.240806][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 158.577758][ T7508] tipc: Enabling of bearer rejected, failed to enable media [ 158.794826][ T7515] file system registered [ 158.840780][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 158.840811][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 159.227966][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.254356][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.272993][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.359615][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 159.359639][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 160.959584][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 161.119545][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 161.120981][ T5885] usb 7-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 161.123553][ T5885] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.123573][ T5885] usb 7-1: config 0 has no interface number 0 [ 161.134129][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.134152][ T5885] usb 7-1: Product: syz [ 161.134165][ T5885] usb 7-1: Manufacturer: syz [ 161.134179][ T5885] usb 7-1: SerialNumber: syz [ 161.139201][ T5885] usb 7-1: config 0 descriptor?? [ 161.148003][ T5885] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 161.152455][ T5885] usb 7-1: selecting invalid altsetting 1 [ 161.152474][ T5885] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 161.167838][ T5885] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.168435][ T5885] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 161.168474][ T5885] usb 7-1: media controller created [ 161.204169][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.507539][ T7556] e1000e 0000:00:02.0 eth1: removed PHC [ 161.757181][ T43] audit: type=1400 audit(1794349093.842:232): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7557 comm="syz.3.337" [ 161.849150][ T7559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 162.290997][ T5885] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 162.291522][ T5885] zl10353_read_register: readreg error (reg=127, ret==-110) [ 162.356869][ T7556] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 162.359202][ T7569] FAULT_INJECTION: forcing a failure. [ 162.359202][ T7569] name failslab, interval 1, probability 5, space 0, times 9993 [ 162.359225][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.359241][ T7569] Tainted: [L]=SOFTLOCKUP [ 162.359245][ T7569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.359252][ T7569] Call Trace: [ 162.359257][ T7569] [ 162.359262][ T7569] dump_stack_lvl+0x100/0x190 [ 162.359298][ T7569] should_fail_ex.cold+0x5/0xa [ 162.359319][ T7569] should_failslab+0xc2/0x120 [ 162.359335][ T7569] kmem_cache_alloc_noprof+0x92/0x6a0 [ 162.359349][ T7569] ? key_alloc+0x3f2/0x1330 [ 162.359371][ T7569] key_alloc+0x3f2/0x1330 [ 162.359394][ T7569] ? __pfx_key_alloc+0x10/0x10 [ 162.359416][ T7569] keyring_alloc+0x44/0xc0 [ 162.359431][ T7569] install_session_keyring_to_cred+0x18b/0x230 [ 162.359451][ T7569] join_session_keyring+0x1b7/0x350 [ 162.359469][ T7569] lookup_user_key+0x10f1/0x14f0 [ 162.359486][ T7569] ? get_pid_task+0xfc/0x250 [ 162.359502][ T7569] ? __pfx_lookup_user_key+0x10/0x10 [ 162.359519][ T7569] ? __lock_acquire+0x5c0/0x1f40 [ 162.359533][ T7569] ? futex_wait+0x11e/0x370 [ 162.359547][ T7569] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 162.359566][ T7569] ? __might_fault+0xc5/0x140 [ 162.359582][ T7569] ? find_held_lock+0x2b/0x80 [ 162.359599][ T7569] ? __might_fault+0xc5/0x140 [ 162.359614][ T7569] ? __might_fault+0xc5/0x140 [ 162.359632][ T7569] keyctl_get_persistent+0x133/0x860 [ 162.359645][ T7569] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 162.359658][ T7569] ? put_timespec64+0xce/0x130 [ 162.359688][ T7569] ? lock_acquire+0x1d1/0x380 [ 162.359700][ T7569] ? __might_fault+0xc5/0x140 [ 162.359716][ T7569] ? find_held_lock+0x2b/0x80 [ 162.359732][ T7569] ? __might_fault+0xc5/0x140 [ 162.359747][ T7569] ? __might_fault+0xc5/0x140 [ 162.359763][ T7569] __ia32_compat_sys_keyctl+0x38f/0x550 [ 162.359784][ T7569] __do_fast_syscall_32+0x14d/0x8e0 [ 162.359806][ T7569] do_fast_syscall_32+0x32/0x70 [ 162.359824][ T7569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.359840][ T7569] RIP: 0023:0xf7f28fbc [ 162.359850][ T7569] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 162.359862][ T7569] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 162.359875][ T7569] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00000000ffffffff [ 162.359883][ T7569] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 162.359890][ T7569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.359897][ T7569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.359904][ T7569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.359918][ T7569] [ 162.440219][ T5836] net_ratelimit: 10 callbacks suppressed [ 162.440237][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 162.440259][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 162.482518][ T43] audit: type=1326 audit(1794349094.582:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.483429][ T43] audit: type=1326 audit(1794349094.582:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.483473][ T43] audit: type=1326 audit(1794349094.582:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.489074][ T43] audit: type=1326 audit(1794349094.582:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.490123][ T43] audit: type=1326 audit(1794349094.582:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.490158][ T43] audit: type=1326 audit(1794349094.592:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.491867][ T43] audit: type=1326 audit(1794349094.592:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.491902][ T43] audit: type=1326 audit(1794349094.592:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.491931][ T43] audit: type=1326 audit(1794349094.592:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.0.340" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 162.646710][ T7565] tipc: Enabling of bearer rejected, failed to enable media [ 162.690279][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.950809][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 162.950830][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 163.343513][ T5885] usb 7-1: USB disconnect, device number 6 [ 163.470630][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 163.470687][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 163.732263][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.979750][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 163.979772][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 165.787774][ T7647] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 165.787848][ T7647] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 165.787969][ T7647] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 165.788024][ T7647] One or more global auth toks could not properly register; rc = [-22] [ 165.788155][ T7647] Error validating options; rc = [-22] [ 166.021607][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 166.021628][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 166.094214][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 166.591567][ T5885] kernel write not supported for file /dsp1 (pid: 5885 comm: kworker/0:3) [ 166.604087][ T7660] loop7: detected capacity change from 0 to 7 [ 166.798257][ T7660] Dev loop7: unable to read RDB block 7 [ 166.798294][ T7660] loop7: unable to read partition table [ 166.798607][ T7660] loop7: partition table beyond EOD, truncated [ 166.798624][ T7660] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.986139][ T7661] Dev loop7: unable to read RDB block 7 [ 166.986176][ T7661] loop7: unable to read partition table [ 166.986478][ T7661] loop7: partition table beyond EOD, truncated [ 167.590372][ T5836] net_ratelimit: 17 callbacks suppressed [ 167.590418][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 167.590443][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 167.971416][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.101790][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 168.101813][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 168.609632][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 168.609654][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 168.731871][ T7683] block device autoloading is deprecated and will be removed. [ 169.019233][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.123943][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 169.123967][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 169.530527][ T7689] )fl: renamed from lo (while UP) [ 170.846743][ T43] kauditd_printk_skb: 604 callbacks suppressed [ 170.846762][ T43] audit: type=1326 audit(1794349102.942:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.358" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 170.846800][ T43] audit: type=1326 audit(1794349102.942:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 170.846823][ T43] audit: type=1326 audit(1794349102.942:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.3.358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 171.153607][ T7713] kvm_intel: kvm [7712]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 171.272263][ T7719] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.272293][ T7719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.633507][ T6018] dummy0: entered promiscuous mode [ 172.640491][ T7723] macvtap0: entered allmulticast mode [ 172.640506][ T7723] dummy0: entered allmulticast mode [ 172.670403][ T7723] dummy0: left allmulticast mode [ 172.699057][ T6018] dummy0: left promiscuous mode [ 172.751098][ T7731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 172.861576][ T5882] net_ratelimit: 16 callbacks suppressed [ 172.861596][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 172.861619][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 173.159730][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.168562][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.378762][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 173.378797][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 173.879651][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 173.879684][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 174.200318][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.325121][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.373173][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 174.515256][ T7759] FAULT_INJECTION: forcing a failure. [ 174.515256][ T7759] name fail_futex, interval 1, probability 0, space 0, times 0 [ 174.515292][ T7759] CPU: 2 UID: 0 PID: 7759 Comm: syz.0.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.515339][ T7759] Tainted: [L]=SOFTLOCKUP [ 174.515346][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.515373][ T7759] Call Trace: [ 174.515381][ T7759] [ 174.515389][ T7759] dump_stack_lvl+0x100/0x190 [ 174.515427][ T7759] should_fail_ex.cold+0x5/0xa [ 174.515459][ T7759] get_futex_key+0x1c9/0x13e0 [ 174.515491][ T7759] ? __pfx_get_futex_key+0x10/0x10 [ 174.515518][ T7759] ? enqueue_task+0x1dc/0x4f0 [ 174.515550][ T7759] futex_wait_setup+0x91/0x540 [ 174.515578][ T7759] __futex_wait+0x19f/0x360 [ 174.515598][ T7759] ? __pfx___futex_wait+0x10/0x10 [ 174.515616][ T7759] ? __pfx_try_to_wake_up+0x10/0x10 [ 174.515634][ T7759] ? futex_hash+0x311/0x400 [ 174.515661][ T7759] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.515684][ T7759] ? find_held_lock+0x2b/0x80 [ 174.515705][ T7759] ? futex_wake+0x4ea/0x5e0 [ 174.515721][ T7759] futex_wait+0xe6/0x370 [ 174.515734][ T7759] ? __pfx_futex_wait+0x10/0x10 [ 174.515752][ T7759] ? __might_fault+0xc5/0x140 [ 174.515776][ T7759] ? find_held_lock+0x2b/0x80 [ 174.515801][ T7759] ? __might_fault+0xc5/0x140 [ 174.515828][ T7759] do_futex+0x265/0x440 [ 174.515859][ T7759] ? __pfx_do_futex+0x10/0x10 [ 174.515887][ T7759] ? _copy_to_user+0xaf/0xd0 [ 174.515924][ T7759] __ia32_sys_futex_time32+0x2f4/0x470 [ 174.515961][ T7759] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 174.515996][ T7759] ? __might_fault+0xc5/0x140 [ 174.516027][ T7759] __do_fast_syscall_32+0x14d/0x8e0 [ 174.516062][ T7759] do_fast_syscall_32+0x32/0x70 [ 174.516093][ T7759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.516117][ T7759] RIP: 0023:0xf7f28fbc [ 174.516135][ T7759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 174.516154][ T7759] RSP: 002b:00000000f53705bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 174.516175][ T7759] RAX: ffffffffffffffda RBX: 00000000f73e5020 RCX: 0000000000000080 [ 174.516187][ T7759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e5024 [ 174.516198][ T7759] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 174.516210][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.516222][ T7759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.516249][ T7759] [ 174.590455][ T6018] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 175.029546][ T6018] usb 8-1: Using ep0 maxpacket: 32 [ 175.032466][ T6018] usb 8-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.034433][ T6018] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.034447][ T6018] usb 8-1: config 0 has no interface number 0 [ 175.037375][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.037389][ T6018] usb 8-1: Product: syz [ 175.037396][ T6018] usb 8-1: Manufacturer: syz [ 175.037404][ T6018] usb 8-1: SerialNumber: syz [ 175.038851][ T6018] usb 8-1: config 0 descriptor?? [ 175.060910][ T6018] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.060926][ T6018] usb 8-1: selecting invalid altsetting 1 [ 175.060935][ T6018] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.063343][ T6018] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.063469][ T6018] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.063490][ T6018] usb 8-1: media controller created [ 175.088131][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.525956][ T7769] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 175.531098][ T7769] ubi0: attaching mtd0 [ 175.533143][ T7769] ubi0: scanning is finished [ 175.533186][ T7769] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 175.607259][ T43] audit: type=1326 audit(1794349107.702:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.607650][ T43] audit: type=1326 audit(1794349107.702:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.607877][ T43] audit: type=1326 audit(1794349107.702:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.612828][ T43] audit: type=1326 audit(1794349107.702:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.612988][ T43] audit: type=1326 audit(1794349107.702:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.613028][ T43] audit: type=1326 audit(1794349107.702:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.613066][ T43] audit: type=1326 audit(1794349107.702:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.863008][ T43] kauditd_printk_skb: 112 callbacks suppressed [ 175.863149][ T43] audit: type=1326 audit(1794349107.942:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.863335][ T43] audit: type=1326 audit(1794349107.952:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.872851][ T43] audit: type=1326 audit(1794349107.962:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.874826][ T43] audit: type=1326 audit(1794349107.962:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.875180][ T43] audit: type=1326 audit(1794349107.962:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.875216][ T43] audit: type=1326 audit(1794349107.972:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.875251][ T43] audit: type=1326 audit(1794349107.972:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.875283][ T43] audit: type=1326 audit(1794349107.972:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.880725][ T43] audit: type=1326 audit(1794349107.972:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 175.881468][ T43] audit: type=1326 audit(1794349107.972:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.374" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 176.074295][ T7769] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 176.078578][ T7774] syz.1.373 (7774): drop_caches: 2 [ 176.079005][ T7774] syz.1.373 (7774): drop_caches: 2 [ 176.201416][ T6018] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 176.201469][ T6018] zl10353_read_register: readreg error (reg=127, ret==-110) [ 176.224317][ T7749] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 176.382490][ T6018] usb 8-1: USB disconnect, device number 11 [ 176.978830][ T7781] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.993821][ T7780] net_ratelimit: 26 callbacks suppressed [ 177.993836][ T7780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.993985][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.051391][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 178.051414][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 178.591119][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 178.591153][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 178.751417][ T7795] jffs2: notice: (7795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 178.847899][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.133755][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 179.133790][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 179.645908][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.253245][ T7811] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 180.253272][ T7811] device-mapper: ioctl: error adding target to table [ 181.067577][ T7829] /dev/nullb0: Can't open blockdev [ 181.302372][ T7830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.009873][ T5937] net_ratelimit: 103 callbacks suppressed [ 183.009893][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.184597][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.500766][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 183.500789][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 184.009788][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 184.009812][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 184.044501][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.521823][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 184.521847][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 185.029628][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 185.029651][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 185.068211][ T7864] tipc: Enabling of bearer rejected, failed to enable media [ 185.343748][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.343788][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.344145][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.344596][ T7875] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 185.344616][ T7875] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 185.344641][ T7875] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 185.459639][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.474759][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.590821][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.593611][ T7875] dummy0 speed is unknown, defaulting to 1000 [ 185.628923][ T7878] smc: removing ib device s [ 185.874935][ T7878] smbdirect: ib_dev[s] removed [ 186.772579][ T43] kauditd_printk_skb: 247 callbacks suppressed [ 186.772834][ T43] audit: type=1326 audit(1794349118.852:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.773039][ T43] audit: type=1326 audit(1794349118.852:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.773297][ T43] audit: type=1326 audit(1794349118.872:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.860555][ T43] audit: type=1326 audit(1794349118.952:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.860653][ T43] audit: type=1326 audit(1794349118.952:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.860907][ T43] audit: type=1326 audit(1794349118.952:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.867859][ T43] audit: type=1326 audit(1794349118.952:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.867907][ T43] audit: type=1326 audit(1794349118.962:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.914359][ T43] audit: type=1326 audit(1794349119.012:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.914393][ T43] audit: type=1326 audit(1794349119.012:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.1.398" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 186.956654][ T7889] netlink: 76 bytes leftover after parsing attributes in process `syz.1.398'. [ 187.425258][ T7903] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 188.202280][ T5865] net_ratelimit: 14 callbacks suppressed [ 188.202305][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.219502][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 188.219530][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 188.719759][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 188.719826][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 188.765104][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.172250][ T7911] syzkaller0: entered promiscuous mode [ 189.172280][ T7911] syzkaller0: entered allmulticast mode [ 189.173527][ T7914] tipc: Started in network mode [ 189.173552][ T7914] tipc: Node identity 3e43ec4fac82, cluster identity 4711 [ 189.174896][ T7914] tipc: Enabled bearer , priority 0 [ 189.176722][ T7920] tipc: Resetting bearer [ 189.199620][ T7906] tipc: Resetting bearer [ 189.214016][ T7906] tipc: Disabling bearer [ 189.234286][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 189.234306][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 189.247138][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.558877][ T7944] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 189.628668][ T7940] )fl: renamed from lo [ 189.750190][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 190.844555][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 190.844585][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: Release(6) [ 190.844596][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 190.844606][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[10]: 41 [ 191.053421][ T7970] tipc: Enabled bearer , priority 0 [ 191.054832][ T7970] syzkaller0: entered promiscuous mode [ 191.054852][ T7970] syzkaller0: entered allmulticast mode [ 191.133351][ T7970] tipc: Resetting bearer [ 191.176849][ T7969] tipc: Resetting bearer [ 191.202003][ T7969] tipc: Disabling bearer [ 191.320076][ T7975] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 191.619672][ T7981] jffs2: notice: (7981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 193.027697][ T7981] jffs2: warning: (7981) do_jffs2_setxattr: jffs2_reserve_space()=-4, request=36 [ 193.193439][ T43] kauditd_printk_skb: 145 callbacks suppressed [ 193.193457][ T43] audit: type=1326 audit(1794349125.292:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.193602][ T43] audit: type=1326 audit(1794349125.292:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.193641][ T43] audit: type=1326 audit(1794349125.292:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.195529][ T43] audit: type=1326 audit(1794349125.292:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.195802][ T43] audit: type=1326 audit(1794349125.292:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.195830][ T43] audit: type=1326 audit(1794349125.292:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.195852][ T43] audit: type=1326 audit(1794349125.292:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.196551][ T43] audit: type=1326 audit(1794349125.292:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.196593][ T43] audit: type=1326 audit(1794349125.292:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.196630][ T43] audit: type=1326 audit(1794349125.292:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.430" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 193.329684][ T5882] net_ratelimit: 21 callbacks suppressed [ 193.329700][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 193.329714][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 193.329727][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 193.801591][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.801645][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.892760][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 193.892784][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 193.892797][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 194.176982][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.408536][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 194.408562][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 194.408575][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 194.507431][ T8015] dummy0 speed is unknown, defaulting to 1000 [ 194.797881][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 195.329965][ T8050] Invalid ELF header magic: != ELF [ 196.013942][ T8065] syzkaller0: entered promiscuous mode [ 196.013958][ T8065] syzkaller0: entered allmulticast mode [ 196.025484][ T8065] tipc: Started in network mode [ 196.025502][ T8065] tipc: Node identity 5299e4d17852, cluster identity 4711 [ 196.025573][ T8065] tipc: Enabled bearer , priority 0 [ 196.032136][ T8065] tipc: Resetting bearer [ 196.041216][ T8064] tipc: Resetting bearer [ 196.086519][ T8064] tipc: Disabling bearer [ 196.277448][ T8084] usb usb7: usbfs: process 8084 (syz.3.468) did not claim interface 0 before use [ 196.810560][ T8111] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 196.881801][ T8115] overlayfs: failed to resolve './bus': -2 [ 197.042225][ T8126] syzkaller0: entered promiscuous mode [ 197.042240][ T8126] syzkaller0: entered allmulticast mode [ 197.045342][ T8126] tipc: Enabled bearer , priority 0 [ 197.046456][ T8125] tipc: Resetting bearer [ 197.062168][ T8125] tipc: Disabling bearer [ 197.655614][ T8150] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 198.509582][ T5882] net_ratelimit: 31 callbacks suppressed [ 198.509598][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 198.509612][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 198.509625][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 198.511529][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.030586][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 199.030640][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 199.030661][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 199.414284][ T8206] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 199.414284][ T8206] Please contact the netfilter-devel mailing list or update your nftables rules. [ 199.540987][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 199.541046][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 199.541067][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 199.783188][ T8214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.516'. [ 199.783205][ T8214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.516'. [ 199.962422][ T8216] tipc: Enabled bearer , priority 0 [ 199.982919][ T8215] tipc: Disabling bearer [ 200.098630][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 200.098644][ T43] audit: type=1326 audit(1794349132.122:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098676][ T43] audit: type=1326 audit(1794349132.122:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098698][ T43] audit: type=1326 audit(1794349132.122:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098720][ T43] audit: type=1326 audit(1794349132.122:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098742][ T43] audit: type=1326 audit(1794349132.122:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098765][ T43] audit: type=1326 audit(1794349132.122:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098786][ T43] audit: type=1326 audit(1794349132.122:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098808][ T43] audit: type=1326 audit(1794349132.122:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098829][ T43] audit: type=1326 audit(1794349132.122:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.098851][ T43] audit: type=1326 audit(1794349132.122:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.2.521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 200.264898][ T8237] ubi0: attaching mtd0 [ 200.277440][ T8237] ubi0: scanning is finished [ 200.277552][ T8237] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 200.678460][ T8243] syz.2.525 (8243): drop_caches: 2 [ 200.678717][ T8243] syz.2.525 (8243): drop_caches: 2 [ 200.771583][ T8237] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 200.983056][ T8264] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 200.984693][ T8264] tipc: Enabled bearer , priority 0 [ 200.998554][ T8263] tipc: Disabling bearer [ 201.125312][ T8268] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 201.146531][ T8266] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.533' resets device [ 201.932849][ T8281] ubi0: attaching mtd0 [ 201.934827][ T8281] ubi0: scanning is finished [ 201.935013][ T8281] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 202.047449][ T8284] syz.3.540 (8284): drop_caches: 2 [ 202.052766][ T8284] syz.3.540 (8284): drop_caches: 2 [ 202.212614][ T8281] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 202.217286][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 202.251058][ T8290] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 202.252683][ T8290] tipc: Enabled bearer , priority 0 [ 202.349016][ T8289] tipc: Disabling bearer [ 203.729446][ T5882] net_ratelimit: 26 callbacks suppressed [ 203.729463][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 203.729478][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 203.729490][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 204.119732][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.159546][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.249589][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 204.249623][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 204.249643][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 204.329307][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.496617][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.496645][ T5865] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 204.496685][ T5865] usb 5-1: no configurations [ 204.496693][ T5865] usb 5-1: can't read configurations, error -22 [ 204.550354][ T8320] syzkaller0: entered promiscuous mode [ 204.550369][ T8320] syzkaller0: entered allmulticast mode [ 204.557601][ T8320] tipc: Enabled bearer , priority 0 [ 204.568022][ T8319] tipc: Resetting bearer [ 204.588862][ T8319] tipc: Disabling bearer [ 204.599269][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 204.770284][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 204.770316][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 205.401379][ T8327] 8021q: adding VLAN 0 to HW filter on device eth0 [ 205.402650][ T8327] 8021q: adding VLAN 0 to HW filter on device eth1 [ 205.403898][ T8327] 8021q: adding VLAN 0 to HW filter on device eth2 [ 205.405137][ T8327] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.496405][ T8330] comedi comedi3: c6xdigio: I/O port conflict (0x80000000,3) [ 205.514815][ T5836] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.514982][ T5836] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.541753][ T925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.052314][ T5865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.600258][ T5937] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.847020][ T8343] syzkaller0: entered promiscuous mode [ 206.847035][ T8343] syzkaller0: entered allmulticast mode [ 206.856434][ T8343] tipc: Enabled bearer , priority 0 [ 206.901131][ T8342] tipc: Resetting bearer [ 206.951996][ T8342] tipc: Disabling bearer [ 207.366808][ T8363] all (unregistering): Released all slaves [ 207.653486][ T8372] tipc: Enabled bearer , priority 0 [ 207.881636][ T8370] tipc: Disabling bearer [ 207.952994][ T8385] )fl: renamed from lo (while UP) [ 208.940921][ T5836] net_ratelimit: 27 callbacks suppressed [ 208.940943][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 208.940966][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 208.940986][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 208.964259][ T8403] netlink: 228 bytes leftover after parsing attributes in process `syz.0.580'. [ 209.239293][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.338882][ T8410] syzkaller0: entered promiscuous mode [ 209.338896][ T8410] syzkaller0: entered allmulticast mode [ 209.354091][ T8410] tipc: Enabled bearer , priority 0 [ 209.355794][ T8409] tipc: Resetting bearer [ 209.387715][ T8409] tipc: Disabling bearer [ 209.391146][ T8414] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.449668][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 209.449699][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 209.449717][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 209.521643][ T8422] jffs2: notice: (8422) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 209.560118][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.934825][ T8432] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.962286][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 209.962316][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 209.987042][ T8428] jffs2: notice: (8428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 210.198105][ T8442] syzkaller0: entered promiscuous mode [ 210.198125][ T8442] syzkaller0: entered allmulticast mode [ 210.205928][ T8442] tipc: Enabled bearer , priority 0 [ 210.206845][ T8441] tipc: Resetting bearer [ 210.217099][ T8441] tipc: Disabling bearer [ 210.377708][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 210.469950][ T8450] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 210.729012][ T8456] FAULT_INJECTION: forcing a failure. [ 210.729012][ T8456] name failslab, interval 1, probability 5, space 0, times 9992 [ 210.729035][ T8456] CPU: 2 UID: 0 PID: 8456 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.729065][ T8456] Tainted: [L]=SOFTLOCKUP [ 210.729070][ T8456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.729078][ T8456] Call Trace: [ 210.729082][ T8456] [ 210.729087][ T8456] dump_stack_lvl+0x100/0x190 [ 210.729111][ T8456] should_fail_ex.cold+0x5/0xa [ 210.729131][ T8456] should_failslab+0xc2/0x120 [ 210.729147][ T8456] kmem_cache_alloc_noprof+0x92/0x6a0 [ 210.729161][ T8456] ? key_alloc+0x3f2/0x1330 [ 210.729182][ T8456] key_alloc+0x3f2/0x1330 [ 210.729206][ T8456] ? __pfx_key_alloc+0x10/0x10 [ 210.729229][ T8456] keyring_alloc+0x44/0xc0 [ 210.729243][ T8456] install_session_keyring_to_cred+0x18b/0x230 [ 210.729263][ T8456] join_session_keyring+0x1b7/0x350 [ 210.729281][ T8456] lookup_user_key+0x10f1/0x14f0 [ 210.729304][ T8456] ? __pfx_lookup_user_key+0x10/0x10 [ 210.729323][ T8456] ? __lock_acquire+0x5c0/0x1f40 [ 210.729338][ T8456] ? futex_wait+0x11e/0x370 [ 210.729354][ T8456] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 210.729375][ T8456] ? __might_fault+0xc5/0x140 [ 210.729392][ T8456] ? find_held_lock+0x2b/0x80 [ 210.729410][ T8456] ? __might_fault+0xc5/0x140 [ 210.729425][ T8456] ? __might_fault+0xc5/0x140 [ 210.729444][ T8456] keyctl_get_persistent+0x133/0x860 [ 210.729458][ T8456] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 210.729472][ T8456] ? put_timespec64+0xce/0x130 [ 210.729488][ T8456] ? lock_acquire+0x1d1/0x380 [ 210.729500][ T8456] ? __might_fault+0xc5/0x140 [ 210.729515][ T8456] ? find_held_lock+0x2b/0x80 [ 210.729532][ T8456] ? __might_fault+0xc5/0x140 [ 210.729546][ T8456] ? __might_fault+0xc5/0x140 [ 210.729563][ T8456] __ia32_compat_sys_keyctl+0x38f/0x550 [ 210.729584][ T8456] __do_fast_syscall_32+0x14d/0x8e0 [ 210.729606][ T8456] do_fast_syscall_32+0x32/0x70 [ 210.729625][ T8456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.729641][ T8456] RIP: 0023:0xf743efbc [ 210.729652][ T8456] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 210.729665][ T8456] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 210.729678][ T8456] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00000000ffffffff [ 210.729685][ T8456] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 210.729693][ T8456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.729699][ T8456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 210.729706][ T8456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.729721][ T8456] [ 211.050083][ T8471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.609'. [ 211.068760][ T8471] netlink: 52 bytes leftover after parsing attributes in process `syz.1.609'. [ 211.167565][ T8481] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 211.168884][ T8481] tipc: Started in network mode [ 211.168900][ T8481] tipc: Node identity 322bbb8f9f0b, cluster identity 4711 [ 211.177678][ T8481] tipc: Enabled bearer , priority 0 [ 211.181441][ T8481] tipc: Resetting bearer [ 211.199386][ T8480] tipc: Disabling bearer [ 211.201433][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 211.248939][ T8489] netlink: 'syz.1.618': attribute type 3 has an invalid length. [ 211.300611][ T8493] all (unregistering): Released all slaves [ 211.516642][ T8513] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 211.516780][ T8513] CPU: 3 UID: 0 PID: 8513 Comm: syz.0.625 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.516800][ T8513] Tainted: [L]=SOFTLOCKUP [ 211.516804][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.516811][ T8513] Call Trace: [ 211.516816][ T8513] [ 211.516821][ T8513] dump_stack_lvl+0x100/0x190 [ 211.516845][ T8513] sysfs_warn_dup.cold+0x1c/0x28 [ 211.516865][ T8513] sysfs_create_dir_ns+0x24b/0x2b0 [ 211.516884][ T8513] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 211.516902][ T8513] ? find_held_lock+0x2b/0x80 [ 211.516919][ T8513] ? kobject_add_internal+0x25f/0x930 [ 211.516947][ T8513] ? kobject_add_internal+0x25f/0x930 [ 211.516965][ T8513] ? class_dir_child_ns_type+0xd/0x60 [ 211.516983][ T8513] kobject_add_internal+0x2c8/0x930 [ 211.517000][ T8513] kobject_add+0x16a/0x1e0 [ 211.517014][ T8513] ? __pfx_kobject_add+0x10/0x10 [ 211.517030][ T8513] ? get_device_parent+0x1b3/0x4c0 [ 211.517043][ T8513] ? kobject_put+0xb9/0x640 [ 211.517061][ T8513] device_add+0x294/0x1970 [ 211.517076][ T8513] ? lockdep_init_map_type+0x5c/0x250 [ 211.517090][ T8513] ? __pfx_device_add+0x10/0x10 [ 211.517104][ T8513] ? lockdep_init_map_type+0x5c/0x250 [ 211.517118][ T8513] ? __init_waitqueue_head+0xca/0x150 [ 211.517140][ T8513] tty_register_device_attr+0x388/0x810 [ 211.517158][ T8513] ? lockdep_init_map_type+0x5c/0x250 [ 211.517172][ T8513] ? __pfx_tty_register_device_attr+0x10/0x10 [ 211.517193][ T8513] ? tty_port_init+0x156/0x1c0 [ 211.517212][ T8513] gsm_activate_mux+0x155/0x2a0 [ 211.517231][ T8513] gsmld_ioctl+0xbbc/0x15c0 [ 211.517247][ T8513] ? __pfx_gsmld_ioctl+0x10/0x10 [ 211.517270][ T8513] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.517289][ T8513] ? __pfx_gsmld_ioctl+0x10/0x10 [ 211.517300][ T8513] tty_compat_ioctl+0x396/0x420 [ 211.517317][ T8513] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 211.517348][ T8513] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 211.517365][ T8513] __do_fast_syscall_32+0x14d/0x8e0 [ 211.517386][ T8513] do_fast_syscall_32+0x32/0x70 [ 211.517405][ T8513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.517421][ T8513] RIP: 0023:0xf7f28fbc [ 211.517432][ T8513] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.517444][ T8513] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 211.517457][ T8513] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 211.517465][ T8513] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.517472][ T8513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.517479][ T8513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.517486][ T8513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.517501][ T8513] [ 211.518567][ T8513] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 211.699309][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 213.576782][ T8522] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 213.579508][ T8522] tipc: Enabled bearer , priority 0 [ 213.584101][ T8522] tipc: Resetting bearer [ 213.660437][ T8521] tipc: Disabling bearer [ 213.797444][ T8520] input: syz0 as /devices/virtual/input/input16 [ 213.959663][ T925] net_ratelimit: 28 callbacks suppressed [ 213.959681][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.242276][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 214.242299][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 214.242311][ T5882] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 214.280723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.280838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.280920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.519471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.566834][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 214.566854][ T43] audit: type=1400 audit(1794349146.662:1419): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8535 comm="syz.0.638" [ 214.602448][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 214.775594][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 214.775615][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 215.048441][ T8552] syzkaller0: entered promiscuous mode [ 215.048463][ T8552] syzkaller0: entered allmulticast mode [ 215.076173][ T8552] tipc: Enabled bearer , priority 0 [ 215.146856][ T8551] tipc: Resetting bearer [ 215.167751][ T8551] tipc: Disabling bearer [ 215.283592][ T8560] syzkaller0: entered promiscuous mode [ 215.283608][ T8560] syzkaller0: entered allmulticast mode [ 215.288595][ T8560] tipc: Enabled bearer , priority 0 [ 215.295364][ T8560] tipc: Resetting bearer [ 215.298787][ T8559] tipc: Resetting bearer [ 215.313582][ T8559] tipc: Disabling bearer [ 215.976401][ T8581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.650'. [ 216.106553][ T8583] syzkaller0: entered promiscuous mode [ 216.106576][ T8583] syzkaller0: entered allmulticast mode [ 216.278279][ T8583] tipc: Enabled bearer , priority 0 [ 216.284442][ T8582] tipc: Resetting bearer [ 216.360700][ T8582] tipc: Disabling bearer [ 216.839914][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.901286][ T8594] syzkaller0: entered promiscuous mode [ 216.901307][ T8594] syzkaller0: entered allmulticast mode [ 216.907813][ T8594] tipc: Enabled bearer , priority 0 [ 216.924781][ T8594] tipc: Resetting bearer [ 216.932369][ T8593] tipc: Resetting bearer [ 216.975824][ T8593] tipc: Disabling bearer [ 219.116912][ T5836] net_ratelimit: 43 callbacks suppressed [ 219.116926][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 219.116940][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 219.116953][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.159560][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.490858][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.619466][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 219.619489][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 219.619501][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.649939][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.783720][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.164569][ T8658] Mount JFS Failure: -5 [ 220.164586][ T8658] jfs_mount failed w/return code = -5 [ 222.107480][ T8675] Console: switching to colour dummy device 80x25 [ 222.326699][ T8677] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 222.352952][ T8677] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 222.353917][ T8677] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 222.354713][ T8677] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 222.378327][ T8677] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 222.403743][ T8684] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.430801][ T8677] pci 0000:00:01.0: Adding to iommu group 1 [ 222.433594][ T8677] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 222.433606][ T8677] pci 0000:00:01.0: vgaarb: bridge control possible [ 222.433622][ T8677] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 222.435026][ T8677] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 222.444658][ T8677] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 222.444816][ T8677] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 222.445287][ T8677] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 222.445482][ T8677] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 222.446742][ T8677] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 222.447563][ T8677] pci 0000:00:02.0: enabling Extended Tags [ 222.556384][ T8677] pci 0000:00:02.0: Adding to iommu group 2 [ 222.622748][ T8677] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 222.623276][ T8677] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 222.623422][ T8677] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 222.625476][ T8677] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 222.626716][ T8677] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 222.628050][ T8677] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 222.630896][ T8677] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 222.648345][ T8677] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 222.677372][ T8694] syzkaller0: entered promiscuous mode [ 222.677387][ T8694] syzkaller0: entered allmulticast mode [ 222.704042][ T8694] tipc: Enabled bearer , priority 0 [ 222.716727][ T8693] tipc: Resetting bearer [ 222.737784][ T8693] tipc: Disabling bearer [ 222.786534][ T8677] [drm] Found bochs VGA, ID 0xb0c5. [ 222.786546][ T8677] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 222.852936][ T8677] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 222.960215][ T8677] Console: switching to colour frame buffer device 160x50 [ 222.960256][ T8677] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 223.009180][ T8677] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 223.071471][ T8677] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 223.188288][ T8677] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 223.188308][ T8677] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 223.195409][ T8677] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 223.597092][ T5503] 8021q: adding VLAN 0 to HW filter on device eth1 [ 223.597695][ T8714] syzkaller0: entered promiscuous mode [ 223.597710][ T8714] syzkaller0: entered allmulticast mode [ 223.617256][ T8715] tipc: Enabled bearer , priority 0 [ 223.622329][ T8714] tipc: Resetting bearer [ 223.630187][ T8713] tipc: Resetting bearer [ 223.643928][ T8713] tipc: Disabling bearer [ 224.080310][ T8729] nftables ruleset with unbound chain [ 224.148779][ T5580] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 224.239827][ T5836] net_ratelimit: 116 callbacks suppressed [ 224.239848][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 224.239871][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 224.239891][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.392699][ T8738] syzkaller0: entered promiscuous mode [ 224.392728][ T8738] syzkaller0: entered allmulticast mode [ 224.397560][ T8738] tipc: Enabled bearer , priority 0 [ 224.398928][ T8735] tipc: Resetting bearer [ 224.419569][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.430110][ T8735] tipc: Disabling bearer [ 224.473961][ T8740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 224.506635][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.520227][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.570291][ T30] usb 5-1: New USB device found: idVendor=258a, idProduct=0036, bcdDevice=0.00 [ 224.572246][ T30] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.572264][ T30] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.572278][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.572294][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.574756][ T30] usb 5-1: config 0 descriptor?? [ 224.749718][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 224.749751][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 224.749771][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 225.021418][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.055438][ T8750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.076414][ T8750] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 225.081318][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 225.082436][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.084790][ T30] usb 5-1: USB disconnect, device number 7 [ 225.398491][ T8755] syzkaller0: entered promiscuous mode [ 225.398506][ T8755] syzkaller0: entered allmulticast mode [ 225.402816][ T8755] tipc: Enabled bearer , priority 0 [ 225.405028][ T8755] tipc: Resetting bearer [ 225.407309][ T8754] tipc: Resetting bearer [ 225.416645][ T8754] tipc: Disabling bearer [ 225.579769][ T8766] syzkaller0: entered promiscuous mode [ 225.579784][ T8766] syzkaller0: entered allmulticast mode [ 225.583478][ T8766] tipc: Enabled bearer , priority 0 [ 225.585167][ T8765] tipc: Resetting bearer [ 225.596198][ T8764] jffs2: notice: (8764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 225.622131][ T8765] tipc: Disabling bearer [ 225.811105][ T8779] cdrom: dropping to single frame dma [ 226.646494][ T8791] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 226.700320][ T8793] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 227.063813][ T8799] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 227.682625][ T8804] syzkaller0: entered promiscuous mode [ 227.682640][ T8804] syzkaller0: entered allmulticast mode [ 227.693403][ T8804] tipc: Enabled bearer , priority 0 [ 227.697937][ T8804] tipc: Resetting bearer [ 227.703487][ T8803] tipc: Resetting bearer [ 227.717696][ T8803] tipc: Disabling bearer [ 227.753721][ T8808] syzkaller0: entered promiscuous mode [ 227.753735][ T8808] syzkaller0: entered allmulticast mode [ 227.758656][ T8808] tipc: Enabled bearer , priority 0 [ 227.764393][ T8807] tipc: Resetting bearer [ 227.786444][ T8807] tipc: Disabling bearer [ 228.011822][ T8829] syzkaller0: entered promiscuous mode [ 228.011838][ T8829] syzkaller0: entered allmulticast mode [ 228.016648][ T8829] tipc: Enabled bearer , priority 0 [ 228.020791][ T8829] tipc: Resetting bearer [ 228.023323][ T8827] tipc: Resetting bearer [ 228.034661][ T8827] tipc: Disabling bearer [ 228.050302][ T8830] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 228.179682][ T5865] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 228.203710][ T8841] syzkaller0: entered promiscuous mode [ 228.203725][ T8841] syzkaller0: entered allmulticast mode [ 228.212035][ T8841] tipc: Enabled bearer , priority 0 [ 228.213817][ T8840] tipc: Resetting bearer [ 228.231840][ T8840] tipc: Disabling bearer [ 228.371040][ T5865] usb 7-1: unable to get BOS descriptor or descriptor too short [ 228.375316][ T5865] usb 7-1: New USB device found: idVendor=045e, idProduct=007a, bcdDevice=f5.7e [ 228.376772][ T5865] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 228.376801][ T5865] usb 7-1: can't read configurations, error -71 [ 228.451378][ T8861] CIFS: Attempting to mount //127.0.0.1/share [ 228.453687][ T8861] CIFS: VFS: smbdirect_connect_resolve_addr:99 rdma_resolve_addr() failed -EINVAL [ 228.453716][ T8861] CIFS: VFS: smbdirect_connect_sync:905 smbdirect_connect(127.0.0.1:5445) failed -EINVAL [ 228.453765][ T8861] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -EINVAL [ 228.454603][ T8861] CIFS: VFS: smbdirect_connect_resolve_addr:99 rdma_resolve_addr() failed -EINVAL [ 228.454617][ T8861] CIFS: VFS: smbdirect_connect_sync:905 smbdirect_connect(127.0.0.1:445) failed -EINVAL [ 228.454630][ T8861] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -EINVAL [ 228.454772][ T8861] CIFS: VFS: cifs_mount failed w/return code = -2 [ 228.636238][ T8873] Cannot find del_set index 0 as target [ 228.883535][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 228.955799][ T8888] syzkaller0: entered promiscuous mode [ 228.955821][ T8888] syzkaller0: entered allmulticast mode [ 229.018883][ T8893] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 229.022336][ T8893] syzkaller0: entered promiscuous mode [ 229.022349][ T8893] syzkaller0: entered allmulticast mode [ 229.349760][ T13] net_ratelimit: 49 callbacks suppressed [ 229.349780][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 229.349801][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 229.349819][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.358561][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 229.719474][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.762738][ T43] audit: type=1326 audit(1794349161.862:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.762812][ T43] audit: type=1326 audit(1794349161.862:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.762888][ T43] audit: type=1326 audit(1794349161.862:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.764585][ T43] audit: type=1326 audit(1794349161.862:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.764645][ T43] audit: type=1326 audit(1794349161.862:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.764757][ T43] audit: type=1326 audit(1794349161.862:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.764916][ T43] audit: type=1326 audit(1794349161.862:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.765197][ T43] audit: type=1326 audit(1794349161.862:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.766322][ T43] audit: type=1326 audit(1794349161.862:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=403 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.766410][ T43] audit: type=1326 audit(1794349161.862:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fbc code=0x7ffc0000 [ 229.861334][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 229.861355][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 229.861367][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 230.106544][ T8937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.106734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.123335][ T8937] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 230.199447][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.326645][ T8857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.326670][ T8857] nci: nci_start_poll: failed to set local general bytes [ 231.330873][ T8848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.559479][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.681295][ T8970] overlayfs: missing 'workdir' [ 231.736356][ T8975] syzkaller0: entered promiscuous mode [ 231.736370][ T8975] syzkaller0: entered allmulticast mode [ 231.747208][ T8975] tipc: Enabled bearer , priority 0 [ 231.752163][ T8975] tipc: Resetting bearer [ 231.755560][ T8974] tipc: Resetting bearer [ 231.775855][ T8974] tipc: Disabling bearer [ 231.919370][ T5580] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 232.082935][ T5580] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.082972][ T5580] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 232.087854][ T5580] usb 7-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 232.087870][ T5580] usb 7-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 232.093263][ T5580] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 232.093278][ T5580] usb 7-1: Product: syz [ 232.093285][ T5580] usb 7-1: Manufacturer: syz [ 232.093293][ T5580] usb 7-1: SerialNumber: syz [ 232.398803][ T5580] usb 7-1: USB disconnect, device number 9 [ 232.736098][ T8983] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 232.737880][ T8983] syzkaller0: entered promiscuous mode [ 232.737896][ T8983] syzkaller0: entered allmulticast mode [ 232.743229][ T8983] tipc: Enabled bearer , priority 0 [ 232.747127][ T8982] tipc: Resetting bearer [ 232.761855][ T8982] tipc: Disabling bearer [ 233.022080][ T8989] input: syz1 as /devices/virtual/input/input17 [ 234.181502][ T9009] program syz.1.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.380539][ T5865] net_ratelimit: 39 callbacks suppressed [ 234.380553][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.449260][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 234.449302][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 234.449317][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 234.514916][ T9017] tipc: Enabling of bearer rejected, failed to enable media [ 234.702350][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.969422][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 234.969445][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 234.969458][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 235.055282][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.055375][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.445743][ T9063] IPVS: set_ctl: invalid protocol: 59 172.30.0.4:7 [ 236.099661][ T9076] syzkaller0: entered promiscuous mode [ 236.099684][ T9076] syzkaller0: entered allmulticast mode [ 236.104301][ T9077] tipc: Enabled bearer , priority 0 [ 236.126587][ T9068] tipc: Resetting bearer [ 236.190851][ T9068] tipc: Disabling bearer [ 237.131324][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 237.219434][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.824'. [ 237.439350][ T5865] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.601732][ T5865] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 237.603221][ T5865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.603247][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.627632][ T5865] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 237.627744][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 237.627774][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 237.628332][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 237.628365][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 237.662255][ T5865] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 237.663194][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 237.663230][ T5865] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 237.666241][ T5865] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 237.695222][ T9095] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 238.421646][ T9112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.474079][ T9113] overlayfs: missing 'lowerdir' [ 239.570289][ T5865] net_ratelimit: 36 callbacks suppressed [ 239.570304][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.620582][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 239.620612][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 239.620631][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 239.705779][ T9122] syzkaller0: entered promiscuous mode [ 239.705793][ T9122] syzkaller0: entered allmulticast mode [ 239.714662][ T9122] tipc: Enabled bearer , priority 0 [ 239.717478][ T9121] tipc: Resetting bearer [ 239.733574][ T9121] tipc: Disabling bearer [ 239.851521][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 239.851536][ T43] audit: type=1800 audit(1794349171.952:1463): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.829" name="file1" dev="sda1" ino=2038 res=0 errno=-22 [ 240.129463][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 240.129494][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 240.129514][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 240.146913][ T30] usb 6-1: USB disconnect, device number 10 [ 240.152112][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 240.166831][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 240.167517][ T30] keyspan 6-1:1.0: device disconnected [ 240.280723][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.479463][ T9131] Invalid ELF header magic: != ELF [ 240.639373][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 240.639396][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 241.773588][ T9137] netlink: 'syz.0.839': attribute type 8 has an invalid length. [ 242.411064][ T9153] netlink: 120 bytes leftover after parsing attributes in process `syz.2.837'. [ 242.416388][ T9153] /dev/sg0: Can't lookup blockdev [ 243.049185][ T9162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.390506][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 243.759299][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 243.910518][ T30] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 243.912065][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.912091][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.918594][ T30] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 243.918688][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 243.918716][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 243.919478][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 243.919513][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 243.924345][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 243.925211][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 243.925247][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 243.928616][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 243.993177][ T9175] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 244.210127][ T5874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 244.373361][ T5874] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 244.386289][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.387120][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 244.388265][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 244.393665][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.723300][ T5874] cxacru 6-1:1.0: invalid response length to cm 0x90: 32 [ 244.725385][ T9184] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 244.749654][ T5836] net_ratelimit: 35 callbacks suppressed [ 244.749676][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 244.749700][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 244.749722][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 244.999431][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.259242][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 245.259264][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 245.259408][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 245.479321][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.769300][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 245.769329][ T5836] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 245.840525][ T5874] usb 6-1: USB disconnect, device number 11 [ 246.394818][ T30] usb 5-1: USB disconnect, device number 8 [ 246.401416][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 246.412069][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 246.412671][ T30] keyspan 5-1:1.0: device disconnected [ 246.770928][ T9197] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 246.774411][ T9197] tipc: Enabled bearer , priority 0 [ 246.892385][ T9195] tipc: Disabling bearer [ 247.174154][ T9213] netfs: Cache "CacheFiles" added (type cachefiles) [ 247.174173][ T9213] CacheFiles: File cache on CacheFiles registered [ 247.176076][ T9213] CacheFiles: File cache on CacheFiles unregistering [ 247.176089][ T9213] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 247.210508][ T9215] pim6reg: entered allmulticast mode [ 247.679345][ T925] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 247.734046][ T9220] pim6reg: left allmulticast mode [ 247.833055][ T925] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 247.855698][ T925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.855730][ T925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 247.855745][ T925] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 247.855766][ T925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.892165][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 248.111719][ T9223] hsr_slave_1 (unregistering): left promiscuous mode [ 248.530819][ T925] cxacru 7-1:1.0: invalid response length to cm 0x90: 32 [ 248.570179][ T9224] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 248.946070][ T9230] jffs2: notice: (9230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 249.141487][ T9243] bridge_slave_0: default FDB implementation only supports local addresses [ 249.220254][ T25] usb 7-1: USB disconnect, device number 10 [ 249.989317][ T13] net_ratelimit: 31 callbacks suppressed [ 249.989356][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 249.989372][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 249.989385][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.121147][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.121785][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.209368][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.478688][ T9261] kvm_intel: kvm [9260]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 250.499296][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 250.499319][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:00:00:00 [ 250.499332][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.597525][ T25] dummy0: entered promiscuous mode [ 250.601231][ T9261] macvtap1: entered allmulticast mode [ 250.601251][ T9261] dummy0: entered allmulticast mode [ 250.616811][ T9261] dummy0: left allmulticast mode [ 250.661356][ T25] dummy0: left promiscuous mode [ 250.755643][ T43] audit: type=1800 audit(1794349182.861:1464): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.876" name="file1" dev="sda1" ino=2038 res=0 errno=-22 [ 250.929280][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.562310][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 251.638793][ T9277] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 251.639527][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.2.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.639559][ T9277] Tainted: [L]=SOFTLOCKUP [ 251.639564][ T9277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.639583][ T9277] Call Trace: [ 251.639589][ T9277] [ 251.639595][ T9277] dump_stack_lvl+0x100/0x190 [ 251.639620][ T9277] sysfs_warn_dup.cold+0x1c/0x28 [ 251.639642][ T9277] sysfs_create_dir_ns+0x24b/0x2b0 [ 251.639661][ T9277] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 251.639691][ T9277] ? find_held_lock+0x2b/0x80 [ 251.639711][ T9277] ? kobject_add_internal+0x25f/0x930 [ 251.639727][ T9277] ? kobject_add_internal+0x25f/0x930 [ 251.639743][ T9277] ? class_dir_child_ns_type+0xd/0x60 [ 251.639759][ T9277] kobject_add_internal+0x2c8/0x930 [ 251.639776][ T9277] kobject_add+0x16a/0x1e0 [ 251.639791][ T9277] ? __pfx_kobject_add+0x10/0x10 [ 251.639807][ T9277] ? get_device_parent+0x1b3/0x4c0 [ 251.639821][ T9277] ? kobject_put+0xb9/0x640 [ 251.639839][ T9277] device_add+0x294/0x1970 [ 251.639854][ T9277] ? lockdep_init_map_type+0x5c/0x250 [ 251.639869][ T9277] ? __pfx_device_add+0x10/0x10 [ 251.639883][ T9277] ? lockdep_init_map_type+0x5c/0x250 [ 251.639898][ T9277] ? __init_waitqueue_head+0xca/0x150 [ 251.639917][ T9277] tty_register_device_attr+0x388/0x810 [ 251.639935][ T9277] ? lockdep_init_map_type+0x5c/0x250 [ 251.639949][ T9277] ? __pfx_tty_register_device_attr+0x10/0x10 [ 251.639971][ T9277] ? tty_port_init+0x156/0x1c0 [ 251.639990][ T9277] gsm_activate_mux+0x155/0x2a0 [ 251.640014][ T9277] gsmld_ioctl+0xbbc/0x15c0 [ 251.640031][ T9277] ? __pfx_gsmld_ioctl+0x10/0x10 [ 251.640056][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.640076][ T9277] ? __pfx_gsmld_ioctl+0x10/0x10 [ 251.640089][ T9277] tty_compat_ioctl+0x396/0x420 [ 251.640107][ T9277] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 251.640126][ T9277] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 251.640142][ T9277] __do_fast_syscall_32+0x14d/0x8e0 [ 251.640164][ T9277] do_fast_syscall_32+0x32/0x70 [ 251.640183][ T9277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.640198][ T9277] RIP: 0023:0xf7f53fbc [ 251.640220][ T9277] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 251.640233][ T9277] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 251.640248][ T9277] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 251.640257][ T9277] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.640265][ T9277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.640273][ T9277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.640281][ T9277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.640297][ T9277] [ 251.640468][ T9277] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 251.703848][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 251.836107][ T9281] all (unregistering): Released all slaves [ 251.923160][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'. [ 253.681098][ T9303] device-mapper: ioctl: Geometry exceeds range limits. [ 253.967920][ T9319] vlan2: entered promiscuous mode [ 253.968052][ T9319] bridge0: entered promiscuous mode [ 254.109368][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.226752][ T9338] Bluetooth: MGMT ver 1.23 [ 254.300147][ T5893] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 254.318423][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.318456][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 254.318472][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 254.318493][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.822058][ C0] ================================================================== [ 254.822094][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 254.822126][ C0] Read of size 1 at addr ffff888061ab80da by task kworker/0:4/5893 [ 254.822145][ C0] [ 254.822157][ C0] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.822186][ C0] Tainted: [L]=SOFTLOCKUP [ 254.822194][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.822216][ C0] Workqueue: usb_hub_wq hub_event [ 254.822239][ C0] Call Trace: [ 254.822246][ C0] [ 254.822255][ C0] dump_stack_lvl+0x100/0x190 [ 254.822287][ C0] print_report+0x13d/0x4b0 [ 254.822317][ C0] ? __virt_addr_valid+0x239/0x430 [ 254.822362][ C0] ? find_endpoint+0x2a3/0x2c0 [ 254.822384][ C0] kasan_report+0xdf/0x1c0 [ 254.822410][ C0] ? find_endpoint+0x2a3/0x2c0 [ 254.822435][ C0] find_endpoint+0x2a3/0x2c0 [ 254.822459][ C0] dummy_timer+0x506/0x3840 [ 254.822487][ C0] ? do_raw_spin_lock+0x128/0x260 [ 254.822515][ C0] ? irqentry_exit+0x202/0xab0 [ 254.822551][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 254.822578][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 254.822608][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 254.822633][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 254.822669][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 254.822690][ C0] handle_softirqs+0x216/0xa20 [ 254.822712][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 254.822731][ C0] ? _raw_spin_unlock+0x28/0x50 [ 254.822755][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 254.822778][ C0] __irq_exit_rcu+0x178/0x220 [ 254.822798][ C0] irq_exit_rcu+0x9/0x30 [ 254.822817][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 254.822860][ C0] [ 254.822868][ C0] [ 254.822876][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.822900][ C0] RIP: 0010:__schedule+0x30b1/0x6a40 [ 254.822931][ C0] Code: f0 fe ff ff e8 80 ed 98 f6 41 c7 87 20 0e 00 00 00 00 00 00 e9 a3 16 00 00 49 8d 7f 48 e8 37 f7 01 00 e8 62 e1 27 f6 fb 31 ff b5 e1 ff ff 49 8d bf c8 0e 00 00 48 b8 00 00 00 00 00 fc ff df [ 254.822952][ C0] RSP: 0000:ffffc9000612e900 EFLAGS: 00000246 [ 254.822967][ C0] RAX: 000000000000d443 RBX: 0000000000000000 RCX: 0000000000000040 [ 254.822980][ C0] RDX: 0000000000000001 RSI: ffffffff8e625f6d RDI: 0000000000000000 [ 254.822991][ C0] RBP: ffffc9000612ea60 R08: 0000000000000001 R09: 0000000000000000 [ 254.823003][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae3d800 [ 254.823016][ C0] R13: ffff88802583cb00 R14: ffffffff8e8e1a10 R15: ffff88802ae3ca40 [ 254.823038][ C0] ? dummy_urb_enqueue+0xa3/0x8b0 [ 254.823063][ C0] ? usb_hcd_submit_urb+0x268/0x2140 [ 254.823088][ C0] ? usb_submit_urb+0x827/0x19b0 [ 254.823114][ C0] ? cxacru_cm+0x3cc/0x9a0 [ 254.823141][ C0] ? __pfx___schedule+0x10/0x10 [ 254.823169][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 254.823197][ C0] preempt_schedule+0x57/0xd0 [ 254.823225][ C0] preempt_schedule_thunk+0x16/0x40 [ 254.823254][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 254.823282][ C0] __debug_object_init+0x2de/0x3d0 [ 254.823309][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 254.823330][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.823357][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.823385][ C0] ? dummy_urb_enqueue+0x571/0x8b0 [ 254.823411][ C0] ? __pfx_cxacru_timeout_kill+0x10/0x10 [ 254.823434][ C0] timer_init_key_on_stack+0x2e/0x120 [ 254.823462][ C0] cxacru_start_wait_urb+0xae/0x200 [ 254.823484][ C0] ? __pfx_cxacru_start_wait_urb+0x10/0x10 [ 254.823514][ C0] cxacru_cm+0x410/0x9a0 [ 254.823539][ C0] ? __pfx_cxacru_cm+0x10/0x10 [ 254.823561][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 254.823585][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 254.823609][ C0] cxacru_card_status+0x21/0xf0 [ 254.823631][ C0] cxacru_bind+0x882/0x1300 [ 254.823654][ C0] ? __pfx_cxacru_bind+0x10/0x10 [ 254.823675][ C0] usbatm_usb_probe+0x378/0x1b50 [ 254.823704][ C0] ? do_raw_spin_lock+0x128/0x260 [ 254.823728][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 254.823753][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 254.823781][ C0] cxacru_usb_probe+0x101/0x200 [ 254.823802][ C0] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 254.823824][ C0] ? __pm_runtime_set_status+0x13c/0x970 [ 254.823850][ C0] usb_probe_interface+0x386/0x980 [ 254.823875][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 254.823906][ C0] ? really_probe+0x239/0xa60 [ 254.823926][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 254.823949][ C0] really_probe+0x241/0xa60 [ 254.823970][ C0] __driver_probe_device+0x210/0x460 [ 254.823990][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.824019][ C0] driver_probe_device+0x4a/0x140 [ 254.824040][ C0] __device_attach_driver+0x1df/0x320 [ 254.824062][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 254.824082][ C0] bus_for_each_drv+0x159/0x1e0 [ 254.824110][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 254.824134][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.824163][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.824192][ C0] __device_attach+0x1e4/0x4c0 [ 254.824213][ C0] ? __pfx___device_attach+0x10/0x10 [ 254.824234][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.824263][ C0] device_initial_probe+0xaf/0xf0 [ 254.824285][ C0] __bus_probe_device+0x60/0x160 [ 254.824313][ C0] device_add+0x121d/0x1970 [ 254.824337][ C0] ? __pfx_device_add+0x10/0x10 [ 254.824364][ C0] usb_set_configuration+0xd97/0x1dc0 [ 254.824403][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 254.824429][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 254.824457][ C0] usb_probe_device+0xef/0x400 [ 254.824478][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 254.824498][ C0] really_probe+0x241/0xa60 [ 254.824514][ C0] __driver_probe_device+0x210/0x460 [ 254.824534][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.824563][ C0] driver_probe_device+0x4a/0x140 [ 254.824579][ C0] __device_attach_driver+0x1df/0x320 [ 254.824600][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 254.824621][ C0] bus_for_each_drv+0x159/0x1e0 [ 254.824649][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 254.824676][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.824705][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.824735][ C0] __device_attach+0x1e4/0x4c0 [ 254.824755][ C0] ? __pfx___device_attach+0x10/0x10 [ 254.824776][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.824805][ C0] device_initial_probe+0xaf/0xf0 [ 254.824827][ C0] __bus_probe_device+0x60/0x160 [ 254.824854][ C0] device_add+0x121d/0x1970 [ 254.824877][ C0] ? __pfx_device_add+0x10/0x10 [ 254.824897][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 254.824931][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 254.824955][ C0] ? do_raw_spin_lock+0x128/0x260 [ 254.824981][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 254.825003][ C0] ? mark_held_locks+0x40/0x70 [ 254.825026][ C0] hub_event.cold+0x1e3/0xe90 [ 254.825061][ C0] ? __pfx_hub_event+0x10/0x10 [ 254.825080][ C0] ? down_write_trylock+0x350/0x410 [ 254.825107][ C0] ? lock_acquire+0x1d1/0x380 [ 254.825128][ C0] ? process_one_work+0xa2c/0x1b10 [ 254.825159][ C0] ? process_one_work+0x906/0x1b10 [ 254.825188][ C0] ? process_one_work+0x906/0x1b10 [ 254.825220][ C0] process_one_work+0xac7/0x1b10 [ 254.825255][ C0] ? __pfx_process_one_work+0x10/0x10 [ 254.825285][ C0] ? lock_acquire+0x1d1/0x380 [ 254.825310][ C0] ? __pfx_hub_event+0x10/0x10 [ 254.825331][ C0] worker_thread+0x5ef/0xe50 [ 254.825364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 254.825394][ C0] ? kthread+0x13a/0x450 [ 254.825419][ C0] ? __pfx_worker_thread+0x10/0x10 [ 254.825447][ C0] kthread+0x373/0x450 [ 254.825474][ C0] ? __pfx_kthread+0x10/0x10 [ 254.825501][ C0] ret_from_fork+0x730/0xd60 [ 254.825526][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 254.825550][ C0] ? __switch_to+0x800/0x10e0 [ 254.825581][ C0] ? __pfx_kthread+0x10/0x10 [ 254.825608][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.825639][ C0] [ 254.825646][ C0] [ 254.825651][ C0] Allocated by task 9272: [ 254.825662][ C0] kasan_save_stack+0x30/0x50 [ 254.825684][ C0] kasan_save_track+0x14/0x30 [ 254.825702][ C0] __kasan_kmalloc+0xaa/0xb0 [ 254.825722][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 254.825749][ C0] device_add+0xd3f/0x1970 [ 254.825769][ C0] tty_register_device_attr+0x388/0x810 [ 254.825794][ C0] gsm_activate_mux+0x155/0x2a0 [ 254.825817][ C0] gsmld_ioctl+0xbbc/0x15c0 [ 254.825835][ C0] tty_compat_ioctl+0x396/0x420 [ 254.825861][ C0] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 254.825880][ C0] __do_fast_syscall_32+0x14d/0x8e0 [ 254.825913][ C0] do_fast_syscall_32+0x32/0x70 [ 254.825939][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.825961][ C0] [ 254.825964][ C0] Freed by task 9269: [ 254.825972][ C0] kasan_save_stack+0x30/0x50 [ 254.825992][ C0] kasan_save_track+0x14/0x30 [ 254.826009][ C0] kasan_save_free_info+0x3b/0x70 [ 254.826035][ C0] __kasan_slab_free+0x5f/0x80 [ 254.826055][ C0] kfree+0x22b/0x6d0 [ 254.826079][ C0] kobject_put+0x1f7/0x640 [ 254.826099][ C0] device_unregister+0x2f/0xe0 [ 254.826127][ C0] device_destroy+0x99/0xe0 [ 254.826154][ C0] tty_unregister_device+0x82/0x1d0 [ 254.826178][ C0] gsm_cleanup_mux+0x5f6/0x890 [ 254.826195][ C0] gsmld_close+0x45/0x200 [ 254.826213][ C0] tty_ldisc_close+0x114/0x1a0 [ 254.826235][ C0] tty_ldisc_kill+0x8e/0x150 [ 254.826258][ C0] tty_ldisc_release+0x107/0x2f0 [ 254.826281][ C0] tty_release_struct+0x23/0xe0 [ 254.826305][ C0] tty_release+0xd7a/0x1300 [ 254.826351][ C0] __fput+0x3fb/0xb50 [ 254.826377][ C0] fput_close_sync+0x118/0x250 [ 254.826403][ C0] filp_close_sync+0x75/0xa0 [ 254.826430][ C0] __range_close+0x4a6/0x8b0 [ 254.826454][ C0] __ia32_sys_close_range+0x1f8/0x430 [ 254.826479][ C0] __do_fast_syscall_32+0x14d/0x8e0 [ 254.826507][ C0] do_fast_syscall_32+0x32/0x70 [ 254.826536][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.826557][ C0] [ 254.826562][ C0] The buggy address belongs to the object at ffff888061ab8000 [ 254.826562][ C0] which belongs to the cache kmalloc-512 of size 512 [ 254.826578][ C0] The buggy address is located 218 bytes inside of [ 254.826578][ C0] freed 512-byte region [ffff888061ab8000, ffff888061ab8200) [ 254.826598][ C0] [ 254.826603][ C0] The buggy address belongs to the physical page: [ 254.826612][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888061ab9800 pfn:0x61ab8 [ 254.826632][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.826648][ C0] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 254.826668][ C0] page_type: f5(slab) [ 254.826685][ C0] raw: 04fff00000000240 ffff88801d442c80 ffffea000184f210 ffffea0001841810 [ 254.826704][ C0] raw: ffff888061ab9800 000000000010000c 00000000f5000000 0000000000000000 [ 254.826723][ C0] head: 04fff00000000240 ffff88801d442c80 ffffea000184f210 ffffea0001841810 [ 254.826742][ C0] head: ffff888061ab9800 000000000010000c 00000000f5000000 0000000000000000 [ 254.826761][ C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 254.826779][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 254.826791][ C0] page dumped because: kasan: bad access detected [ 254.826800][ C0] page_owner tracks the page as allocated [ 254.826807][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5787, tgid 5787 (syz-executor), ts 40785320694 [ 254.826840][ C0] post_alloc_hook+0xfd/0x120 [ 254.826867][ C0] get_page_from_freelist+0xdae/0x2c80 [ 254.826896][ C0] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 254.826935][ C0] new_slab+0xb1/0x6d0 [ 254.826961][ C0] refill_objects+0xe3/0x410 [ 254.826990][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 254.827018][ C0] __kmalloc_noprof+0x677/0x840 [ 254.827038][ C0] tomoyo_init_log+0x114d/0x1f80 [ 254.827058][ C0] tomoyo_supervisor+0x506/0x1340 [ 254.827080][ C0] tomoyo_path_number_perm+0x445/0x580 [ 254.827106][ C0] tomoyo_path_mkdir+0x9b/0xe0 [ 254.827127][ C0] security_path_mkdir+0x154/0x2e0 [ 254.827144][ C0] filename_mkdirat+0x168/0x630 [ 254.827164][ C0] __ia32_sys_mkdirat+0x88/0xc0 [ 254.827187][ C0] __do_fast_syscall_32+0x14d/0x8e0 [ 254.827213][ C0] do_fast_syscall_32+0x32/0x70 [ 254.827241][ C0] page last free pid 5787 tgid 5787 ts 40775168212 stack trace: [ 254.827255][ C0] __free_frozen_pages+0x7b1/0x10f0 [ 254.827277][ C0] stack_depot_save_flags+0x456/0xa10 [ 254.827302][ C0] kasan_save_stack+0x3f/0x50 [ 254.827323][ C0] kasan_save_track+0x14/0x30 [ 254.827343][ C0] __kasan_slab_alloc+0x89/0x90 [ 254.827365][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 254.827384][ C0] alloc_vfsmnt+0x25/0x840 [ 254.827401][ C0] clone_mnt+0x4b/0x9c0 [ 254.827418][ C0] copy_tree+0x327/0xc50 [ 254.827442][ C0] __do_loopback+0x338/0x540 [ 254.827464][ C0] path_mount+0x1ce8/0x2850 [ 254.827490][ C0] __ia32_sys_mount+0x292/0x310 [ 254.827517][ C0] __do_fast_syscall_32+0x14d/0x8e0 [ 254.827547][ C0] do_fast_syscall_32+0x32/0x70 [ 254.827576][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.827600][ C0] [ 254.827605][ C0] Memory state around the buggy address: [ 254.827615][ C0] ffff888061ab7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 254.827630][ C0] ffff888061ab8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.827644][ C0] >ffff888061ab8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.827654][ C0] ^ [ 254.827666][ C0] ffff888061ab8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.827680][ C0] ffff888061ab8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.827691][ C0] ================================================================== [ 254.827703][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.373934][ C0] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.377802][ C0] Tainted: [L]=SOFTLOCKUP [ 255.379626][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.383864][ C0] Workqueue: usb_hub_wq hub_event [ 255.386059][ C0] Call Trace: [ 255.387497][ C0] [ 255.388725][ C0] dump_stack_lvl+0x100/0x190 [ 255.390736][ C0] vpanic+0x2dc/0x6f8 [ 255.392483][ C0] panic+0xd1/0xe0 [ 255.394067][ C0] ? __pfx_panic+0x10/0x10 [ 255.395924][ C0] ? end_report.part.0+0x23/0x90 [ 255.397977][ C0] ? rcu_is_watching+0x13/0xc0 [ 255.399910][ C0] ? end_report.part.0+0x23/0x90 [ 255.401932][ C0] check_panic_on_warn.cold+0x19/0x34 [ 255.404202][ C0] end_report.part.0+0x3a/0x90 [ 255.406176][ C0] kasan_report.cold+0xe/0x18 [ 255.408223][ C0] ? find_endpoint+0x2a3/0x2c0 [ 255.410288][ C0] find_endpoint+0x2a3/0x2c0 [ 255.412282][ C0] dummy_timer+0x506/0x3840 [ 255.414235][ C0] ? do_raw_spin_lock+0x128/0x260 [ 255.416401][ C0] ? irqentry_exit+0x202/0xab0 [ 255.418469][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 255.420369][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 255.422605][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 255.424695][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 255.426906][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 255.429071][ C0] handle_softirqs+0x216/0xa20 [ 255.431049][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 255.433070][ C0] ? _raw_spin_unlock+0x28/0x50 [ 255.434925][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 255.437227][ C0] __irq_exit_rcu+0x178/0x220 [ 255.439267][ C0] irq_exit_rcu+0x9/0x30 [ 255.441111][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 255.443428][ C0] [ 255.444710][ C0] [ 255.445994][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.448705][ C0] RIP: 0010:__schedule+0x30b1/0x6a40 [ 255.451016][ C0] Code: f0 fe ff ff e8 80 ed 98 f6 41 c7 87 20 0e 00 00 00 00 00 00 e9 a3 16 00 00 49 8d 7f 48 e8 37 f7 01 00 e8 62 e1 27 f6 fb 31 ff b5 e1 ff ff 49 8d bf c8 0e 00 00 48 b8 00 00 00 00 00 fc ff df [ 255.459090][ C0] RSP: 0000:ffffc9000612e900 EFLAGS: 00000246 [ 255.461695][ C0] RAX: 000000000000d443 RBX: 0000000000000000 RCX: 0000000000000040 [ 255.465054][ C0] RDX: 0000000000000001 RSI: ffffffff8e625f6d RDI: 0000000000000000 [ 255.468431][ C0] RBP: ffffc9000612ea60 R08: 0000000000000001 R09: 0000000000000000 [ 255.471653][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ae3d800 [ 255.474742][ C0] R13: ffff88802583cb00 R14: ffffffff8e8e1a10 R15: ffff88802ae3ca40 [ 255.477906][ C0] ? dummy_urb_enqueue+0xa3/0x8b0 [ 255.479915][ C0] ? usb_hcd_submit_urb+0x268/0x2140 [ 255.481936][ C0] ? usb_submit_urb+0x827/0x19b0 [ 255.483830][ C0] ? cxacru_cm+0x3cc/0x9a0 [ 255.485554][ C0] ? __pfx___schedule+0x10/0x10 [ 255.487396][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 255.489114][ C0] preempt_schedule+0x57/0xd0 [ 255.490645][ C0] preempt_schedule_thunk+0x16/0x40 [ 255.492294][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 255.494064][ C0] __debug_object_init+0x2de/0x3d0 [ 255.495710][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 255.497504][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.499356][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.501337][ C0] ? dummy_urb_enqueue+0x571/0x8b0 [ 255.503013][ C0] ? __pfx_cxacru_timeout_kill+0x10/0x10 [ 255.504803][ C0] timer_init_key_on_stack+0x2e/0x120 [ 255.506531][ C0] cxacru_start_wait_urb+0xae/0x200 [ 255.508192][ C0] ? __pfx_cxacru_start_wait_urb+0x10/0x10 [ 255.510067][ C0] cxacru_cm+0x410/0x9a0 [ 255.511450][ C0] ? __pfx_cxacru_cm+0x10/0x10 [ 255.512954][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 255.514656][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 255.516354][ C0] cxacru_card_status+0x21/0xf0 [ 255.517914][ C0] cxacru_bind+0x882/0x1300 [ 255.519389][ C0] ? __pfx_cxacru_bind+0x10/0x10 [ 255.520979][ C0] usbatm_usb_probe+0x378/0x1b50 [ 255.522606][ C0] ? do_raw_spin_lock+0x128/0x260 [ 255.524224][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 255.525948][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 255.527671][ C0] cxacru_usb_probe+0x101/0x200 [ 255.529221][ C0] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 255.530948][ C0] ? __pm_runtime_set_status+0x13c/0x970 [ 255.532711][ C0] usb_probe_interface+0x386/0x980 [ 255.534341][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 255.536124][ C0] ? really_probe+0x239/0xa60 [ 255.537615][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 255.539397][ C0] really_probe+0x241/0xa60 [ 255.540852][ C0] __driver_probe_device+0x210/0x460 [ 255.542538][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.544373][ C0] driver_probe_device+0x4a/0x140 [ 255.545968][ C0] __device_attach_driver+0x1df/0x320 [ 255.547668][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 255.549540][ C0] bus_for_each_drv+0x159/0x1e0 [ 255.551136][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 255.552827][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.554489][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.556290][ C0] __device_attach+0x1e4/0x4c0 [ 255.557807][ C0] ? __pfx___device_attach+0x10/0x10 [ 255.559484][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 255.561130][ C0] device_initial_probe+0xaf/0xf0 [ 255.562761][ C0] __bus_probe_device+0x60/0x160 [ 255.564310][ C0] device_add+0x121d/0x1970 [ 255.565759][ C0] ? __pfx_device_add+0x10/0x10 [ 255.567320][ C0] usb_set_configuration+0xd97/0x1dc0 [ 255.569033][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 255.571036][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 255.572752][ C0] usb_probe_device+0xef/0x400 [ 255.574341][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 255.576077][ C0] really_probe+0x241/0xa60 [ 255.577546][ C0] __driver_probe_device+0x210/0x460 [ 255.579252][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.581145][ C0] driver_probe_device+0x4a/0x140 [ 255.582784][ C0] __device_attach_driver+0x1df/0x320 [ 255.584496][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 255.586362][ C0] bus_for_each_drv+0x159/0x1e0 [ 255.587877][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 255.589545][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.591205][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.593003][ C0] __device_attach+0x1e4/0x4c0 [ 255.594500][ C0] ? __pfx___device_attach+0x10/0x10 [ 255.596167][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 255.597812][ C0] device_initial_probe+0xaf/0xf0 [ 255.599420][ C0] __bus_probe_device+0x60/0x160 [ 255.601011][ C0] device_add+0x121d/0x1970 [ 255.602480][ C0] ? __pfx_device_add+0x10/0x10 [ 255.604028][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 255.605817][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 255.607520][ C0] ? do_raw_spin_lock+0x128/0x260 [ 255.609112][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 255.610981][ C0] ? mark_held_locks+0x40/0x70 [ 255.612521][ C0] hub_event.cold+0x1e3/0xe90 [ 255.614011][ C0] ? __pfx_hub_event+0x10/0x10 [ 255.615537][ C0] ? down_write_trylock+0x350/0x410 [ 255.617177][ C0] ? lock_acquire+0x1d1/0x380 [ 255.618699][ C0] ? process_one_work+0xa2c/0x1b10 [ 255.620361][ C0] ? process_one_work+0x906/0x1b10 [ 255.621995][ C0] ? process_one_work+0x906/0x1b10 [ 255.623608][ C0] process_one_work+0xac7/0x1b10 [ 255.625155][ C0] ? __pfx_process_one_work+0x10/0x10 [ 255.626858][ C0] ? lock_acquire+0x1d1/0x380 [ 255.628320][ C0] ? __pfx_hub_event+0x10/0x10 [ 255.629889][ C0] worker_thread+0x5ef/0xe50 [ 255.631372][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.632997][ C0] ? kthread+0x13a/0x450 [ 255.634358][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.635982][ C0] kthread+0x373/0x450 [ 255.637278][ C0] ? __pfx_kthread+0x10/0x10 [ 255.638749][ C0] ret_from_fork+0x730/0xd60 [ 255.640260][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 255.641900][ C0] ? __switch_to+0x800/0x10e0 [ 255.643389][ C0] ? __pfx_kthread+0x10/0x10 [ 255.644813][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.646353][ C0] [ 255.648002][ C0] Kernel Offset: disabled [ 255.649365][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:19:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c198d5 RDI=ffffffff9cf424e0 RBP=ffffffff9cf424a0 RSP=ffffc90000007438 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3630383838666666 R12=0000000000000000 R13=0000000000000066 R14=000000000000000e R15=ffffc90000007750 RIP=ffffffff85c198ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095279000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e7f5ff8 CR3=000000004f4ed000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000018 RCX=0000000000000200 RDX=0000000000000000 RSI=ffffffff8e5fefe5 RDI=ffffffff8c835980 RBP=ffff88804f766d28 RSP=ffffc90006427ae0 R8 =00000000bb2113ad R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8bed4246 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095379000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080005000 CR3=000000004f4ed000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a400000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000d765df RBX=ffffffff91c2ce40 RCX=0000000000000002 RDX=0000000000000608 RSI=ffffffff891fab29 RDI=ffffffff91c2ce40 RBP=000000000000c210 RSP=ffffc9000053f888 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000003b165a3511 R13=dffffc0000000000 R14=ffffffff926b1244 R15=ffff88802b03ca40 RIP=ffffffff891fab30 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095479000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=0000000070023000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b03ca88 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b03ca8a RBP=dffffc0000000000 RSP=ffffc9000049fab8 R8 =0000000000000001 R9 =ffffed1005607951 R10=ffff88802b03ca8b R11=0000000000000000 R12=0000000000007759 R13=ffffed1005607951 R14=ffff88802b13da40 R15=0000000000000000 RIP=ffffffff8bf06664 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095579000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056315dd6a000 CR3=000000004d774000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84ed4e97 ffffffff84ec411f 0000001200000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84eb4796 ffffffff84eb918a ffffffff84ebaa57 ffffffff823d540a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84eb908e ffffffff84eb90a8 ffffffff84eb9805 ffffffff84ebbf56 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff cb080e80030180c0 08000cc680020100 00000806060156b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cc2800200080004 007c8200332f6f66 6e69646601ffffff ffffffffffed080c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84ed0e02 ffffffff84eba4f0 ffffffff84eb7531 ffffffff84eb95a7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84ee2777 ffffffff84eb16be ffffffff84eb999a ffffffff84ebf2c4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d5f3670692f7465 6e01ffffffffffff ffffe1080cc58003 2408000180020100 ZMM25=8122934681229346 8122934681229346 8122934681229346 8122934681229346 8122934681229346 8122934681229346 8122934681229346 8122934681229346 ZMM26=e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 e9012aa8e9012aa8 ZMM27=993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 993c31e0993c31e0 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000 e90a0000e90a0000