last executing test programs: 3.86407815s ago: executing program 1 (id=2656): socket$isdn(0x22, 0x2, 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.857748525s ago: executing program 1 (id=2657): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.823660308s ago: executing program 1 (id=2658): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0xa}}}]}]}]}}]}, 0x50}}, 0x20040054) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000180)) r9 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000002c0)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0x66) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x37c, 0x100, 0x0, 0x148, 0x100, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'ip6gre0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@connlabel={{0x24}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x1c4, 0x1e8, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@loopback, [], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, {@ipv4=@private}, {@ipv4=@remote, [], @ipv6=@loopback}, {@ipv6=@remote, [], @ipv4=@loopback}]}}]}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d8) 3.682168062s ago: executing program 2 (id=2659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/106, 0xffffffffffffffc8, 0x0, 0x0, 0x2}}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x8020000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x27, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3bc1, 0x4af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1000000019140109394a6ceeb035e300ef14c7d1f0c506f3b86f9af32ffebeb8d2b2368aa19bcfb7bf5316519c51b55aab2507b18a1bd61c8a03bded1671d2e8fbcaf2c11fa58dbee97d02d8f6c31c2c4d33e04909c35ed9c9307664ba6e6df6b7e482e40c15"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) 3.51299149s ago: executing program 1 (id=2661): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 3.441814052s ago: executing program 1 (id=2662): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000002700)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x4, 0x5, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x7800, 0x40, 0x1b1, 0xfffffffb}}) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r7 = fanotify_init(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000002340)={0x4, {{0xa, 0x4e23, 0x2, @remote, 0x6}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x4, @local, 0xfffffff3}}, {{0xa, 0x4e23, 0x3, @private1, 0x5}}, {{0xa, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {{0xa, 0x4e21, 0x5, @local, 0x2}}, {{0xa, 0x4e21, 0x54a5, @empty, 0x1}}]}, 0x30c) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) fanotify_mark(r7, 0x90, 0x420, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffffffff, 0x7fffffff, 0x7, 0x40, r1, 0x5, '\x00', r4, r6, 0x5, 0x5, 0x0, 0xe, @void, @value, @void, @value}, 0x50) openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) llistxattr(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 2.793569643s ago: executing program 2 (id=2663): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0005000500000000000000000010000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007"], 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r0) 2.681922223s ago: executing program 2 (id=2664): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_simple={0xc0, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x1, 0xffffffffffffffff, 0x101, 0x7e4}}, @TCA_DEF_DATA={0x7, 0x3, '){\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}]}, {0x6b, 0x6, "a6a50507d9ad42b66878b5d4557cf823db20dfe01dae0a96d707ff427b723979b3b73b4607d816ce2dc82f36966729c25dc25aad41190dc60b83df26d4c01c56617b60415cc7e973f5ca2ed1ee6e4ee341a62320aace0fe3e0c6ab07efb08e7158200207752816"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x6, 0x4ae, 0x1, 0x7, 0x8}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x3}]}, {0x0, 0x6, "c053290bf64ff484f45a5863839bb897e395e505f7f4c691f407060f9599"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0xee01, 0xee00, 0x0) fchown(r5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r4, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) r6 = syz_open_dev$evdev(&(0x7f0000002200), 0x0, 0x101001) writev(r6, &(0x7f00000032c0)=[{&(0x7f0000000540)="62863040", 0x4}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex_waitv(&(0x7f0000001f40)=[{0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x4}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000000f80)}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x3c, 0x0, 0x0, 0x0) map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x8, 0x0) 2.192038563s ago: executing program 3 (id=2667): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r0) 2.178046573s ago: executing program 3 (id=2668): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x2ae9, 0x4) 1.772116481s ago: executing program 2 (id=2669): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0x1, 0xa}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r1 = syz_io_uring_setup(0x2b23, &(0x7f0000000340)={0x0, 0xffffffff, 0x0, 0x0, 0x4330}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='%'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x6089, 0x4e72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000028ef2beb87db6bf30100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000080)) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000000080)=0x200000000) 1.322068308s ago: executing program 0 (id=2670): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x2}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.321852723s ago: executing program 0 (id=2671): io_setup(0x3, &(0x7f0000000180)=0x0) r1 = socket(0x1d, 0x2, 0x6) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) (fail_nth: 1) 1.061973801s ago: executing program 0 (id=2672): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private1, @mcast2={0xff, 0x3}, 0x0, 0x0, 0x1, 0xffffffff}}) 1.061716406s ago: executing program 0 (id=2673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) io_setup(0x3, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() sync() sync() syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sync() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r3) dup(r2) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0500580c"], 0x8) r4 = socket(0x1d, 0x2, 0x6) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.001388408s ago: executing program 3 (id=2674): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$P9_RREADDIR(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x5}}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) connect$pppl2tp(r7, &(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x3, 0x2, 0x3, {0xa, 0x4e24, 0x1, @mcast1}}}, 0x32) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000001600)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="902e653a47f8497227b81222c5514029424e2a6e714624564bd832b2999e867575f20874fdbc2cf9fc9bde9858e73686dd0b159856b1dfc7bbc71d4453bd91f76c0332edd7ea2839fcca5ba870b524f232547935076b36631029adf3de16f4fabafb2222b21881bf790e4afaf498c40fa258d8de43aa1e70eb70b3987d1cdbd69a900ab7ff913eb9f2bcf9f67ee1b57168600621e801d4de6e7d028e02c1a0e0cf7137b57f2d0471dda088d7b069f2c6d32f58cd55367bfbfd68233b7f6d4fefca2a379421db4a9e640655782f4e01e0cab43ecb3aca67715b3b", 0xda}, {&(0x7f00000001c0)="14a1ec459d06b002f3", 0x9}, {&(0x7f0000000300)="3f2cbaeeaf232250031b7c81d223", 0xe}, {&(0x7f00000003c0)="529f83128dd83284c15912d994e9b0a16b733ba0e9f40919e2511ad63c4eca59d5ff1f8fa94406df4504fec3c9b8320f4e21bc0abebaa1718fab8d5509ee7fca13c4b044977254d6ea77172b4849b6b38d1783f1732153bc5fd9741173da722361b333b167c4ee1da441995dec4809d55141e709caac43c8c5ddc2714fcbd8c7bc349fc315467673a0ca1820df154700fc33fdb24e4de9b7249d2d80a96a0c3d2d010f30443a4acadedd4394042ccab96f508e9b031d10facfa6", 0xba}], 0x5, &(0x7f0000001640)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x9612}}, @mark={{0x10, 0x1, 0x24, 0xe913}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x401}}], 0x58}, 0x0) 941.542298ms ago: executing program 3 (id=2675): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x1000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000005000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x0, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 892.028616ms ago: executing program 2 (id=2676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() ptrace$getenv(0x4201, r1, 0x2, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ee04785}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044084}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000080)={@multicast1, @multicast2, 0x1, "7fd78b248b6dcc506e4f010332d2a1cf03de9a15ddf3e67364617ce48bef3380", 0x800, 0x3, 0x7ff}, 0x3c) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 891.635737ms ago: executing program 2 (id=2677): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_simple={0xc0, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x1, 0xffffffffffffffff, 0x101, 0x7e4}}, @TCA_DEF_DATA={0x7, 0x3, '){\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}]}, {0x6b, 0x6, "a6a50507d9ad42b66878b5d4557cf823db20dfe01dae0a96d707ff427b723979b3b73b4607d816ce2dc82f36966729c25dc25aad41190dc60b83df26d4c01c56617b60415cc7e973f5ca2ed1ee6e4ee341a62320aace0fe3e0c6ab07efb08e7158200207752816"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x6, 0x4ae, 0x1, 0x7, 0x8}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x3}]}, {0x0, 0x6, "c053290bf64ff484f45a5863839bb897e395e505f7f4c691f407060f9599"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0xee01, 0xee00, 0x0) fchown(r5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r4, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) r6 = syz_open_dev$evdev(&(0x7f0000002200), 0x0, 0x101001) writev(r6, &(0x7f00000032c0)=[{&(0x7f0000000540)="62863040", 0x4}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex_waitv(&(0x7f0000001f40)=[{0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x4}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000000f80)}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x3c, 0x0, 0x0, 0x0) map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x8, 0x0) 449.856605ms ago: executing program 1 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$team(0x0, r2) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300)={'#! ', './file0', [{0x20, ','}, {0x20, 'ext4\x00\xe5F\xf7\xa7\xc9\x16\xa5Q|\xfd\xd6bW\x18IR2\xce\x03\x96\xe4\"\x84\x03\x1d\xde3\xa7eW\xff\x01h\xfe\x8b\xb6C\xbcN]\xe0i\xe7\xc3\xe3\x9f\xda\xbc=\x98T\xe7\xc0\xb2\xa9\\\xf2\x057V4\x84Wv\xf2\xf8}k\f\x03\xeb\x8e\x15\xae\xfb\x996<\x12\xbd\xee\xde\x1d8\x06l\xc6\x1d4\xfd\x9bR\xef\xcf\x8e8(R\xd0\xd3\x1a\xae\xfdT\x86\xa4.\x10hq\x1d$\al7\x18\xd2~0\x0f?\xe6\xeb\x80'}, {0x20, '\xa6\x01+\x12e\xe9G\x87X\xff\x0e{\xe26\xec\xb1\xb07\xf0\x83\x1f5\xd8+!a<\x17i\xfb\xa9\x0f\xe3\x9c\xf4\x89S\x02\xa7\x93\xaf\xa9\xc8\x17W_\x8d\x7fm\x18\xbc\xb9x\xc2M\xa1\xeb:\xa8Tn;[\xb7\xecR\xdd\xd0\x95l\x00\x92\xff\x19\x1a\xa9\x06\x00\xe7Q\x11\xb83*#[\xe2\xfe0\xd7\xe1\x00\xb0q\xd7\x00'/110}, {0x20, '\xe9B\x88 \xd3!L\xd5\xde\xf4.\xd4%\xa4\x01\x00\x00\x00\x00\x00\x00\x80\xd6L\x89g\x80#\xe6\xc2\xd6\xfc.J{Jvj\x92\b\xff\xb4KYn\xdf\x17D$\x1a-~\xe2\xfe\xcd?\xf3\x87Z^_\ru\xba`\xd8:\xd2\x0e\x00\x00\x00\x00)|\xdfV\xa69.E^\xac\x00\x00\x1f\x80\xab6g\x03d>v\xcd\x13,\x99\xc3\xe2\xe5\x88!\xef*\\A\xe1\x8fL\x1d\x9ca\x87\x9e\xdei\x9e\xb6\x16\xdb\x14&4m\xf7\x06%\bX\xff\xaa\x95R\xa7!hP1\xd5\x03c\xe4\x1aE\x7f\xec\x8e\x1d\xe3\x94\x945e\x88\x1b\xbc\xb5\x8f\x03|9\xc7\x10\xf9n,\xaeh#'}, {0x20, '+'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a\xbc\xed\xcf*\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (fail_nth: 2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x9c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x100}, @value=@ver_80211n={0x0, 0x7ffb, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x0, @random, 0xc168, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x0, 0x4, 0x7}}, @val={0x6, 0x2, 0x9}, @void, @void, @void, @val={0x3c, 0x4, {0x9, 0x8, 0x6, 0xc}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x7f, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xc, 0x41}}, @val={0x76, 0x6, {0x3d, 0x5, 0x3a, 0xc}}}}]}, 0x9c}}, 0x20040000) kernel console output (not intermixed with test programs): 668][T15529] ? __fget_files+0x40/0x3a0 [ 549.891680][T15529] ? __fget_files+0x206/0x3a0 [ 549.891691][T15529] security_file_ioctl_compat+0x9b/0x240 [ 549.891704][T15529] __do_compat_sys_ioctl+0x4e/0x2c0 [ 549.891719][T15529] __do_fast_syscall_32+0x73/0x120 [ 549.891730][T15529] do_fast_syscall_32+0x32/0x80 [ 549.891739][T15529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 549.891754][T15529] RIP: 0023:0xf7f96579 [ 549.891762][T15529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 549.891772][T15529] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 549.891781][T15529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b2 [ 549.891787][T15529] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.891792][T15529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.891797][T15529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 549.891802][T15529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.891813][T15529] [ 549.891821][T15529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.989970][T15527] /dev/sr0: Can't open blockdev [ 550.010006][T15533] FAULT_INJECTION: forcing a failure. [ 550.010006][T15533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.013912][T15533] CPU: 2 UID: 0 PID: 15533 Comm: syz.1.2433 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 550.013925][T15533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 550.013932][T15533] Call Trace: [ 550.013936][T15533] [ 550.013940][T15533] dump_stack_lvl+0x16c/0x1f0 [ 550.013959][T15533] should_fail_ex+0x50a/0x650 [ 550.013972][T15533] _copy_to_iter+0x4a5/0x1400 [ 550.013987][T15533] ? fanotify_show_fdinfo+0xf7/0x8a0 [ 550.013999][T15533] ? __pfx__copy_to_iter+0x10/0x10 [ 550.014011][T15533] ? __virt_addr_valid+0x1a4/0x590 [ 550.014023][T15533] ? __virt_addr_valid+0x5e/0x590 [ 550.014031][T15533] ? __phys_addr_symbol+0x30/0x80 [ 550.014046][T15533] ? __check_object_size+0x488/0x710 [ 550.014060][T15533] seq_read_iter+0xd00/0x12b0 [ 550.014079][T15533] seq_read+0x39f/0x4e0 [ 550.014093][T15533] ? __pfx_seq_read+0x10/0x10 [ 550.014112][T15533] ? import_ubuf+0x1b6/0x220 [ 550.014130][T15533] ? rw_verify_area+0xcf/0x680 [ 550.014144][T15533] ? __pfx_seq_read+0x10/0x10 [ 550.014158][T15533] vfs_readv+0x6c2/0x8a0 [ 550.014171][T15533] ? __pfx___lock_acquire+0x10/0x10 [ 550.014183][T15533] ? find_held_lock+0x2d/0x110 [ 550.014200][T15533] ? __pfx_vfs_readv+0x10/0x10 [ 550.014216][T15533] ? __fget_files+0x1fc/0x3a0 [ 550.014226][T15533] ? __pfx_lock_release+0x10/0x10 [ 550.014242][T15533] ? __fget_files+0x206/0x3a0 [ 550.014254][T15533] ? do_preadv+0x1b1/0x270 [ 550.014268][T15533] do_preadv+0x1b1/0x270 [ 550.014282][T15533] ? __pfx_do_preadv+0x10/0x10 [ 550.014309][T15533] __do_fast_syscall_32+0x73/0x120 [ 550.014324][T15533] do_fast_syscall_32+0x32/0x80 [ 550.014340][T15533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.014363][T15533] RIP: 0023:0xf7f96579 [ 550.014376][T15533] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 550.014388][T15533] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 550.014398][T15533] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000340 [ 550.014404][T15533] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.014409][T15533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.014414][T15533] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 550.014419][T15533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.014431][T15533] [ 550.132812][T15536] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 550.133596][T15537] FAULT_INJECTION: forcing a failure. [ 550.133596][T15537] name failslab, interval 1, probability 0, space 0, times 0 [ 550.137589][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 550.142223][T15537] CPU: 3 UID: 0 PID: 15537 Comm: syz.0.2434 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 550.142237][T15537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 550.142243][T15537] Call Trace: [ 550.142247][T15537] [ 550.142251][T15537] dump_stack_lvl+0x16c/0x1f0 [ 550.142275][T15537] should_fail_ex+0x50a/0x650 [ 550.142288][T15537] ? fs_reclaim_acquire+0xae/0x150 [ 550.142304][T15537] should_failslab+0xc2/0x120 [ 550.142317][T15537] __kmalloc_noprof+0xce/0x4f0 [ 550.142327][T15537] ? d_absolute_path+0x137/0x1b0 [ 550.142340][T15537] ? tomoyo_encode2+0x100/0x3e0 [ 550.142354][T15537] tomoyo_encode2+0x100/0x3e0 [ 550.142367][T15537] tomoyo_realpath_from_path+0x1a7/0x710 [ 550.142382][T15537] tomoyo_path_number_perm+0x248/0x5b0 [ 550.142391][T15537] ? tomoyo_path_number_perm+0x235/0x5b0 [ 550.142402][T15537] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 550.142423][T15537] ? __pfx_lock_release+0x10/0x10 [ 550.142435][T15537] ? trace_lock_acquire+0x14e/0x1f0 [ 550.142445][T15537] ? lock_acquire+0x2f/0xb0 [ 550.142456][T15537] ? __fget_files+0x40/0x3a0 [ 550.142468][T15537] ? __fget_files+0x206/0x3a0 [ 550.142479][T15537] security_file_ioctl_compat+0x9b/0x240 [ 550.142492][T15537] __do_compat_sys_ioctl+0x4e/0x2c0 [ 550.142508][T15537] __do_fast_syscall_32+0x73/0x120 [ 550.142518][T15537] do_fast_syscall_32+0x32/0x80 [ 550.142527][T15537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.142542][T15537] RIP: 0023:0xf7ff5579 [ 550.142550][T15537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 550.142559][T15537] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 550.142568][T15537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 550.142574][T15537] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.142580][T15537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.142585][T15537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 550.142590][T15537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.142601][T15537] [ 550.142609][T15537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.295044][T15545] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2438'. [ 550.375789][T15552] ip6t_rpfilter: unknown options [ 550.649212][T13435] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 550.809729][T13502] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 551.003238][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 551.003246][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 551.099788][T13435] usb 5-1: Using ep0 maxpacket: 32 [ 551.102881][T13435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 551.105915][T13435] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 551.111386][T13435] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 551.114043][T13435] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 551.116421][T13435] usb 5-1: Product: syz [ 551.117666][T13435] usb 5-1: Manufacturer: syz [ 551.119042][T13435] usb 5-1: SerialNumber: syz [ 551.122220][T13435] usb 5-1: config 0 descriptor?? [ 551.125162][T13435] hub 5-1:0.0: bad descriptor, ignoring hub [ 551.127564][T13435] hub 5-1:0.0: probe with driver hub failed with error -5 [ 551.323717][T15596] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 551.409985][T15596] /dev/sr0: Can't open blockdev [ 551.449389][T13435] usb 5-1: USB disconnect, device number 101 [ 551.500473][T15594] /dev/sr0: Can't open blockdev [ 551.991741][T15611] FAULT_INJECTION: forcing a failure. [ 551.991741][T15611] name failslab, interval 1, probability 0, space 0, times 0 [ 551.995376][T15611] CPU: 3 UID: 0 PID: 15611 Comm: syz.1.2456 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 551.995390][T15611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 551.995397][T15611] Call Trace: [ 551.995400][T15611] [ 551.995404][T15611] dump_stack_lvl+0x16c/0x1f0 [ 551.995422][T15611] should_fail_ex+0x50a/0x650 [ 551.995434][T15611] ? fs_reclaim_acquire+0xae/0x150 [ 551.995451][T15611] should_failslab+0xc2/0x120 [ 551.995463][T15611] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 551.995474][T15611] ? __lock_acquire+0x15a9/0x3c40 [ 551.995486][T15611] ? __alloc_skb+0x2b3/0x380 [ 551.995497][T15611] __alloc_skb+0x2b3/0x380 [ 551.995506][T15611] ? __pfx___alloc_skb+0x10/0x10 [ 551.995520][T15611] netlink_alloc_large_skb+0x69/0x130 [ 551.995535][T15611] netlink_sendmsg+0x689/0xd70 [ 551.995550][T15611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.995568][T15611] ____sys_sendmsg+0x9ae/0xb40 [ 551.995581][T15611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.995594][T15611] ? get_compat_msghdr+0x11b/0x170 [ 551.995611][T15611] ___sys_sendmsg+0x135/0x1e0 [ 551.995622][T15611] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.995636][T15611] ? __pfx_lock_release+0x10/0x10 [ 551.995647][T15611] ? trace_lock_acquire+0x14e/0x1f0 [ 551.995660][T15611] ? __fget_files+0x206/0x3a0 [ 551.995674][T15611] __sys_sendmsg+0x16e/0x220 [ 551.995684][T15611] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.995701][T15611] __do_fast_syscall_32+0x73/0x120 [ 551.995712][T15611] do_fast_syscall_32+0x32/0x80 [ 551.995721][T15611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.995736][T15611] RIP: 0023:0xf7f96579 [ 551.995744][T15611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 551.995753][T15611] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 551.995762][T15611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 551.995768][T15611] RDX: 0000000004008014 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.995774][T15611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.995779][T15611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 551.995784][T15611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.995795][T15611] [ 552.162341][T15615] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 552.309607][T15622] xt_policy: neither incoming nor outgoing policy selected [ 552.553255][T15633] FAULT_INJECTION: forcing a failure. [ 552.553255][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 552.557946][T15633] CPU: 2 UID: 0 PID: 15633 Comm: syz.2.2462 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 552.557959][T15633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.557966][T15633] Call Trace: [ 552.557969][T15633] [ 552.557973][T15633] dump_stack_lvl+0x16c/0x1f0 [ 552.557990][T15633] should_fail_ex+0x50a/0x650 [ 552.558003][T15633] ? fs_reclaim_acquire+0xae/0x150 [ 552.558019][T15633] should_failslab+0xc2/0x120 [ 552.558032][T15633] __kmalloc_noprof+0xce/0x4f0 [ 552.558042][T15633] ? d_absolute_path+0x137/0x1b0 [ 552.558054][T15633] ? tomoyo_encode2+0x100/0x3e0 [ 552.558068][T15633] tomoyo_encode2+0x100/0x3e0 [ 552.558084][T15633] tomoyo_realpath_from_path+0x1a7/0x710 [ 552.558099][T15633] tomoyo_path_number_perm+0x248/0x5b0 [ 552.558108][T15633] ? tomoyo_path_number_perm+0x235/0x5b0 [ 552.558119][T15633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.558140][T15633] ? __pfx_lock_release+0x10/0x10 [ 552.558151][T15633] ? trace_lock_acquire+0x14e/0x1f0 [ 552.558162][T15633] ? lock_acquire+0x2f/0xb0 [ 552.558172][T15633] ? __fget_files+0x40/0x3a0 [ 552.558184][T15633] ? __fget_files+0x206/0x3a0 [ 552.558195][T15633] security_file_ioctl_compat+0x9b/0x240 [ 552.558207][T15633] __do_compat_sys_ioctl+0x4e/0x2c0 [ 552.558223][T15633] __do_fast_syscall_32+0x73/0x120 [ 552.558233][T15633] do_fast_syscall_32+0x32/0x80 [ 552.558242][T15633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.558257][T15633] RIP: 0023:0xf7fa2579 [ 552.558265][T15633] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 552.558274][T15633] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 552.558283][T15633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064c7 [ 552.558288][T15633] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.558294][T15633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.558299][T15633] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.558304][T15633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.558315][T15633] [ 552.558328][T15633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.710208][T13435] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 552.754196][T15646] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 552.869273][T13435] usb 8-1: Using ep0 maxpacket: 32 [ 552.872633][T13435] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 552.876311][T13435] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 552.882189][T13435] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 552.885611][T13435] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 552.888661][T13435] usb 8-1: Product: syz [ 552.890113][T15646] /dev/sr0: Can't open blockdev [ 552.894570][T13435] usb 8-1: Manufacturer: syz [ 552.896409][T13435] usb 8-1: SerialNumber: syz [ 552.899250][T13435] usb 8-1: config 0 descriptor?? [ 552.902494][T13435] hub 8-1:0.0: bad descriptor, ignoring hub [ 552.904213][T13435] hub 8-1:0.0: probe with driver hub failed with error -5 [ 552.939433][ T1014] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 552.980096][T15649] /dev/sr0: Can't open blockdev [ 553.091689][ T1014] usb 7-1: Using ep0 maxpacket: 32 [ 553.093701][ T1014] usb 7-1: too many configurations: 105, using maximum allowed: 8 [ 553.098325][ T1014] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.101448][ T1014] usb 7-1: can't read configurations, error -61 [ 553.193666][T15656] siw: device registration error -23 [ 553.209286][T13435] usb 8-1: USB disconnect, device number 90 [ 553.229590][ T1014] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 553.379835][ T1014] usb 7-1: Using ep0 maxpacket: 32 [ 553.387309][ T1014] usb 7-1: too many configurations: 105, using maximum allowed: 8 [ 553.391109][ T1014] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.393333][ T1014] usb 7-1: can't read configurations, error -61 [ 553.395392][ T1014] usb usb7-port1: attempt power cycle [ 553.631642][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2470'. [ 553.635340][T15661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2470'. [ 553.638158][T15661] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 553.649776][T15661] bond1: entered allmulticast mode [ 553.651524][T15661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.659352][T13693] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 553.717498][T15664] xt_policy: neither incoming nor outgoing policy selected [ 553.729545][ T1014] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 553.749835][ T1014] usb 7-1: Using ep0 maxpacket: 32 [ 553.751754][ T1014] usb 7-1: too many configurations: 105, using maximum allowed: 8 [ 553.755144][ T1014] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.757347][ T1014] usb 7-1: can't read configurations, error -61 [ 553.809374][T13693] usb 6-1: Using ep0 maxpacket: 32 [ 553.812977][T13693] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.819221][T13693] usb 6-1: config 0 has no interface number 0 [ 553.824050][T13693] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.826675][T13693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.829004][T13693] usb 6-1: Product: syz [ 553.839173][T13693] usb 6-1: Manufacturer: syz [ 553.840550][T13693] usb 6-1: SerialNumber: syz [ 553.842780][T13693] usb 6-1: config 0 descriptor?? [ 553.850172][T13693] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 553.890616][ T1014] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 553.919425][ T1014] usb 7-1: Using ep0 maxpacket: 32 [ 553.921800][ T1014] usb 7-1: too many configurations: 105, using maximum allowed: 8 [ 553.925135][ T1014] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.927322][ T1014] usb 7-1: can't read configurations, error -61 [ 553.929644][ T1014] usb usb7-port1: unable to enumerate USB device [ 554.072120][ T39] audit: type=1326 audit(1738710885.888:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.078243][ T39] audit: type=1326 audit(1738710885.888:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.084415][ T39] audit: type=1326 audit(1738710885.888:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.091579][ T39] audit: type=1326 audit(1738710885.888:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.097578][ T39] audit: type=1326 audit(1738710885.888:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.099610][T12321] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 554.104558][ T39] audit: type=1326 audit(1738710885.888:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.140364][ T39] audit: type=1326 audit(1738710885.958:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.149250][ T39] audit: type=1326 audit(1738710885.958:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15672 comm="syz.0.2474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 554.249441][T12321] usb 8-1: Using ep0 maxpacket: 32 [ 554.253251][T12321] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 554.255604][T12321] usb 8-1: config 0 has no interface number 0 [ 554.260983][T12321] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 554.263615][T12321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.265893][T12321] usb 8-1: Product: syz [ 554.267116][T12321] usb 8-1: Manufacturer: syz [ 554.268483][T12321] usb 8-1: SerialNumber: syz [ 554.273613][T12321] usb 8-1: config 0 descriptor?? [ 554.276213][T12321] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 555.364328][T15686] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 555.499903][T15686] /dev/sr0: Can't open blockdev [ 555.610133][T15684] /dev/sr0: Can't open blockdev [ 555.829049][T13759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 555.835011][T13759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 555.837952][T13759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.841860][T13759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.844263][T13759] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 555.846544][T13759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.925853][T15688] chnl_net:caif_netlink_parms(): no params data found [ 555.976823][T15688] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.978962][T15688] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.981452][T15688] bridge_slave_0: entered allmulticast mode [ 555.983656][T15688] bridge_slave_0: entered promiscuous mode [ 555.986598][T15688] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.988690][T15688] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.990984][T15688] bridge_slave_1: entered allmulticast mode [ 555.993149][T15688] bridge_slave_1: entered promiscuous mode [ 556.012591][T15688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.016782][T15688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.041890][T15688] team0: Port device team_slave_0 added [ 556.048797][T15688] team0: Port device team_slave_1 added [ 556.072098][T15688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.074204][T15688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.081778][T15688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.085815][T15688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.087854][T15688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.095193][T15688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.121398][T15688] hsr_slave_0: entered promiscuous mode [ 556.123496][T15688] hsr_slave_1: entered promiscuous mode [ 556.125452][T15688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.127684][T15688] Cannot create hsr debugfs directory [ 556.184727][T15688] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.285499][T15688] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.342788][T15688] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.385954][T13693] usb 6-1: qt2_attach - failed to power on unit: -71 [ 556.388027][T13693] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 556.393429][T13693] usb 6-1: USB disconnect, device number 58 [ 556.403396][T15688] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.451042][T15700] xt_policy: neither incoming nor outgoing policy selected [ 556.498667][T15688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 556.502517][T15688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 556.506136][T15688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 556.517420][T15688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 556.534904][T15688] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.537018][T15688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.539259][T15688] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.541323][T15688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.565199][T15688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.573920][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.577148][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.592666][T15688] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.604677][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.606794][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.609400][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2481'. [ 556.614679][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.616860][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.701415][T15688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.715646][T15688] veth0_vlan: entered promiscuous mode [ 556.719606][T15688] veth1_vlan: entered promiscuous mode [ 556.733550][T15688] veth0_macvtap: entered promiscuous mode [ 556.736727][T15688] veth1_macvtap: entered promiscuous mode [ 556.742899][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.745920][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.748723][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.752388][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.755212][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.758197][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.761164][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.764162][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.768663][T15688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.775628][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.778669][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.782238][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.785225][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.788023][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.791085][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.793930][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.796935][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.802889][T15688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.806855][T15688] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.809552][T15688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.812068][T15688] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.814593][T15688] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.854814][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.861118][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.871095][T12321] usb 8-1: qt2_attach - failed to power on unit: -71 [ 556.873112][T12321] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 556.875239][T15715] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.877056][T12321] usb 8-1: USB disconnect, device number 91 [ 556.892525][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2483'. [ 556.901253][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.903978][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.196954][T15726] FAULT_INJECTION: forcing a failure. [ 557.196954][T15726] name failslab, interval 1, probability 0, space 0, times 0 [ 557.202138][T15726] CPU: 1 UID: 0 PID: 15726 Comm: syz.1.2485 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 557.202152][T15726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.202158][T15726] Call Trace: [ 557.202162][T15726] [ 557.202166][T15726] dump_stack_lvl+0x16c/0x1f0 [ 557.202185][T15726] should_fail_ex+0x50a/0x650 [ 557.202197][T15726] ? fs_reclaim_acquire+0xae/0x150 [ 557.202214][T15726] should_failslab+0xc2/0x120 [ 557.202238][T15726] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 557.202251][T15726] ? __alloc_skb+0x2b3/0x380 [ 557.202263][T15726] __alloc_skb+0x2b3/0x380 [ 557.202278][T15726] ? __pfx___alloc_skb+0x10/0x10 [ 557.202286][T15726] ? register_lock_class+0xb1/0x1240 [ 557.202300][T15726] ? __pfx_mark_lock+0x10/0x10 [ 557.202310][T15726] ? __pfx_mark_lock+0x10/0x10 [ 557.202323][T15726] tipc_buf_acquire+0x26/0xe0 [ 557.202335][T15726] tipc_msg_build+0x114/0x10d0 [ 557.202348][T15726] ? hlock_class+0x4e/0x130 [ 557.202362][T15726] ? __lock_acquire+0x15a9/0x3c40 [ 557.202374][T15726] ? __pfx_tipc_msg_build+0x10/0x10 [ 557.202388][T15726] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.202403][T15726] ? hlock_class+0x4e/0x130 [ 557.202419][T15726] __tipc_sendstream+0x6fa/0x1190 [ 557.202436][T15726] ? __pfx___tipc_sendstream+0x10/0x10 [ 557.202447][T15726] ? tipc_sendstream+0x41/0x70 [ 557.202458][T15726] ? __pfx_lock_release+0x10/0x10 [ 557.202469][T15726] ? __pfx_woken_wake_function+0x10/0x10 [ 557.202485][T15726] ? mark_held_locks+0x9f/0xe0 [ 557.202497][T15726] ? __local_bh_enable_ip+0xa4/0x120 [ 557.202512][T15726] tipc_sendstream+0x4f/0x70 [ 557.202523][T15726] ____sys_sendmsg+0x9ae/0xb40 [ 557.202537][T15726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.202549][T15726] ? get_compat_msghdr+0x11b/0x170 [ 557.202567][T15726] ___sys_sendmsg+0x135/0x1e0 [ 557.202578][T15726] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.202593][T15726] ? trace_lock_acquire+0x14e/0x1f0 [ 557.202611][T15726] __sys_sendmmsg+0x2fa/0x420 [ 557.202623][T15726] ? __pfx___sys_sendmmsg+0x10/0x10 [ 557.202637][T15726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.202656][T15726] ? fput+0x67/0x440 [ 557.202669][T15726] ? ksys_write+0x1ba/0x250 [ 557.202678][T15726] ? __pfx_ksys_write+0x10/0x10 [ 557.202690][T15726] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 557.202702][T15726] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 557.202717][T15726] __do_fast_syscall_32+0x73/0x120 [ 557.202727][T15726] do_fast_syscall_32+0x32/0x80 [ 557.202736][T15726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.202751][T15726] RIP: 0023:0xf7f96579 [ 557.202760][T15726] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.202769][T15726] RSP: 002b:00000000f509555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 557.202778][T15726] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020003bc0 [ 557.202784][T15726] RDX: 00000000000002ca RSI: 0000000004040014 RDI: 0000000000000000 [ 557.202789][T15726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.202794][T15726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 557.202799][T15726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.202811][T15726] [ 557.209349][T14684] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 557.450269][T14684] usb 7-1: Using ep0 maxpacket: 32 [ 557.452925][T14684] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 557.455680][T14684] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 557.459891][T14684] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 557.462483][T14684] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 557.464833][T14684] usb 7-1: Product: syz [ 557.466045][T14684] usb 7-1: Manufacturer: syz [ 557.467378][T14684] usb 7-1: SerialNumber: syz [ 557.469898][T14684] usb 7-1: config 0 descriptor?? [ 557.472643][T14684] hub 7-1:0.0: bad descriptor, ignoring hub [ 557.474403][T14684] hub 7-1:0.0: probe with driver hub failed with error -5 [ 557.789449][ T6012] usb 7-1: USB disconnect, device number 92 [ 557.879341][T13759] Bluetooth: hci1: command tx timeout [ 558.002875][T15741] xt_policy: neither incoming nor outgoing policy selected [ 558.015908][T15745] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 558.123362][T15745] /dev/sr0: Can't open blockdev [ 558.196312][T15755] FAULT_INJECTION: forcing a failure. [ 558.196312][T15755] name failslab, interval 1, probability 0, space 0, times 0 [ 558.200101][T15755] CPU: 2 UID: 0 PID: 15755 Comm: syz.1.2493 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 558.200118][T15755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.200127][T15755] Call Trace: [ 558.200132][T15755] [ 558.200139][T15755] dump_stack_lvl+0x16c/0x1f0 [ 558.200161][T15755] should_fail_ex+0x50a/0x650 [ 558.200173][T15755] ? fs_reclaim_acquire+0xae/0x150 [ 558.200189][T15755] should_failslab+0xc2/0x120 [ 558.200202][T15755] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 558.200214][T15755] ? __alloc_skb+0x2b3/0x380 [ 558.200226][T15755] __alloc_skb+0x2b3/0x380 [ 558.200235][T15755] ? __pfx___alloc_skb+0x10/0x10 [ 558.200244][T15755] ? lock_acquire+0x2f/0xb0 [ 558.200259][T15755] netlink_alloc_large_skb+0x69/0x130 [ 558.200279][T15755] netlink_sendmsg+0x689/0xd70 [ 558.200294][T15755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.200312][T15755] ____sys_sendmsg+0x9ae/0xb40 [ 558.200326][T15755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.200339][T15755] ? get_compat_msghdr+0x11b/0x170 [ 558.200357][T15755] ___sys_sendmsg+0x135/0x1e0 [ 558.200368][T15755] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.200382][T15755] ? __pfx_lock_release+0x10/0x10 [ 558.200393][T15755] ? trace_lock_acquire+0x14e/0x1f0 [ 558.200406][T15755] ? __fget_files+0x206/0x3a0 [ 558.200419][T15755] __sys_sendmsg+0x16e/0x220 [ 558.200430][T15755] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.200447][T15755] __do_fast_syscall_32+0x73/0x120 [ 558.200458][T15755] do_fast_syscall_32+0x32/0x80 [ 558.200466][T15755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.200482][T15755] RIP: 0023:0xf7f96579 [ 558.200490][T15755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 558.200499][T15755] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 558.200508][T15755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 558.200514][T15755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.200520][T15755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.200525][T15755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 558.200530][T15755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.200541][T15755] [ 558.290311][T15746] /dev/sr0: Can't open blockdev [ 558.439171][T13693] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 558.589339][T13693] usb 7-1: Using ep0 maxpacket: 8 [ 558.592042][T13693] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 558.594373][T13693] usb 7-1: config 0 has no interface number 0 [ 558.596167][T13693] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.609163][T13693] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 558.612525][T13693] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 558.615612][T13693] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.624712][T15772] siw: device registration error -23 [ 558.650915][T13693] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 558.653455][T13693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.655647][T13693] usb 7-1: Product: syz [ 558.656829][T13693] usb 7-1: Manufacturer: syz [ 558.658173][T13693] usb 7-1: SerialNumber: syz [ 558.671404][T13693] usb 7-1: config 0 descriptor?? [ 558.679229][ T3229] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 558.767042][T15774] xt_policy: neither incoming nor outgoing policy selected [ 558.830278][ T3229] usb 8-1: Using ep0 maxpacket: 8 [ 558.833004][ T3229] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 558.835465][ T3229] usb 8-1: config 0 has no interface number 0 [ 558.837315][ T3229] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.840530][ T3229] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 558.843912][ T3229] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 558.847031][ T3229] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.852271][ T3229] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 558.854856][ T3229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.857220][ T3229] usb 8-1: Product: syz [ 558.858445][ T3229] usb 8-1: Manufacturer: syz [ 558.859858][ T3229] usb 8-1: SerialNumber: syz [ 558.862129][ T3229] usb 8-1: config 0 descriptor?? [ 558.874520][T13693] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 559.040479][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.043878][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.047483][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.051110][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.053748][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 559.056145][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.076932][T15757] FAULT_INJECTION: forcing a failure. [ 559.076932][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 559.080756][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.2.2494 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 559.080780][T15757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 559.080787][T15757] Call Trace: [ 559.080790][T15757] [ 559.080794][T15757] dump_stack_lvl+0x16c/0x1f0 [ 559.080813][T15757] should_fail_ex+0x50a/0x650 [ 559.080825][T15757] ? fs_reclaim_acquire+0xae/0x150 [ 559.080841][T15757] should_failslab+0xc2/0x120 [ 559.080854][T15757] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 559.080865][T15757] ? do_epoll_ctl+0x1185/0x35d0 [ 559.080882][T15757] do_epoll_ctl+0x1185/0x35d0 [ 559.080897][T15757] ? find_held_lock+0x2d/0x110 [ 559.080916][T15757] ? __pfx_do_epoll_ctl+0x10/0x10 [ 559.080932][T15757] ? __might_fault+0xe3/0x190 [ 559.080948][T15757] ? __ia32_sys_epoll_ctl+0x15c/0x1e0 [ 559.080965][T15757] __ia32_sys_epoll_ctl+0x15c/0x1e0 [ 559.080980][T15757] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 559.080998][T15757] __do_fast_syscall_32+0x73/0x120 [ 559.081009][T15757] do_fast_syscall_32+0x32/0x80 [ 559.081018][T15757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.081033][T15757] RIP: 0023:0xf73ae579 [ 559.081041][T15757] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 559.081050][T15757] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff [ 559.081060][T15757] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 559.081065][T15757] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000000 [ 559.081071][T15757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.081076][T15757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 559.081081][T15757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.081093][T15757] [ 559.085932][T13693] usb 7-1: USB disconnect, device number 93 [ 559.115431][ T3229] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 559.129853][T15780] chnl_net:caif_netlink_parms(): no params data found [ 559.183280][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.185329][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.187438][T15780] bridge_slave_0: entered allmulticast mode [ 559.190348][T15780] bridge_slave_0: entered promiscuous mode [ 559.192873][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.194999][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.199759][T15780] bridge_slave_1: entered allmulticast mode [ 559.201936][T15780] bridge_slave_1: entered promiscuous mode [ 559.221439][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.225121][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.250978][T15780] team0: Port device team_slave_0 added [ 559.254633][T15780] team0: Port device team_slave_1 added [ 559.272422][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.274476][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.283231][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.287032][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.289082][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.294879][T15790] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 559.296481][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.329052][T15780] hsr_slave_0: entered promiscuous mode [ 559.331355][T15780] hsr_slave_1: entered promiscuous mode [ 559.333185][T15780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.335261][T15780] Cannot create hsr debugfs directory [ 559.384728][T15780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.476576][T15780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.491400][T12321] usb 8-1: USB disconnect, device number 92 [ 559.562478][T15780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.631935][T15780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.699030][T15780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.702914][T15780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.706091][T15780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 559.709019][T15780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 559.718785][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.720871][T15780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.722962][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.724925][T15780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.753311][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.760614][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.763899][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.774994][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.782137][T14997] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.784153][T14997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.788225][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.790365][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.866712][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.869872][T13693] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 559.892902][T15780] veth0_vlan: entered promiscuous mode [ 559.897012][T15780] veth1_vlan: entered promiscuous mode [ 559.908733][T15780] veth0_macvtap: entered promiscuous mode [ 559.912506][T15780] veth1_macvtap: entered promiscuous mode [ 559.919487][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.922483][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.925251][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.928097][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.931183][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.934115][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.936800][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.939871][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.942648][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.945588][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.949934][ T5949] Bluetooth: hci1: command tx timeout [ 559.949940][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.957368][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.960446][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.963192][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.966058][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.968721][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.971629][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.974287][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.977122][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.979967][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.982915][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.986334][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.990356][T15780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.992710][T15780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.995192][T15780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.997692][T15780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.027623][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.030175][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.034977][T13693] usb 7-1: Using ep0 maxpacket: 32 [ 560.037554][T13693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 560.039155][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.040317][T13693] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 560.044651][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.046632][T13693] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 560.049968][T13693] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 560.052314][T13693] usb 7-1: Product: syz [ 560.053600][T13693] usb 7-1: Manufacturer: syz [ 560.054995][T13693] usb 7-1: SerialNumber: syz [ 560.057140][T13693] usb 7-1: config 0 descriptor?? [ 560.059701][T13693] hub 7-1:0.0: bad descriptor, ignoring hub [ 560.061499][T13693] hub 7-1:0.0: probe with driver hub failed with error -5 [ 560.419364][ T8] usb 7-1: USB disconnect, device number 94 [ 560.704074][T15823] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 560.740050][T15822] xt_policy: neither incoming nor outgoing policy selected [ 560.842890][T15823] /dev/sr0: Can't open blockdev [ 560.935155][T15826] /dev/sr0: Can't open blockdev [ 560.989796][ T39] audit: type=1326 audit(1738710892.808:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15807 comm="syz.1.2505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 561.069537][ T5949] Bluetooth: hci0: command tx timeout [ 561.089214][T13693] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 561.240994][T13693] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.244081][T13693] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 561.249848][T13693] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.252640][T13693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.267026][T13693] usb 7-1: config 0 descriptor?? [ 561.472082][ T35] usb 7-1: USB disconnect, device number 95 [ 561.475366][T15847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 561.742266][ T39] audit: type=1326 audit(1738710893.558:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.3.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 562.029199][ T5949] Bluetooth: hci1: command tx timeout [ 562.062682][T15856] syz.3.2515: attempt to access beyond end of device [ 562.062682][T15856] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 562.072281][T15856] XFS (nbd3): SB validate failed with error -5. [ 562.093812][T15861] xt_policy: neither incoming nor outgoing policy selected [ 562.278305][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.280548][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.623519][T15878] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 562.709998][T15878] /dev/sr0: Can't open blockdev [ 562.795167][T15881] hsr0: entered allmulticast mode [ 562.796780][T15881] hsr_slave_0: entered allmulticast mode [ 562.798453][T15881] hsr_slave_1: entered allmulticast mode [ 562.801331][T15881] hsr_slave_0: left promiscuous mode [ 562.805481][T15881] hsr_slave_1: left promiscuous mode [ 562.814752][T15881] hsr0 (unregistering): left allmulticast mode [ 562.830870][T15879] /dev/sr0: Can't open blockdev [ 563.149268][ T5949] Bluetooth: hci0: command tx timeout [ 563.259229][T13693] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 563.269771][T15898] FAULT_INJECTION: forcing a failure. [ 563.269771][T15898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.273611][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.2.2526 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 563.273624][T15898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 563.273631][T15898] Call Trace: [ 563.273634][T15898] [ 563.273638][T15898] dump_stack_lvl+0x16c/0x1f0 [ 563.273657][T15898] should_fail_ex+0x50a/0x650 [ 563.273672][T15898] _copy_from_user+0x2e/0xd0 [ 563.273686][T15898] get_compat_msghdr+0xa8/0x170 [ 563.273700][T15898] ? __pfx_get_compat_msghdr+0x10/0x10 [ 563.273716][T15898] ___sys_sendmsg+0x1b0/0x1e0 [ 563.273727][T15898] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.273741][T15898] ? __pfx_lock_release+0x10/0x10 [ 563.273753][T15898] ? trace_lock_acquire+0x14e/0x1f0 [ 563.273766][T15898] ? __fget_files+0x206/0x3a0 [ 563.273780][T15898] __sys_sendmsg+0x16e/0x220 [ 563.273790][T15898] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.273807][T15898] __do_fast_syscall_32+0x73/0x120 [ 563.273817][T15898] do_fast_syscall_32+0x32/0x80 [ 563.273826][T15898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.273842][T15898] RIP: 0023:0xf73ae579 [ 563.273850][T15898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 563.273860][T15898] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 563.273869][T15898] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000020000540 [ 563.273874][T15898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.273880][T15898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.273885][T15898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 563.273890][T15898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.273901][T15898] [ 563.407051][T15900] xt_policy: neither incoming nor outgoing policy selected [ 563.433544][T13693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.436548][T13693] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 563.446633][T13693] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 563.449353][T13693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.456401][T13693] usb 6-1: config 0 descriptor?? [ 563.459439][T13693] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 563.461406][T13693] dvb-usb: bulk message failed: -22 (3/0) [ 563.463753][T13693] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 563.466465][T13693] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 563.468701][T13693] usb 6-1: media controller created [ 563.470807][T13693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.475019][T13693] dvb-usb: bulk message failed: -22 (6/0) [ 563.476740][T13693] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 563.480364][T13693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input27 [ 563.484058][T13693] dvb-usb: schedule remote query interval to 150 msecs. [ 563.486067][T13693] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 563.542762][T15907] can: request_module (can-proto-0) failed. [ 563.545409][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.554133][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.556514][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.561633][T15907] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.563717][T15907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.566307][T15907] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.568684][T15907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.573446][T15907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 563.576024][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.581842][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.583982][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.586816][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.622538][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.626488][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.633954][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.639296][ T6012] dvb-usb: bulk message failed: -22 (1/0) [ 563.640994][ T6012] dvb-usb: error while querying for an remote control event. [ 563.650765][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.665704][T14684] usb 6-1: USB disconnect, device number 59 [ 563.677613][T14684] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 563.683692][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.698643][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 563.708480][T15907] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 564.119175][ T5949] Bluetooth: hci1: command tx timeout [ 564.119528][ T5985] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 564.189287][T14684] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 564.272307][ T5985] usb 7-1: Using ep0 maxpacket: 32 [ 564.276150][ T5985] usb 7-1: config 0 has no interfaces? [ 564.279495][ T5985] usb 7-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 564.282040][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.284232][ T5985] usb 7-1: Product: syz [ 564.285428][ T5985] usb 7-1: Manufacturer: syz [ 564.286745][ T5985] usb 7-1: SerialNumber: syz [ 564.288957][ T5985] usb 7-1: config 0 descriptor?? [ 564.359294][T14684] usb 8-1: Using ep0 maxpacket: 32 [ 564.362151][T14684] usb 8-1: config 0 has no interfaces? [ 564.373360][T14684] usb 8-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 564.375999][T14684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.378202][T14684] usb 8-1: Product: syz [ 564.379487][T14684] usb 8-1: Manufacturer: syz [ 564.383231][T14684] usb 8-1: SerialNumber: syz [ 564.385954][T14684] usb 8-1: config 0 descriptor?? [ 564.492892][T15943] FAULT_INJECTION: forcing a failure. [ 564.492892][T15943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.496897][T15943] CPU: 2 UID: 0 PID: 15943 Comm: syz.2.2530 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 564.496909][T15943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 564.496915][T15943] Call Trace: [ 564.496919][T15943] [ 564.496923][T15943] dump_stack_lvl+0x16c/0x1f0 [ 564.496941][T15943] should_fail_ex+0x50a/0x650 [ 564.496956][T15943] _copy_to_user+0x32/0xd0 [ 564.496970][T15943] simple_read_from_buffer+0xd0/0x160 [ 564.496991][T15943] proc_fail_nth_read+0x198/0x270 [ 564.497006][T15943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.497020][T15943] ? rw_verify_area+0xcf/0x680 [ 564.497034][T15943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.497048][T15943] vfs_read+0x1df/0xbf0 [ 564.497058][T15943] ? __fget_files+0x1fc/0x3a0 [ 564.497068][T15943] ? __pfx___mutex_lock+0x10/0x10 [ 564.497083][T15943] ? __pfx_vfs_read+0x10/0x10 [ 564.497096][T15943] ? __fget_files+0x206/0x3a0 [ 564.497109][T15943] ksys_read+0x12b/0x250 [ 564.497118][T15943] ? __pfx_ksys_read+0x10/0x10 [ 564.497131][T15943] __do_fast_syscall_32+0x73/0x120 [ 564.497142][T15943] do_fast_syscall_32+0x32/0x80 [ 564.497151][T15943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.497167][T15943] RIP: 0023:0xf73ae579 [ 564.497175][T15943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 564.497184][T15943] RSP: 002b:00000000f5036590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 564.497193][T15943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5036620 [ 564.497199][T15943] RDX: 000000000000000f RSI: 00000000f739cff4 RDI: 0000000000000000 [ 564.497204][T15943] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 564.497209][T15943] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 564.497214][T15943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.497226][T15943] [ 564.565750][T14684] usb 7-1: USB disconnect, device number 96 [ 564.593811][ T6014] usb 8-1: USB disconnect, device number 93 [ 564.670337][T15959] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 564.790110][T15959] /dev/sr0: Can't open blockdev [ 564.803882][T15963] xt_policy: neither incoming nor outgoing policy selected [ 564.940810][T15961] /dev/sr0: Can't open blockdev [ 565.230343][ T5949] Bluetooth: hci0: command tx timeout [ 565.468932][T15982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 565.469879][T12321] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 565.621497][T12321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.624377][T12321] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.626832][T12321] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 565.632439][T12321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.647804][T12321] usb 7-1: config 0 descriptor?? [ 565.651906][T12321] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 565.653906][T12321] dvb-usb: bulk message failed: -22 (3/0) [ 565.668968][T12321] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 565.671121][T15985] FAULT_INJECTION: forcing a failure. [ 565.671121][T15985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.672429][T12321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 565.675056][T15985] CPU: 1 UID: 0 PID: 15985 Comm: syz.3.2544 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 565.675069][T15985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 565.675075][T15985] Call Trace: [ 565.675079][T15985] [ 565.675083][T15985] dump_stack_lvl+0x16c/0x1f0 [ 565.675102][T15985] should_fail_ex+0x50a/0x650 [ 565.675116][T15985] _copy_from_user+0x2e/0xd0 [ 565.675131][T15985] get_compat_msghdr+0xa8/0x170 [ 565.675144][T15985] ? __pfx_get_compat_msghdr+0x10/0x10 [ 565.675160][T15985] ___sys_sendmsg+0x1b0/0x1e0 [ 565.675171][T15985] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.675186][T15985] ? trace_lock_acquire+0x14e/0x1f0 [ 565.675203][T15985] __sys_sendmmsg+0x2fa/0x420 [ 565.675214][T15985] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.675228][T15985] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.675247][T15985] ? fput+0x67/0x440 [ 565.675259][T15985] ? ksys_write+0x1ba/0x250 [ 565.675269][T15985] ? __pfx_ksys_write+0x10/0x10 [ 565.675280][T15985] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 565.675293][T15985] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 565.675308][T15985] __do_fast_syscall_32+0x73/0x120 [ 565.675318][T15985] do_fast_syscall_32+0x32/0x80 [ 565.675327][T15985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.675343][T15985] RIP: 0023:0xf73ae579 [ 565.675350][T15985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 565.675359][T15985] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 565.675368][T15985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200019c0 [ 565.675374][T15985] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.675379][T15985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.675384][T15985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 565.675390][T15985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.675400][T15985] [ 565.718555][T15988] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 565.721033][T12321] usb 7-1: media controller created [ 565.741039][T12321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.749037][T12321] dvb-usb: bulk message failed: -22 (6/0) [ 565.752278][T12321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 565.755977][T12321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input31 [ 565.759913][T12321] dvb-usb: schedule remote query interval to 150 msecs. [ 565.761902][T12321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 565.860689][ T3229] usb 7-1: USB disconnect, device number 97 [ 565.874788][ T3229] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.310024][T16012] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 566.479992][T16012] /dev/sr0: Can't open blockdev [ 566.539185][ T6012] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 566.574792][T16008] /dev/sr0: Can't open blockdev [ 566.659317][T16018] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 566.669240][ T6012] usb 8-1: device descriptor read/64, error -71 [ 566.770764][T16018] /dev/sr0: Can't open blockdev [ 566.964599][ T6012] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 567.075887][T16022] FAULT_INJECTION: forcing a failure. [ 567.075887][T16022] name failslab, interval 1, probability 0, space 0, times 0 [ 567.079572][T16022] CPU: 1 UID: 0 PID: 16022 Comm: syz.0.2553 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 567.079585][T16022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 567.079591][T16022] Call Trace: [ 567.079594][T16022] [ 567.079598][T16022] dump_stack_lvl+0x16c/0x1f0 [ 567.079618][T16022] should_fail_ex+0x50a/0x650 [ 567.079632][T16022] should_failslab+0xc2/0x120 [ 567.079645][T16022] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 567.079657][T16022] ? lock_acquire+0x2f/0xb0 [ 567.079668][T16022] ? __inet_hash_connect+0x69f/0x1900 [ 567.079678][T16022] ? __inet_hash_connect+0x918/0x1900 [ 567.079690][T16022] __inet_hash_connect+0x918/0x1900 [ 567.079703][T16022] ? __pfx___inet6_check_established+0x10/0x10 [ 567.079719][T16022] ? __pfx___inet_hash_connect+0x10/0x10 [ 567.079730][T16022] ? rcu_is_watching+0x12/0xc0 [ 567.079748][T16022] dccp_v6_connect+0x9ef/0x1550 [ 567.079765][T16022] ? __pfx_dccp_v6_connect+0x10/0x10 [ 567.079785][T16022] ? __pfx_mark_lock+0x10/0x10 [ 567.079798][T16022] __inet_stream_connect+0x3c7/0x1020 [ 567.079811][T16022] ? find_held_lock+0x2d/0x110 [ 567.079828][T16022] ? __pfx___inet_stream_connect+0x10/0x10 [ 567.079842][T16022] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 567.079856][T16022] ? __pfx_inet_stream_connect+0x10/0x10 [ 567.079868][T16022] ? mark_held_locks+0x9f/0xe0 [ 567.079880][T16022] ? __local_bh_enable_ip+0xa4/0x120 [ 567.079894][T16022] ? __pfx_inet_stream_connect+0x10/0x10 [ 567.079907][T16022] inet_stream_connect+0x57/0xa0 [ 567.079925][T16022] __sys_connect_file+0x13e/0x1a0 [ 567.079941][T16022] __sys_connect+0x14f/0x170 [ 567.079955][T16022] ? __pfx___sys_connect+0x10/0x10 [ 567.079976][T16022] __ia32_sys_connect+0x71/0xb0 [ 567.079990][T16022] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 567.080005][T16022] __do_fast_syscall_32+0x73/0x120 [ 567.080016][T16022] do_fast_syscall_32+0x32/0x80 [ 567.080025][T16022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.080040][T16022] RIP: 0023:0xf7ff6579 [ 567.080048][T16022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 567.080057][T16022] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 567.080066][T16022] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040 [ 567.080072][T16022] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 567.080077][T16022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.080082][T16022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 567.080088][T16022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.080099][T16022] [ 567.164013][ T6012] usb 8-1: device descriptor read/64, error -71 [ 567.269379][ T6012] usb usb8-port1: attempt power cycle [ 567.287636][T16024] xt_connbytes: Forcing CT accounting to be enabled [ 567.289830][T16024] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 567.319598][ T5949] Bluetooth: hci0: command tx timeout [ 567.515921][T16026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 567.518469][T16026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 567.609179][ T6012] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 567.639594][ T6012] usb 8-1: device descriptor read/8, error -71 [ 567.939179][ T6012] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 568.029514][ T6012] usb 8-1: device descriptor read/8, error -71 [ 568.139396][ T6012] usb usb8-port1: unable to enumerate USB device [ 568.641939][T16040] Bluetooth: MGMT ver 1.23 [ 568.999444][T12321] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 569.127532][T16055] loop6: detected capacity change from 0 to 64 [ 569.134856][ C0] blk_print_req_error: 7 callbacks suppressed [ 569.134891][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 569.141572][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.144183][ C1] buffer_io_error: 7 callbacks suppressed [ 569.144190][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 569.149499][T12321] usb 5-1: Using ep0 maxpacket: 32 [ 569.150772][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.154348][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 569.154530][T12321] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 569.159630][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.162261][T12321] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 569.162903][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.165349][T12321] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 569.168110][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.172432][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.173148][T12321] usb 5-1: Product: syz [ 569.175210][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.175811][T12321] usb 5-1: Manufacturer: syz [ 569.178599][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.180169][T12321] usb 5-1: SerialNumber: syz [ 569.183215][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 569.184253][T12321] usb 5-1: config 0 descriptor?? [ 569.185855][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.187726][T16044] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 569.198870][T12321] hub 5-1:0.0: bad descriptor, ignoring hub [ 569.200871][T12321] hub 5-1:0.0: probe with driver hub failed with error -5 [ 569.460149][T16066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.462554][T16066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.669289][T13502] usb 8-1: new full-speed USB device number 98 using dummy_hcd [ 569.734611][T16071] FAULT_INJECTION: forcing a failure. [ 569.734611][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 569.738448][T16071] CPU: 3 UID: 0 PID: 16071 Comm: syz.1.2568 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 569.738462][T16071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 569.738471][T16071] Call Trace: [ 569.738475][T16071] [ 569.738479][T16071] dump_stack_lvl+0x16c/0x1f0 [ 569.738498][T16071] should_fail_ex+0x50a/0x650 [ 569.738510][T16071] ? fs_reclaim_acquire+0xae/0x150 [ 569.738526][T16071] should_failslab+0xc2/0x120 [ 569.738539][T16071] __kmalloc_noprof+0xce/0x4f0 [ 569.738550][T16071] ? tomoyo_encode2+0x100/0x3e0 [ 569.738564][T16071] tomoyo_encode2+0x100/0x3e0 [ 569.738577][T16071] tomoyo_realpath_from_path+0x1a7/0x710 [ 569.738590][T16071] ? tomoyo_path_number_perm+0x235/0x5b0 [ 569.738601][T16071] tomoyo_path_number_perm+0x248/0x5b0 [ 569.738610][T16071] ? tomoyo_path_number_perm+0x235/0x5b0 [ 569.738621][T16071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 569.738631][T16071] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.738655][T16071] ? find_held_lock+0x2d/0x110 [ 569.738672][T16071] ? do_user_addr_fault+0xe50/0x13f0 [ 569.738685][T16071] ? __pfx_lock_release+0x10/0x10 [ 569.738701][T16071] security_file_ioctl_compat+0x9b/0x240 [ 569.738714][T16071] __do_compat_sys_ioctl+0x4e/0x2c0 [ 569.738729][T16071] __do_fast_syscall_32+0x73/0x120 [ 569.738739][T16071] do_fast_syscall_32+0x32/0x80 [ 569.738748][T16071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.738764][T16071] RIP: 0023:0xf7f96579 [ 569.738771][T16071] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 569.738781][T16071] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 569.738790][T16071] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040049409 [ 569.738796][T16071] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.738801][T16071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.738806][T16071] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 569.738812][T16071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.738823][T16071] [ 569.738831][T16071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.830910][T13502] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.833823][T13502] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 569.836378][T13502] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 569.839312][T13502] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.842986][T13502] usb 8-1: config 0 descriptor?? [ 569.845946][T13502] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 569.847921][T13502] dvb-usb: bulk message failed: -22 (3/0) [ 569.852212][T13502] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 569.854948][T13502] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 569.857005][T13502] usb 8-1: media controller created [ 569.858937][T13502] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.863439][T13502] dvb-usb: bulk message failed: -22 (6/0) [ 569.865250][T13502] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 569.868086][T13502] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input32 [ 569.871860][T13502] dvb-usb: schedule remote query interval to 150 msecs. [ 569.873983][T13502] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 570.029153][T13502] dvb-usb: bulk message failed: -22 (1/0) [ 570.031941][T13502] dvb-usb: error while querying for an remote control event. [ 570.048298][T13502] usb 8-1: USB disconnect, device number 98 [ 570.059790][T13502] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 570.114857][T16077] No control pipe specified [ 570.170212][ T1014] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.239520][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.260035][ T1014] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.289256][ T5988] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 570.329358][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.360161][ T1014] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.419232][ T5988] usb 6-1: device descriptor read/64, error -71 [ 570.429647][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.450307][ T1014] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.522504][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.540385][T13693] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.619582][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.639847][T12321] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.679207][ T5988] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 570.709529][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.730173][T12321] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.800086][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.819183][ T5988] usb 6-1: device descriptor read/64, error -71 [ 570.820071][ T5985] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.826967][T16086] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 570.889312][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 570.909818][T13502] raw-gadget.1 gadget.0: failed to queue suspend event [ 570.929358][ T5988] usb usb6-port1: attempt power cycle [ 570.999952][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.020502][ T5985] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.021420][T16086] /dev/sr0: Can't open blockdev [ 571.089774][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.110113][ T5985] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.139866][T16087] /dev/sr0: Can't open blockdev [ 571.179240][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.209245][T13693] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.299215][ T5988] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 571.299382][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.320172][ T5988] usb 6-1: device descriptor read/8, error -71 [ 571.320419][T12321] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.396096][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.410169][T14684] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.479307][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.510528][T13693] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.579177][ T5988] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 571.589273][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.599612][ T5988] usb 6-1: device descriptor read/8, error -71 [ 571.610112][ T5985] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.679244][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.700113][ T8] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.709523][ T5988] usb usb6-port1: unable to enumerate USB device [ 571.757752][T16101] vivid-007: disconnect [ 571.769256][T16044] raw-gadget.1 gadget.0: failed to queue resume event [ 571.800367][ T8] raw-gadget.1 gadget.0: failed to queue suspend event [ 571.811176][T16044] raw-gadget.1 gadget.0: failed to queue disconnect event [ 571.829495][T13435] usb 5-1: USB disconnect, device number 102 [ 571.870384][T16103] xt_policy: neither incoming nor outgoing policy selected [ 572.041640][T16109] FAULT_INJECTION: forcing a failure. [ 572.041640][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 572.045113][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.3.2577 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 572.045127][T16109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.045132][T16109] Call Trace: [ 572.045136][T16109] [ 572.045140][T16109] dump_stack_lvl+0x16c/0x1f0 [ 572.045159][T16109] should_fail_ex+0x50a/0x650 [ 572.045188][T16109] ? fs_reclaim_acquire+0xae/0x150 [ 572.045205][T16109] ? io_uring_setup+0x176/0x21a0 [ 572.045218][T16109] should_failslab+0xc2/0x120 [ 572.045230][T16109] __kmalloc_cache_noprof+0x68/0x420 [ 572.045242][T16109] ? io_uring_fill_params+0x59f/0x900 [ 572.045256][T16109] io_uring_setup+0x176/0x21a0 [ 572.045271][T16109] ? __pfx_io_uring_setup+0x10/0x10 [ 572.045285][T16109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.045302][T16109] ? __fget_files+0x206/0x3a0 [ 572.045315][T16109] ? ksys_write+0x1ba/0x250 [ 572.045325][T16109] ? __pfx_ksys_write+0x10/0x10 [ 572.045337][T16109] __ia32_sys_io_uring_setup+0x97/0x140 [ 572.045351][T16109] __do_fast_syscall_32+0x73/0x120 [ 572.045361][T16109] do_fast_syscall_32+0x32/0x80 [ 572.045370][T16109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.045386][T16109] RIP: 0023:0xf73ae579 [ 572.045395][T16109] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 572.045404][T16109] RSP: 002b:00000000f4ff450c EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 572.045413][T16109] RAX: ffffffffffffffda RBX: 0000000000000117 RCX: 0000000020000300 [ 572.045419][T16109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.045424][T16109] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 572.045429][T16109] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 572.045434][T16109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.045445][T16109] [ 572.103388][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.165945][ T5988] IPVS: starting estimator thread 0... [ 572.259591][T16114] IPVS: using max 40 ests per chain, 96000 per kthread [ 572.309190][T14684] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 572.460996][T14684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.463976][T14684] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 572.466565][T14684] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 572.469455][T14684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.474831][T14684] usb 5-1: config 0 descriptor?? [ 572.478402][T14684] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 572.481087][T14684] dvb-usb: bulk message failed: -22 (3/0) [ 572.484180][T14684] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 572.487143][T14684] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 572.489421][T14684] usb 5-1: media controller created [ 572.492306][T14684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.499299][T14684] dvb-usb: bulk message failed: -22 (6/0) [ 572.502316][T14684] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 572.505746][T14684] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input33 [ 572.511537][T14684] dvb-usb: schedule remote query interval to 150 msecs. [ 572.515115][T14684] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 572.590812][T16100] vivid-007: reconnect [ 572.650558][T16116] vivid-007: disconnect [ 572.670451][T14684] dvb-usb: bulk message failed: -22 (1/0) [ 572.676582][T14684] dvb-usb: error while querying for an remote control event. [ 572.682027][T14684] usb 5-1: USB disconnect, device number 103 [ 572.693115][T14684] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 573.316784][T16135] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 573.400074][T16135] /dev/sr0: Can't open blockdev [ 573.483474][T16115] vivid-007: reconnect [ 573.489282][ T5985] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 573.492139][T16137] /dev/sr0: Can't open blockdev [ 573.739429][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 573.742104][ T5985] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 573.746475][ T5985] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 573.749076][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 573.753001][ T5985] usb 5-1: Product: syz [ 573.754238][ T5985] usb 5-1: Manufacturer: syz [ 573.755683][ T5985] usb 5-1: SerialNumber: syz [ 573.759668][ T5985] usb 5-1: config 0 descriptor?? [ 573.761592][T16132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 573.764238][ T5985] hub 5-1:0.0: bad descriptor, ignoring hub [ 573.765968][ T5985] hub 5-1:0.0: probe with driver hub failed with error -5 [ 574.021111][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.027388][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.382356][T16172] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.720551][ T5985] raw-gadget.0 gadget.0: failed to queue suspend event [ 574.799280][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 574.820066][ T5985] raw-gadget.0 gadget.0: failed to queue suspend event [ 574.894205][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 574.912907][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 574.979684][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 574.980246][T16190] 9pnet_virtio: no channels available for device syz [ 575.000199][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.069862][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.092715][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.159250][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.159498][ T5985] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 575.190377][ T6012] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.259259][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.279800][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.310728][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.313637][ T5985] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 575.316186][ T5985] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 575.319042][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.340280][ T5985] usb 7-1: config 0 descriptor?? [ 575.350261][ T5985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 575.352191][ T5985] dvb-usb: bulk message failed: -22 (3/0) [ 575.354414][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.356616][ T5985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 575.359848][ T5985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 575.361837][ T5985] usb 7-1: media controller created [ 575.363670][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.370160][ T5985] dvb-usb: bulk message failed: -22 (6/0) [ 575.371890][ T5985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 575.374942][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input34 [ 575.378689][ T5985] dvb-usb: schedule remote query interval to 150 msecs. [ 575.381456][ T5985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 575.384675][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.451380][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.473561][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.539474][ T1014] dvb-usb: bulk message failed: -22 (1/0) [ 575.541666][ T1014] dvb-usb: error while querying for an remote control event. [ 575.543990][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.546481][ T6012] usb 7-1: USB disconnect, device number 98 [ 575.555200][ T6012] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 575.559830][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.630523][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.649952][ T8] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.729216][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.760375][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.829656][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.873197][ T5985] raw-gadget.0 gadget.0: failed to queue suspend event [ 575.939496][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 575.960001][ T5985] raw-gadget.0 gadget.0: failed to queue suspend event [ 576.029663][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 576.049906][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 576.139567][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 576.160111][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 576.239471][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 576.260078][ T5985] raw-gadget.0 gadget.0: failed to queue suspend event [ 576.329446][T16132] raw-gadget.0 gadget.0: failed to queue resume event [ 576.367770][T16132] raw-gadget.0 gadget.0: failed to queue suspend event [ 576.383446][T16196] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2594'. [ 576.389623][ T1014] usb 5-1: USB disconnect, device number 104 [ 576.392195][T16132] raw-gadget.0 gadget.0: failed to queue disconnect event [ 576.929948][T16206] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 577.040141][T16206] /dev/sr0: Can't open blockdev [ 577.078020][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 577.130095][T16204] /dev/sr0: Can't open blockdev [ 577.142114][T16218] overlay: Bad value for 'workdir' [ 577.779480][ T1014] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 577.939764][ T1014] usb 5-1: Using ep0 maxpacket: 32 [ 577.942845][ T1014] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 577.948367][ T1014] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 577.952372][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 577.955337][ T1014] usb 5-1: Product: syz [ 577.957123][ T1014] usb 5-1: Manufacturer: syz [ 577.959068][ T1014] usb 5-1: SerialNumber: syz [ 577.968785][ T1014] usb 5-1: config 0 descriptor?? [ 577.971074][T16228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.979738][ T1014] hub 5-1:0.0: bad descriptor, ignoring hub [ 577.981499][ T1014] hub 5-1:0.0: probe with driver hub failed with error -5 [ 578.222921][T16238] [U] : [ 578.223982][T16238] [U] [ 578.224787][T16238] [U] [ 578.225597][T16238] [U] [ 578.226400][T16238] [U] [ 578.227263][T16238] [U] [ 578.228105][T16238] [U] [ 578.228937][T16238] [U] [ 578.229754][T16239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.229974][T16238] [U] [ 578.231971][T16239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.232636][T16238] [U] [ 578.235404][T16238] [U] [ 578.236222][T16238] [U] [ 578.237030][T16238] [U] [ 578.237846][T16238] [U] [ 578.238667][T16238] [U] [ 578.239487][T16238] [U] [ 578.241414][T16238] [U] [ 578.242254][T16238] [U] [ 578.243060][T16238] [U] [ 578.243869][T16238] [U] [ 578.244658][T16238] [U] [ 578.245460][T16238] [U] [ 578.246235][T16238] [U] [ 578.247016][T16238] [U] [ 578.248189][T16238] [U] [ 578.249013][T16238] [U] [ 578.249898][T16238] [U] [ 578.250865][T16238] [U] [ 578.251632][T16238] [U] [ 578.252424][T16238] [U] [ 578.253183][T16238] [U] [ 578.253953][T16238] [U] [ 578.255111][T16238] [U] [ 578.255990][T16238] [U] [ 578.256797][T16238] [U] [ 578.257629][T16238] [U] [ 578.258451][T16238] [U] [ 578.259242][T16238] [U] [ 578.260041][T16238] [U] [ 578.260859][T16238] [U] [ 578.266836][T16238] [U] [ 578.267709][T16238] [U] [ 578.268563][T16238] [U] [ 578.269399][T16238] [U] [ 578.270223][T16238] [U] [ 578.271051][T16238] [U] [ 578.271877][T16238] [U] [ 578.272693][T16238] [U] [ 578.274759][T16238] [U] [ 578.275652][T16238] [U] [ 578.276485][T16238] [U] [ 578.277316][T16238] [U] [ 578.278130][T16238] [U] [ 578.278944][T16238] [U] [ 578.279779][T16238] [U] [ 578.280588][T16238] [U] [ 578.290313][T16238] [U] [ 578.291440][T16238] [U] [ 578.292346][T16238] [U] [ 578.293374][T16238] [U] [ 578.294211][T16238] [U] [ 578.295289][T16238] [U] [ 578.296379][T16238] [U] [ 578.297135][T16238] [U] [ 578.298073][T16238] [U] [ 578.298892][T16238] [U] [ 578.299719][T16238] [U] [ 578.300557][T16238] [U] [ 578.301388][T16238] [U] [ 578.302199][T16238] [U] [ 578.303012][T16238] [U] [ 578.303849][T16238] [U] [ 578.305081][T16238] [U] [ 578.305952][T16238] [U] [ 578.306771][T16238] [U] [ 578.307595][T16238] [U] [ 578.308449][T16238] [U] [ 578.309325][T16238] [U] [ 578.310148][T16238] [U] [ 578.310973][T16238] [U] [ 578.311888][T16238] [U] [ 578.312721][T16238] [U] [ 578.313562][T16238] [U] [ 578.314391][T16238] [U] [ 578.315228][T16238] [U] [ 578.316068][T16238] [U] [ 578.316894][T16238] [U] [ 578.317727][T16238] [U] [ 578.318643][T16238] [U] [ 578.319487][T16238] [U] [ 578.320335][T16238] [U] [ 578.321169][T16238] [U] [ 578.321996][T16238] [U] [ 578.322825][T16238] [U] [ 578.323647][T16238] [U] [ 578.324470][T16238] [U] [ 578.325655][T16238] [U] [ 578.326494][T16238] [U] [ 578.327319][T16238] [U] [ 578.328185][T16238] [U] [ 578.329020][T16238] [U] [ 578.329854][T16238] [U] [ 578.330678][T16238] [U] [ 578.331521][T16238] [U] [ 578.332473][T16238] [U] [ 578.333320][T16238] [U] [ 578.334119][T16238] [U] [ 578.334931][T16238] [U] [ 578.335768][T16238] [U] [ 578.336595][T16238] [U] [ 578.337420][T16238] [U] [ 578.338264][T16238] [U] [ 578.340066][T16238] [U] [ 578.340921][T16238] [U] [ 578.341791][T16238] [U] [ 578.342616][T16238] [U] [ 578.343439][T16238] [U] [ 578.344269][T16238] [U] [ 578.345087][T16238] [U] [ 578.345918][T16238] [U] [ 578.346882][T16238] [U] [ 578.347708][T16238] [U] [ 578.348546][T16238] [U] [ 578.349376][T16238] [U] [ 578.350205][T16238] [U] [ 578.351027][T16238] [U] [ 578.351847][T16238] [U] [ 578.355446][T16240] [U] [ 578.413781][T16255] [U] : [ 578.414811][T16255] [U] [ 578.415648][T16255] [U] [ 578.416474][T16255] [U] [ 578.417877][T16255] [U] [ 578.418759][T16255] [U] [ 578.419587][T16255] [U] [ 578.420370][T16255] [U] [ 578.431121][T16255] [U] [ 578.431968][T16255] [U] [ 578.432846][T16255] [U] [ 578.433700][T16255] [U] [ 578.434615][T16255] [U] [ 578.435458][T16255] [U] [ 578.436313][T16255] [U] [ 578.437158][T16255] [U] [ 578.440226][T16255] [U] [ 578.441090][T16255] [U] [ 578.441930][T16255] [U] [ 578.442750][T16255] [U] [ 578.443670][T16255] [U] [ 578.444495][T16255] [U] [ 578.445337][T16255] [U] [ 578.446157][T16255] [U] [ 578.447042][T16255] [U] [ 578.447870][T16255] [U] [ 578.448720][T16255] [U] [ 578.449572][T16255] [U] [ 578.451503][T16255] [U] [ 578.452347][T16255] [U] [ 578.453190][T16255] [U] [ 578.454005][T16255] [U] [ 578.454887][T16255] [U] [ 578.455721][T16255] [U] [ 578.456535][T16255] [U] [ 578.457359][T16255] [U] [ 578.458223][T16255] [U] [ 578.459045][T16255] [U] [ 578.459877][T16255] [U] [ 578.460690][T16255] [U] [ 578.462971][T16255] [U] [ 578.463835][T16255] [U] [ 578.464655][T16255] [U] [ 578.465492][T16255] [U] [ 578.466874][T16255] [U] [ 578.467708][T16255] [U] [ 578.468557][T16255] [U] [ 578.470700][T16255] [U] [ 578.471657][T16255] [U] [ 578.472525][T16255] [U] [ 578.473371][T16255] [U] [ 578.474184][T16255] [U] [ 578.475668][T16255] [U] [ 578.475685][T16255] [U] [ 578.475699][T16255] [U] [ 578.475714][T16255] [U] [ 578.475786][T16255] [U] [ 578.475801][T16255] [U] [ 578.475815][T16255] [U] [ 578.475833][T16255] [U] [ 578.475897][T16255] [U] [ 578.483205][T16255] [U] [ 578.484023][T16255] [U] [ 578.484840][T16255] [U] [ 578.487998][T16255] [U] [ 578.488880][T16255] [U] [ 578.489707][T16255] [U] [ 578.490528][T16255] [U] [ 578.492039][T16255] [U] [ 578.492876][T16255] [U] [ 578.493735][T16255] [U] [ 578.494552][T16255] [U] [ 578.495482][T16255] [U] [ 578.496329][T16255] [U] [ 578.497165][T16255] [U] [ 578.497984][T16255] [U] [ 578.498896][T16255] [U] [ 578.499733][T16255] [U] [ 578.500553][T16255] [U] [ 578.501379][T16255] [U] [ 578.503063][T16255] [U] [ 578.503904][T16255] [U] [ 578.504742][T16255] [U] [ 578.505573][T16255] [U] [ 578.506494][T16255] [U] [ 578.507333][T16255] [U] [ 578.508178][T16255] [U] [ 578.508999][T16255] [U] [ 578.510570][T16255] [U] [ 578.511414][T16255] [U] [ 578.512243][T16255] [U] [ 578.513061][T16255] [U] [ 578.513985][T16255] [U] [ 578.514803][T16255] [U] [ 578.515637][T16255] [U] [ 578.516454][T16255] [U] [ 578.517385][T16255] [U] [ 578.518224][T16255] [U] [ 578.519055][T16255] [U] [ 578.519873][T16255] [U] [ 578.521609][T16255] [U] [ 578.522454][T16255] [U] [ 578.523285][T16255] [U] [ 578.524100][T16255] [U] [ 578.525025][T16255] [U] [ 578.525855][T16255] [U] [ 578.526678][T16255] [U] [ 578.527498][T16255] [U] [ 578.528409][T16255] [U] [ 578.529256][T16255] [U] [ 578.530075][T16255] [U] [ 578.530895][T16255] [U] [ 578.532616][T16255] [U] [ 578.533468][T16255] [U] [ 578.534289][T16255] [U] [ 578.535107][T16255] [U] [ 578.535987][T16255] [U] [ 578.536803][T16255] [U] [ 578.537636][T16255] [U] [ 578.538461][T16255] [U] [ 578.540077][T16255] [U] [ 578.540938][T16255] [U] [ 578.541783][T16255] [U] [ 578.542602][T16255] [U] [ 578.543798][T16255] [U] [ 578.544629][T16255] [U] [ 578.545465][T16255] [U] [ 578.560709][T16254] [U] [ 578.695824][T16266] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 578.806510][T16266] /dev/sr0: Can't open blockdev [ 578.909971][T16268] /dev/sr0: Can't open blockdev [ 578.949815][ T57] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.029636][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.060174][ T8] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.139272][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.159843][ T57] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.239382][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.260345][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.330039][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.350271][T13693] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.419267][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.432328][T16278] evm: overlay not supported [ 579.450140][T13435] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.529256][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.551237][ T57] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.609350][ T8] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 579.629613][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.650162][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.719461][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.739870][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.780894][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.783759][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 579.786330][ T8] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 579.789256][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.792438][ T8] usb 7-1: config 0 descriptor?? [ 579.796605][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 579.798610][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 579.801455][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 579.804117][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 579.806144][ T8] usb 7-1: media controller created [ 579.808078][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.809508][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.814202][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 579.815862][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 579.818942][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input35 [ 579.822726][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 579.824701][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 579.839832][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.919197][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 579.951326][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 579.989581][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 579.991299][ T8] dvb-usb: error while querying for an remote control event. [ 579.998625][ T8] usb 7-1: USB disconnect, device number 99 [ 580.007979][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 580.019867][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.040059][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.109567][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.130083][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.199488][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.221637][T13502] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.299513][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.314016][T16290] siw: device registration error -23 [ 580.320234][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.389726][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.410343][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.489876][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.511312][ T8] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.563033][T16295] xt_policy: neither incoming nor outgoing policy selected [ 580.590556][T16228] raw-gadget.0 gadget.0: failed to queue resume event [ 580.609838][ T1014] raw-gadget.0 gadget.0: failed to queue suspend event [ 580.620635][T16228] raw-gadget.0 gadget.0: failed to queue disconnect event [ 580.643284][T12321] usb 5-1: USB disconnect, device number 105 [ 580.648718][T16300] siw: device registration error -23 [ 580.860904][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 580.863765][ T5949] CPU: 2 UID: 0 PID: 5949 Comm: kworker/u33:4 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 580.863779][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 580.863787][ T5949] Workqueue: hci0 hci_rx_work [ 580.863803][ T5949] Call Trace: [ 580.863806][ T5949] [ 580.863811][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 580.863832][ T5949] sysfs_warn_dup+0x7f/0xa0 [ 580.863848][ T5949] sysfs_create_dir_ns+0x24d/0x2b0 [ 580.863861][ T5949] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 580.863875][ T5949] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 580.863891][ T5949] ? kobject_add_internal+0x12d/0x990 [ 580.863903][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 580.863917][ T5949] kobject_add_internal+0x2c8/0x990 [ 580.863929][ T5949] kobject_add+0x16f/0x240 [ 580.863939][ T5949] ? __pfx_kobject_add+0x10/0x10 [ 580.863948][ T5949] ? class_to_subsys+0x3e/0x160 [ 580.863962][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 580.863975][ T5949] ? kobject_put+0xab/0x5a0 [ 580.863987][ T5949] device_add+0x289/0x1a70 [ 580.864000][ T5949] ? __pfx_dev_set_name+0x10/0x10 [ 580.864014][ T5949] ? __pfx_device_add+0x10/0x10 [ 580.864026][ T5949] ? mgmt_send_event_skb+0x2f2/0x460 [ 580.864044][ T5949] hci_conn_add_sysfs+0x17e/0x230 [ 580.864055][ T5949] le_conn_complete_evt+0xfce/0x1d10 [ 580.864075][ T5949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 580.864089][ T5949] ? trace_contention_end+0xee/0x140 [ 580.864102][ T5949] ? __mutex_lock+0x1cc/0xb10 [ 580.864121][ T5949] hci_le_conn_complete_evt+0x23c/0x370 [ 580.864139][ T5949] hci_le_meta_evt+0x2e2/0x5d0 [ 580.864149][ T5949] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 580.864166][ T5949] hci_event_packet+0x666/0x1190 [ 580.864180][ T5949] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 580.864191][ T5949] ? __pfx_hci_event_packet+0x10/0x10 [ 580.864205][ T5949] ? mark_held_locks+0x9f/0xe0 [ 580.864217][ T5949] ? kcov_remote_start+0x3cf/0x6e0 [ 580.864229][ T5949] ? lockdep_hardirqs_on+0x7c/0x110 [ 580.864245][ T5949] hci_rx_work+0x2c5/0x16b0 [ 580.864256][ T5949] ? process_one_work+0x8bb/0x1b30 [ 580.864269][ T5949] process_one_work+0x958/0x1b30 [ 580.864283][ T5949] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 580.864294][ T5949] ? __pfx_process_one_work+0x10/0x10 [ 580.864309][ T5949] ? assign_work+0x1a0/0x250 [ 580.864320][ T5949] worker_thread+0x6c8/0xf00 [ 580.864334][ T5949] ? __kthread_parkme+0x148/0x220 [ 580.864348][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 580.864360][ T5949] kthread+0x3af/0x750 [ 580.864370][ T5949] ? __pfx_kthread+0x10/0x10 [ 580.864379][ T5949] ? lock_acquire+0x2f/0xb0 [ 580.864391][ T5949] ? __pfx_kthread+0x10/0x10 [ 580.864401][ T5949] ret_from_fork+0x45/0x80 [ 580.864413][ T5949] ? __pfx_kthread+0x10/0x10 [ 580.864422][ T5949] ret_from_fork_asm+0x1a/0x30 [ 580.864438][ T5949] [ 580.864449][ T5949] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 580.933954][T16303] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 580.934989][ T5949] Bluetooth: hci0: failed to register connection device [ 581.000115][T16311] FAULT_INJECTION: forcing a failure. [ 581.000115][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.003789][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.3.2626 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 581.003801][T16311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 581.003807][T16311] Call Trace: [ 581.003811][T16311] [ 581.003814][T16311] dump_stack_lvl+0x16c/0x1f0 [ 581.003832][T16311] should_fail_ex+0x50a/0x650 [ 581.003847][T16311] _copy_from_user+0x2e/0xd0 [ 581.003861][T16311] move_addr_to_kernel+0x68/0x160 [ 581.003879][T16311] __get_compat_msghdr+0x3f1/0x4d0 [ 581.003900][T16311] get_compat_msghdr+0xd3/0x170 [ 581.003914][T16311] ? __pfx_get_compat_msghdr+0x10/0x10 [ 581.003931][T16311] ___sys_sendmsg+0x1b0/0x1e0 [ 581.003942][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.003957][T16311] ? __pfx_lock_release+0x10/0x10 [ 581.003968][T16311] ? trace_lock_acquire+0x14e/0x1f0 [ 581.003981][T16311] ? __fget_files+0x206/0x3a0 [ 581.003996][T16311] __sys_sendmsg+0x16e/0x220 [ 581.004007][T16311] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.004024][T16311] __do_fast_syscall_32+0x73/0x120 [ 581.004034][T16311] do_fast_syscall_32+0x32/0x80 [ 581.004043][T16311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.004059][T16311] RIP: 0023:0xf73ae579 [ 581.004066][T16311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.004075][T16311] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 581.004084][T16311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 581.004090][T16311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.004095][T16311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.004101][T16311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.004106][T16311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.004117][T16311] [ 581.100238][T16303] /dev/sr0: Can't open blockdev [ 581.220574][T16309] /dev/sr0: Can't open blockdev [ 581.327130][T13502] IPVS: starting estimator thread 0... [ 581.412657][T16323] IPVS: using max 40 ests per chain, 96000 per kthread [ 581.479190][T14684] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 581.641098][T14684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.649169][T14684] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 581.652448][T14684] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 581.655780][T14684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.660427][T14684] usb 5-1: config 0 descriptor?? [ 581.664586][T14684] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 581.666970][T14684] dvb-usb: bulk message failed: -22 (3/0) [ 581.672602][T14684] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 581.676059][T14684] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 581.678658][T14684] usb 5-1: media controller created [ 581.682191][T14684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.686733][T14684] dvb-usb: bulk message failed: -22 (6/0) [ 581.688864][T14684] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 581.692975][T14684] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input36 [ 581.695974][T16327] xt_policy: neither incoming nor outgoing policy selected [ 581.700300][T14684] dvb-usb: schedule remote query interval to 150 msecs. [ 581.702979][T14684] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 581.859325][T13502] dvb-usb: bulk message failed: -22 (1/0) [ 581.860977][T13502] dvb-usb: error while querying for an remote control event. [ 581.865724][T13502] usb 5-1: USB disconnect, device number 106 [ 581.875913][T13502] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 582.036434][T16337] team0: Device ipvlan2 failed to register rx_handler [ 582.417815][T16350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 582.543661][T16355] 9pnet_virtio: no channels available for device syz [ 582.565495][T16356] siw: device registration error -23 [ 582.897712][T16360] xt_policy: neither incoming nor outgoing policy selected [ 583.189894][T16367] syzkaller1: entered promiscuous mode [ 583.191590][T16367] syzkaller1: entered allmulticast mode [ 583.247211][T16369] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2644'. [ 583.312557][T16372] veth1_macvtap: left promiscuous mode [ 583.539411][T12321] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 583.690915][T12321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.693616][T12321] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 583.695883][T12321] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 583.698182][T12321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.719712][T12321] usb 7-1: config 0 descriptor?? [ 583.722437][T12321] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 583.724324][T12321] dvb-usb: bulk message failed: -22 (3/0) [ 583.730135][T12321] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 583.732498][T12321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 583.734331][T12321] usb 7-1: media controller created [ 583.736080][T12321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.750257][T12321] dvb-usb: bulk message failed: -22 (6/0) [ 583.751751][T12321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 583.760393][T12321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input37 [ 583.779784][T12321] dvb-usb: schedule remote query interval to 150 msecs. [ 583.781584][T12321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 583.924321][ T1014] usb 7-1: USB disconnect, device number 100 [ 583.931773][ T1014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 584.126050][T16377] syzkaller1: entered promiscuous mode [ 584.128350][T16377] syzkaller1: entered allmulticast mode [ 584.291339][T16379] delete_channel: no stack [ 584.528079][T16386] bridge0: port 3(hsr_slave_1) entered blocking state [ 584.531270][T16386] bridge0: port 3(hsr_slave_1) entered disabled state [ 584.536753][T16386] hsr_slave_1: entered promiscuous mode [ 584.544532][T16386] bridge0: port 3(hsr_slave_1) entered blocking state [ 584.546657][T16386] bridge0: port 3(hsr_slave_1) entered forwarding state [ 584.567175][T16386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input38 [ 585.469728][T16396] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 585.569967][T16396] /dev/sr0: Can't open blockdev [ 585.670186][T16399] /dev/sr0: Can't open blockdev [ 585.710471][T16407] siw: device registration error -23 [ 585.734499][T16408] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 585.839171][T14684] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 585.840440][T16408] /dev/sr0: Can't open blockdev [ 585.969765][T16409] /dev/sr0: Can't open blockdev [ 585.989212][T14684] usb 5-1: Using ep0 maxpacket: 32 [ 585.992278][T14684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 585.996604][T14684] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 585.999257][T14684] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.001536][T14684] usb 5-1: Product: syz [ 586.002729][T14684] usb 5-1: Manufacturer: syz [ 586.004052][T14684] usb 5-1: SerialNumber: syz [ 586.006482][T14684] usb 5-1: config 0 descriptor?? [ 586.008348][T16405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 586.010976][T14684] hub 5-1:0.0: bad descriptor, ignoring hub [ 586.012684][T14684] hub 5-1:0.0: probe with driver hub failed with error -5 [ 586.154748][T16410] delete_channel: no stack [ 586.279465][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.282064][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.377561][T16415] xt_policy: neither incoming nor outgoing policy selected [ 586.531197][T16426] No control pipe specified [ 586.595710][T16429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 586.719198][T13435] usb 8-1: new full-speed USB device number 99 using dummy_hcd [ 586.890841][T13435] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.893704][T13435] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 586.896339][T13435] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 586.898877][T13435] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.902223][T13435] usb 8-1: config 0 descriptor?? [ 586.908924][T13435] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 586.910965][T13435] dvb-usb: bulk message failed: -22 (3/0) [ 586.913452][T13435] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 586.916233][T13435] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 586.918271][T13435] usb 8-1: media controller created [ 586.920274][T13435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.925182][T13435] dvb-usb: bulk message failed: -22 (6/0) [ 586.926905][T13435] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 586.930031][T13435] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input39 [ 586.933699][T13435] dvb-usb: schedule remote query interval to 150 msecs. [ 586.935665][T13435] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 587.010320][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.069266][T13759] Bluetooth: hci0: command 0x0406 tx timeout [ 587.079367][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.089325][T13435] dvb-usb: bulk message failed: -22 (1/0) [ 587.091030][T13435] dvb-usb: error while querying for an remote control event. [ 587.112752][T13502] usb 8-1: USB disconnect, device number 99 [ 587.115811][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.122957][T13502] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 587.199268][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.230709][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.264921][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 587.271401][T16432] validate_nla: 23 callbacks suppressed [ 587.271410][T16432] netlink: 'syz.2.2663': attribute type 10 has an invalid length. [ 587.275772][T16432] syz_tun: entered promiscuous mode [ 587.284070][T16432] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 587.319573][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.353299][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.419526][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.440052][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.522291][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.540787][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.609758][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.613555][T16437] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 587.632957][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.699500][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.720257][T15884] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.730641][T16437] /dev/sr0: Can't open blockdev [ 587.799301][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.808916][T16444] netlink: 'syz.3.2667': attribute type 10 has an invalid length. [ 587.812112][T16444] syz_tun: entered promiscuous mode [ 587.816682][T16444] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 587.820210][T16440] /dev/sr0: Can't open blockdev [ 587.820719][T12321] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.890137][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 587.910109][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 587.979283][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.009881][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.079216][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.089834][T12321] usb 8-1: new full-speed USB device number 100 using dummy_hcd [ 588.109800][ T5988] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.179264][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.211059][ T8] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.240912][T12321] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.243869][T12321] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 588.246434][T12321] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 588.249572][T12321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.253770][T12321] usb 8-1: config 0 descriptor?? [ 588.257151][T12321] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 588.259492][T12321] dvb-usb: bulk message failed: -22 (3/0) [ 588.262551][T12321] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 588.265320][T12321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 588.267371][T12321] usb 8-1: media controller created [ 588.270083][T12321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 588.275996][T12321] dvb-usb: bulk message failed: -22 (6/0) [ 588.277700][T12321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 588.281159][T12321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input40 [ 588.285512][T12321] dvb-usb: schedule remote query interval to 150 msecs. [ 588.287525][T12321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 588.299175][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.330599][ T8] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.412789][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.433481][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.437433][T16450] siw: device registration error -23 [ 588.439447][T12321] dvb-usb: bulk message failed: -22 (1/0) [ 588.441152][T12321] dvb-usb: error while querying for an remote control event. [ 588.462775][T13693] usb 8-1: USB disconnect, device number 100 [ 588.483038][T13693] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 588.509992][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.529798][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.619232][T16405] raw-gadget.0 gadget.0: failed to queue resume event [ 588.649728][T14684] raw-gadget.0 gadget.0: failed to queue suspend event [ 588.660721][T16405] raw-gadget.0 gadget.0: failed to queue disconnect event [ 588.680597][T13502] usb 5-1: USB disconnect, device number 107 [ 588.703385][T16454] FAULT_INJECTION: forcing a failure. [ 588.703385][T16454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.707174][T16454] CPU: 1 UID: 0 PID: 16454 Comm: syz.0.2671 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 588.707188][T16454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 588.707194][T16454] Call Trace: [ 588.707197][T16454] [ 588.707201][T16454] dump_stack_lvl+0x16c/0x1f0 [ 588.707219][T16454] should_fail_ex+0x50a/0x650 [ 588.707233][T16454] _copy_from_user+0x2e/0xd0 [ 588.707247][T16454] io_submit_one+0xbc/0x1da0 [ 588.707267][T16454] ? __pfx_io_submit_one+0x10/0x10 [ 588.707282][T16454] ? __might_fault+0x13b/0x190 [ 588.707298][T16454] ? lock_acquire+0x2f/0xb0 [ 588.707309][T16454] ? __might_fault+0xe3/0x190 [ 588.707323][T16454] ? __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 588.707333][T16454] __ia32_compat_sys_io_submit+0x1ba/0x3a0 [ 588.707344][T16454] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 588.707359][T16454] __do_fast_syscall_32+0x73/0x120 [ 588.707369][T16454] do_fast_syscall_32+0x32/0x80 [ 588.707378][T16454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.707393][T16454] RIP: 0023:0xf7ff6579 [ 588.707401][T16454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.707411][T16454] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 588.707420][T16454] RAX: ffffffffffffffda RBX: 00000000f7ff1000 RCX: 0000000000000001 [ 588.707426][T16454] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.707431][T16454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.707436][T16454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.707441][T16454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.707452][T16454] [ 589.008344][T16460] netlink: 'syz.3.2674': attribute type 11 has an invalid length. [ 589.080604][ T5949] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 589.385410][T16472] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 589.519987][T16472] /dev/sr0: Can't open blockdev [ 589.649914][T16473] /dev/sr0: Can't open blockdev [ 589.879437][T12321] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 589.997996][T16483] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 590.007315][T16483] FAULT_INJECTION: forcing a failure. [ 590.007315][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 590.011303][T16483] CPU: 0 UID: 0 PID: 16483 Comm: syz.3.2682 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 590.011316][T16483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.011322][T16483] Call Trace: [ 590.011326][T16483] [ 590.011330][T16483] dump_stack_lvl+0x16c/0x1f0 [ 590.011347][T16483] should_fail_ex+0x50a/0x650 [ 590.011360][T16483] ? fs_reclaim_acquire+0xae/0x150 [ 590.011376][T16483] should_failslab+0xc2/0x120 [ 590.011389][T16483] __kmalloc_noprof+0xce/0x4f0 [ 590.011401][T16483] ? tomoyo_encode2+0x100/0x3e0 [ 590.011415][T16483] tomoyo_encode2+0x100/0x3e0 [ 590.011427][T16483] tomoyo_realpath_from_path+0x1a7/0x710 [ 590.011440][T16483] ? tomoyo_path_number_perm+0x235/0x5b0 [ 590.011451][T16483] tomoyo_path_number_perm+0x248/0x5b0 [ 590.011460][T16483] ? tomoyo_path_number_perm+0x235/0x5b0 [ 590.011471][T16483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 590.011491][T16483] ? __pfx_lock_release+0x10/0x10 [ 590.011503][T16483] ? trace_lock_acquire+0x14e/0x1f0 [ 590.011514][T16483] ? lock_acquire+0x2f/0xb0 [ 590.011524][T16483] ? __fget_files+0x40/0x3a0 [ 590.011536][T16483] ? __fget_files+0x206/0x3a0 [ 590.011547][T16483] security_file_ioctl_compat+0x9b/0x240 [ 590.011560][T16483] __do_compat_sys_ioctl+0x4e/0x2c0 [ 590.011575][T16483] __do_fast_syscall_32+0x73/0x120 [ 590.011585][T16483] do_fast_syscall_32+0x32/0x80 [ 590.011594][T16483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.011609][T16483] RIP: 0023:0xf73ae579 [ 590.011616][T16483] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 590.011626][T16483] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 590.011641][T16483] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008914 [ 590.011646][T16483] RDX: 0000000020002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.011652][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.011657][T16483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 590.011662][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.011673][T16483] [ 590.011680][T16483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.029753][T12321] usb 6-1: Using ep0 maxpacket: 32 [ 590.069393][T13693] ------------[ cut here ]------------ [ 590.071931][T12321] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 590.072625][T13693] Invalid VIF (ffff88806809e9d0) magic 0x0, 08:02:11:00:00:01, 1/0 [ 590.077177][T12321] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 590.078110][T13693] WARNING: CPU: 1 PID: 13693 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.081325][T12321] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 590.083141][T13693] Modules linked in: [ 590.083153][T13693] CPU: 1 UID: 0 PID: 13693 Comm: kworker/1:3 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 590.086120][T12321] usb 6-1: Product: syz [ 590.087009][T13693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.089960][T12321] usb 6-1: Manufacturer: syz [ 590.091130][T13693] Workqueue: mld mld_ifc_work [ 590.093213][T12321] usb 6-1: SerialNumber: syz [ 590.096021][T13693] [ 590.096027][T13693] RIP: 0010:mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.101311][T12321] usb 6-1: config 0 descriptor?? [ 590.101570][T13693] Code: c0 74 08 3c 03 0f 8e 5a 08 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 e0 e1 26 8c 49 8d 8c 24 5a 04 00 00 e8 89 cf 9a fa 90 <0f> 0b 90 90 e9 36 e6 ff ff e8 4a f5 d9 fa e8 b5 0c bf fa 31 ff 89 [ 590.106574][T16475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.109439][T13693] RSP: 0018:ffffc90006776f70 EFLAGS: 00010282 [ 590.115010][T12321] hub 6-1:0.0: bad descriptor, ignoring hub [ 590.115773][T13693] [ 590.115779][T13693] RAX: 0000000000000000 RBX: ffff888022b62680 RCX: ffffffff8179c889 [ 590.120326][T12321] hub 6-1:0.0: probe with driver hub failed with error -5 [ 590.121181][T13693] RDX: ffff888020080000 RSI: ffffffff8179c896 RDI: 0000000000000001 [ 590.146227][T13693] RBP: ffffc90006777088 R08: 0000000000000001 R09: 0000000000000000 [ 590.148524][T13693] R10: 0000000000000000 R11: 000000000000000c R12: ffff88806809e9d0 [ 590.150861][T13693] R13: 0000000000000000 R14: ffff88805039b0a0 R15: ffff888022b62640 [ 590.153145][T13693] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 590.155713][T13693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.157623][T13693] CR2: 00007fe8e7e04440 CR3: 000000005d218000 CR4: 0000000000352ef0 [ 590.160010][T13693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.162297][T13693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.164553][T13693] Call Trace: [ 590.165679][T13693] [ 590.166558][T13693] ? __warn+0xea/0x3c0 [ 590.167790][T13693] ? mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.169460][T13693] ? report_bug+0x3c0/0x580 [ 590.170809][T13693] ? handle_bug+0x54/0xa0 [ 590.172062][T13693] ? exc_invalid_op+0x17/0x50 [ 590.173440][T13693] ? asm_exc_invalid_op+0x1a/0x20 [ 590.174905][T13693] ? __warn_printk+0x199/0x350 [ 590.176297][T13693] ? __warn_printk+0x1a6/0x350 [ 590.177694][T13693] ? mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.179312][T13693] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 590.181085][T13693] ? __ieee80211_schedule_txq+0x167/0xc30 [ 590.182716][T13693] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 590.184598][T13693] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 590.186351][T13693] ? __local_bh_enable_ip+0xa4/0x120 [ 590.187897][T13693] ieee80211_queue_skb+0x12b5/0x2010 [ 590.189533][T13693] ieee80211_tx+0x2e6/0x420 [ 590.190870][T13693] ? __pfx_ieee80211_tx+0x10/0x10 [ 590.192326][T13693] ? rcu_is_watching+0x12/0xc0 [ 590.193721][T13693] ? ieee80211_skb_resize+0x22a/0x630 [ 590.195253][T13693] ? ieee80211_set_qos_hdr+0x357/0x3e0 [ 590.196828][T13693] ieee80211_xmit+0x30e/0x3e0 [ 590.198205][T13693] __ieee80211_subif_start_xmit+0xa62/0x1410 [ 590.199992][T13693] ? dst_release+0x1f8/0x270 [ 590.201365][T13693] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 590.203241][T13693] ? hlock_class+0x4e/0x130 [ 590.204571][T13693] ? __lock_acquire+0x15a9/0x3c40 [ 590.206038][T13693] ieee80211_subif_start_xmit+0x118/0x16c0 [ 590.207712][T13693] ? __pfx_mark_lock+0x10/0x10 [ 590.209192][T13693] ? __pfx___lock_acquire+0x10/0x10 [ 590.210707][T13693] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 590.212491][T13693] ? lock_acquire.part.0+0x11b/0x380 [ 590.214025][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.215646][T13693] ? rcu_is_watching+0x12/0xc0 [ 590.217052][T13693] ? dev_hard_start_xmit+0x9a/0x7b0 [ 590.218574][T13693] dev_hard_start_xmit+0x9a/0x7b0 [ 590.220092][T13693] __dev_queue_xmit+0x7f0/0x43e0 [ 590.221562][T13693] ? hlock_class+0x4e/0x130 [ 590.222894][T13693] ? __lock_acquire+0x15a9/0x3c40 [ 590.224353][T13693] ? __pfx___dev_queue_xmit+0x10/0x10 [ 590.225914][T13693] ? hlock_class+0x4e/0x130 [ 590.227240][T13693] ? mark_lock+0xb5/0xc60 [ 590.228472][T13693] ? __pfx___lock_acquire+0x10/0x10 [ 590.230010][T13693] ? __pfx_mark_lock+0x10/0x10 [ 590.231409][T13693] ? find_held_lock+0x2d/0x110 [ 590.232805][T13693] ? ip6_finish_output2+0xb20/0x2090 [ 590.234328][T13693] ? __pfx_lock_release+0x10/0x10 [ 590.235796][T13693] ? skb_push+0x9a/0xf0 [ 590.237014][T13693] ? eth_header+0x16a/0x1f0 [ 590.238337][T13693] neigh_resolve_output+0x53a/0x940 [ 590.239876][T13693] ip6_finish_output2+0xb20/0x2090 [ 590.241383][T13693] ip6_finish_output+0x3f9/0x1360 [ 590.242841][T13693] ip6_output+0x1f8/0x540 [ 590.244102][T13693] mld_sendpack+0x9f0/0x11d0 [ 590.245464][T13693] ? __pfx_mld_sendpack+0x10/0x10 [ 590.246930][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.248552][T13693] mld_ifc_work+0x740/0xca0 [ 590.249937][T13693] ? lock_acquire+0x2f/0xb0 [ 590.251276][T13693] process_one_work+0x958/0x1b30 [ 590.252716][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.254331][T13693] ? __pfx_process_one_work+0x10/0x10 [ 590.255893][T13693] ? assign_work+0x1a0/0x250 [ 590.257240][T13693] worker_thread+0x6c8/0xf00 [ 590.258604][T13693] ? __kthread_parkme+0x148/0x220 [ 590.260114][T13693] ? __pfx_worker_thread+0x10/0x10 [ 590.261612][T13693] kthread+0x3af/0x750 [ 590.262818][T13693] ? __pfx_kthread+0x10/0x10 [ 590.264163][T13693] ? lock_acquire+0x2f/0xb0 [ 590.265499][T13693] ? __pfx_kthread+0x10/0x10 [ 590.266852][T13693] ret_from_fork+0x45/0x80 [ 590.268167][T13693] ? __pfx_kthread+0x10/0x10 [ 590.269587][T13693] ret_from_fork_asm+0x1a/0x30 [ 590.271017][T13693] [ 590.271970][T13693] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 590.274045][T13693] CPU: 1 UID: 0 PID: 13693 Comm: kworker/1:3 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 590.277127][T13693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.280204][T13693] Workqueue: mld mld_ifc_work [ 590.281552][T13693] Call Trace: [ 590.282510][T13693] [ 590.283371][T13693] dump_stack_lvl+0x3d/0x1f0 [ 590.284734][T13693] panic+0x71d/0x800 [ 590.285877][T13693] ? __pfx_panic+0x10/0x10 [ 590.287158][T13693] ? show_trace_log_lvl+0x29d/0x3d0 [ 590.288674][T13693] ? check_panic_on_warn+0x1f/0xb0 [ 590.290164][T13693] ? mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.291685][T13693] check_panic_on_warn+0xab/0xb0 [ 590.293121][T13693] __warn+0xf6/0x3c0 [ 590.294260][T13693] ? mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.295806][T13693] report_bug+0x3c0/0x580 [ 590.297074][T13693] handle_bug+0x54/0xa0 [ 590.298285][T13693] exc_invalid_op+0x17/0x50 [ 590.299623][T13693] asm_exc_invalid_op+0x1a/0x20 [ 590.301048][T13693] RIP: 0010:mac80211_hwsim_tx+0x1c48/0x24d0 [ 590.302731][T13693] Code: c0 74 08 3c 03 0f 8e 5a 08 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 e0 e1 26 8c 49 8d 8c 24 5a 04 00 00 e8 89 cf 9a fa 90 <0f> 0b 90 90 e9 36 e6 ff ff e8 4a f5 d9 fa e8 b5 0c bf fa 31 ff 89 [ 590.308143][T13693] RSP: 0018:ffffc90006776f70 EFLAGS: 00010282 [ 590.309890][T13693] RAX: 0000000000000000 RBX: ffff888022b62680 RCX: ffffffff8179c889 [ 590.312148][T13693] RDX: ffff888020080000 RSI: ffffffff8179c896 RDI: 0000000000000001 [ 590.314435][T13693] RBP: ffffc90006777088 R08: 0000000000000001 R09: 0000000000000000 [ 590.316688][T13693] R10: 0000000000000000 R11: 000000000000000c R12: ffff88806809e9d0 [ 590.318954][T13693] R13: 0000000000000000 R14: ffff88805039b0a0 R15: ffff888022b62640 [ 590.321225][T13693] ? __warn_printk+0x199/0x350 [ 590.322613][T13693] ? __warn_printk+0x1a6/0x350 [ 590.324005][T13693] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 590.325770][T13693] ? __ieee80211_schedule_txq+0x167/0xc30 [ 590.327397][T13693] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 590.329347][T13693] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 590.331102][T13693] ? __local_bh_enable_ip+0xa4/0x120 [ 590.332633][T13693] ieee80211_queue_skb+0x12b5/0x2010 [ 590.334182][T13693] ieee80211_tx+0x2e6/0x420 [ 590.335524][T13693] ? __pfx_ieee80211_tx+0x10/0x10 [ 590.336983][T13693] ? rcu_is_watching+0x12/0xc0 [ 590.338363][T13693] ? ieee80211_skb_resize+0x22a/0x630 [ 590.339905][T13693] ? ieee80211_set_qos_hdr+0x357/0x3e0 [ 590.341500][T13693] ieee80211_xmit+0x30e/0x3e0 [ 590.342857][T13693] __ieee80211_subif_start_xmit+0xa62/0x1410 [ 590.344582][T13693] ? dst_release+0x1f8/0x270 [ 590.345929][T13693] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 590.347751][T13693] ? hlock_class+0x4e/0x130 [ 590.349082][T13693] ? __lock_acquire+0x15a9/0x3c40 [ 590.350543][T13693] ieee80211_subif_start_xmit+0x118/0x16c0 [ 590.352202][T13693] ? __pfx_mark_lock+0x10/0x10 [ 590.353581][T13693] ? __pfx___lock_acquire+0x10/0x10 [ 590.355073][T13693] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 590.356866][T13693] ? lock_acquire.part.0+0x11b/0x380 [ 590.358414][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.360018][T13693] ? rcu_is_watching+0x12/0xc0 [ 590.361438][T13693] ? dev_hard_start_xmit+0x9a/0x7b0 [ 590.362935][T13693] dev_hard_start_xmit+0x9a/0x7b0 [ 590.364390][T13693] __dev_queue_xmit+0x7f0/0x43e0 [ 590.365834][T13693] ? hlock_class+0x4e/0x130 [ 590.367150][T13693] ? __lock_acquire+0x15a9/0x3c40 [ 590.368609][T13693] ? __pfx___dev_queue_xmit+0x10/0x10 [ 590.370203][T13693] ? hlock_class+0x4e/0x130 [ 590.371540][T13693] ? mark_lock+0xb5/0xc60 [ 590.372789][T13693] ? __pfx___lock_acquire+0x10/0x10 [ 590.374306][T13693] ? __pfx_mark_lock+0x10/0x10 [ 590.375708][T13693] ? find_held_lock+0x2d/0x110 [ 590.377110][T13693] ? ip6_finish_output2+0xb20/0x2090 [ 590.378622][T13693] ? __pfx_lock_release+0x10/0x10 [ 590.380068][T13693] ? skb_push+0x9a/0xf0 [ 590.381290][T13693] ? eth_header+0x16a/0x1f0 [ 590.382599][T13693] neigh_resolve_output+0x53a/0x940 [ 590.384092][T13693] ip6_finish_output2+0xb20/0x2090 [ 590.385566][T13693] ip6_finish_output+0x3f9/0x1360 [ 590.387018][T13693] ip6_output+0x1f8/0x540 [ 590.388278][T13693] mld_sendpack+0x9f0/0x11d0 [ 590.389616][T13693] ? __pfx_mld_sendpack+0x10/0x10 [ 590.391089][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.392704][T13693] mld_ifc_work+0x740/0xca0 [ 590.394036][T13693] ? lock_acquire+0x2f/0xb0 [ 590.395349][T13693] process_one_work+0x958/0x1b30 [ 590.396822][T13693] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.398475][T13693] ? __pfx_process_one_work+0x10/0x10 [ 590.400046][T13693] ? assign_work+0x1a0/0x250 [ 590.401403][T13693] worker_thread+0x6c8/0xf00 [ 590.402752][T13693] ? __kthread_parkme+0x148/0x220 [ 590.404235][T13693] ? __pfx_worker_thread+0x10/0x10 [ 590.405725][T13693] kthread+0x3af/0x750 [ 590.406903][T13693] ? __pfx_kthread+0x10/0x10 [ 590.408257][T13693] ? lock_acquire+0x2f/0xb0 [ 590.409612][T13693] ? __pfx_kthread+0x10/0x10 [ 590.410963][T13693] ret_from_fork+0x45/0x80 [ 590.412255][T13693] ? __pfx_kthread+0x10/0x10 [ 590.413615][T13693] ret_from_fork_asm+0x1a/0x30 [ 590.415037][T13693] [ 590.416564][T13693] Kernel Offset: disabled [ 590.417930][T13693] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:15:22 Registers: info registers vcpu 0 CPU#0 RAX=00000000019c957b RBX=0000000000000000 RCX=ffffffff8b468e39 RDX=0000000000000000 RSI=ffffffff8b6ce5c0 RDI=ffffffff8bd2d220 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff905fd810 R15=0000000000000000 RIP=ffffffff8b46a21f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057c604c0 CR3=0000000021dae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85386df5 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc90006776880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000d R12=0000000000000000 R13=000000000000006c R14=ffffffff9aad2de0 R15=0000000000000000 RIP=ffffffff85386e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe8e7e04440 CR3=000000005d218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000006a9881 RBX=0000000000000002 RCX=ffffffff8b468e39 RDX=0000000000000000 RSI=ffffffff8b6ce5c0 RDI=ffffffff8bd2d220 RBP=ffffed100376f000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056c6f85 R10=ffff88802b637c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801bb78000 R14=ffffffff905fd810 R15=0000000000000000 RIP=ffffffff8b46a21f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c384cf6000 CR3=000000004c4d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=da3239640727d03a cf2b8da781f8c531 da3239640727d03a cf2b8da781f8c531 da3239640727d03a cf2b8da781f8c531 da3239640727d03a cf2b8da781f8c531 ZMM18=87135610882bd631 486e410569fe7a48 87135610882bd631 486e410569fe7a48 87135610882bd631 486e410569fe7a48 87135610882bd631 486e410569fe7a48 ZMM19=8020000000000000 0000000000000005 8020000000000000 0000000000000004 8020000000000000 0000000000000003 8020000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 7c00f4247c00f424 ZMM22=df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 df4ff343df4ff343 ZMM23=2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b 2b2e537b2b2e537b ZMM24=885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d 885cc68d885cc68d ZMM25=fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e fe10e96efe10e96e ZMM26=aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f aa47d99faa47d99f ZMM27=4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 4b7c55844b7c5584 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f1130000f1130000 f1130000f1130000 f1130000f1130000 f1130000f1130000 f1130000f1130000 f1130000f1130000 f1130000f1130000 f1130000f1130000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85386df5 RDI=ffffffff9aad2e20 RBP=ffffffff9aad2de0 RSP=ffffc90006da7730 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9aad2de0 R15=0000000000000000 RIP=ffffffff85386e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020e62000 CR3=000000005fbdc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000