last executing test programs: 22.89741147s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x95ed169df1c71296, 0x21, {0x21, 0xb, "9dd5cbff17f5fb6ec579cb020fb642cb103ab4c5da881909ce731d56c319ff"}}, 0x0}, 0x0) 20.070655336s ago: executing program 0 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40010102, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000001680)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 16.624070339s ago: executing program 0 (id=4): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9, 0x2}, {0x5, 0x1, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x40040) 16.118245069s ago: executing program 0 (id=5): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) pwrite64(r3, 0x0, 0x0, 0x1000000000004) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000180)='5\x00', 0x2) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000000), 0x4) 3.454129206s ago: executing program 1 (id=10): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 1.818506851s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000017c0)={0x84, &(0x7f00000012c0)={0x40, 0xa, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x16, 0x5, "e01dc6b72a"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.4314519s ago: executing program 1 (id=12): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x40, 0x16, 0x14, "7b3ba494811666d0cee38f5412dcaa7e7e6220c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.002374263s ago: executing program 1 (id=13): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000001680)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 601.487294ms ago: executing program 1 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=15): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r5, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000040)={r6}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60887' (ED25519) to the list of known hosts. syzkaller login: [ 126.475463][ T3314] cgroup: Unknown subsys name 'net' [ 126.776139][ T3314] cgroup: Unknown subsys name 'cpuset' [ 126.822047][ T3314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 127.517864][ T3314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 141.432172][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.471893][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.903687][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.932600][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.511480][ T3319] hsr_slave_0: entered promiscuous mode [ 143.524324][ T3319] hsr_slave_1: entered promiscuous mode [ 144.004379][ T3320] hsr_slave_0: entered promiscuous mode [ 144.014958][ T3320] hsr_slave_1: entered promiscuous mode [ 144.023386][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 144.026810][ T3320] Cannot create hsr debugfs directory [ 145.355334][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.418177][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.468146][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.529494][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.821933][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.856296][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.908293][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.952117][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.140158][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.751975][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.075161][ T3319] veth0_vlan: entered promiscuous mode [ 153.148363][ T3319] veth1_vlan: entered promiscuous mode [ 153.355089][ T3319] veth0_macvtap: entered promiscuous mode [ 153.406780][ T3319] veth1_macvtap: entered promiscuous mode [ 153.756168][ T1872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.757490][ T1872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.757900][ T1872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.758276][ T1872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.274533][ T3320] veth0_vlan: entered promiscuous mode [ 154.347844][ T3320] veth1_vlan: entered promiscuous mode [ 154.465780][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 154.661925][ T3320] veth0_macvtap: entered promiscuous mode [ 154.818052][ T3320] veth1_macvtap: entered promiscuous mode [ 155.332621][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.333305][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.333615][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.333959][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.110695][ T3422] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.320486][ T3422] usb 1-1: Using ep0 maxpacket: 32 [ 156.431398][ T3422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.432143][ T3422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.437001][ T3422] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 156.437346][ T3422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.477344][ T3422] usb 1-1: config 0 descriptor?? [ 157.035246][ T3422] hid-generic 0003:1E7D:2D51.0001: unknown main item tag 0x2 [ 157.036191][ T3422] hid-generic 0003:1E7D:2D51.0001: item fetching failed at offset 4/5 [ 157.038521][ T3422] hid-generic 0003:1E7D:2D51.0001: probe with driver hid-generic failed with error -22 [ 157.237441][ T3422] usb 1-1: USB disconnect, device number 2 [ 158.112808][ T3422] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.310523][ T3422] usb 1-1: Using ep0 maxpacket: 32 [ 158.327379][ T3422] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.332152][ T3422] usb 1-1: config 0 has no interface number 0 [ 158.334104][ T3422] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.338173][ T3422] usb 1-1: config 0 interface 85 has no altsetting 0 [ 158.358030][ T3422] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.364570][ T3422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.367722][ T3422] usb 1-1: Product: syz [ 158.370638][ T3422] usb 1-1: Manufacturer: syz [ 158.372838][ T3422] usb 1-1: SerialNumber: syz [ 158.410454][ T3422] usb 1-1: config 0 descriptor?? [ 160.776497][ T3422] usb 1-1: USB disconnect, device number 3 [ 164.039851][ T3483] binder: 3480 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 164.040422][ T3483] binder: 3480:3483 ioctl c018620c 20000100 returned -22 [ 172.979801][ T3491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.981618][ T3491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.455278][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.470974][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.909819][ T3497] random: crng reseeded on system resumption [ 175.583498][ C0] vcan0: j1939_tp_rxtimer: 0x000000003e4285cd: rx timeout, send abort [ 175.591184][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003e4285cd: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 176.052310][ T3501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.064504][ T3501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.419849][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.425173][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.825402][ T3505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.838626][ T3505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.878815][ T3508] ------------[ cut here ]------------ [ 177.882108][ T3508] WARNING: CPU: 1 PID: 3508 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0xc/0x14 [ 177.890138][ T3508] Modules linked in: [ 177.892961][ T3508] CPU: 1 UID: 0 PID: 3508 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT [ 177.895856][ T3508] Hardware name: linux,dummy-virt (DT) [ 177.897778][ T3508] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 177.899640][ T3508] pc : drm_prime_destroy_file_private+0xc/0x14 [ 177.902085][ T3508] lr : drm_file_free+0x1d8/0x284 [ 177.904073][ T3508] sp : ffff80008931bd20 [ 177.905662][ T3508] x29: ffff80008931bd20 x28: f0f00000091f3840 x27: fdf000000afdaac0 [ 177.909101][ T3508] x26: 0000000000000000 x25: fdf000000afdab08 x24: 0000000000000000 [ 177.912380][ T3508] x23: f5f0000004cfc150 x22: f5f0000004cfc000 x21: fdf000000afdaa00 [ 177.915618][ T3508] x20: fdf000000afdaae0 x19: fdf000000afdaae0 x18: 0000000000000000 [ 177.918986][ T3508] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000040 [ 177.921775][ T3508] x14: f2f0000008891eb0 x13: 0000000000000228 x12: 0000000000000000 [ 177.924284][ T3508] x11: f7f000000b05b2a8 x10: 0000000000000000 x9 : f9f0000003001300 [ 177.926867][ T3508] x8 : ffff80008931bc60 x7 : dead000000000100 x6 : 0000000000000011 [ 177.929066][ T3508] x5 : ffff800080982c7c x4 : ffffc1ffc0222460 x3 : 0000000080150011 [ 177.930431][ T3508] x2 : 0000000000000000 x1 : f0f00000091f3840 x0 : f3f0000008845b10 [ 177.931938][ T3508] Call trace: [ 177.932683][ T3508] drm_prime_destroy_file_private+0xc/0x14 (P) [ 177.933753][ T3508] drm_close_helper.isra.0+0x68/0x78 [ 177.934622][ T3508] drm_release+0x64/0x128 [ 177.935335][ T3508] __fput+0xcc/0x2dc [ 177.936128][ T3508] ____fput+0x14/0x20 [ 177.937083][ T3508] task_work_run+0x78/0xd4 [ 177.938382][ T3508] exit_to_user_mode_loop+0x15c/0x180 [ 177.939709][ T3508] el0_svc+0x108/0x10c [ 177.940260][ T3508] el0t_64_sync_handler+0xa0/0xe4 [ 177.940849][ T3508] el0t_64_sync+0x1a4/0x1a8 [ 177.941816][ T3508] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.975181][ T1881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.078433][ T1881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.206796][ T1881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.317867][ T1881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.004432][ T1881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.066832][ T1881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.133105][ T1881] bond0 (unregistering): Released all slaves [ 181.391956][ T1881] hsr_slave_0: left promiscuous mode [ 181.420664][ T1881] hsr_slave_1: left promiscuous mode [ 181.483964][ T1881] veth1_macvtap: left promiscuous mode [ 181.486765][ T1881] veth0_macvtap: left promiscuous mode [ 181.495013][ T1881] veth1_vlan: left promiscuous mode [ 181.498071][ T1881] veth0_vlan: left promiscuous mode [ 184.476064][ T1193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.592601][ T1193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.698284][ T1193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.805809][ T1193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.052296][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.107491][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.145795][ T1193] bond0 (unregistering): Released all slaves [ 186.291986][ T1193] hsr_slave_0: left promiscuous mode [ 186.298309][ T1193] hsr_slave_1: left promiscuous mode [ 186.346263][ T1193] veth1_macvtap: left promiscuous mode [ 186.346678][ T1193] veth0_macvtap: left promiscuous mode [ 186.351827][ T1193] veth1_vlan: left promiscuous mode [ 186.352583][ T1193] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 05:09:04 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b6222c X00=ffff800081b62228 X01=f9f0000005e75dc0 X02=fff07ffffcf73000 X03=0000000000000000 X04=ffff8000829ae340 X05=0000000000000001 X06=0000001bfc67ac14 X07=fff000007f8d6a40 X08=fff000007f8d6ac0 X09=0000000000000800 X10=000000000000000d X11=0000000000000001 X12=0000000000000001 X13=0000000000000001 X14=000000000000000d X15=ffff800081bb4330 X16=ffff800082d68000 X17=fff07ffffcf73000 X18=0000000000000000 X19=0000000000000000 X20=ffff800082a92088 X21=ffff800082a92080 X22=f9f0000005e75dc0 X23=0000000000000004 X24=ffff800082a92088 X25=0000000000000028 X26=f9f0000005e75dc0 X27=0000000000000000 X28=f9f0000005e75dc0 X29=ffff800088e1b580 X30=ffff800080182cd0 SP=ffff800088e1b580 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000003170:6f6f6c2f7665642f Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffffff0000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff0000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff00ff0000ff:0000ff0000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff0f00f00f00000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000c0000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaac5eddc90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaac5edaf70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe33918b0:0000ffffe33918b0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe3391880 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008091bd80 X00=0000000000000002 X01=0000000000000018 X02=ffff800082d95018 X03=ffff800082b2e648 X04=fbf00000032dc880 X05=0000000000000020 X06=2a5e5a474f4f585a X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082b2e678 X10=0000000000000001 X11=ffff80008931b720 X12=ffff800082a5fa00 X13=ffff80008931b4ed X14=ffff80008931b4f8 X15=ffff80008931b360 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=f5f00000032c9002 X20=ffff80008091bf24 X21=fbf00000032dc880 X22=f5f00000032c9060 X23=0000000000000000 X24=0000000000000000 X25=ffff8000829811e8 X26=00000000000003c0 X27=ffff80008268a860 X28=ffff800082c50510 X29=ffff80008931b610 X30=ffff80008091bf4c SP=ffff80008931b610 PSTATE=824023c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe5f18870:0000ffffe5f18870 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffe5f18840 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000