last executing test programs: 3.935385578s ago: executing program 1 (id=1934): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000780)={{@any, 0x1}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.870728622s ago: executing program 1 (id=1935): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 3.686439081s ago: executing program 1 (id=1940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000005500e50029bd7000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101000000000000000000000000000000000186dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.656400855s ago: executing program 2 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='#^\'[%\\$\x00', 0x141180, &(0x7f0000000240)={@align=0x8, {0x1, 0xffff, 0x8, 0x9}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) sendto$inet6(r1, &(0x7f0000000340)="59682e5c75c64e652e67b81c73b7abd7a760a1755eb56aa45e1f0ccdf6345c16cd33ead99bbf78de8a17a5a85b6c6089cb4fadfb85f326fccbe3b88f08e739ac83", 0x41, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x142f82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x60, 0x6, "de34a5273e48eef97e0255366bfc9bbf954b7cb6147cfe51ce4fd4899e756489134e48bdd1ec696b8b81dfba51c48cdea1f7c9b49756dec504dccb06b2877dbc787f840699b42bded354a123879f475f3c23e5bfaffee4cd65cb28fb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20002001}, 0xc0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000004c0)={@empty}, 0x14) write(r3, &(0x7f0000000200)='2\x00\x00\x00\a\x00\a\x00\x00\x00\x00\x00\x00', 0xd) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2400, 0x5c, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 3.499859315s ago: executing program 1 (id=1942): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) 3.468291984s ago: executing program 2 (id=1944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.834260106s ago: executing program 1 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x202, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 2.770121169s ago: executing program 3 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='#^\'[%\\$\x00', 0x141180, &(0x7f0000000240)={@align=0x8, {0x1, 0xffff, 0x8, 0x9}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) sendto$inet6(r1, &(0x7f0000000340)="59682e5c75c64e652e67b81c73b7abd7a760a1755eb56aa45e1f0ccdf6345c16cd33ead99bbf78de8a17a5a85b6c6089cb4fadfb85f326fccbe3b88f08e739ac83", 0x41, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x142f82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x60, 0x6, "de34a5273e48eef97e0255366bfc9bbf954b7cb6147cfe51ce4fd4899e756489134e48bdd1ec696b8b81dfba51c48cdea1f7c9b49756dec504dccb06b2877dbc787f840699b42bded354a123879f475f3c23e5bfaffee4cd65cb28fb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20002001}, 0xc0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000004c0)={@empty}, 0x14) write(r3, &(0x7f0000000200)='2\x00\x00\x00\a\x00\a\x00\x00\x00\x00\x00\x00', 0xd) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2400, 0x5c, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 2.769922676s ago: executing program 1 (id=1953): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xe35, 0x40040) ioctl$EVIOCGABS20(r5, 0x80184560, 0x0) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getpeername$l2tp6(r6, 0x0, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 2.605996136s ago: executing program 3 (id=1954): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='#^\'[%\\$\x00', 0x141180, &(0x7f0000000240)={@align=0x8, {0x1, 0xffff, 0x8, 0x9}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) sendto$inet6(r1, &(0x7f0000000340)="59682e5c75c64e652e67b81c73b7abd7a760a1755eb56aa45e1f0ccdf6345c16cd33ead99bbf78de8a17a5a85b6c6089cb4fadfb85f326fccbe3b88f08e739ac837eec0bcc202076c7b53aca692af4454d40e8173f1b361a3cd007a1644f665dc0164a5d5ebff28af4e20c976897045179a63857929add8110", 0x79, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x142f82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x60, 0x6, "de34a5273e48eef97e0255366bfc9bbf954b7cb6147cfe51ce4fd4899e756489134e48bdd1ec696b8b81dfba51c48cdea1f7c9b49756dec504dccb06b2877dbc787f840699b42bded354a123879f475f3c23e5bfaffee4cd65cb28fb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20002001}, 0xc0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000004c0)={@empty, r9}, 0x14) write(r3, &(0x7f0000000200)='2\x00\x00\x00\a\x00\a\x00\x00\x00\x00\x00\x00', 0xd) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2400, 0x5c, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 2.564407603s ago: executing program 3 (id=1955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x30, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") 2.020640245s ago: executing program 3 (id=1956): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCATTACH(r1, 0x4004743d, 0x0) 1.968419192s ago: executing program 3 (id=1957): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1.939651028s ago: executing program 3 (id=1958): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xe35, 0x40040) ioctl$EVIOCGABS20(r5, 0x80184560, 0x0) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getpeername$l2tp6(r6, 0x0, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 972.729239ms ago: executing program 2 (id=1960): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) 881.228284ms ago: executing program 2 (id=1961): setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff}) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xefffffea]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 863.906586ms ago: executing program 0 (id=1962): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) 777.356003ms ago: executing program 0 (id=1963): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='#^\'[%\\$\x00', 0x141180, &(0x7f0000000240)={@align=0x8, {0x1, 0xffff, 0x8, 0x9}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) sendto$inet6(r1, &(0x7f0000000340)="59682e5c75c64e652e67b81c73b7abd7a760a1755eb56aa45e1f0ccdf6345c16cd33ead99bbf78de8a17a5a85b6c6089cb4fadfb85f326fccbe3b88f08e739ac837eec0bcc202076c7b53aca692af4454d40e8173f1b361a3cd007a1644f665dc0164a5d5ebff28af4e20c976897045179a63857929add8110fb2287fe", 0x7d, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x120008c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x142f82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x60, 0x6, "de34a5273e48eef97e0255366bfc9bbf954b7cb6147cfe51ce4fd4899e756489134e48bdd1ec696b8b81dfba51c48cdea1f7c9b49756dec504dccb06b2877dbc787f840699b42bded354a123879f475f3c23e5bfaffee4cd65cb28fb"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20002001}, 0xc0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f00000004c0)={@empty, r9}, 0x14) write(r3, &(0x7f0000000200)='2\x00\x00\x00\a\x00\a\x00\x00\x00\x00\x00\x00', 0xd) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2400, 0x5c, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 561.246944ms ago: executing program 0 (id=1964): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xd961, 0x10000, 0x0, 0x4b}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = dup(r0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x6, 0x3, 0x100, 0x515f3157, 0xe, "78e1141009f593233bce41f20613341f43d01f"}) 436.823071ms ago: executing program 0 (id=1965): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) close(0x4) 429.026106ms ago: executing program 0 (id=1966): r0 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x1, 0x2, 0x1d}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 337.32817ms ago: executing program 0 (id=1967): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618b, &(0x7f0000000000)) 277.635µs ago: executing program 2 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x9, 0x5, 0x2, 0xa, 0x0, 0x1, 0x10000}, 0x50) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 0s ago: executing program 2 (id=1969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [T11578] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 443.075422][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 443.139112][T11580] ip6gretap0: entered promiscuous mode [ 443.176530][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.249580][T11584] tipc: Enabling of bearer rejected, already enabled [ 443.287537][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.326972][ T76] usb 7-1: USB disconnect, device number 34 [ 443.332976][ T76] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 443.345425][ T76] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 443.350344][ T76] keyspan 7-1:1.0: device disconnected [ 443.408910][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.436227][T11591] ovs-dp0: entered promiscuous mode [ 443.519160][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.540375][T11600] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 443.544598][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 444.408164][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.516506][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.626309][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.718267][ T76] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 444.737617][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.856421][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.876758][ T76] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 444.877535][ T76] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.877558][ T76] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.919563][ T76] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 444.919660][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 444.919687][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 444.920379][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 444.920412][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 444.921388][ T76] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 444.922321][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 444.922361][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 444.949228][ T76] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 445.046785][T11613] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 445.156809][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 445.808431][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 446.018526][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1321'. [ 446.410098][T11680] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 446.414457][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 446.480666][ T5750] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 446.555386][T11684] FAULT_INJECTION: forcing a failure. [ 446.555386][T11684] name failslab, interval 1, probability 0, space 0, times 0 [ 446.555416][T11684] CPU: 2 UID: 0 PID: 11684 Comm: syz.0.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.555437][T11684] Tainted: [L]=SOFTLOCKUP [ 446.555442][T11684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.555452][T11684] Call Trace: [ 446.555457][T11684] [ 446.555463][T11684] dump_stack_lvl+0x100/0x190 [ 446.555487][T11684] should_fail_ex.cold+0x5/0xa [ 446.555508][T11684] should_failslab+0xc2/0x120 [ 446.555533][T11684] kmem_cache_alloc_noprof+0x92/0x6a0 [ 446.555552][T11684] ? d_instantiate+0x8a/0xb0 [ 446.555573][T11684] ? alloc_empty_file+0x5b/0x1c0 [ 446.555598][T11684] alloc_empty_file+0x5b/0x1c0 [ 446.555620][T11684] alloc_file_pseudo+0x183/0x290 [ 446.555643][T11684] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 446.555666][T11684] ? alloc_fd+0x471/0x7a0 [ 446.555688][T11684] sock_alloc_file+0x50/0x210 [ 446.555705][T11684] __sys_socket+0x1c0/0x260 [ 446.555724][T11684] ? xfd_validate_state+0x129/0x190 [ 446.555749][T11684] ? __pfx___sys_socket+0x10/0x10 [ 446.555775][T11684] __ia32_sys_socket+0x72/0xb0 [ 446.555793][T11684] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.555811][T11684] __do_fast_syscall_32+0x13a/0x8b0 [ 446.555831][T11684] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.555850][T11684] do_fast_syscall_32+0x32/0x70 [ 446.555878][T11684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.555898][T11684] RIP: 0023:0xf707efec [ 446.555919][T11684] Code: Unable to access opcode bytes at 0xf707efc2. [ 446.555926][T11684] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 446.555942][T11684] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 446.555954][T11684] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 446.555963][T11684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.555973][T11684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 446.555982][T11684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.556001][T11684] [ 446.679461][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.679755][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.507716][ T855] usb 7-1: USB disconnect, device number 35 [ 447.516117][ T855] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 447.526381][ T855] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 447.528384][ T855] keyspan 7-1:1.0: device disconnected [ 447.853429][T11700] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 447.854040][T11702] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 447.854616][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 447.856249][T11702] vxcan0: left allmulticast mode [ 447.960130][T11702] vxcan0: entered allmulticast mode [ 447.968198][T11702] team0: Port device vxcan0 added [ 448.048430][T11708] jffs2: notice: (11708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 448.086495][ T5851] net_ratelimit: 26 callbacks suppressed [ 448.086517][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.197506][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.238313][T11720] gtp1: entered allmulticast mode [ 448.238336][T11720] team0: Device gtp1 is of different type [ 448.306942][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.450638][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.567194][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.686405][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.806415][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.916372][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.959076][T11749] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 448.960132][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 449.036380][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 449.147274][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 449.400417][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400467][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400481][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400494][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400506][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400518][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.400531][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.401522][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.401579][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.401592][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 449.415242][ T1036] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 449.415242][ T1036] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 449.561294][T11772] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 449.562337][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 449.678181][T11767] fido_id[11767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.144945][T11799] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 450.147369][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 450.168299][ T25] wacom 0003:056A:003F.0004: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 450.314927][T11803] fido_id[11803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.522451][T11820] FAULT_INJECTION: forcing a failure. [ 450.522451][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 450.522476][T11820] CPU: 2 UID: 0 PID: 11820 Comm: syz.0.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.522491][T11820] Tainted: [L]=SOFTLOCKUP [ 450.522496][T11820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.522503][T11820] Call Trace: [ 450.522507][T11820] [ 450.522512][T11820] dump_stack_lvl+0x100/0x190 [ 450.522530][T11820] should_fail_ex.cold+0x5/0xa [ 450.522546][T11820] should_failslab+0xc2/0x120 [ 450.522564][T11820] kmem_cache_alloc_noprof+0x92/0x6a0 [ 450.522579][T11820] ? d_instantiate+0x8a/0xb0 [ 450.522596][T11820] ? alloc_empty_file+0x5b/0x1c0 [ 450.522615][T11820] alloc_empty_file+0x5b/0x1c0 [ 450.522632][T11820] alloc_file_pseudo+0x183/0x290 [ 450.522650][T11820] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 450.522668][T11820] ? alloc_fd+0x471/0x7a0 [ 450.522686][T11820] sock_alloc_file+0x50/0x210 [ 450.522699][T11820] __sys_socket+0x1c0/0x260 [ 450.522714][T11820] ? xfd_validate_state+0x129/0x190 [ 450.522739][T11820] ? __pfx___sys_socket+0x10/0x10 [ 450.522758][T11820] __ia32_sys_socket+0x72/0xb0 [ 450.522773][T11820] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.522792][T11820] __do_fast_syscall_32+0x13a/0x8b0 [ 450.522806][T11820] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.522821][T11820] do_fast_syscall_32+0x32/0x70 [ 450.522836][T11820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.522851][T11820] RIP: 0023:0xf707efec [ 450.522868][T11820] Code: Unable to access opcode bytes at 0xf707efc2. [ 450.522874][T11820] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 450.522887][T11820] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 450.522895][T11820] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 450.522902][T11820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.522909][T11820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 450.522916][T11820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.522930][T11820] [ 450.565466][T11823] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 450.569303][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 450.648299][ T1036] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 450.818140][ T1036] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 450.821046][ T1036] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.821073][ T1036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.824789][ T1036] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 450.824928][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 450.824958][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 450.830050][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 450.830143][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 450.833790][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 450.837664][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 450.837707][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 450.839753][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 450.867708][T11820] FAULT_INJECTION: forcing a failure. [ 450.867708][T11820] name fail_futex, interval 1, probability 0, space 0, times 0 [ 450.867732][T11820] CPU: 3 UID: 0 PID: 11820 Comm: syz.0.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.867747][T11820] Tainted: [L]=SOFTLOCKUP [ 450.867751][T11820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.867757][T11820] Call Trace: [ 450.867761][T11820] [ 450.867766][T11820] dump_stack_lvl+0x100/0x190 [ 450.867784][T11820] should_fail_ex.cold+0x5/0xa [ 450.867798][T11820] get_futex_key+0xf72/0x14f0 [ 450.867812][T11820] ? __pfx_get_futex_key+0x10/0x10 [ 450.867823][T11820] ? __mutex_unlock_slowpath+0x35d/0x930 [ 450.867841][T11820] futex_wake+0xf4/0x5e0 [ 450.867856][T11820] ? __pfx_futex_wake+0x10/0x10 [ 450.867873][T11820] ? detach_task_ctx_data+0x83/0x490 [ 450.867887][T11820] do_futex+0x2b2/0x440 [ 450.867900][T11820] ? __pfx_do_futex+0x10/0x10 [ 450.867911][T11820] ? __might_fault+0xc5/0x140 [ 450.867926][T11820] mm_exit_exec_release+0x256/0x2f0 [ 450.867938][T11820] do_exit+0x707/0x2a50 [ 450.867952][T11820] ? __pfx_do_exit+0x10/0x10 [ 450.867964][T11820] ? do_raw_spin_lock+0x128/0x260 [ 450.867976][T11820] ? find_held_lock+0x2b/0x80 [ 450.867989][T11820] ? get_signal+0x7e0/0x21e0 [ 450.868011][T11820] do_group_exit+0xd5/0x2a0 [ 450.868026][T11820] get_signal+0x1ec7/0x21e0 [ 450.868049][T11820] ? find_held_lock+0x2b/0x80 [ 450.868065][T11820] ? __pfx_get_signal+0x10/0x10 [ 450.868085][T11820] ? do_futex+0x190/0x440 [ 450.868101][T11820] arch_do_signal_or_restart+0x91/0x7a0 [ 450.868118][T11820] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 450.868137][T11820] ? xfd_validate_state+0x129/0x190 [ 450.868157][T11820] exit_to_user_mode_loop+0x139/0x700 [ 450.868168][T11820] ? rcu_is_watching+0x13/0xc0 [ 450.868182][T11820] __do_fast_syscall_32+0x59f/0x8b0 [ 450.868196][T11820] ? lockdep_hardirqs_on+0x7d/0x110 [ 450.868210][T11820] do_fast_syscall_32+0x32/0x70 [ 450.868225][T11820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.868240][T11820] RIP: 0023:0xf707efec [ 450.868253][T11820] Code: Unable to access opcode bytes at 0xf707efc2. [ 450.868258][T11820] RSP: 002b:00000000f546d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 450.868269][T11820] RAX: fffffffffffffe00 RBX: 00000000f7474f88 RCX: 0000000000000080 [ 450.868276][T11820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 450.868282][T11820] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 450.868288][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.868295][T11820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.868308][T11820] [ 451.085922][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 451.085935][ T43] audit: type=1400 audit(1791027648.699:464): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=11831 comm="syz.0.1391" name="foo" offset=55 [ 451.430048][T11852] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 451.434086][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 451.529370][T11856] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 451.533224][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 452.088939][T11880] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 452.091685][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 452.289531][T11882] ptrace attach of "/syz-executor exec"[5744] was attempted by ""[11882] [ 452.337112][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1413'. [ 452.481654][T11902] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 452.482808][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 452.514795][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 452.619130][T11908] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 452.620219][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 453.116895][ T5851] net_ratelimit: 35 callbacks suppressed [ 453.116910][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.239548][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.436904][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 453.443710][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.475824][ T76] usb 7-1: USB disconnect, device number 36 [ 453.481999][ T76] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 453.490170][ T76] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 453.490470][ T76] keyspan 7-1:1.0: device disconnected [ 453.547079][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.602902][T11930] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 453.603922][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 453.656803][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.836357][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.946408][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.056403][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.070597][ T43] audit: type=1400 audit(1791027651.689:465): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=11946 comm="syz.2.1436" name="foo" offset=55 [ 454.237997][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.346470][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.455617][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 454.496452][ T1036] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 454.657827][ T1036] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 454.658687][ T1036] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.658758][ T1036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.680450][ T1036] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 454.680626][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 454.680659][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 454.681543][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 454.681580][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 454.693351][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 454.700173][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 454.700210][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 454.710580][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 454.729756][T11962] FAULT_INJECTION: forcing a failure. [ 454.729756][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 454.729790][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.0.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.729814][T11962] Tainted: [L]=SOFTLOCKUP [ 454.729820][T11962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.729844][T11962] Call Trace: [ 454.729852][T11962] [ 454.729859][T11962] dump_stack_lvl+0x100/0x190 [ 454.729889][T11962] should_fail_ex.cold+0x5/0xa [ 454.729915][T11962] should_failslab+0xc2/0x120 [ 454.729942][T11962] __kmalloc_noprof+0xfc/0x840 [ 454.729964][T11962] ? sk_prot_alloc+0x10b/0x2a0 [ 454.729990][T11962] sk_prot_alloc+0x10b/0x2a0 [ 454.730015][T11962] sk_alloc+0x36/0xe80 [ 454.730042][T11962] __netlink_create+0x5e/0x2c0 [ 454.730062][T11962] ? __wake_up+0x3f/0x60 [ 454.730087][T11962] netlink_create+0x29b/0x610 [ 454.730109][T11962] ? __pfx_nfnetlink_bind+0x10/0x10 [ 454.730128][T11962] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 454.730150][T11962] __sock_create+0x339/0x860 [ 454.730177][T11962] __sys_socket+0x14d/0x260 [ 454.730198][T11962] ? xfd_validate_state+0x129/0x190 [ 454.730224][T11962] ? __pfx___sys_socket+0x10/0x10 [ 454.730254][T11962] __ia32_sys_socket+0x72/0xb0 [ 454.730286][T11962] ? lockdep_hardirqs_on+0x7d/0x110 [ 454.730309][T11962] __do_fast_syscall_32+0x13a/0x8b0 [ 454.730333][T11962] ? lockdep_hardirqs_on+0x7d/0x110 [ 454.730357][T11962] do_fast_syscall_32+0x32/0x70 [ 454.730380][T11962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.730402][T11962] RIP: 0023:0xf707efec [ 454.730421][T11962] Code: Unable to access opcode bytes at 0xf707efc2. [ 454.730429][T11962] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 454.730449][T11962] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 454.730460][T11962] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 454.730472][T11962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.730484][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.730496][T11962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.730518][T11962] [ 454.883521][T11964] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 455.055753][ T76] usb 7-1: USB disconnect, device number 37 [ 455.083376][ T76] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 455.092467][ T76] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 455.092928][ T76] keyspan 7-1:1.0: device disconnected [ 455.263342][T11971] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 455.649778][T11979] netlink: 'syz.3.1451': attribute type 14 has an invalid length. [ 455.853898][T11991] netlink: 'syz.2.1456': attribute type 8 has an invalid length. [ 455.854127][T11991] sch_fq: defrate 0 ignored. [ 456.231911][T12009] 9p: Bad value for 'rfdno' [ 456.259667][T11994] __nla_validate_parse: 2 callbacks suppressed [ 456.259748][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 456.276367][ T76] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 456.427116][ T76] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 456.428713][ T76] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.428763][ T76] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.435050][ T76] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 456.435257][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 456.435311][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 456.462589][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 456.462661][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 456.474513][ T76] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 456.476088][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 456.485945][ T76] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 456.494085][ T76] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 456.577415][T12013] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 456.581602][T12013] pci 0000:00:02.0: BAR 0 [mem 0xfffe0000-0xffffffff] [ 456.581702][T12013] pci 0000:00:02.0: BAR 1 [mem 0x03fe0000-0x03ffffff] [ 456.581757][T12013] pci 0000:00:02.0: BAR 2 [io 0xffff0000-0xffff001f] [ 456.581850][T12013] pci 0000:00:02.0: BAR 3 [mem 0xffffc000-0xffffffff] [ 456.582031][T12013] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 456.582390][T12013] pci 0000:00:02.0: enabling Extended Tags [ 456.624077][T12013] pci 0000:00:02.0: Adding to iommu group 2 [ 456.672784][T12013] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 456.684731][T12013] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 456.695353][T12013] pci 0000:00:1d.0: Adding to iommu group 7 [ 456.702642][T12013] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 456.702707][T12013] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 456.704458][T12013] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 456.705971][T12013] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 456.707057][T12013] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 456.707902][T12013] pci 0000:00:1d.0: BAR 4 [io 0x2040-0x205f]: assigned [ 456.772348][T12013] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 456.890372][ T855] usb 7-1: USB disconnect, device number 38 [ 456.903928][ T855] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 456.912566][ T855] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 456.913657][ T855] keyspan 7-1:1.0: device disconnected [ 457.060655][T12013] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 457.226986][T12013] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 457.227005][T12013] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 457.227249][T12013] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 457.308839][T12013] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 78855 usecs [ 457.357028][T12013] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 457.363528][T12013] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 457.363860][T12013] uhci_hcd 0000:00:1d.0: detected 2 ports [ 457.369009][T12013] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002040 [ 457.374880][T12013] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 457.377498][T12013] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 457.377553][T12013] usb usb1: Product: UHCI Host Controller [ 457.377563][T12013] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 457.377571][T12013] usb usb1: SerialNumber: 0000:00:1d.0 [ 457.402652][T12013] hub 1-0:1.0: USB hub found [ 457.404651][T12013] hub 1-0:1.0: 2 ports detected [ 457.911347][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 458.121769][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 458.123712][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1473'. [ 458.161009][ T9875] net_ratelimit: 28 callbacks suppressed [ 458.161027][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.276610][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.293371][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 458.386517][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.506545][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.562772][T12068] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 458.563693][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 458.587493][T12072] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 458.588534][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 458.626399][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.736342][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.846488][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 458.968699][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.086450][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.111366][T12096] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 459.118653][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 459.187301][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 460.020266][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 460.438441][T12122] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 460.439514][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 460.891791][T12127] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 460.893071][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 461.040883][T12133] FAULT_INJECTION: forcing a failure. [ 461.040883][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 461.040906][T12133] CPU: 3 UID: 0 PID: 12133 Comm: syz.0.1507 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.040922][T12133] Tainted: [L]=SOFTLOCKUP [ 461.040927][T12133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 461.040934][T12133] Call Trace: [ 461.040938][T12133] [ 461.040943][T12133] dump_stack_lvl+0x100/0x190 [ 461.040964][T12133] should_fail_ex.cold+0x5/0xa [ 461.040980][T12133] should_failslab+0xc2/0x120 [ 461.040999][T12133] kmem_cache_alloc_noprof+0x92/0x6a0 [ 461.041015][T12133] ? security_file_alloc+0x34/0x2c0 [ 461.041032][T12133] security_file_alloc+0x34/0x2c0 [ 461.041045][T12133] init_file+0x95/0x480 [ 461.041062][T12133] alloc_empty_file+0x79/0x1c0 [ 461.041081][T12133] alloc_file_pseudo+0x183/0x290 [ 461.041099][T12133] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 461.041117][T12133] ? alloc_fd+0x471/0x7a0 [ 461.041135][T12133] sock_alloc_file+0x50/0x210 [ 461.041148][T12133] __sys_socket+0x1c0/0x260 [ 461.041163][T12133] ? xfd_validate_state+0x129/0x190 [ 461.041181][T12133] ? __pfx___sys_socket+0x10/0x10 [ 461.041201][T12133] __ia32_sys_socket+0x72/0xb0 [ 461.041215][T12133] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.041257][T12133] __do_fast_syscall_32+0x13a/0x8b0 [ 461.041275][T12133] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.041293][T12133] do_fast_syscall_32+0x32/0x70 [ 461.041310][T12133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.041328][T12133] RIP: 0023:0xf707efec [ 461.041342][T12133] Code: Unable to access opcode bytes at 0xf707efc2. [ 461.041348][T12133] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 461.041365][T12133] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 461.041377][T12133] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 461.041388][T12133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.041398][T12133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 461.041410][T12133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.041428][T12133] [ 461.245123][T12136] FAULT_INJECTION: forcing a failure. [ 461.245123][T12136] name failslab, interval 1, probability 0, space 0, times 0 [ 461.245148][T12136] CPU: 0 UID: 0 PID: 12136 Comm: syz.2.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.245165][T12136] Tainted: [L]=SOFTLOCKUP [ 461.245169][T12136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 461.245176][T12136] Call Trace: [ 461.245181][T12136] [ 461.245186][T12136] dump_stack_lvl+0x100/0x190 [ 461.245205][T12136] should_fail_ex.cold+0x5/0xa [ 461.245232][T12136] should_failslab+0xc2/0x120 [ 461.245254][T12136] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 461.245269][T12136] ? errseq_sample+0x51/0x70 [ 461.245285][T12136] ? sock_alloc_inode+0x26/0x2c0 [ 461.245300][T12136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.245314][T12136] sock_alloc_inode+0x26/0x2c0 [ 461.245327][T12136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.245345][T12136] alloc_inode+0x68/0x250 [ 461.245358][T12136] sock_alloc+0x44/0x280 [ 461.245370][T12136] ? security_socket_create+0x7f/0x250 [ 461.245389][T12136] __sock_create+0xc2/0x860 [ 461.245406][T12136] __sys_socket+0x14d/0x260 [ 461.245421][T12136] ? xfd_validate_state+0x129/0x190 [ 461.245440][T12136] ? __pfx___sys_socket+0x10/0x10 [ 461.245461][T12136] __ia32_sys_socket+0x72/0xb0 [ 461.245475][T12136] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.245489][T12136] __do_fast_syscall_32+0x13a/0x8b0 [ 461.245504][T12136] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.245519][T12136] do_fast_syscall_32+0x32/0x70 [ 461.245534][T12136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.245548][T12136] RIP: 0023:0xf7f74fec [ 461.245562][T12136] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 461.245567][T12136] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 461.245579][T12136] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 461.245586][T12136] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 461.245593][T12136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.245600][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.245606][T12136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.245620][T12136] [ 461.473441][T12139] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 461.477618][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 462.614821][T12170] FAULT_INJECTION: forcing a failure. [ 462.614821][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 462.614891][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.0.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.614908][T12170] Tainted: [L]=SOFTLOCKUP [ 462.614912][T12170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.614918][T12170] Call Trace: [ 462.614922][T12170] [ 462.614927][T12170] dump_stack_lvl+0x100/0x190 [ 462.614946][T12170] should_fail_ex.cold+0x5/0xa [ 462.614961][T12170] should_failslab+0xc2/0x120 [ 462.614979][T12170] kmem_cache_alloc_noprof+0x92/0x6a0 [ 462.614996][T12170] ? security_file_alloc+0x34/0x2c0 [ 462.615026][T12170] security_file_alloc+0x34/0x2c0 [ 462.615040][T12170] init_file+0x95/0x480 [ 462.615056][T12170] alloc_empty_file+0x79/0x1c0 [ 462.615074][T12170] alloc_file_pseudo+0x183/0x290 [ 462.615098][T12170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 462.615117][T12170] ? alloc_fd+0x471/0x7a0 [ 462.615136][T12170] sock_alloc_file+0x50/0x210 [ 462.615150][T12170] __sys_socket+0x1c0/0x260 [ 462.615165][T12170] ? xfd_validate_state+0x129/0x190 [ 462.615183][T12170] ? __pfx___sys_socket+0x10/0x10 [ 462.615202][T12170] __ia32_sys_socket+0x72/0xb0 [ 462.615217][T12170] ? lockdep_hardirqs_on+0x7d/0x110 [ 462.615231][T12170] __do_fast_syscall_32+0x13a/0x8b0 [ 462.615245][T12170] ? lockdep_hardirqs_on+0x7d/0x110 [ 462.615260][T12170] do_fast_syscall_32+0x32/0x70 [ 462.615275][T12170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.615290][T12170] RIP: 0023:0xf707efec [ 462.615304][T12170] Code: Unable to access opcode bytes at 0xf707efc2. [ 462.615310][T12170] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 462.615321][T12170] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 462.615329][T12170] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 462.615335][T12170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.615342][T12170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.615348][T12170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.615362][T12170] [ 462.666790][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 462.745578][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.746024][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.827930][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 462.828966][ T9] usb 7-1: config 0 has no interfaces? [ 462.830803][ T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 462.830823][ T9] usb 7-1: Manufacturer: syz [ 462.835517][ T9] usb 7-1: config 0 descriptor?? [ 463.057072][ T9] usb 7-1: USB disconnect, device number 39 [ 463.125000][T12177] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 463.125611][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 463.166420][ T5851] net_ratelimit: 34 callbacks suppressed [ 463.166444][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.207661][T12179] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 463.212500][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 463.279426][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.386302][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.463182][T12190] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 463.464321][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 463.497238][ T5851] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.525073][T12199] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 463.525963][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 463.616411][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.665869][T12209] lo speed is unknown, defaulting to 1000 [ 463.666960][T12209] lo speed is unknown, defaulting to 1000 [ 463.667896][T12209] lo speed is unknown, defaulting to 1000 [ 463.702238][T12212] gtp0: entered allmulticast mode [ 463.709204][T12212] team0: Port device gtp0 added [ 463.780201][ T9875] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.906489][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.985438][T12224] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 463.992131][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 464.016788][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.138341][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.188353][T12231] netlink: 'syz.2.1549': attribute type 10 has an invalid length. [ 464.189121][T12231] vxcan0: left allmulticast mode [ 464.194262][T12231] vxcan0: entered allmulticast mode [ 464.194288][T12231] team0: Device vxcan0 is of different type [ 464.246610][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.294827][T12234] FAULT_INJECTION: forcing a failure. [ 464.294827][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 464.294866][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.2.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.294909][T12234] Tainted: [L]=SOFTLOCKUP [ 464.294916][T12234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.294927][T12234] Call Trace: [ 464.294934][T12234] [ 464.294942][T12234] dump_stack_lvl+0x100/0x190 [ 464.294971][T12234] should_fail_ex.cold+0x5/0xa [ 464.294993][T12234] should_failslab+0xc2/0x120 [ 464.295023][T12234] kmem_cache_alloc_noprof+0x92/0x6a0 [ 464.295050][T12234] ? security_file_alloc+0x34/0x2c0 [ 464.295079][T12234] security_file_alloc+0x34/0x2c0 [ 464.295102][T12234] init_file+0x95/0x480 [ 464.295131][T12234] alloc_empty_file+0x79/0x1c0 [ 464.295167][T12234] alloc_file_pseudo+0x183/0x290 [ 464.295199][T12234] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 464.295229][T12234] ? alloc_fd+0x471/0x7a0 [ 464.295260][T12234] sock_alloc_file+0x50/0x210 [ 464.295283][T12234] __sys_socket+0x1c0/0x260 [ 464.295309][T12234] ? xfd_validate_state+0x129/0x190 [ 464.295341][T12234] ? __pfx___sys_socket+0x10/0x10 [ 464.295375][T12234] __ia32_sys_socket+0x72/0xb0 [ 464.295400][T12234] ? lockdep_hardirqs_on+0x7d/0x110 [ 464.295425][T12234] __do_fast_syscall_32+0x13a/0x8b0 [ 464.295452][T12234] ? lockdep_hardirqs_on+0x7d/0x110 [ 464.295479][T12234] do_fast_syscall_32+0x32/0x70 [ 464.295506][T12234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.295531][T12234] RIP: 0023:0xf7f74fec [ 464.295552][T12234] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 464.295561][T12234] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 464.295581][T12234] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 464.295593][T12234] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 464.295604][T12234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.295616][T12234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.295627][T12234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.295653][T12234] [ 464.649079][T12246] team0: Device gtp0 is of different type [ 465.019071][T12253] FAULT_INJECTION: forcing a failure. [ 465.019071][T12253] name failslab, interval 1, probability 0, space 0, times 0 [ 465.019094][T12253] CPU: 2 UID: 0 PID: 12253 Comm: syz.0.1559 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.019110][T12253] Tainted: [L]=SOFTLOCKUP [ 465.019114][T12253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.019121][T12253] Call Trace: [ 465.019125][T12253] [ 465.019129][T12253] dump_stack_lvl+0x100/0x190 [ 465.019150][T12253] should_fail_ex.cold+0x5/0xa [ 465.019165][T12253] should_failslab+0xc2/0x120 [ 465.019184][T12253] kmem_cache_alloc_noprof+0x92/0x6a0 [ 465.019200][T12253] ? security_file_alloc+0x34/0x2c0 [ 465.019217][T12253] security_file_alloc+0x34/0x2c0 [ 465.019230][T12253] init_file+0x95/0x480 [ 465.019248][T12253] alloc_empty_file+0x79/0x1c0 [ 465.019267][T12253] alloc_file_pseudo+0x183/0x290 [ 465.019285][T12253] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 465.019309][T12253] ? alloc_fd+0x471/0x7a0 [ 465.019343][T12253] sock_alloc_file+0x50/0x210 [ 465.019356][T12253] __sys_socket+0x1c0/0x260 [ 465.019372][T12253] ? __pfx___sys_socket+0x10/0x10 [ 465.019391][T12253] __ia32_sys_socket+0x72/0xb0 [ 465.019407][T12253] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.019422][T12253] __do_fast_syscall_32+0x13a/0x8b0 [ 465.019437][T12253] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.019452][T12253] do_fast_syscall_32+0x32/0x70 [ 465.019468][T12253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.019482][T12253] RIP: 0023:0xf707efec [ 465.019496][T12253] Code: Unable to access opcode bytes at 0xf707efc2. [ 465.019501][T12253] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 465.019513][T12253] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 465.019520][T12253] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 465.019527][T12253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.019533][T12253] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.019540][T12253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.019554][T12253] [ 465.298878][T12259] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 465.300369][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 465.382633][T12265] FAULT_INJECTION: forcing a failure. [ 465.382633][T12265] name failslab, interval 1, probability 0, space 0, times 0 [ 465.382659][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.382677][T12265] Tainted: [L]=SOFTLOCKUP [ 465.382682][T12265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.382691][T12265] Call Trace: [ 465.382696][T12265] [ 465.382701][T12265] dump_stack_lvl+0x100/0x190 [ 465.382737][T12265] should_fail_ex.cold+0x5/0xa [ 465.382757][T12265] should_failslab+0xc2/0x120 [ 465.382778][T12265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 465.382795][T12265] ? d_instantiate+0x8a/0xb0 [ 465.382814][T12265] ? alloc_empty_file+0x5b/0x1c0 [ 465.382837][T12265] alloc_empty_file+0x5b/0x1c0 [ 465.382857][T12265] alloc_file_pseudo+0x183/0x290 [ 465.382876][T12265] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 465.382894][T12265] ? alloc_fd+0x471/0x7a0 [ 465.382913][T12265] sock_alloc_file+0x50/0x210 [ 465.382927][T12265] __sys_socket+0x1c0/0x260 [ 465.382942][T12265] ? xfd_validate_state+0x129/0x190 [ 465.382961][T12265] ? __pfx___sys_socket+0x10/0x10 [ 465.382982][T12265] __ia32_sys_socket+0x72/0xb0 [ 465.382997][T12265] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.383015][T12265] __do_fast_syscall_32+0x13a/0x8b0 [ 465.383033][T12265] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.383049][T12265] do_fast_syscall_32+0x32/0x70 [ 465.383065][T12265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.383081][T12265] RIP: 0023:0xf7f74fec [ 465.383098][T12265] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 465.383104][T12265] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 465.383117][T12265] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 465.383125][T12265] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 465.383132][T12265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.383139][T12265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.383146][T12265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.383167][T12265] [ 465.602497][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 465.721380][T12279] FAULT_INJECTION: forcing a failure. [ 465.721380][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 465.721451][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.2.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.721469][T12279] Tainted: [L]=SOFTLOCKUP [ 465.721473][T12279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.721480][T12279] Call Trace: [ 465.721485][T12279] [ 465.721490][T12279] dump_stack_lvl+0x100/0x190 [ 465.721509][T12279] should_fail_ex.cold+0x5/0xa [ 465.721526][T12279] should_failslab+0xc2/0x120 [ 465.721545][T12279] kmem_cache_alloc_noprof+0x92/0x6a0 [ 465.721572][T12279] ? d_instantiate+0x8a/0xb0 [ 465.721596][T12279] ? alloc_empty_file+0x5b/0x1c0 [ 465.721622][T12279] alloc_empty_file+0x5b/0x1c0 [ 465.721645][T12279] alloc_file_pseudo+0x183/0x290 [ 465.721671][T12279] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 465.721694][T12279] ? alloc_fd+0x471/0x7a0 [ 465.721711][T12279] sock_alloc_file+0x50/0x210 [ 465.721724][T12279] __sys_socket+0x1c0/0x260 [ 465.721739][T12279] ? xfd_validate_state+0x129/0x190 [ 465.721756][T12279] ? __pfx___sys_socket+0x10/0x10 [ 465.721776][T12279] __ia32_sys_socket+0x72/0xb0 [ 465.721791][T12279] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.721806][T12279] __do_fast_syscall_32+0x13a/0x8b0 [ 465.721820][T12279] ? lockdep_hardirqs_on+0x7d/0x110 [ 465.721835][T12279] do_fast_syscall_32+0x32/0x70 [ 465.721851][T12279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.721867][T12279] RIP: 0023:0xf7f74fec [ 465.721881][T12279] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 465.721887][T12279] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 465.721899][T12279] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 465.721907][T12279] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 465.721915][T12279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.721921][T12279] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.721928][T12279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.721943][T12279] [ 466.597014][T12290] team0: No ports can be present during mode change [ 466.686174][T12288] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 466.689652][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 466.729348][T12293] bond1: left allmulticast mode [ 466.729371][T12293] macvlan2: left allmulticast mode [ 466.729425][T12293] ip6gretap1: left allmulticast mode [ 467.174485][T12312] ip_vti0: left allmulticast mode [ 467.193065][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 467.983953][T12339] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 467.985773][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 468.925771][T12347] FAULT_INJECTION: forcing a failure. [ 468.925771][T12347] name fail_futex, interval 1, probability 0, space 0, times 0 [ 468.925807][T12347] CPU: 2 UID: 0 PID: 12347 Comm: syz.2.1596 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.925831][T12347] Tainted: [L]=SOFTLOCKUP [ 468.925838][T12347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.925848][T12347] Call Trace: [ 468.925856][T12347] [ 468.925864][T12347] dump_stack_lvl+0x100/0x190 [ 468.925896][T12347] should_fail_ex.cold+0x5/0xa [ 468.925916][T12347] get_futex_key+0x1d0/0x14f0 [ 468.925934][T12347] ? __pfx_get_futex_key+0x10/0x10 [ 468.925953][T12347] futex_wake+0xf4/0x5e0 [ 468.925972][T12347] ? __pfx_futex_wake+0x10/0x10 [ 468.925989][T12347] ? percpu_counter_add_batch+0xb9/0x230 [ 468.926012][T12347] ? errseq_sample+0x51/0x70 [ 468.926032][T12347] ? file_init_path+0x48e/0x670 [ 468.926051][T12347] do_futex+0x2b2/0x440 [ 468.926065][T12347] ? __pfx_do_futex+0x10/0x10 [ 468.926078][T12347] ? fd_install+0x223/0x580 [ 468.926100][T12347] __ia32_sys_futex_time32+0x2f4/0x470 [ 468.926116][T12347] ? xfd_validate_state+0x129/0x190 [ 468.926160][T12347] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 468.926184][T12347] __do_fast_syscall_32+0x13a/0x8b0 [ 468.926203][T12347] ? lockdep_hardirqs_on+0x7d/0x110 [ 468.926221][T12347] do_fast_syscall_32+0x32/0x70 [ 468.926240][T12347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.926257][T12347] RIP: 0023:0xf7f74fec [ 468.926277][T12347] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 468.926283][T12347] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 468.926296][T12347] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 468.926305][T12347] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 468.926313][T12347] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 468.926321][T12347] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 468.926329][T12347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.926346][T12347] [ 469.175755][T12359] FAULT_INJECTION: forcing a failure. [ 469.175755][T12359] name fail_futex, interval 1, probability 0, space 0, times 0 [ 469.175778][T12359] CPU: 2 UID: 0 PID: 12359 Comm: syz.2.1600 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.175795][T12359] Tainted: [L]=SOFTLOCKUP [ 469.175799][T12359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.175806][T12359] Call Trace: [ 469.175810][T12359] [ 469.175816][T12359] dump_stack_lvl+0x100/0x190 [ 469.175835][T12359] should_fail_ex.cold+0x5/0xa [ 469.175852][T12359] get_futex_key+0x1d0/0x14f0 [ 469.175867][T12359] ? __pfx_get_futex_key+0x10/0x10 [ 469.175884][T12359] futex_wake+0xf4/0x5e0 [ 469.175903][T12359] ? __pfx_futex_wake+0x10/0x10 [ 469.175919][T12359] ? percpu_counter_add_batch+0xb9/0x230 [ 469.175938][T12359] ? errseq_sample+0x51/0x70 [ 469.175955][T12359] ? file_init_path+0x48e/0x670 [ 469.175973][T12359] do_futex+0x2b2/0x440 [ 469.175987][T12359] ? __pfx_do_futex+0x10/0x10 [ 469.175999][T12359] ? fd_install+0x223/0x580 [ 469.176018][T12359] __ia32_sys_futex_time32+0x2f4/0x470 [ 469.176034][T12359] ? xfd_validate_state+0x129/0x190 [ 469.176053][T12359] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 469.176073][T12359] __do_fast_syscall_32+0x13a/0x8b0 [ 469.176089][T12359] ? lockdep_hardirqs_on+0x7d/0x110 [ 469.176104][T12359] do_fast_syscall_32+0x32/0x70 [ 469.176119][T12359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.176157][T12359] RIP: 0023:0xf7f74fec [ 469.176172][T12359] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 469.176177][T12359] RSP: 002b:00000000f54365cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 469.176190][T12359] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 469.176199][T12359] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 469.176206][T12359] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 469.176213][T12359] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.176220][T12359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.176235][T12359] [ 469.777828][T12379] netlink: 'syz.2.1608': attribute type 4 has an invalid length. [ 469.912854][T12383] sd 0:0:0:0: PR command failed: 1026 [ 469.912881][T12383] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 469.912901][T12383] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 470.055739][T12389] FAULT_INJECTION: forcing a failure. [ 470.055739][T12389] name failslab, interval 1, probability 0, space 0, times 0 [ 470.055814][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.2.1611 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.055831][T12389] Tainted: [L]=SOFTLOCKUP [ 470.055836][T12389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.055843][T12389] Call Trace: [ 470.055847][T12389] [ 470.055852][T12389] dump_stack_lvl+0x100/0x190 [ 470.055873][T12389] should_fail_ex.cold+0x5/0xa [ 470.055888][T12389] should_failslab+0xc2/0x120 [ 470.055906][T12389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 470.055933][T12389] ? d_instantiate+0x8a/0xb0 [ 470.055952][T12389] ? alloc_empty_file+0x5b/0x1c0 [ 470.055972][T12389] alloc_empty_file+0x5b/0x1c0 [ 470.055990][T12389] alloc_file_pseudo+0x183/0x290 [ 470.056009][T12389] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 470.056027][T12389] ? alloc_fd+0x471/0x7a0 [ 470.056044][T12389] sock_alloc_file+0x50/0x210 [ 470.056056][T12389] __sys_socket+0x1c0/0x260 [ 470.056071][T12389] ? xfd_validate_state+0x129/0x190 [ 470.056089][T12389] ? __pfx___sys_socket+0x10/0x10 [ 470.056115][T12389] __ia32_sys_socket+0x72/0xb0 [ 470.056136][T12389] ? lockdep_hardirqs_on+0x7d/0x110 [ 470.056160][T12389] __do_fast_syscall_32+0x13a/0x8b0 [ 470.056187][T12389] ? lockdep_hardirqs_on+0x7d/0x110 [ 470.056212][T12389] do_fast_syscall_32+0x32/0x70 [ 470.056237][T12389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.056252][T12389] RIP: 0023:0xf7f74fec [ 470.056266][T12389] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 470.056271][T12389] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 470.056288][T12389] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 470.056297][T12389] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 470.056304][T12389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.056311][T12389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 470.056319][T12389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.056334][T12389] [ 470.205062][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 470.467200][T12403] FAULT_INJECTION: forcing a failure. [ 470.467200][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 470.467236][T12403] CPU: 2 UID: 0 PID: 12403 Comm: syz.2.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.467263][T12403] Tainted: [L]=SOFTLOCKUP [ 470.467269][T12403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 470.467279][T12403] Call Trace: [ 470.467286][T12403] [ 470.467292][T12403] dump_stack_lvl+0x100/0x190 [ 470.467322][T12403] should_fail_ex.cold+0x5/0xa [ 470.467344][T12403] should_failslab+0xc2/0x120 [ 470.467372][T12403] kmem_cache_alloc_noprof+0x92/0x6a0 [ 470.467396][T12403] ? d_instantiate+0x8a/0xb0 [ 470.467425][T12403] ? alloc_empty_file+0x5b/0x1c0 [ 470.467459][T12403] alloc_empty_file+0x5b/0x1c0 [ 470.467490][T12403] alloc_file_pseudo+0x183/0x290 [ 470.467521][T12403] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 470.467552][T12403] ? alloc_fd+0x471/0x7a0 [ 470.467582][T12403] sock_alloc_file+0x50/0x210 [ 470.467605][T12403] __sys_socket+0x1c0/0x260 [ 470.467632][T12403] ? xfd_validate_state+0x129/0x190 [ 470.467660][T12403] ? __pfx___sys_socket+0x10/0x10 [ 470.467696][T12403] __ia32_sys_socket+0x72/0xb0 [ 470.467722][T12403] ? lockdep_hardirqs_on+0x7d/0x110 [ 470.467747][T12403] __do_fast_syscall_32+0x13a/0x8b0 [ 470.467781][T12403] ? lockdep_hardirqs_on+0x7d/0x110 [ 470.467809][T12403] do_fast_syscall_32+0x32/0x70 [ 470.467838][T12403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.467864][T12403] RIP: 0023:0xf7f74fec [ 470.467887][T12403] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 470.467896][T12403] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 470.467915][T12403] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 470.467929][T12403] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 470.467940][T12403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.467953][T12403] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 470.467965][T12403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.467990][T12403] [ 470.785628][T12424] netlink: 'syz.3.1621': attribute type 14 has an invalid length. [ 470.785645][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 470.836376][ T12] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.836404][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.836422][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.836439][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.836507][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.848680][T12424] netlink: 'syz.3.1621': attribute type 14 has an invalid length. [ 470.848696][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 470.996835][ T1036] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 471.157025][ T1036] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 471.157886][ T1036] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.157947][ T1036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.169566][ T1036] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 471.169728][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 471.169756][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 471.170528][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 471.170561][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 471.177244][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 471.178207][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 471.178280][ T1036] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 471.183190][ T1036] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 471.538473][ T855] usb 7-1: USB disconnect, device number 40 [ 471.543238][ T855] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 471.549725][ T855] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 471.566823][ T855] keyspan 7-1:1.0: device disconnected [ 471.570480][T12449] FAULT_INJECTION: forcing a failure. [ 471.570480][T12449] name failslab, interval 1, probability 0, space 0, times 0 [ 471.570502][T12449] CPU: 2 UID: 0 PID: 12449 Comm: syz.0.1628 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.570517][T12449] Tainted: [L]=SOFTLOCKUP [ 471.570522][T12449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.570528][T12449] Call Trace: [ 471.570533][T12449] [ 471.570538][T12449] dump_stack_lvl+0x100/0x190 [ 471.570556][T12449] should_fail_ex.cold+0x5/0xa [ 471.570572][T12449] should_failslab+0xc2/0x120 [ 471.570591][T12449] kmem_cache_alloc_noprof+0x92/0x6a0 [ 471.570607][T12449] ? security_file_alloc+0x34/0x2c0 [ 471.570623][T12449] security_file_alloc+0x34/0x2c0 [ 471.570636][T12449] init_file+0x95/0x480 [ 471.570652][T12449] alloc_empty_file+0x79/0x1c0 [ 471.570670][T12449] alloc_file_pseudo+0x183/0x290 [ 471.570688][T12449] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 471.570706][T12449] ? alloc_fd+0x471/0x7a0 [ 471.570724][T12449] sock_alloc_file+0x50/0x210 [ 471.570736][T12449] __sys_socket+0x1c0/0x260 [ 471.570751][T12449] ? xfd_validate_state+0x129/0x190 [ 471.570771][T12449] ? __pfx___sys_socket+0x10/0x10 [ 471.570790][T12449] __ia32_sys_socket+0x72/0xb0 [ 471.570805][T12449] ? lockdep_hardirqs_on+0x7d/0x110 [ 471.570819][T12449] __do_fast_syscall_32+0x13a/0x8b0 [ 471.570833][T12449] ? lockdep_hardirqs_on+0x7d/0x110 [ 471.570848][T12449] do_fast_syscall_32+0x32/0x70 [ 471.570863][T12449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.570877][T12449] RIP: 0023:0xf707efec [ 471.570890][T12449] Code: Unable to access opcode bytes at 0xf707efc2. [ 471.570896][T12449] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 471.570907][T12449] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 471.570914][T12449] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 471.570940][T12449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.570948][T12449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 471.570955][T12449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.570971][T12449] [ 471.947984][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.950850][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.110897][T12461] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 472.113841][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 472.672065][ T25] usb 5-1: USB disconnect, device number 4 [ 472.955402][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 473.286496][T12501] FAULT_INJECTION: forcing a failure. [ 473.286496][T12501] name fail_futex, interval 1, probability 0, space 0, times 0 [ 473.286520][T12501] CPU: 0 UID: 0 PID: 12501 Comm: syz.0.1648 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.286536][T12501] Tainted: [L]=SOFTLOCKUP [ 473.286540][T12501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.286553][T12501] Call Trace: [ 473.286558][T12501] [ 473.286563][T12501] dump_stack_lvl+0x100/0x190 [ 473.286583][T12501] should_fail_ex.cold+0x5/0xa [ 473.286600][T12501] get_futex_key+0x1d0/0x14f0 [ 473.286614][T12501] ? __pfx_get_futex_key+0x10/0x10 [ 473.286631][T12501] futex_wait_setup+0x91/0x540 [ 473.286651][T12501] __futex_wait+0x19f/0x300 [ 473.286667][T12501] ? __pfx___futex_wait+0x10/0x10 [ 473.286681][T12501] ? __pfx_try_to_wake_up+0x10/0x10 [ 473.286698][T12501] ? futex_hash+0x311/0x400 [ 473.286710][T12501] ? __pfx_futex_wake_mark+0x10/0x10 [ 473.286728][T12501] ? find_held_lock+0x2b/0x80 [ 473.286742][T12501] ? futex_wake+0x4ea/0x5e0 [ 473.286760][T12501] futex_wait+0xe6/0x370 [ 473.286775][T12501] ? __pfx_futex_wait+0x10/0x10 [ 473.286792][T12501] ? percpu_counter_add_batch+0xb9/0x230 [ 473.286810][T12501] ? errseq_sample+0x51/0x70 [ 473.286826][T12501] ? file_init_path+0x48e/0x670 [ 473.286845][T12501] do_futex+0x265/0x440 [ 473.286858][T12501] ? __pfx_do_futex+0x10/0x10 [ 473.286870][T12501] ? fd_install+0x223/0x580 [ 473.286888][T12501] __ia32_sys_futex_time32+0x2f4/0x470 [ 473.286904][T12501] ? xfd_validate_state+0x129/0x190 [ 473.286921][T12501] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 473.286941][T12501] __do_fast_syscall_32+0x13a/0x8b0 [ 473.286956][T12501] ? lockdep_hardirqs_on+0x7d/0x110 [ 473.286971][T12501] do_fast_syscall_32+0x32/0x70 [ 473.286986][T12501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.287001][T12501] RIP: 0023:0xf707efec [ 473.287014][T12501] Code: Unable to access opcode bytes at 0xf707efc2. [ 473.287019][T12501] RSP: 002b:00000000f546d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 473.287032][T12501] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 473.287039][T12501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 473.287047][T12501] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 473.287057][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.287064][T12501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.287078][T12501] [ 473.431978][T12507] pim6reg: entered allmulticast mode [ 473.444952][T12507] pim6reg: left allmulticast mode [ 473.454107][ T43] audit: type=1326 audit(1791028439.070:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.0.1652" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efec code=0x0 [ 474.358621][T12533] FAULT_INJECTION: forcing a failure. [ 474.358621][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 474.358654][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.0.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.358681][T12533] Tainted: [L]=SOFTLOCKUP [ 474.358687][T12533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.358700][T12533] Call Trace: [ 474.358707][T12533] [ 474.358715][T12533] dump_stack_lvl+0x100/0x190 [ 474.358746][T12533] should_fail_ex.cold+0x5/0xa [ 474.358772][T12533] should_failslab+0xc2/0x120 [ 474.358808][T12533] kmem_cache_alloc_noprof+0x92/0x6a0 [ 474.358836][T12533] ? security_file_alloc+0x34/0x2c0 [ 474.358865][T12533] security_file_alloc+0x34/0x2c0 [ 474.358889][T12533] init_file+0x95/0x480 [ 474.358919][T12533] alloc_empty_file+0x79/0x1c0 [ 474.358949][T12533] alloc_file_pseudo+0x183/0x290 [ 474.358981][T12533] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 474.359011][T12533] ? alloc_fd+0x471/0x7a0 [ 474.359042][T12533] sock_alloc_file+0x50/0x210 [ 474.359065][T12533] __sys_socket+0x1c0/0x260 [ 474.359089][T12533] ? xfd_validate_state+0x129/0x190 [ 474.359119][T12533] ? __pfx___sys_socket+0x10/0x10 [ 474.359153][T12533] __ia32_sys_socket+0x72/0xb0 [ 474.359187][T12533] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.359213][T12533] __do_fast_syscall_32+0x13a/0x8b0 [ 474.359241][T12533] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.359268][T12533] do_fast_syscall_32+0x32/0x70 [ 474.359296][T12533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.359321][T12533] RIP: 0023:0xf707efec [ 474.359342][T12533] Code: Unable to access opcode bytes at 0xf707efc2. [ 474.359352][T12533] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 474.359371][T12533] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 474.359383][T12533] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 474.359395][T12533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.359406][T12533] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.359417][T12533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.359443][T12533] [ 474.743190][T12545] FAULT_INJECTION: forcing a failure. [ 474.743190][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 474.743213][T12545] CPU: 2 UID: 0 PID: 12545 Comm: syz.2.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.743229][T12545] Tainted: [L]=SOFTLOCKUP [ 474.743234][T12545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.743241][T12545] Call Trace: [ 474.743246][T12545] [ 474.743251][T12545] dump_stack_lvl+0x100/0x190 [ 474.743271][T12545] should_fail_ex.cold+0x5/0xa [ 474.743287][T12545] should_failslab+0xc2/0x120 [ 474.743308][T12545] kmem_cache_alloc_noprof+0x92/0x6a0 [ 474.743326][T12545] ? security_file_alloc+0x34/0x2c0 [ 474.743342][T12545] security_file_alloc+0x34/0x2c0 [ 474.743355][T12545] init_file+0x95/0x480 [ 474.743374][T12545] alloc_empty_file+0x79/0x1c0 [ 474.743393][T12545] alloc_file_pseudo+0x183/0x290 [ 474.743411][T12545] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 474.743429][T12545] ? alloc_fd+0x471/0x7a0 [ 474.743446][T12545] sock_alloc_file+0x50/0x210 [ 474.743459][T12545] __sys_socket+0x1c0/0x260 [ 474.743475][T12545] ? __pfx___sys_socket+0x10/0x10 [ 474.743494][T12545] __ia32_sys_socket+0x72/0xb0 [ 474.743508][T12545] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.743523][T12545] __do_fast_syscall_32+0x13a/0x8b0 [ 474.743538][T12545] ? lockdep_hardirqs_on+0x7d/0x110 [ 474.743552][T12545] do_fast_syscall_32+0x32/0x70 [ 474.743567][T12545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.743582][T12545] RIP: 0023:0xf7f74fec [ 474.743610][T12545] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 474.743617][T12545] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 474.743634][T12545] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 474.743641][T12545] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 474.743648][T12545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.743654][T12545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.743661][T12545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.743675][T12545] [ 475.097031][T12548] pim6reg: entered allmulticast mode [ 475.105773][T12548] pim6reg: left allmulticast mode [ 475.158103][T12550] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 475.158855][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 475.303954][T12554] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 475.304527][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 475.444193][T12569] size and base must be multiples of 4 kiB [ 475.444210][T12569] CPU: 3 UID: 0 PID: 12569 Comm: syz.2.1676 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.444227][T12569] Tainted: [L]=SOFTLOCKUP [ 475.444231][T12569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.444239][T12569] Call Trace: [ 475.444244][T12569] [ 475.444249][T12569] dump_stack_lvl+0x100/0x190 [ 475.444279][T12569] mtrr_add.cold+0x74/0x87 [ 475.444293][T12569] mtrr_ioctl+0x25a/0xcf0 [ 475.444313][T12569] ? __pfx_mtrr_ioctl+0x10/0x10 [ 475.444331][T12569] ? __fget_files+0x34/0x3d0 [ 475.444346][T12569] ? find_held_lock+0x2b/0x80 [ 475.444363][T12569] ? __fget_files+0x21f/0x3d0 [ 475.444378][T12569] ? __pfx_mtrr_ioctl+0x10/0x10 [ 475.444395][T12569] proc_reg_compat_ioctl+0x229/0x320 [ 475.444414][T12569] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 475.444431][T12569] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 475.444446][T12569] __do_fast_syscall_32+0x13a/0x8b0 [ 475.444464][T12569] do_fast_syscall_32+0x32/0x70 [ 475.444479][T12569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.444495][T12569] RIP: 0023:0xf7f74fec [ 475.444537][T12569] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 475.444543][T12569] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 475.444556][T12569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c4d01 [ 475.444564][T12569] RDX: 0000000080000a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.444572][T12569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.444579][T12569] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 475.444586][T12569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.444602][T12569] [ 475.560703][T12573] FAULT_INJECTION: forcing a failure. [ 475.560703][T12573] name failslab, interval 1, probability 0, space 0, times 0 [ 475.560727][T12573] CPU: 0 UID: 0 PID: 12573 Comm: syz.0.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.560744][T12573] Tainted: [L]=SOFTLOCKUP [ 475.560748][T12573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.560756][T12573] Call Trace: [ 475.560760][T12573] [ 475.560765][T12573] dump_stack_lvl+0x100/0x190 [ 475.560784][T12573] should_fail_ex.cold+0x5/0xa [ 475.560799][T12573] should_failslab+0xc2/0x120 [ 475.560818][T12573] kmem_cache_alloc_noprof+0x92/0x6a0 [ 475.560834][T12573] ? security_file_alloc+0x34/0x2c0 [ 475.560850][T12573] security_file_alloc+0x34/0x2c0 [ 475.560863][T12573] init_file+0x95/0x480 [ 475.560881][T12573] alloc_empty_file+0x79/0x1c0 [ 475.560900][T12573] alloc_file_pseudo+0x183/0x290 [ 475.560919][T12573] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 475.560936][T12573] ? alloc_fd+0x471/0x7a0 [ 475.560953][T12573] sock_alloc_file+0x50/0x210 [ 475.560966][T12573] __sys_socket+0x1c0/0x260 [ 475.560996][T12573] ? xfd_validate_state+0x129/0x190 [ 475.561015][T12573] ? __pfx___sys_socket+0x10/0x10 [ 475.561035][T12573] __ia32_sys_socket+0x72/0xb0 [ 475.561051][T12573] ? lockdep_hardirqs_on+0x7d/0x110 [ 475.561065][T12573] __do_fast_syscall_32+0x13a/0x8b0 [ 475.561080][T12573] ? lockdep_hardirqs_on+0x7d/0x110 [ 475.561094][T12573] do_fast_syscall_32+0x32/0x70 [ 475.561110][T12573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.561138][T12573] RIP: 0023:0xf707efec [ 475.561152][T12573] Code: Unable to access opcode bytes at 0xf707efc2. [ 475.561158][T12573] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 475.561171][T12573] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 475.561179][T12573] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 475.561186][T12573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.561193][T12573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 475.561200][T12573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.561215][T12573] [ 475.729138][T12581] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 475.730868][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 475.943360][T12596] FAULT_INJECTION: forcing a failure. [ 475.943360][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 475.943382][T12596] CPU: 2 UID: 0 PID: 12596 Comm: syz.2.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.943399][T12596] Tainted: [L]=SOFTLOCKUP [ 475.943403][T12596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.943409][T12596] Call Trace: [ 475.943413][T12596] [ 475.943419][T12596] dump_stack_lvl+0x100/0x190 [ 475.943441][T12596] should_fail_ex.cold+0x5/0xa [ 475.943457][T12596] should_failslab+0xc2/0x120 [ 475.943476][T12596] kmem_cache_alloc_noprof+0x92/0x6a0 [ 475.943492][T12596] ? vm_area_dup+0x27/0x9d0 [ 475.943505][T12596] vm_area_dup+0x27/0x9d0 [ 475.943518][T12596] __split_vma+0x19c/0x1de0 [ 475.943532][T12596] ? find_held_lock+0x2b/0x80 [ 475.943547][T12596] ? __pfx___split_vma+0x10/0x10 [ 475.943560][T12596] ? can_vma_merge_after+0x2b5/0x6f0 [ 475.943575][T12596] ? do_raw_spin_lock+0x128/0x260 [ 475.943594][T12596] vma_modify+0x137b/0x29b0 [ 475.943612][T12596] ? __pfx_vma_modify+0x10/0x10 [ 475.943627][T12596] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 475.943650][T12596] vma_modify_flags+0x2c3/0x460 [ 475.943663][T12596] ? __pfx_vma_modify_flags+0x10/0x10 [ 475.943693][T12596] mlock_fixup+0x4a8/0xc60 [ 475.943708][T12596] ? __pfx_mlock_fixup+0x10/0x10 [ 475.943729][T12596] apply_vma_lock_flags+0x390/0x500 [ 475.943744][T12596] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 475.943761][T12596] ? futex_wait+0x11e/0x370 [ 475.943778][T12596] ? down_write_killable+0x152/0x240 [ 475.943796][T12596] ? rcu_read_lock_any_held+0x6a/0x90 [ 475.943813][T12596] do_mlock+0x261/0x800 [ 475.943825][T12596] ? do_futex+0x190/0x440 [ 475.943837][T12596] ? __pfx_do_mlock+0x10/0x10 [ 475.943848][T12596] ? __pfx_do_futex+0x10/0x10 [ 475.943861][T12596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.943878][T12596] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 475.943895][T12596] __ia32_sys_mlock+0xce/0x120 [ 475.943908][T12596] ? __pfx___ia32_sys_mlock+0x10/0x10 [ 475.943925][T12596] __do_fast_syscall_32+0x13a/0x8b0 [ 475.943944][T12596] do_fast_syscall_32+0x32/0x70 [ 475.943959][T12596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.943975][T12596] RIP: 0023:0xf7f74fec [ 475.943989][T12596] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 475.943994][T12596] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000096 [ 475.944007][T12596] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 475.944015][T12596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.944021][T12596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.944028][T12596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 475.944034][T12596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.944048][T12596] [ 476.098722][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 476.168732][T12602] bond0: invalid ARP target specified [ 476.224702][T12605] FAULT_INJECTION: forcing a failure. [ 476.224702][T12605] name failslab, interval 1, probability 0, space 0, times 0 [ 476.224727][T12605] CPU: 0 UID: 0 PID: 12605 Comm: syz.2.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.224742][T12605] Tainted: [L]=SOFTLOCKUP [ 476.224747][T12605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.224754][T12605] Call Trace: [ 476.224759][T12605] [ 476.224763][T12605] dump_stack_lvl+0x100/0x190 [ 476.224783][T12605] should_fail_ex.cold+0x5/0xa [ 476.224798][T12605] should_failslab+0xc2/0x120 [ 476.224817][T12605] kmem_cache_alloc_noprof+0x92/0x6a0 [ 476.224832][T12605] ? security_file_alloc+0x34/0x2c0 [ 476.224848][T12605] security_file_alloc+0x34/0x2c0 [ 476.224862][T12605] init_file+0x95/0x480 [ 476.224879][T12605] alloc_empty_file+0x79/0x1c0 [ 476.224896][T12605] alloc_file_pseudo+0x183/0x290 [ 476.224914][T12605] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 476.224931][T12605] ? alloc_fd+0x471/0x7a0 [ 476.224949][T12605] sock_alloc_file+0x50/0x210 [ 476.224961][T12605] __sys_socket+0x1c0/0x260 [ 476.224975][T12605] ? xfd_validate_state+0x129/0x190 [ 476.224993][T12605] ? __pfx___sys_socket+0x10/0x10 [ 476.225012][T12605] __ia32_sys_socket+0x72/0xb0 [ 476.225026][T12605] ? lockdep_hardirqs_on+0x7d/0x110 [ 476.225041][T12605] __do_fast_syscall_32+0x13a/0x8b0 [ 476.225063][T12605] ? lockdep_hardirqs_on+0x7d/0x110 [ 476.225078][T12605] do_fast_syscall_32+0x32/0x70 [ 476.225093][T12605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.225108][T12605] RIP: 0023:0xf7f74fec [ 476.225121][T12605] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 476.225130][T12605] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 476.225142][T12605] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 476.225150][T12605] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 476.225157][T12605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.225178][T12605] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.225187][T12605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.225203][T12605] [ 476.261400][ T35] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 476.264160][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.264201][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.300902][ T35] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 476.301103][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 476.301156][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 476.311230][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 476.311297][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 476.314146][ T35] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 476.325364][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 476.325434][ T35] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 476.336599][ T35] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 476.839347][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 476.856521][ T6741] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 476.952656][T12622] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 476.953698][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 477.014340][T12624] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 477.014901][ T6741] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 477.023470][ T6741] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.023498][ T6741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.030701][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 477.044366][ T6741] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 477.044462][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 477.044490][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 477.045327][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 477.045362][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 477.050950][ T6741] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 477.066660][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 477.066733][ T6741] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 477.067953][ T6741] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 477.457718][ T9] usb 7-1: USB disconnect, device number 41 [ 477.460187][ T9] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 477.467670][ T9] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 477.468165][ T9] keyspan 7-1:1.0: device disconnected [ 478.059696][T12640] bochs-drm 0000:00:01.0: MSI/MSI-X allowed for future drivers [ 478.240380][T12646] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 478.240976][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 478.329290][T12648] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 478.330899][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 478.432364][ T9] libceph: connect (1)0.0.0.0:6789 error -22 [ 478.432673][ T9] libceph: mon0 (1)0.0.0.0:6789 connect error [ 478.686357][ T9] libceph: connect (1)0.0.0.0:6789 error -22 [ 478.686597][ T9] libceph: mon0 (1)0.0.0.0:6789 connect error [ 478.907091][ T6741] usb 5-1: USB disconnect, device number 5 [ 478.910308][ T6741] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 478.914380][ T6741] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 478.929608][ T6741] keyspan 5-1:1.0: device disconnected [ 479.017913][T12671] ima: policy update failed [ 479.021557][T12673] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 479.024817][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 479.038035][ T43] audit: type=1807 audit(1791028444.620:467): UNKNOWN=me res=0 [ 479.038060][ T43] audit: type=1802 audit(1791028444.630:468): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1713" res=0 errno=0 [ 479.038087][ T43] audit: type=1802 audit(1791028444.640:469): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1713" res=0 errno=0 [ 479.136815][T12675] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 479.140094][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'. [ 479.206449][ T9] libceph: connect (1)0.0.0.0:6789 error -22 [ 479.206574][ T9] libceph: mon0 (1)0.0.0.0:6789 connect error [ 479.223151][T12680] overlayfs: failed to clone upperpath [ 479.496369][T12650] ceph: No mds server is up or the cluster is laggy [ 479.526343][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 479.697186][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 479.698337][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.698362][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.703526][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 479.703619][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 479.703647][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 479.704179][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 479.704211][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 479.707502][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 479.708178][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 479.708212][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 479.712842][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 479.773724][T12710] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 479.777217][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 480.308924][ T235] Bluetooth: hci4: Frame reassembly failed (-84) [ 481.067802][T12731] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 481.070550][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 481.292208][T12744] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 481.294054][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 482.342679][ T35] usb 5-1: USB disconnect, device number 6 [ 482.348004][ T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 482.353666][ T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 482.354720][ T35] keyspan 5-1:1.0: device disconnected [ 482.380567][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 482.380665][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 482.404594][T12754] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 482.405251][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 483.204955][T12786] FAULT_INJECTION: forcing a failure. [ 483.204955][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 483.204989][T12786] CPU: 0 UID: 0 PID: 12786 Comm: syz.2.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.205015][T12786] Tainted: [L]=SOFTLOCKUP [ 483.205022][T12786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 483.205032][T12786] Call Trace: [ 483.205039][T12786] [ 483.205046][T12786] dump_stack_lvl+0x100/0x190 [ 483.205077][T12786] should_fail_ex.cold+0x5/0xa [ 483.205094][T12786] should_failslab+0xc2/0x120 [ 483.205114][T12786] kmem_cache_alloc_noprof+0x92/0x6a0 [ 483.205131][T12786] ? security_file_alloc+0x34/0x2c0 [ 483.205148][T12786] security_file_alloc+0x34/0x2c0 [ 483.205178][T12786] init_file+0x95/0x480 [ 483.205197][T12786] alloc_empty_file+0x79/0x1c0 [ 483.205218][T12786] alloc_file_pseudo+0x183/0x290 [ 483.205237][T12786] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 483.205256][T12786] ? alloc_fd+0x471/0x7a0 [ 483.205273][T12786] sock_alloc_file+0x50/0x210 [ 483.205287][T12786] __sys_socket+0x1c0/0x260 [ 483.205303][T12786] ? __pfx___sys_socket+0x10/0x10 [ 483.205323][T12786] __ia32_sys_socket+0x72/0xb0 [ 483.205341][T12786] ? lockdep_hardirqs_on+0x7d/0x110 [ 483.205357][T12786] __do_fast_syscall_32+0x13a/0x8b0 [ 483.205373][T12786] ? lockdep_hardirqs_on+0x7d/0x110 [ 483.205389][T12786] do_fast_syscall_32+0x32/0x70 [ 483.205405][T12786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.205421][T12786] RIP: 0023:0xf7f74fec [ 483.205437][T12786] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 483.205445][T12786] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 483.205465][T12786] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 483.205477][T12786] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 483.205490][T12786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.205501][T12786] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 483.205513][T12786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.205538][T12786] [ 483.666331][ T6865] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 483.817450][ T6865] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 483.818379][ T6865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.818405][ T6865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.831053][ T6865] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 483.831256][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 483.831319][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 483.839317][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 483.839384][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 483.845100][ T6865] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 483.847644][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 483.847683][ T6865] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 483.851222][ T6865] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 484.075618][T12808] FAULT_INJECTION: forcing a failure. [ 484.075618][T12808] name failslab, interval 1, probability 0, space 0, times 0 [ 484.075641][T12808] CPU: 2 UID: 0 PID: 12808 Comm: syz.2.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.075664][T12808] Tainted: [L]=SOFTLOCKUP [ 484.075669][T12808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.075675][T12808] Call Trace: [ 484.075680][T12808] [ 484.075685][T12808] dump_stack_lvl+0x100/0x190 [ 484.075705][T12808] should_fail_ex.cold+0x5/0xa [ 484.075721][T12808] should_failslab+0xc2/0x120 [ 484.075740][T12808] kmem_cache_alloc_noprof+0x92/0x6a0 [ 484.075756][T12808] ? d_instantiate+0x8a/0xb0 [ 484.075772][T12808] ? alloc_empty_file+0x5b/0x1c0 [ 484.075792][T12808] alloc_empty_file+0x5b/0x1c0 [ 484.075809][T12808] alloc_file_pseudo+0x183/0x290 [ 484.075827][T12808] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 484.075844][T12808] ? alloc_fd+0x471/0x7a0 [ 484.075861][T12808] sock_alloc_file+0x50/0x210 [ 484.075874][T12808] __sys_socket+0x1c0/0x260 [ 484.075888][T12808] ? xfd_validate_state+0x129/0x190 [ 484.075905][T12808] ? __pfx___sys_socket+0x10/0x10 [ 484.075924][T12808] __ia32_sys_socket+0x72/0xb0 [ 484.075939][T12808] ? lockdep_hardirqs_on+0x7d/0x110 [ 484.075954][T12808] __do_fast_syscall_32+0x13a/0x8b0 [ 484.075969][T12808] ? lockdep_hardirqs_on+0x7d/0x110 [ 484.075984][T12808] do_fast_syscall_32+0x32/0x70 [ 484.075998][T12808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.076013][T12808] RIP: 0023:0xf7f74fec [ 484.076026][T12808] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 484.076032][T12808] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 484.076044][T12808] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 484.076051][T12808] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 484.076058][T12808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.076065][T12808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 484.076072][T12808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.076086][T12808] [ 484.239869][ T5750] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 484.321111][T12819] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 484.321690][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 485.098040][ T6865] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 485.264571][T12822] bond_slave_0: left allmulticast mode [ 485.388518][ T6865] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 485.389213][ T6865] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 485.389229][ T6865] usb 7-1: can't read configurations, error -71 [ 485.392337][T12843] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 485.394996][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 485.413506][T12847] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 485.418574][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 486.114657][T12872] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 486.121849][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 486.482288][ T35] usb 5-1: USB disconnect, device number 7 [ 486.484145][ T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 486.489727][ T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 486.493157][ T35] keyspan 5-1:1.0: device disconnected [ 486.587440][ T6865] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 486.618106][T12894] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 486.619414][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 486.736852][ T6865] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 486.737713][ T6865] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.737738][ T6865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 486.737751][ T6865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 486.739385][ T6865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.739397][ T6865] usb 7-1: Product: syz [ 486.739405][ T6865] usb 7-1: Manufacturer: syz [ 486.739412][ T6865] usb 7-1: SerialNumber: syz [ 486.748323][ T6865] usb 7-1: config 0 descriptor?? [ 486.752436][T12880] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 486.819798][ T6865] rc_core: IR keymap rc-streamzap not found [ 486.819810][ T6865] Registered IR keymap rc-empty [ 486.820683][ T6865] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 486.821486][ T6865] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 486.969188][ T9] usb 7-1: USB disconnect, device number 44 [ 487.159800][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 487.159815][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 487.214668][T12917] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 487.218638][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 487.270109][T12919] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 487.272853][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 487.617227][T12933] CIFS: Attempting to mount //::1/share [ 487.619786][T12933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 487.619809][T12933] CIFS: VFS: cifs_mount failed w/return code = -101 [ 487.744363][T12936] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 487.750201][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 487.786410][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 487.886016][T12938] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 487.947071][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 487.948266][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 487.948304][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.949814][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 487.949834][ T9] usb 7-1: Manufacturer: syz [ 487.953981][ T9] usb 7-1: config 0 descriptor?? [ 488.046626][ T9] rc_core: IR keymap rc-hauppauge not found [ 488.046644][ T9] Registered IR keymap rc-empty [ 488.055885][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 488.064282][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 488.162240][ T9] usb 7-1: USB disconnect, device number 45 [ 488.618609][T12947] FAULT_INJECTION: forcing a failure. [ 488.618609][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 488.618632][T12947] CPU: 0 UID: 0 PID: 12947 Comm: syz.0.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.618650][T12947] Tainted: [L]=SOFTLOCKUP [ 488.618654][T12947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.618661][T12947] Call Trace: [ 488.618666][T12947] [ 488.618671][T12947] dump_stack_lvl+0x100/0x190 [ 488.618692][T12947] should_fail_ex.cold+0x5/0xa [ 488.618709][T12947] should_failslab+0xc2/0x120 [ 488.618728][T12947] kmem_cache_alloc_noprof+0x92/0x6a0 [ 488.618743][T12947] ? __asan_memcpy+0x3c/0x60 [ 488.618755][T12947] ? __kernfs_new_node+0xd2/0xa10 [ 488.618775][T12947] __kernfs_new_node+0xd2/0xa10 [ 488.618793][T12947] ? __pfx___kernfs_new_node+0x10/0x10 [ 488.618813][T12947] ? lock_acquire+0x1d1/0x380 [ 488.618829][T12947] ? kernfs_root+0x23/0x2a0 [ 488.618844][T12947] ? find_held_lock+0x2b/0x80 [ 488.618857][T12947] ? kernfs_root+0xee/0x2a0 [ 488.618871][T12947] ? kernfs_root+0xee/0x2a0 [ 488.618890][T12947] kernfs_new_node+0x117/0x150 [ 488.618909][T12947] kernfs_create_link+0xcc/0x240 [ 488.618925][T12947] sysfs_do_create_link_sd+0x90/0x140 [ 488.618943][T12947] sysfs_create_link+0x61/0xc0 [ 488.618958][T12947] driver_sysfs_add+0x91/0x2d0 [ 488.618976][T12947] really_probe+0x146/0xa60 [ 488.618995][T12947] __driver_probe_device+0x210/0x460 [ 488.619011][T12947] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 488.619026][T12947] driver_probe_device+0x4a/0x140 [ 488.619049][T12947] __driver_attach+0x21f/0x5b0 [ 488.619060][T12947] ? __pfx___driver_attach+0x10/0x10 [ 488.619071][T12947] bus_for_each_dev+0x13e/0x1d0 [ 488.619087][T12947] ? __pfx_bus_for_each_dev+0x10/0x10 [ 488.619102][T12947] ? bus_add_driver+0x2b5/0x5b0 [ 488.619123][T12947] bus_add_driver+0x305/0x5b0 [ 488.619142][T12947] driver_register+0x1e2/0x360 [ 488.619154][T12947] ? rcu_is_watching+0x13/0xc0 [ 488.619169][T12947] usb_gadget_register_driver_owner+0x132/0x210 [ 488.619189][T12947] raw_ioctl+0x1a85/0x2b80 [ 488.619228][T12947] ? __pfx_raw_ioctl+0x10/0x10 [ 488.619248][T12947] ? __pfx_raw_ioctl+0x10/0x10 [ 488.619264][T12947] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 488.619280][T12947] __do_fast_syscall_32+0x13a/0x8b0 [ 488.619299][T12947] do_fast_syscall_32+0x32/0x70 [ 488.619318][T12947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.619333][T12947] RIP: 0023:0xf707efec [ 488.619348][T12947] Code: Unable to access opcode bytes at 0xf707efc2. [ 488.619353][T12947] RSP: 002b:00000000f546b424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 488.619365][T12947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 488.619373][T12947] RDX: 0000000000000000 RSI: 00000000f7448ff4 RDI: 00000000f546c4c0 [ 488.619379][T12947] RBP: 00000000f7448ff4 R08: 0000000000000000 R09: 0000000000000000 [ 488.619386][T12947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 488.619393][T12947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.619407][T12947] [ 488.619464][T12947] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 488.619762][T12947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.619962][T12947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.769859][T12954] FAULT_INJECTION: forcing a failure. [ 488.769859][T12954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 488.769883][T12954] CPU: 0 UID: 0 PID: 12954 Comm: syz.2.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.769899][T12954] Tainted: [L]=SOFTLOCKUP [ 488.769903][T12954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.769911][T12954] Call Trace: [ 488.769915][T12954] [ 488.769920][T12954] dump_stack_lvl+0x100/0x190 [ 488.769938][T12954] should_fail_ex.cold+0x5/0xa [ 488.769955][T12954] get_futex_key+0x1d0/0x14f0 [ 488.769968][T12954] ? __pfx_get_futex_key+0x10/0x10 [ 488.769984][T12954] futex_wait_setup+0x91/0x540 [ 488.770005][T12954] __futex_wait+0x19f/0x300 [ 488.770022][T12954] ? __pfx___futex_wait+0x10/0x10 [ 488.770036][T12954] ? __pfx_try_to_wake_up+0x10/0x10 [ 488.770052][T12954] ? futex_hash+0x311/0x400 [ 488.770064][T12954] ? __pfx_futex_wake_mark+0x10/0x10 [ 488.770081][T12954] ? find_held_lock+0x2b/0x80 [ 488.770093][T12954] ? futex_wake+0x4ea/0x5e0 [ 488.770111][T12954] futex_wait+0xe6/0x370 [ 488.770126][T12954] ? __pfx_futex_wait+0x10/0x10 [ 488.770143][T12954] ? percpu_counter_add_batch+0xb9/0x230 [ 488.770161][T12954] ? errseq_sample+0x51/0x70 [ 488.770177][T12954] ? file_init_path+0x48e/0x670 [ 488.770195][T12954] do_futex+0x265/0x440 [ 488.770208][T12954] ? __pfx_do_futex+0x10/0x10 [ 488.770221][T12954] ? fd_install+0x223/0x580 [ 488.770239][T12954] __ia32_sys_futex_time32+0x2f4/0x470 [ 488.770254][T12954] ? xfd_validate_state+0x129/0x190 [ 488.770272][T12954] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 488.770291][T12954] __do_fast_syscall_32+0x13a/0x8b0 [ 488.770306][T12954] ? lockdep_hardirqs_on+0x7d/0x110 [ 488.770321][T12954] do_fast_syscall_32+0x32/0x70 [ 488.770337][T12954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.770351][T12954] RIP: 0023:0xf7f74fec [ 488.770365][T12954] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 488.770370][T12954] RSP: 002b:00000000f54365bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 488.770382][T12954] RAX: ffffffffffffffda RBX: 00000000f7434f88 RCX: 0000000000000080 [ 488.770390][T12954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 488.770398][T12954] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 488.770405][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.770412][T12954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.770426][T12954] [ 488.970888][T12962] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 489.572181][T12981] __nla_validate_parse: 2 callbacks suppressed [ 489.572195][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 489.616545][T12983] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 489.622223][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 489.894439][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 491.255115][T13010] FAULT_INJECTION: forcing a failure. [ 491.255115][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 491.255233][T13010] CPU: 2 UID: 0 PID: 13010 Comm: syz.2.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.255274][T13010] Tainted: [L]=SOFTLOCKUP [ 491.255281][T13010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.255291][T13010] Call Trace: [ 491.255297][T13010] [ 491.255304][T13010] dump_stack_lvl+0x100/0x190 [ 491.255331][T13010] should_fail_ex.cold+0x5/0xa [ 491.255355][T13010] should_failslab+0xc2/0x120 [ 491.255381][T13010] kmem_cache_alloc_noprof+0x92/0x6a0 [ 491.255406][T13010] ? security_file_alloc+0x34/0x2c0 [ 491.255432][T13010] security_file_alloc+0x34/0x2c0 [ 491.255455][T13010] init_file+0x95/0x480 [ 491.255481][T13010] alloc_empty_file+0x79/0x1c0 [ 491.255508][T13010] alloc_file_pseudo+0x183/0x290 [ 491.255535][T13010] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.255562][T13010] ? alloc_fd+0x471/0x7a0 [ 491.255590][T13010] sock_alloc_file+0x50/0x210 [ 491.255610][T13010] __sys_socket+0x1c0/0x260 [ 491.255639][T13010] ? xfd_validate_state+0x129/0x190 [ 491.255668][T13010] ? __pfx___sys_socket+0x10/0x10 [ 491.255698][T13010] __ia32_sys_socket+0x72/0xb0 [ 491.255721][T13010] ? lockdep_hardirqs_on+0x7d/0x110 [ 491.255743][T13010] __do_fast_syscall_32+0x13a/0x8b0 [ 491.255766][T13010] ? lockdep_hardirqs_on+0x7d/0x110 [ 491.255789][T13010] do_fast_syscall_32+0x32/0x70 [ 491.255812][T13010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.255833][T13010] RIP: 0023:0xf7f74fec [ 491.255853][T13010] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 491.255860][T13010] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 491.255880][T13010] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 491.255893][T13010] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 491.255904][T13010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.255914][T13010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 491.255924][T13010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.255947][T13010] [ 491.342852][T13011] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 491.348495][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 491.396824][T13010] FAULT_INJECTION: forcing a failure. [ 491.396824][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 491.396849][T13010] CPU: 0 UID: 0 PID: 13010 Comm: syz.2.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.396867][T13010] Tainted: [L]=SOFTLOCKUP [ 491.396872][T13010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.396879][T13010] Call Trace: [ 491.396883][T13010] [ 491.396888][T13010] dump_stack_lvl+0x100/0x190 [ 491.396908][T13010] should_fail_ex.cold+0x5/0xa [ 491.396924][T13010] should_failslab+0xc2/0x120 [ 491.396942][T13010] kmem_cache_alloc_noprof+0x92/0x6a0 [ 491.396958][T13010] ? security_file_alloc+0x34/0x2c0 [ 491.396975][T13010] security_file_alloc+0x34/0x2c0 [ 491.396988][T13010] init_file+0x95/0x480 [ 491.397005][T13010] alloc_empty_file+0x79/0x1c0 [ 491.397022][T13010] alloc_file_pseudo+0x183/0x290 [ 491.397041][T13010] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.397059][T13010] ? alloc_fd+0x471/0x7a0 [ 491.397080][T13010] sock_alloc_file+0x50/0x210 [ 491.397095][T13010] __sys_socket+0x1c0/0x260 [ 491.397109][T13010] ? xfd_validate_state+0x129/0x190 [ 491.397126][T13010] ? __pfx___sys_socket+0x10/0x10 [ 491.397145][T13010] __ia32_sys_socket+0x72/0xb0 [ 491.397160][T13010] ? lockdep_hardirqs_on+0x7d/0x110 [ 491.397174][T13010] __do_fast_syscall_32+0x13a/0x8b0 [ 491.397189][T13010] ? lockdep_hardirqs_on+0x7d/0x110 [ 491.397204][T13010] do_fast_syscall_32+0x32/0x70 [ 491.397218][T13010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.397233][T13010] RIP: 0023:0xf7f74fec [ 491.397247][T13010] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 491.397253][T13010] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 491.397265][T13010] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 491.397272][T13010] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 491.397279][T13010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.397286][T13010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 491.397293][T13010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.397306][T13010] [ 492.346273][ T2323] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 492.353543][T13043] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 492.496864][ T2323] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 492.497885][ T2323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.497908][ T2323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.506758][ T2323] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 492.506854][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 492.506881][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 492.513674][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 492.513712][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 492.516484][ T2323] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 492.521483][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 492.521524][ T2323] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 492.525465][ T2323] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 493.054659][T13051] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 493.060600][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 493.108835][T13055] netlink: 'syz.3.1876': attribute type 29 has an invalid length. [ 493.108854][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 493.109828][T13055] netlink: 'syz.3.1876': attribute type 29 has an invalid length. [ 493.109845][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 493.261742][T13058] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 493.267885][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 494.174959][T13060] FAULT_INJECTION: forcing a failure. [ 494.174959][T13060] name failslab, interval 1, probability 0, space 0, times 0 [ 494.174993][T13060] CPU: 0 UID: 0 PID: 13060 Comm: syz.2.1879 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.175020][T13060] Tainted: [L]=SOFTLOCKUP [ 494.175028][T13060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.175040][T13060] Call Trace: [ 494.175048][T13060] [ 494.175058][T13060] dump_stack_lvl+0x100/0x190 [ 494.175088][T13060] should_fail_ex.cold+0x5/0xa [ 494.175123][T13060] should_failslab+0xc2/0x120 [ 494.175174][T13060] kmem_cache_alloc_noprof+0x92/0x6a0 [ 494.175201][T13060] ? security_file_alloc+0x34/0x2c0 [ 494.175229][T13060] security_file_alloc+0x34/0x2c0 [ 494.175252][T13060] init_file+0x95/0x480 [ 494.175281][T13060] alloc_empty_file+0x79/0x1c0 [ 494.175309][T13060] alloc_file_pseudo+0x183/0x290 [ 494.175338][T13060] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 494.175367][T13060] ? alloc_fd+0x471/0x7a0 [ 494.175397][T13060] sock_alloc_file+0x50/0x210 [ 494.175419][T13060] __sys_socket+0x1c0/0x260 [ 494.175440][T13060] ? xfd_validate_state+0x129/0x190 [ 494.175470][T13060] ? __pfx___sys_socket+0x10/0x10 [ 494.175504][T13060] __ia32_sys_socket+0x72/0xb0 [ 494.175530][T13060] ? lockdep_hardirqs_on+0x7d/0x110 [ 494.175552][T13060] __do_fast_syscall_32+0x13a/0x8b0 [ 494.175576][T13060] ? lockdep_hardirqs_on+0x7d/0x110 [ 494.175724][T13060] do_fast_syscall_32+0x32/0x70 [ 494.175751][T13060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.175774][T13060] RIP: 0023:0xf7f74fec [ 494.175795][T13060] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 494.175805][T13060] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 494.175825][T13060] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 494.175838][T13060] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 494.175850][T13060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.175862][T13060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 494.175874][T13060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.175897][T13060] [ 495.156080][ T76] usb 5-1: USB disconnect, device number 8 [ 495.160308][ T76] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 495.171550][ T76] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 495.172058][ T76] keyspan 5-1:1.0: device disconnected [ 495.181121][T13070] overlayfs: failed to clone upperpath [ 495.449239][T13084] FAULT_INJECTION: forcing a failure. [ 495.449239][T13084] name failslab, interval 1, probability 0, space 0, times 0 [ 495.449268][T13084] CPU: 0 UID: 0 PID: 13084 Comm: syz.2.1888 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.449291][T13084] Tainted: [L]=SOFTLOCKUP [ 495.449297][T13084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.449307][T13084] Call Trace: [ 495.449313][T13084] [ 495.449319][T13084] dump_stack_lvl+0x100/0x190 [ 495.449343][T13084] should_fail_ex.cold+0x5/0xa [ 495.449365][T13084] should_failslab+0xc2/0x120 [ 495.449387][T13084] kmem_cache_alloc_noprof+0x92/0x6a0 [ 495.449409][T13084] ? security_file_alloc+0x34/0x2c0 [ 495.449431][T13084] security_file_alloc+0x34/0x2c0 [ 495.449449][T13084] init_file+0x95/0x480 [ 495.449470][T13084] alloc_empty_file+0x79/0x1c0 [ 495.449493][T13084] alloc_file_pseudo+0x183/0x290 [ 495.449516][T13084] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 495.449538][T13084] ? alloc_fd+0x471/0x7a0 [ 495.449561][T13084] sock_alloc_file+0x50/0x210 [ 495.449579][T13084] __sys_socket+0x1c0/0x260 [ 495.449597][T13084] ? xfd_validate_state+0x129/0x190 [ 495.449621][T13084] ? __pfx___sys_socket+0x10/0x10 [ 495.449654][T13084] __ia32_sys_socket+0x72/0xb0 [ 495.449675][T13084] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.449696][T13084] __do_fast_syscall_32+0x13a/0x8b0 [ 495.449716][T13084] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.449736][T13084] do_fast_syscall_32+0x32/0x70 [ 495.449755][T13084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.449774][T13084] RIP: 0023:0xf7f74fec [ 495.449792][T13084] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 495.449819][T13084] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 495.449837][T13084] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 495.449848][T13084] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 495.449858][T13084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.449867][T13084] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.449877][T13084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.449896][T13084] [ 495.456595][T13085] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 495.873725][T13105] FAULT_INJECTION: forcing a failure. [ 495.873725][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 495.873760][T13105] CPU: 2 UID: 0 PID: 13105 Comm: syz.2.1897 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.873785][T13105] Tainted: [L]=SOFTLOCKUP [ 495.873792][T13105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.873804][T13105] Call Trace: [ 495.873811][T13105] [ 495.873819][T13105] dump_stack_lvl+0x100/0x190 [ 495.873848][T13105] should_fail_ex.cold+0x5/0xa [ 495.873873][T13105] should_failslab+0xc2/0x120 [ 495.873900][T13105] kmem_cache_alloc_noprof+0x92/0x6a0 [ 495.873926][T13105] ? security_file_alloc+0x34/0x2c0 [ 495.873952][T13105] security_file_alloc+0x34/0x2c0 [ 495.873975][T13105] init_file+0x95/0x480 [ 495.874004][T13105] alloc_empty_file+0x79/0x1c0 [ 495.874034][T13105] alloc_file_pseudo+0x183/0x290 [ 495.874067][T13105] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 495.874104][T13105] ? alloc_fd+0x471/0x7a0 [ 495.874137][T13105] sock_alloc_file+0x50/0x210 [ 495.874162][T13105] __sys_socket+0x1c0/0x260 [ 495.874188][T13105] ? xfd_validate_state+0x129/0x190 [ 495.874220][T13105] ? __pfx___sys_socket+0x10/0x10 [ 495.874255][T13105] __ia32_sys_socket+0x72/0xb0 [ 495.874280][T13105] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.874305][T13105] __do_fast_syscall_32+0x13a/0x8b0 [ 495.874331][T13105] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.874358][T13105] do_fast_syscall_32+0x32/0x70 [ 495.874385][T13105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.874412][T13105] RIP: 0023:0xf7f74fec [ 495.874436][T13105] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 495.874445][T13105] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 495.874466][T13105] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 495.874479][T13105] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 495.874491][T13105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.874503][T13105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.874515][T13105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.874542][T13105] [ 496.339057][T13126] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 496.409693][T13127] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 498.208860][T13072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.380457][ T5750] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 498.469600][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1907'. [ 498.638869][T13154] FAULT_INJECTION: forcing a failure. [ 498.638869][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 498.638905][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.0.1917 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.638933][T13154] Tainted: [L]=SOFTLOCKUP [ 498.638941][T13154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.638952][T13154] Call Trace: [ 498.638960][T13154] [ 498.638969][T13154] dump_stack_lvl+0x100/0x190 [ 498.639000][T13154] should_fail_ex.cold+0x5/0xa [ 498.639029][T13154] should_failslab+0xc2/0x120 [ 498.639057][T13154] __kvmalloc_node_noprof+0x113/0x9b0 [ 498.639085][T13154] ? trace_contention_end+0x126/0x160 [ 498.639118][T13154] ? io_rsrc_data_alloc+0x2c/0xa0 [ 498.639154][T13154] io_rsrc_data_alloc+0x2c/0xa0 [ 498.639186][T13154] io_alloc_file_tables+0x27/0xb0 [ 498.639217][T13154] io_sqe_files_register+0x186/0x970 [ 498.639249][T13154] ? __pfx_io_sqe_files_register+0x10/0x10 [ 498.639283][T13154] __do_sys_io_uring_register+0xf69/0x1bc0 [ 498.639311][T13154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.639338][T13154] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 498.639364][T13154] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 498.639391][T13154] ? xfd_validate_state+0x129/0x190 [ 498.639433][T13154] __do_fast_syscall_32+0x13a/0x8b0 [ 498.639464][T13154] do_fast_syscall_32+0x32/0x70 [ 498.639500][T13154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.639527][T13154] RIP: 0023:0xf707efec [ 498.639550][T13154] Code: Unable to access opcode bytes at 0xf707efc2. [ 498.639561][T13154] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 498.639582][T13154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000002 [ 498.639597][T13154] RDX: 0000000080002d40 RSI: 0000000000000020 RDI: 0000000000000000 [ 498.639610][T13154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.639622][T13154] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 498.639634][T13154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.639662][T13154] [ 498.781562][T13162] lo speed is unknown, defaulting to 1000 [ 498.782575][T13162] lo speed is unknown, defaulting to 1000 [ 498.783583][T13162] lo speed is unknown, defaulting to 1000 [ 499.057792][T13186] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 499.061470][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 499.541388][T13216] FAULT_INJECTION: forcing a failure. [ 499.541388][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 499.541415][T13216] CPU: 2 UID: 0 PID: 13216 Comm: syz.2.1941 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.541431][T13216] Tainted: [L]=SOFTLOCKUP [ 499.541436][T13216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.541444][T13216] Call Trace: [ 499.541449][T13216] [ 499.541454][T13216] dump_stack_lvl+0x100/0x190 [ 499.541475][T13216] should_fail_ex.cold+0x5/0xa [ 499.541490][T13216] should_failslab+0xc2/0x120 [ 499.541509][T13216] kmem_cache_alloc_noprof+0x92/0x6a0 [ 499.541526][T13216] ? security_file_alloc+0x34/0x2c0 [ 499.541543][T13216] security_file_alloc+0x34/0x2c0 [ 499.541557][T13216] init_file+0x95/0x480 [ 499.541575][T13216] alloc_empty_file+0x79/0x1c0 [ 499.541593][T13216] alloc_file_pseudo+0x183/0x290 [ 499.541612][T13216] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 499.541630][T13216] ? alloc_fd+0x471/0x7a0 [ 499.541651][T13216] sock_alloc_file+0x50/0x210 [ 499.541665][T13216] __sys_socket+0x1c0/0x260 [ 499.541683][T13216] ? __pfx___sys_socket+0x10/0x10 [ 499.541711][T13216] __ia32_sys_socket+0x72/0xb0 [ 499.541732][T13216] ? lockdep_hardirqs_on+0x7d/0x110 [ 499.541754][T13216] __do_fast_syscall_32+0x13a/0x8b0 [ 499.541780][T13216] ? lockdep_hardirqs_on+0x7d/0x110 [ 499.541802][T13216] do_fast_syscall_32+0x32/0x70 [ 499.541825][T13216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.541849][T13216] RIP: 0023:0xf7f74fec [ 499.541866][T13216] Code: Unable to access opcode bytes at 0xf7f74fc2. [ 499.541872][T13216] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 499.541884][T13216] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 499.541891][T13216] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 499.541898][T13216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.541905][T13216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.541912][T13216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.541927][T13216] [ 499.766837][T13219] lo speed is unknown, defaulting to 1000 [ 499.767902][T13219] lo speed is unknown, defaulting to 1000 [ 499.768967][T13219] lo speed is unknown, defaulting to 1000 [ 499.859013][T13228] fuse: Bad value for 'fd' [ 500.104859][T13238] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 500.113806][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 502.026521][T13184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.289022][T13268] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 502.369142][T13271] FAULT_INJECTION: forcing a failure. [ 502.369142][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 502.369169][T13271] CPU: 2 UID: 0 PID: 13271 Comm: syz.0.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.369186][T13271] Tainted: [L]=SOFTLOCKUP [ 502.369191][T13271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.369198][T13271] Call Trace: [ 502.369203][T13271] [ 502.369208][T13271] dump_stack_lvl+0x100/0x190 [ 502.369229][T13271] should_fail_ex.cold+0x5/0xa [ 502.369244][T13271] should_failslab+0xc2/0x120 [ 502.369266][T13271] kmem_cache_alloc_noprof+0x92/0x6a0 [ 502.369284][T13271] ? security_file_alloc+0x34/0x2c0 [ 502.369300][T13271] security_file_alloc+0x34/0x2c0 [ 502.369318][T13271] init_file+0x95/0x480 [ 502.369343][T13271] alloc_empty_file+0x79/0x1c0 [ 502.369373][T13271] alloc_file_pseudo+0x183/0x290 [ 502.369405][T13271] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 502.369435][T13271] ? alloc_fd+0x471/0x7a0 [ 502.369461][T13271] sock_alloc_file+0x50/0x210 [ 502.369475][T13271] __sys_socket+0x1c0/0x260 [ 502.369490][T13271] ? xfd_validate_state+0x129/0x190 [ 502.369508][T13271] ? __pfx___sys_socket+0x10/0x10 [ 502.369541][T13271] __ia32_sys_socket+0x72/0xb0 [ 502.369558][T13271] ? lockdep_hardirqs_on+0x7d/0x110 [ 502.369573][T13271] __do_fast_syscall_32+0x13a/0x8b0 [ 502.369590][T13271] ? lockdep_hardirqs_on+0x7d/0x110 [ 502.369607][T13271] do_fast_syscall_32+0x32/0x70 [ 502.369623][T13271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.369638][T13271] RIP: 0023:0xf707efec [ 502.369658][T13271] Code: Unable to access opcode bytes at 0xf707efc2. [ 502.369664][T13271] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 502.369678][T13271] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 502.369686][T13271] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 502.369694][T13271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.369702][T13271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 502.369709][T13271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.369726][T13271] [ 502.996266][ T76] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 503.147962][ T76] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 503.149908][ T76] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.149960][ T76] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 503.149983][ T76] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 503.150017][ T76] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.198825][ C2] ================================================================== [ 503.198841][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 503.198876][ C2] Read of size 1 at addr ffff88805cb800e8 by task kworker/2:2/76 [ 503.198894][ C2] [ 503.198922][ C2] CPU: 2 UID: 0 PID: 76 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.198954][ C2] Tainted: [L]=SOFTLOCKUP [ 503.198962][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.198977][ C2] Workqueue: usb_hub_wq hub_event [ 503.199002][ C2] Call Trace: [ 503.199011][ C2] [ 503.199021][ C2] dump_stack_lvl+0x100/0x190 [ 503.199050][ C2] print_report+0x13d/0x4b0 [ 503.199081][ C2] ? __virt_addr_valid+0x239/0x430 [ 503.199112][ C2] ? find_endpoint+0x2a3/0x2c0 [ 503.199136][ C2] kasan_report+0xdf/0x1c0 [ 503.199166][ C2] ? find_endpoint+0x2a3/0x2c0 [ 503.199193][ C2] find_endpoint+0x2a3/0x2c0 [ 503.199219][ C2] dummy_timer+0x500/0x3700 [ 503.199246][ C2] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 503.199288][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.199313][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 503.199350][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 503.199379][ C2] ? mark_held_locks+0x40/0x70 [ 503.199409][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.199433][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 503.199460][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 503.199490][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 503.199521][ C2] handle_softirqs+0x1e6/0x9d0 [ 503.199554][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 503.199585][ C2] ? _raw_spin_unlock+0x28/0x50 [ 503.199605][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 503.199632][ C2] __irq_exit_rcu+0x16a/0x210 [ 503.199661][ C2] irq_exit_rcu+0x9/0x30 [ 503.199689][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 503.199715][ C2] [ 503.199722][ C2] [ 503.199730][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 503.199754][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 503.199778][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 48 13 f6 48 89 df e8 de 9e 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 82 02 f6 65 48 83 3d d4 33 b9 08 00 74 16 5b [ 503.199798][ C2] RSP: 0000:ffffc90000bf6b98 EFLAGS: 00000246 [ 503.199816][ C2] RAX: 0000000000000002 RBX: ffff8880240cc000 RCX: 0000000000000040 [ 503.199831][ C2] RDX: 0000000000000001 RSI: ffffffff8e392323 RDI: ffffffff8c624080 [ 503.199845][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 503.199858][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000c0000000 [ 503.199872][ C2] R13: ffff888029c5a478 R14: 0000000000000000 R15: ffff888029c5a400 [ 503.199894][ C2] dummy_urb_enqueue+0x56c/0x880 [ 503.199925][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 503.199955][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.199979][ C2] usb_submit_urb+0x827/0x19b0 [ 503.200010][ C2] ? __init_swait_queue_head+0xca/0x150 [ 503.200033][ C2] cxacru_cm+0x202/0x9a0 [ 503.200060][ C2] ? __pfx_cxacru_cm+0x10/0x10 [ 503.200083][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 503.200114][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 503.200146][ C2] cxacru_card_status+0x21/0xf0 [ 503.200172][ C2] cxacru_bind+0xa3a/0x1440 [ 503.200197][ C2] ? __pfx_cxacru_bind+0x10/0x10 [ 503.200221][ C2] usbatm_usb_probe+0x378/0x1b50 [ 503.200242][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.200263][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.200287][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 503.200312][ C2] cxacru_usb_probe+0x101/0x200 [ 503.200336][ C2] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 503.200361][ C2] ? __pm_runtime_set_status+0x13c/0x970 [ 503.200408][ C2] usb_probe_interface+0x386/0x9b0 [ 503.200438][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 503.200463][ C2] ? kernfs_put+0x3f/0x60 [ 503.200497][ C2] ? sysfs_create_link+0x68/0xc0 [ 503.200525][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 503.200551][ C2] really_probe+0x241/0xa60 [ 503.200583][ C2] __driver_probe_device+0x210/0x460 [ 503.200613][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.200636][ C2] driver_probe_device+0x4a/0x140 [ 503.200668][ C2] __device_attach_driver+0x1df/0x320 [ 503.200701][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 503.200732][ C2] bus_for_each_drv+0x159/0x1e0 [ 503.200758][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 503.200784][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.200808][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.200832][ C2] __device_attach+0x1e4/0x4d0 [ 503.200852][ C2] ? __pfx___device_attach+0x10/0x10 [ 503.200872][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.200896][ C2] device_initial_probe+0xaf/0xd0 [ 503.200917][ C2] bus_probe_device+0x64/0x160 [ 503.200946][ C2] device_add+0x121d/0x1970 [ 503.200970][ C2] ? __pfx_device_add+0x10/0x10 [ 503.200992][ C2] ? mark_held_locks+0x40/0x70 [ 503.201019][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.201047][ C2] usb_set_configuration+0xd97/0x1c60 [ 503.201078][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 503.201110][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 503.201141][ C2] usb_probe_device+0xef/0x400 [ 503.201164][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 503.201189][ C2] really_probe+0x241/0xa60 [ 503.201220][ C2] __driver_probe_device+0x210/0x460 [ 503.201249][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.201273][ C2] driver_probe_device+0x4a/0x140 [ 503.201305][ C2] __device_attach_driver+0x1df/0x320 [ 503.201337][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 503.201367][ C2] bus_for_each_drv+0x159/0x1e0 [ 503.201393][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 503.201420][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.201445][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.201470][ C2] __device_attach+0x1e4/0x4d0 [ 503.201491][ C2] ? __pfx___device_attach+0x10/0x10 [ 503.201518][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.201542][ C2] device_initial_probe+0xaf/0xd0 [ 503.201562][ C2] bus_probe_device+0x64/0x160 [ 503.201591][ C2] device_add+0x121d/0x1970 [ 503.201615][ C2] ? __pfx_device_add+0x10/0x10 [ 503.201636][ C2] ? usb_detect_static_quirks+0x335/0x3e0 [ 503.201671][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 503.201703][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.201725][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 503.201752][ C2] ? mark_held_locks+0x40/0x70 [ 503.201782][ C2] hub_event.cold+0x1e3/0xe90 [ 503.201820][ C2] ? __pfx_hub_event+0x10/0x10 [ 503.201843][ C2] ? trace_contention_end+0x170/0x1a0 [ 503.201866][ C2] ? lock_acquire+0x1d1/0x380 [ 503.201888][ C2] ? process_one_work+0xa2c/0x1b10 [ 503.201915][ C2] ? process_one_work+0x906/0x1b10 [ 503.201939][ C2] ? process_one_work+0x906/0x1b10 [ 503.201966][ C2] process_one_work+0xac7/0x1b10 [ 503.201996][ C2] ? __pfx_process_one_work+0x10/0x10 [ 503.202022][ C2] ? lock_acquire+0x1d1/0x380 [ 503.202053][ C2] ? __pfx_hub_event+0x10/0x10 [ 503.202077][ C2] worker_thread+0x5ef/0xe50 [ 503.202106][ C2] ? kthread+0x13a/0x450 [ 503.202128][ C2] ? __pfx_worker_thread+0x10/0x10 [ 503.202153][ C2] kthread+0x373/0x450 [ 503.202176][ C2] ? __pfx_kthread+0x10/0x10 [ 503.202200][ C2] ret_from_fork+0x730/0xd60 [ 503.202221][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 503.202242][ C2] ? __switch_to+0x800/0x10f0 [ 503.202268][ C2] ? __pfx_kthread+0x10/0x10 [ 503.202291][ C2] ret_from_fork_asm+0x1a/0x30 [ 503.202317][ C2] [ 503.202326][ C2] [ 503.202331][ C2] Allocated by task 12954: [ 503.202342][ C2] kasan_save_stack+0x30/0x50 [ 503.202367][ C2] kasan_save_track+0x14/0x30 [ 503.202391][ C2] __kasan_kmalloc+0xaa/0xb0 [ 503.202415][ C2] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 503.202436][ C2] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 503.202458][ C2] ipv6_add_dev+0xb87/0x1520 [ 503.202483][ C2] addrconf_notify+0x5db/0x1ba0 [ 503.202508][ C2] notifier_call_chain+0x99/0x3f0 [ 503.202529][ C2] call_netdevice_notifiers_info+0xbe/0x110 [ 503.202554][ C2] register_netdevice+0x1998/0x25a0 [ 503.202574][ C2] ppp_dev_configure+0x8e2/0xbd0 [ 503.202592][ C2] ppp_ioctl+0x9ef/0x27b0 [ 503.202609][ C2] ppp_compat_ioctl+0x10c/0x3e0 [ 503.202626][ C2] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 503.202647][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 503.202672][ C2] do_fast_syscall_32+0x32/0x70 [ 503.202696][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.202719][ C2] [ 503.202724][ C2] Freed by task 1172: [ 503.202733][ C2] kasan_save_stack+0x30/0x50 [ 503.202757][ C2] kasan_save_track+0x14/0x30 [ 503.202782][ C2] kasan_save_free_info+0x3b/0x70 [ 503.202802][ C2] __kasan_slab_free+0x5f/0x80 [ 503.202827][ C2] kmem_cache_free_bulk+0x260/0xfb0 [ 503.202852][ C2] kvfree_rcu_bulk+0x176/0x190 [ 503.202880][ C2] kfree_rcu_monitor+0x1c2/0x2e0 [ 503.202908][ C2] process_one_work+0xac7/0x1b10 [ 503.202931][ C2] worker_thread+0x5ef/0xe50 [ 503.202953][ C2] kthread+0x373/0x450 [ 503.202972][ C2] ret_from_fork+0x730/0xd60 [ 503.202989][ C2] ret_from_fork_asm+0x1a/0x30 [ 503.203006][ C2] [ 503.203011][ C2] Last potentially related work creation: [ 503.203018][ C2] kasan_save_stack+0x30/0x50 [ 503.203042][ C2] kasan_record_aux_stack+0xa7/0xc0 [ 503.203061][ C2] kvfree_call_rcu+0x6a/0x4f0 [ 503.203078][ C2] ma_put+0xfb/0x180 [ 503.203094][ C2] __ipv6_dev_mc_dec+0x2e9/0x410 [ 503.203115][ C2] ipv6_mc_destroy_dev+0x2cd/0x690 [ 503.203139][ C2] addrconf_ifdown.isra.0+0x148a/0x1b70 [ 503.203165][ C2] addrconf_notify+0x4a3/0x1ba0 [ 503.203183][ C2] notifier_call_chain+0x99/0x3f0 [ 503.203203][ C2] call_netdevice_notifiers_info+0xbe/0x110 [ 503.203226][ C2] unregister_netdevice_many_notify+0x1149/0x2150 [ 503.203248][ C2] unregister_netdevice_queue+0x30b/0x3c0 [ 503.203268][ C2] ppp_release+0x107/0x130 [ 503.203294][ C2] __fput+0x3ff/0xb50 [ 503.203319][ C2] task_work_run+0x150/0x240 [ 503.203341][ C2] exit_to_user_mode_loop+0x1d8/0x700 [ 503.203360][ C2] __do_fast_syscall_32+0x59f/0x8b0 [ 503.203384][ C2] do_fast_syscall_32+0x32/0x70 [ 503.203408][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.203431][ C2] [ 503.203436][ C2] The buggy address belongs to the object at ffff88805cb80000 [ 503.203436][ C2] which belongs to the cache kmalloc-512 of size 512 [ 503.203453][ C2] The buggy address is located 232 bytes inside of [ 503.203453][ C2] freed 512-byte region [ffff88805cb80000, ffff88805cb80200) [ 503.203473][ C2] [ 503.203479][ C2] The buggy address belongs to the physical page: [ 503.203488][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805cb80400 pfn:0x5cb80 [ 503.203513][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 503.203529][ C2] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 503.203549][ C2] page_type: f5(slab) [ 503.203566][ C2] raw: 04fff00000000240 ffff88801c042c80 ffffea0001112010 ffffea0001513310 [ 503.203585][ C2] raw: ffff88805cb80400 0000000000100004 00000000f5000000 0000000000000000 [ 503.203604][ C2] head: 04fff00000000240 ffff88801c042c80 ffffea0001112010 ffffea0001513310 [ 503.203623][ C2] head: ffff88805cb80400 0000000000100004 00000000f5000000 0000000000000000 [ 503.203641][ C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 503.203659][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 503.203670][ C2] page dumped because: kasan: bad access detected [ 503.203681][ C2] page_owner tracks the page as allocated [ 503.203688][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6084, tgid 6076 (syz.2.40), ts 68224484812 [ 503.203721][ C2] post_alloc_hook+0xfd/0x120 [ 503.203740][ C2] get_page_from_freelist+0x110d/0x35d0 [ 503.203762][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 503.203784][ C2] new_slab+0xa9/0x6e0 [ 503.203803][ C2] refill_objects+0xe3/0x410 [ 503.203823][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 503.203844][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 503.203864][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 503.203894][ C2] snd_mixer_oss_build_test_all+0xdf/0x6e0 [ 503.203924][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 503.203943][ C2] snd_mixer_oss_notify_handler+0x48d/0x990 [ 503.203964][ C2] snd_card_register+0x2af/0x760 [ 503.203988][ C2] f_midi2_bind+0x1198/0x2770 [ 503.204007][ C2] usb_add_function+0x219/0x890 [ 503.204029][ C2] configfs_composite_bind+0xd83/0x1960 [ 503.204051][ C2] gadget_bind_driver+0x28c/0xbf0 [ 503.204079][ C2] page last free pid 5744 tgid 5744 ts 48691685307 stack trace: [ 503.204093][ C2] __free_frozen_pages+0x79f/0x10f0 [ 503.204121][ C2] qlist_free_all+0x47/0xf0 [ 503.204143][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 503.204167][ C2] __kasan_slab_alloc+0x69/0x90 [ 503.204193][ C2] kmem_cache_alloc_lru_noprof+0x265/0x6a0 [ 503.204214][ C2] alloc_inode+0x68/0x250 [ 503.204230][ C2] new_inode+0x22/0x1c0 [ 503.204248][ C2] __debugfs_create_file+0xfb/0x500 [ 503.204276][ C2] debugfs_create_file_full+0x41/0x60 [ 503.204304][ C2] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 503.204325][ C2] alloc_netdev_mqs+0x314/0x15c0 [ 503.204343][ C2] __ip_tunnel_create+0x398/0x670 [ 503.204364][ C2] ip_tunnel_init_net+0x230/0x780 [ 503.204406][ C2] ops_init+0x1e2/0x5f0 [ 503.204425][ C2] setup_net+0x118/0x3a0 [ 503.204444][ C2] copy_net_ns+0x345/0x7a0 [ 503.204466][ C2] [ 503.204471][ C2] Memory state around the buggy address: [ 503.204482][ C2] ffff88805cb7ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 503.204500][ C2] ffff88805cb80000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.204514][ C2] >ffff88805cb80080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.204526][ C2] ^ [ 503.204538][ C2] ffff88805cb80100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.204552][ C2] ffff88805cb80180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.204564][ C2] ================================================================== [ 503.204574][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 503.684467][ C2] CPU: 2 UID: 0 PID: 76 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.687830][ C2] Tainted: [L]=SOFTLOCKUP [ 503.689202][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.692469][ C2] Workqueue: usb_hub_wq hub_event [ 503.694124][ C2] Call Trace: [ 503.695230][ C2] [ 503.696192][ C2] dump_stack_lvl+0x100/0x190 [ 503.697742][ C2] vpanic+0x553/0x970 [ 503.699037][ C2] ? __pfx_vpanic+0x10/0x10 [ 503.700487][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 503.702096][ C2] ? find_endpoint+0x2a3/0x2c0 [ 503.703612][ C2] panic+0xd1/0xe0 [ 503.704814][ C2] ? __pfx_panic+0x10/0x10 [ 503.706223][ C2] ? end_report.part.0+0x23/0x90 [ 503.707864][ C2] ? rcu_is_watching+0x13/0xc0 [ 503.709430][ C2] ? end_report.part.0+0x23/0x90 [ 503.711019][ C2] check_panic_on_warn.cold+0x19/0x34 [ 503.712837][ C2] end_report.part.0+0x3a/0x90 [ 503.714358][ C2] kasan_report.cold+0xe/0x18 [ 503.715826][ C2] ? find_endpoint+0x2a3/0x2c0 [ 503.717340][ C2] find_endpoint+0x2a3/0x2c0 [ 503.718833][ C2] dummy_timer+0x500/0x3700 [ 503.720224][ C2] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 503.722251][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.723986][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 503.725709][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 503.727338][ C2] ? mark_held_locks+0x40/0x70 [ 503.729022][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.730950][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 503.732532][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 503.734115][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 503.735974][ C2] handle_softirqs+0x1e6/0x9d0 [ 503.738025][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 503.739851][ C2] ? _raw_spin_unlock+0x28/0x50 [ 503.741368][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 503.743088][ C2] __irq_exit_rcu+0x16a/0x210 [ 503.744553][ C2] irq_exit_rcu+0x9/0x30 [ 503.745958][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 503.747664][ C2] [ 503.748640][ C2] [ 503.749574][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 503.751419][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 503.753420][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 48 13 f6 48 89 df e8 de 9e 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 82 02 f6 65 48 83 3d d4 33 b9 08 00 74 16 5b [ 503.759371][ C2] RSP: 0000:ffffc90000bf6b98 EFLAGS: 00000246 [ 503.761254][ C2] RAX: 0000000000000002 RBX: ffff8880240cc000 RCX: 0000000000000040 [ 503.763993][ C2] RDX: 0000000000000001 RSI: ffffffff8e392323 RDI: ffffffff8c624080 [ 503.766552][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 503.769199][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000c0000000 [ 503.771781][ C2] R13: ffff888029c5a478 R14: 0000000000000000 R15: ffff888029c5a400 [ 503.774588][ C2] dummy_urb_enqueue+0x56c/0x880 [ 503.776543][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 503.778215][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.779754][ C2] usb_submit_urb+0x827/0x19b0 [ 503.781227][ C2] ? __init_swait_queue_head+0xca/0x150 [ 503.782898][ C2] cxacru_cm+0x202/0x9a0 [ 503.784195][ C2] ? __pfx_cxacru_cm+0x10/0x10 [ 503.785669][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 503.787295][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 503.788957][ C2] cxacru_card_status+0x21/0xf0 [ 503.790434][ C2] cxacru_bind+0xa3a/0x1440 [ 503.791826][ C2] ? __pfx_cxacru_bind+0x10/0x10 [ 503.793393][ C2] usbatm_usb_probe+0x378/0x1b50 [ 503.795153][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.797165][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.798865][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 503.800509][ C2] cxacru_usb_probe+0x101/0x200 [ 503.802003][ C2] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 503.803667][ C2] ? __pm_runtime_set_status+0x13c/0x970 [ 503.805388][ C2] usb_probe_interface+0x386/0x9b0 [ 503.806964][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 503.808723][ C2] ? kernfs_put+0x3f/0x60 [ 503.810057][ C2] ? sysfs_create_link+0x68/0xc0 [ 503.811544][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 503.813385][ C2] really_probe+0x241/0xa60 [ 503.814961][ C2] __driver_probe_device+0x210/0x460 [ 503.816748][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.818708][ C2] driver_probe_device+0x4a/0x140 [ 503.820281][ C2] __device_attach_driver+0x1df/0x320 [ 503.821949][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 503.823758][ C2] bus_for_each_drv+0x159/0x1e0 [ 503.825272][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 503.826946][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.828593][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.830378][ C2] __device_attach+0x1e4/0x4d0 [ 503.831999][ C2] ? __pfx___device_attach+0x10/0x10 [ 503.833624][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.835197][ C2] device_initial_probe+0xaf/0xd0 [ 503.836740][ C2] bus_probe_device+0x64/0x160 [ 503.838285][ C2] device_add+0x121d/0x1970 [ 503.839737][ C2] ? __pfx_device_add+0x10/0x10 [ 503.841300][ C2] ? mark_held_locks+0x40/0x70 [ 503.842851][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.844696][ C2] usb_set_configuration+0xd97/0x1c60 [ 503.846314][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 503.848211][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 503.849846][ C2] usb_probe_device+0xef/0x400 [ 503.851517][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 503.853320][ C2] really_probe+0x241/0xa60 [ 503.854720][ C2] __driver_probe_device+0x210/0x460 [ 503.856314][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 503.858328][ C2] driver_probe_device+0x4a/0x140 [ 503.859948][ C2] __device_attach_driver+0x1df/0x320 [ 503.861569][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 503.863312][ C2] bus_for_each_drv+0x159/0x1e0 [ 503.864833][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 503.866547][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.868252][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 503.870129][ C2] __device_attach+0x1e4/0x4d0 [ 503.871640][ C2] ? __pfx___device_attach+0x10/0x10 [ 503.873200][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.874765][ C2] device_initial_probe+0xaf/0xd0 [ 503.876258][ C2] bus_probe_device+0x64/0x160 [ 503.877766][ C2] device_add+0x121d/0x1970 [ 503.879141][ C2] ? __pfx_device_add+0x10/0x10 [ 503.880609][ C2] ? usb_detect_static_quirks+0x335/0x3e0 [ 503.882307][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 503.883962][ C2] ? do_raw_spin_lock+0x128/0x260 [ 503.885933][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 503.887684][ C2] ? mark_held_locks+0x40/0x70 [ 503.889232][ C2] hub_event.cold+0x1e3/0xe90 [ 503.890727][ C2] ? __pfx_hub_event+0x10/0x10 [ 503.892253][ C2] ? trace_contention_end+0x170/0x1a0 [ 503.894135][ C2] ? lock_acquire+0x1d1/0x380 [ 503.895587][ C2] ? process_one_work+0xa2c/0x1b10 [ 503.897145][ C2] ? process_one_work+0x906/0x1b10 [ 503.898787][ C2] ? process_one_work+0x906/0x1b10 [ 503.900393][ C2] process_one_work+0xac7/0x1b10 [ 503.901899][ C2] ? __pfx_process_one_work+0x10/0x10 [ 503.903564][ C2] ? lock_acquire+0x1d1/0x380 [ 503.905142][ C2] ? __pfx_hub_event+0x10/0x10 [ 503.906631][ C2] worker_thread+0x5ef/0xe50 [ 503.908120][ C2] ? kthread+0x13a/0x450 [ 503.909458][ C2] ? __pfx_worker_thread+0x10/0x10 [ 503.911033][ C2] kthread+0x373/0x450 [ 503.912351][ C2] ? __pfx_kthread+0x10/0x10 [ 503.913884][ C2] ret_from_fork+0x730/0xd60 [ 503.915363][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 503.916965][ C2] ? __switch_to+0x800/0x10f0 [ 503.918431][ C2] ? __pfx_kthread+0x10/0x10 [ 503.919873][ C2] ret_from_fork_asm+0x1a/0x30 [ 503.921388][ C2] [ 503.923017][ C2] Kernel Offset: disabled [ 503.924466][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:41:42 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff8edf7b40 RCX=ffff888028911e48 RDX=ffffffff8edf7bb0 RSI=ffffffff8c624000 RDI=ffffffff8edf7bb0 RBP=0000000000000001 RSP=ffffc90005537800 R8 =0000000000000000 R9 =fffffbfff228b14b R10=ffffffff91458a5f R11=0000000000000000 R12=0000000000000000 R13=ffff888027730000 R14=ffff88802b23c040 R15=0000000000001305 RIP=ffffffff81efb0f7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5414ff4 CR3=000000005cc27000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cf04b00 RSI=ffffffff81b67e9e RDI=ffff88801cf04b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74353f4 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b00b15 RDI=ffffffff9bc654a0 RBP=ffffffff9bc65460 RSP=ffffc900005483c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000079 R14=0000000000000000 R15=ffffc900005486e0 RIP=ffffffff85b00b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a8525fca58 CR3=000000005b43b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=00000075230bcd3f RCX=1ffff110056a50aa RDX=0000000000000000 RSI=ffffffff81f6ff2d RDI=ffff88802b528550 RBP=ffff88804c2eb538 RSP=ffffc900005cfcb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802b528940 R13=0000000000000001 R14=ffff88802b528500 R15=ffffffff948d6500 RIP=ffffffff81f6ff65 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476288 CR3=0000000025cf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c6564e5c50 000055c6564e5c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e61bf00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a73676e697274 7320656369766564 204253552077654e 203a312d35206273 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2033207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 31206769666e6f63 203a312d35206273 75205d3637542020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000