last executing test programs: 50.42768071s ago: executing program 0 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0xdffffffb, 0x8a3c0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f00000001c0)=0x572eef91) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x3f0, 0x20a, 0x278, 0x3f0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b, 0x0, {0x1000000}}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x79c, [0x2, 0x1b5], 0x3, 0x10, 0x2, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, @empty, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, @dev={0xfe, 0x80, '\x00', 0x11}], 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x514) close(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001a800000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a320000000009"], 0xd8}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="660024bc0a13b21a87161108ed27f2f88ba8721e3ed876258a4c7b94cb6ae855d404c75e7ce9d571c56cf76c561c08c5ce627b1c9f4273fcceb71bcf26a995527640851069596c33ed96eb91d5990a93e73fb30b6025b7d59e82638116a6038695dc6d8d961a4ec88d1d8b1768138b193d9b0f6751112a8df66a8a1932265a8c6093d19ef1af", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_emit_ethernet(0x4e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400064000000059078ac1414026401010044140503e000000200000000ac1e000100000000830301004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000036f800000"], 0x0) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0xff8d, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x9, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r8, 0xa64c000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010001fffe2ffffff00000000000000fd", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r9, @ANYBLOB="08000700e0000001", @ANYRESOCT=r6, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0) 50.178880419s ago: executing program 0 (id=123): r0 = gettid() kcmp(0x0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 50.127917193s ago: executing program 0 (id=124): r0 = gettid() kcmp(0x0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (fail_nth: 1) 50.047120185s ago: executing program 0 (id=126): r0 = gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) r4 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x82, 0x80) mkdirat(r4, &(0x7f0000000180)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r5, 0xfffffffffffffffe, 0x29) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x23aa827d, 0x3}) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 49.138775764s ago: executing program 0 (id=139): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000328bd7006fcdbdf251500000014005e00ff01000000000000000000000000000100000000a216f90206af3cf7d305a7d6db5751993434637a0827cd237367c312091dc8b2122d87e4fa5fd861a5630904539d85294f99576e81b79e438359bd190e961a65eb368187666b0ecae67e5f5cc26dd3241896a3f7f9ea8794c8ae45bc92a8f29fe34e626b8553b7f486cebf11f55e5177001bc9c05a6b98480fc831b1260e2cc5b6000000"], 0x28}, 0x1, 0x0, 0x0, 0x44008004}, 0x8054) syz_open_dev$dri(0x0, 0x1, 0x101001) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) inotify_init() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 48.886907037s ago: executing program 0 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 5) 48.810480489s ago: executing program 32 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x3a}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 5) 7.812792493s ago: executing program 1 (id=352): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004000000000000000000001090220000101008032090400000208065000070581020002"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 4.641896738s ago: executing program 1 (id=369): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x0, 0x1, 0x5, 0x406, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1002}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)='#)\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xe1e, @local, 0x3}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) socket(0x400000000010, 0x3, 0x0) 4.048181578s ago: executing program 3 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') (fail_nth: 2) 3.91729123s ago: executing program 3 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0xfdf0, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x1) close(r3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000240)={0xa, {0x8, 0x7a, 0x9}}, 0xa) (async) r6 = geteuid() quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, r6, &(0x7f0000000280)) (async) write$fb(r2, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000080)={0x0, 0x5e, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x80) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_DEBUG(r11, 0x324, 0x1) 3.716355368s ago: executing program 1 (id=377): r0 = socket$inet6(0xa, 0x6, 0x800000a) bind$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) openat$audio(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1e, 0x514b, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x66, 0x0, 0x10, 0x21375f522cb34fb4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$int_out(r1, 0x2, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newaddr={0x18, 0x14, 0x200, 0x70bd27, 0x25dfdbfc, {0x2, 0x18, 0x0, 0xfe, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004810) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.592667218s ago: executing program 1 (id=378): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004000000000000000000001090220000101008032090400000208065000070581020002"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2.969025883s ago: executing program 3 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x87) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000080)=0x3ff, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r1, &(0x7f0000002740)={0x2020}, 0x2020) 2.517881596s ago: executing program 3 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) read$char_usb(r3, 0x0, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x103) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0xe6, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x6}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 2.208626886s ago: executing program 3 (id=394): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r3, &(0x7f0000000200)='atkbd', 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x2000000effdffff, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x800000}]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 1.689132462s ago: executing program 2 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000214020000060a010400000000000000000500000a0900010073797a30000000000900020073797a3000000000e8010480e40101800e000100696d6d656469617465000000d00102800800014000000000100002800c0002"], 0x2b8}}, 0x0) (fail_nth: 5) 1.688754085s ago: executing program 2 (id=399): socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x8d) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0x10001, 0x1fd3, 0x4f, "0d8c6b00000000580d0c000000b947ff9cfaff", 0x9, 0x140220}) 949.001726ms ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x87) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000080)=0x3ff, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r1, &(0x7f0000002740)={0x2020}, 0x2020) 689.03062ms ago: executing program 2 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) read$char_usb(r3, 0x0, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x103) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00'}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0xe6, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x6}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 633.309636ms ago: executing program 4 (id=403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x16}}) 619.253563ms ago: executing program 3 (id=404): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) (async) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) syz_open_dev$usbfs(0x0, 0x80, 0x113201) (async) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) (async) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "39df7c109c0ae44a", "d7cb70a11af9ee9ba93fc360f839d9ce", "e557333b", "61fd46b7c5548457"}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240), 0x106, 0x1}}, 0x20) 526.563132ms ago: executing program 4 (id=405): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x3, 0x1b1c, 0x1c03, 0x0, 0x0, "0600ff0901a1010902150026ff007508954081020903750895409102c0"}}, 0x135) read(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) read(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, {0x40, "fe0300"/64}}, 0x46) 478.876405ms ago: executing program 1 (id=406): r0 = socket$inet6(0xa, 0x6, 0x800000a) bind$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) openat$audio(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x10, 0x1e, 0x514b, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x66, 0x0, 0x10, 0x21375f522cb34fb4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$int_out(r1, 0x2, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newaddr={0x18, 0x14, 0x200, 0x70bd27, 0x25dfdbfc, {0x2, 0x18, 0x0, 0xfe, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004810) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 478.598351ms ago: executing program 4 (id=407): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000002, 0x0, 0x18d8}]}) poll(&(0x7f0000000040)=[{r2, 0x80}, {r2, 0x34c8}, {r2}], 0x3, 0x50000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r4, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) 453.847028ms ago: executing program 2 (id=408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_pts(r0, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000200), 0x200400, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace2617cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005cccad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000040000000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x1a21, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x59, 0xa}, @enum64={0x4, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x10, 0x18, 0x7fff}, {0x7, 0x8, 0xb0cd}, {0x3, 0x8, 0x7}]}]}, {0x0, [0x5f]}}, &(0x7f0000000540)=""/129, 0x93, 0x81, 0x1, 0x9, 0x10000, @value=r3}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000010000900000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387087ce5947fd5a7ff", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2c, &(0x7f0000000700)=0x844, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f00000007c0)={r10, 0x3, 0xf, 0x6, &(0x7f0000000780)=[{0x1, 0x5, 0x4ff, 0x7}, {0x0, 0xfff8, 0x7fff, 0x7}, {0xfffd, 0x7fff, 0x0, 0x1}, {0x8001, 0x68, 0x7, 0x10}, {0xa, 0x501, 0x7, 0x1}, {0xff01, 0x7, 0x400, 0x1}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) 248.709917ms ago: executing program 4 (id=409): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000000000000200000400000000000000000300000000000075"], 0x0, 0x5b}, 0x28) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) fcntl$addseals(r3, 0x409, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r5, &(0x7f0000000140)=""/213, 0xd5, 0x83) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_LABELS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8020}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x524, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x400}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4048800) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='t']) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) 136.83919ms ago: executing program 2 (id=410): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x80}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) r3 = socket(0x1e, 0x805, 0x0) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x5b3, 0x800, 0x100000000}, 0x4}, 0x20, 0x1, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(0x3) 112.457598ms ago: executing program 1 (id=411): socket$inet_mptcp(0x2, 0x1, 0x106) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x8d) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0x10001, 0x1fd3, 0x4f, "0d8c6b00000000580d0c000000b947ff9cfaff", 0x9, 0x140220}) 30.011334ms ago: executing program 2 (id=412): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000328bd7006fcdbdf251500000014005e00ff01000000000000000000000000000100000000a216f90206af3cf7d305a7d6db5751993434637a0827cd237367c312091dc8b2122d87e4fa5fd861a5630904539d85294f99576e81b79e438359bd190e961a65eb368187666b0ecae67e5f5cc26dd3241896a3f7f9ea8794c8ae45bc92a8f29fe34e626b8553b7f486cebf11f55e5177001bc9c05a6b98480fc831b1260e2cc5b6000000"], 0x28}, 0x1, 0x0, 0x0, 0x44008004}, 0x8054) syz_open_dev$dri(0x0, 0x1, 0x101001) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 4 (id=413): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r3, &(0x7f0000000200)='atkbd', 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x2000000effdffff, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x800000}]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fc2. [ 68.920282][ T6563] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 68.920293][ T6563] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000000000000 [ 68.920299][ T6563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.920307][ T6563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.920314][ T6563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.920320][ T6563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.920334][ T6563] [ 69.070637][ T6570] netlink: 14 bytes leftover after parsing attributes in process `syz.1.183'. [ 69.078990][ T6570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.080780][ T6570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.081983][ T6570] bond0 (unregistering): Released all slaves [ 69.219401][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.221479][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 69.221491][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 69.221630][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 69.221638][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 69.333296][ T6581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.185'. [ 69.481137][ T6584] FAULT_INJECTION: forcing a failure. [ 69.481137][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.481159][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.481174][ T6584] Tainted: [L]=SOFTLOCKUP [ 69.481178][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.481184][ T6584] Call Trace: [ 69.481188][ T6584] [ 69.481193][ T6584] dump_stack_lvl+0x100/0x190 [ 69.481211][ T6584] should_fail_ex.cold+0x5/0xa [ 69.481226][ T6584] _copy_from_user+0x2e/0xd0 [ 69.481240][ T6584] memdup_user+0x6b/0xe0 [ 69.481251][ T6584] vmci_host_unlocked_ioctl+0x13f5/0x2070 [ 69.481265][ T6584] ? get_pid_task+0x106/0x250 [ 69.481276][ T6584] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 69.481291][ T6584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.481307][ T6584] ? do_vfs_ioctl+0x226/0x13e0 [ 69.481325][ T6584] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.481344][ T6584] ? __fget_files+0x34/0x3d0 [ 69.481356][ T6584] ? find_held_lock+0x2b/0x80 [ 69.481368][ T6584] ? __fget_files+0x215/0x3d0 [ 69.481379][ T6584] ? hook_file_ioctl_common+0x140/0x440 [ 69.481398][ T6584] ? __fget_files+0x21f/0x3d0 [ 69.481411][ T6584] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 69.481424][ T6584] compat_ptr_ioctl+0x6e/0xa0 [ 69.481440][ T6584] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 69.481464][ T6584] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 69.481484][ T6584] __do_fast_syscall_32+0x13a/0x8b0 [ 69.481500][ T6584] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.481517][ T6584] do_fast_syscall_32+0x32/0x70 [ 69.481534][ T6584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.481548][ T6584] RIP: 0023:0xf7fa3fec [ 69.481560][ T6584] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 69.481565][ T6584] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.481576][ T6584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007ab [ 69.481583][ T6584] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.481589][ T6584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.481595][ T6584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.481601][ T6584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.481614][ T6584] [ 69.580359][ T6586] mac80211_hwsim hwsim11 .: renamed from wlan1 (while UP) [ 69.617856][ T6586] FAULT_INJECTION: forcing a failure. [ 69.617856][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 69.617933][ T6586] CPU: 3 UID: 0 PID: 6586 Comm: syz.4.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.617961][ T6586] Tainted: [L]=SOFTLOCKUP [ 69.617968][ T6586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.617980][ T6586] Call Trace: [ 69.617988][ T6586] [ 69.617996][ T6586] dump_stack_lvl+0x100/0x190 [ 69.618028][ T6586] should_fail_ex.cold+0x5/0xa [ 69.618056][ T6586] should_failslab+0xc2/0x120 [ 69.618082][ T6586] __kmalloc_noprof+0xfc/0x840 [ 69.618101][ T6586] ? rcu_is_watching+0x13/0xc0 [ 69.618122][ T6586] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.618147][ T6586] tomoyo_realpath_from_path+0xb6/0x690 [ 69.618173][ T6586] tomoyo_path_number_perm+0x23c/0x580 [ 69.618200][ T6586] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.618228][ T6586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.618254][ T6586] ? futex_wait+0x11e/0x370 [ 69.618285][ T6586] ? __lock_acquire+0x5c0/0x1f40 [ 69.618322][ T6586] ? __fget_files+0x34/0x3d0 [ 69.618344][ T6586] ? find_held_lock+0x2b/0x80 [ 69.618363][ T6586] ? __fget_files+0x215/0x3d0 [ 69.618382][ T6586] ? hook_file_ioctl_common+0x140/0x440 [ 69.618418][ T6586] ? __fget_files+0x215/0x3d0 [ 69.618444][ T6586] ? __fget_files+0x21f/0x3d0 [ 69.618470][ T6586] security_file_ioctl_compat+0xd3/0x230 [ 69.618502][ T6586] __ia32_compat_sys_ioctl+0xc2/0x360 [ 69.618538][ T6586] __do_fast_syscall_32+0x13a/0x8b0 [ 69.618571][ T6586] do_fast_syscall_32+0x32/0x70 [ 69.618600][ T6586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.618624][ T6586] RIP: 0023:0xf7fa3fec [ 69.618646][ T6586] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 69.618655][ T6586] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.618675][ T6586] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800c6613 [ 69.618688][ T6586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.618700][ T6586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.618712][ T6586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.618725][ T6586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.618750][ T6586] [ 69.618833][ T6586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.753508][ T6589] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.188'. [ 69.757674][ T6589] EXT4-fs (nbd3): unable to read superblock [ 69.904956][ T5736] Bluetooth: hci2: command tx timeout [ 70.098152][ T6591] FAULT_INJECTION: forcing a failure. [ 70.098152][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 70.098174][ T6591] CPU: 3 UID: 0 PID: 6591 Comm: syz.3.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.098189][ T6591] Tainted: [L]=SOFTLOCKUP [ 70.098193][ T6591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.098200][ T6591] Call Trace: [ 70.098204][ T6591] [ 70.098208][ T6591] dump_stack_lvl+0x100/0x190 [ 70.098226][ T6591] should_fail_ex.cold+0x5/0xa [ 70.098238][ T6591] ? __netlink_lookup+0x652/0x900 [ 70.098252][ T6591] should_failslab+0xc2/0x120 [ 70.098267][ T6591] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.098288][ T6591] ? skb_clone+0x190/0x400 [ 70.098305][ T6591] skb_clone+0x190/0x400 [ 70.098320][ T6591] netlink_deliver_tap+0xaed/0xcc0 [ 70.098340][ T6591] netlink_unicast+0x62b/0x850 [ 70.098355][ T6591] ? __pfx_netlink_unicast+0x10/0x10 [ 70.098371][ T6591] netlink_sendmsg+0x8b0/0xda0 [ 70.098386][ T6591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.098401][ T6591] ? apparmor_socket_sendmsg+0x165/0x280 [ 70.098418][ T6591] ____sys_sendmsg+0xa4d/0xbe0 [ 70.098427][ T6591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.098441][ T6591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.098457][ T6591] ___sys_sendmsg+0x190/0x1e0 [ 70.098470][ T6591] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.098487][ T6591] ? find_held_lock+0x2b/0x80 [ 70.098507][ T6591] __sys_sendmsg+0x160/0x210 [ 70.098522][ T6591] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.098540][ T6591] ? __pfx_ksys_write+0x10/0x10 [ 70.098554][ T6591] __do_fast_syscall_32+0x13a/0x8b0 [ 70.098572][ T6591] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.098589][ T6591] do_fast_syscall_32+0x32/0x70 [ 70.098606][ T6591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.098620][ T6591] RIP: 0023:0xf70aefec [ 70.098631][ T6591] Code: Unable to access opcode bytes at 0xf70aefc2. [ 70.098636][ T6591] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 70.098647][ T6591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 70.098654][ T6591] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.098660][ T6591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.098666][ T6591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.098672][ T6591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.098686][ T6591] [ 70.246373][ T6600] netlink: 'syz.1.193': attribute type 13 has an invalid length. [ 70.246393][ T6600] netlink: 'syz.1.193': attribute type 12 has an invalid length. [ 70.488540][ T6611] FAULT_INJECTION: forcing a failure. [ 70.488540][ T6611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.488572][ T6611] CPU: 3 UID: 0 PID: 6611 Comm: syz.4.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.488596][ T6611] Tainted: [L]=SOFTLOCKUP [ 70.488603][ T6611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.488613][ T6611] Call Trace: [ 70.488620][ T6611] [ 70.488627][ T6611] dump_stack_lvl+0x100/0x190 [ 70.488662][ T6611] should_fail_ex.cold+0x5/0xa [ 70.488685][ T6611] _copy_from_user+0x2e/0xd0 [ 70.488708][ T6611] dev_ethtool+0x16a/0x6bb0 [ 70.488737][ T6611] ? tomoyo_path_number_perm+0x46d/0x580 [ 70.488790][ T6611] ? stack_trace_save+0x8e/0xc0 [ 70.488811][ T6611] ? __pfx_stack_trace_save+0x10/0x10 [ 70.488835][ T6611] ? __pfx_dev_ethtool+0x10/0x10 [ 70.488865][ T6611] ? tomoyo_path_number_perm+0x46d/0x580 [ 70.488890][ T6611] ? kasan_save_stack+0x3f/0x50 [ 70.488909][ T6611] ? kasan_save_stack+0x30/0x50 [ 70.488932][ T6611] ? kasan_save_track+0x14/0x30 [ 70.488951][ T6611] ? kasan_save_free_info+0x3b/0x70 [ 70.488974][ T6611] ? __kasan_slab_free+0x5f/0x80 [ 70.488998][ T6611] ? kfree+0x22b/0x6d0 [ 70.489022][ T6611] ? tomoyo_path_number_perm+0x46d/0x580 [ 70.489045][ T6611] ? security_file_ioctl_compat+0xd3/0x230 [ 70.489068][ T6611] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 70.489096][ T6611] ? __do_fast_syscall_32+0x13a/0x8b0 [ 70.489123][ T6611] ? do_fast_syscall_32+0x32/0x70 [ 70.489147][ T6611] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.489197][ T6611] ? kasan_quarantine_put+0x104/0x240 [ 70.489217][ T6611] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.489246][ T6611] ? __lock_acquire+0x5c0/0x1f40 [ 70.489272][ T6611] ? tomoyo_path_number_perm+0x188/0x580 [ 70.489303][ T6611] ? lock_acquire+0x1d1/0x380 [ 70.489326][ T6611] ? dev_load+0x2a/0x240 [ 70.489348][ T6611] ? find_held_lock+0x2b/0x80 [ 70.489366][ T6611] ? dev_load+0x8e/0x240 [ 70.489386][ T6611] ? dev_load+0x8e/0x240 [ 70.489413][ T6611] dev_ioctl+0x63b/0x1070 [ 70.489438][ T6611] compat_sock_ioctl+0x4f9/0x760 [ 70.489462][ T6611] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 70.489479][ T6611] ? hook_file_ioctl_common+0x140/0x440 [ 70.489511][ T6611] ? __fget_files+0x21f/0x3d0 [ 70.489534][ T6611] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 70.489554][ T6611] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 70.489586][ T6611] __do_fast_syscall_32+0x13a/0x8b0 [ 70.489612][ T6611] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.489639][ T6611] do_fast_syscall_32+0x32/0x70 [ 70.489665][ T6611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.489687][ T6611] RIP: 0023:0xf7fa3fec [ 70.489706][ T6611] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 70.489714][ T6611] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.489731][ T6611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 70.489742][ T6611] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.489753][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.489763][ T6611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.489773][ T6611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.489796][ T6611] [ 70.545132][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.871496][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.871570][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.877374][ T61] cfg80211: failed to load regulatory.db [ 71.194891][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 71.197429][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 71.197455][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 71.200709][ T6622] netlink: zone id is out of range [ 71.200721][ T6622] netlink: zone id is out of range [ 71.200727][ T6622] netlink: zone id is out of range [ 71.200885][ T6622] netlink: zone id is out of range [ 71.200890][ T6622] netlink: zone id is out of range [ 71.200894][ T6622] netlink: zone id is out of range [ 71.201113][ T6622] netlink: get zone limit has 4 unknown bytes [ 71.201275][ T10] usb 6-1: string descriptor 0 read error: -22 [ 71.201331][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.206212][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 71.206232][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 71.206485][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 71.220443][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.221240][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 71.221264][ T10] usb 6-1: media controller created [ 71.221489][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221498][ T10] dw2102: i2c transfer failed. [ 71.221513][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221519][ T10] dw2102: i2c transfer failed. [ 71.221524][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221531][ T10] dw2102: i2c transfer failed. [ 71.221539][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221547][ T10] dw2102: i2c transfer failed. [ 71.221555][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221564][ T10] dw2102: i2c transfer failed. [ 71.221572][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 71.221581][ T10] dw2102: i2c transfer failed. [ 71.221587][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 71.240430][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.251594][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 71.251605][ T10] dw2102: command 0x0e transfer failed. [ 71.251610][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 71.251616][ T10] dw2102: command 0x0e transfer failed. [ 71.321074][ T6625] FAULT_INJECTION: forcing a failure. [ 71.321074][ T6625] name failslab, interval 1, probability 0, space 0, times 0 [ 71.321107][ T6625] CPU: 3 UID: 0 PID: 6625 Comm: syz.3.203 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.321132][ T6625] Tainted: [L]=SOFTLOCKUP [ 71.321139][ T6625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.321149][ T6625] Call Trace: [ 71.321156][ T6625] [ 71.321163][ T6625] dump_stack_lvl+0x100/0x190 [ 71.321194][ T6625] should_fail_ex.cold+0x5/0xa [ 71.321216][ T6625] should_failslab+0xc2/0x120 [ 71.321240][ T6625] __kmalloc_noprof+0xfc/0x840 [ 71.321260][ T6625] ? rcu_is_watching+0x13/0xc0 [ 71.321279][ T6625] ? tomoyo_realpath_from_path+0xb6/0x690 [ 71.321302][ T6625] tomoyo_realpath_from_path+0xb6/0x690 [ 71.321326][ T6625] tomoyo_check_open_permission+0x2af/0x3c0 [ 71.321354][ T6625] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 71.321379][ T6625] ? __lock_acquire+0x5c0/0x1f40 [ 71.321411][ T6625] ? hook_file_open+0x248/0x8e0 [ 71.321455][ T6625] ? path_get+0x61/0x80 [ 71.321482][ T6625] tomoyo_file_open+0x6b/0x90 [ 71.321505][ T6625] security_file_open+0xb5/0x1e0 [ 71.321523][ T6625] do_dentry_open+0x588/0x14d0 [ 71.321550][ T6625] vfs_open+0x82/0x3f0 [ 71.321578][ T6625] path_openat+0x19fa/0x2440 [ 71.321602][ T6625] ? __pfx_path_openat+0x10/0x10 [ 71.321631][ T6625] do_file_open+0x20e/0x430 [ 71.321655][ T6625] ? __pfx_do_file_open+0x10/0x10 [ 71.321695][ T6625] ? _raw_spin_unlock+0x28/0x50 [ 71.321718][ T6625] ? alloc_fd+0x471/0x7a0 [ 71.321747][ T6625] do_sys_openat2+0x10f/0x1e0 [ 71.321772][ T6625] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.321801][ T6625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.321833][ T6625] __ia32_compat_sys_openat+0x12d/0x210 [ 71.321861][ T6625] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 71.321893][ T6625] ? fput+0x7c/0x100 [ 71.321914][ T6625] ? ksys_write+0x1ac/0x250 [ 71.321932][ T6625] ? __pfx_ksys_write+0x10/0x10 [ 71.321956][ T6625] __do_fast_syscall_32+0x13a/0x8b0 [ 71.321984][ T6625] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.322013][ T6625] do_fast_syscall_32+0x32/0x70 [ 71.322041][ T6625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.322065][ T6625] RIP: 0023:0xf70aefec [ 71.322101][ T6625] Code: Unable to access opcode bytes at 0xf70aefc2. [ 71.322110][ T6625] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 71.322129][ T6625] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 71.322141][ T6625] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.322152][ T6625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.322162][ T6625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.322173][ T6625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.322197][ T6625] [ 71.322428][ T6625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.555821][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 71.559284][ T10] dw2102: command 0x0e transfer failed. [ 71.559294][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 71.559301][ T10] dw2102: command 0x0e transfer failed. [ 71.559305][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 71.559311][ T10] dw2102: command 0x51 transfer failed. [ 71.559504][ T6638] __nla_validate_parse: 8 callbacks suppressed [ 71.559515][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 71.561166][ T6602] dvb-usb: bulk message failed: -22 (31/0) [ 71.561178][ T6602] dw2102: i2c transfer failed. [ 71.562210][ T6634] gre1: left promiscuous mode [ 71.580723][ T10] DVB: Unable to find symbol ds3000_attach() [ 71.580732][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 71.617594][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.617624][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.617643][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.617662][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.637234][ T10] rc_core: IR keymap rc-su3000 not found [ 71.637244][ T10] Registered IR keymap rc-empty [ 71.638252][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 71.653303][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 71.667377][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 71.667396][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 71.667406][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 71.674724][ T10] usb 6-1: USB disconnect, device number 4 [ 71.764944][ T61] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 71.778906][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 71.832916][ T6646] kAFS: unable to lookup cell '' [ 71.914938][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 71.916182][ T61] usb 8-1: New USB device found, idVendor=12d1, idProduct=1430, bcdDevice= 0.00 [ 71.920811][ T61] usb 8-1: config 8 has an invalid interface number: 14 but max is 1 [ 71.920835][ T61] usb 8-1: config 8 has an invalid interface number: 164 but max is 1 [ 71.920851][ T61] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 71.920865][ T61] usb 8-1: config 8 has no interface number 0 [ 71.920876][ T61] usb 8-1: config 8 has no interface number 1 [ 71.920909][ T61] usb 8-1: config 8 interface 14 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 71.920926][ T61] usb 8-1: config 8 interface 14 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 71.920943][ T61] usb 8-1: config 8 interface 14 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 71.920962][ T61] usb 8-1: config 8 interface 14 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 71.920979][ T61] usb 8-1: config 8 interface 14 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 71.921004][ T61] usb 8-1: config 8 interface 164 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 71.921024][ T61] usb 8-1: config 8 interface 164 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 71.921040][ T61] usb 8-1: config 8 interface 164 altsetting 2 has an endpoint descriptor with address 0x5C, changing to 0xC [ 71.921058][ T61] usb 8-1: config 8 interface 164 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 71.921074][ T61] usb 8-1: config 8 interface 164 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 71.921091][ T61] usb 8-1: config 8 interface 164 altsetting 2 has a duplicate endpoint with address 0x85, skipping [ 71.921108][ T61] usb 8-1: config 8 interface 164 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 71.921125][ T61] usb 8-1: config 8 interface 164 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 71.921144][ T61] usb 8-1: config 8 interface 164 altsetting 2 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 71.921163][ T61] usb 8-1: config 8 interface 164 altsetting 2 bulk endpoint 0xA has invalid maxpacket 16 [ 71.921180][ T61] usb 8-1: config 8 interface 14 has no altsetting 0 [ 71.921193][ T61] usb 8-1: config 8 interface 164 has no altsetting 0 [ 71.923969][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.923990][ T61] usb 8-1: Product: Ѓ [ 71.924001][ T61] usb 8-1: Manufacturer: 힮璌䰊캍뢐ᚫ䎚푉쪷⏈憴뜪깧뱾│ꕻ⡋Ｅ證 [ 71.924015][ T61] usb 8-1: SerialNumber: 䟨ꪥ븲谶⋱貄댑機飺㷞頳屏ﰔ꣤ᄽ뻂⩞색ڄ赗預궆ꍑ뽖顃檩籷௩쳻䔗䓣놅.ྭ㳻鵕㲛螊䌥煔晜蟾ો欤툠纱픒 [ 71.927625][ T6631] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 71.994902][ T5736] Bluetooth: hci2: command tx timeout [ 72.175421][ T43] kauditd_printk_skb: 425 callbacks suppressed [ 72.175434][ T43] audit: type=1326 audit(1789513312.905:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.175543][ T43] audit: type=1326 audit(1789513312.905:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.176120][ T43] audit: type=1326 audit(1789513312.905:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.176293][ T43] audit: type=1326 audit(1789513312.905:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.176412][ T43] audit: type=1326 audit(1789513312.905:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.176626][ T43] audit: type=1326 audit(1789513312.905:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.176810][ T43] audit: type=1326 audit(1789513312.905:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.177010][ T43] audit: type=1326 audit(1789513312.905:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.177283][ T43] audit: type=1326 audit(1789513312.905:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.177385][ T43] audit: type=1326 audit(1789513312.905:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.1.213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 72.349250][ T6662] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 72.382242][ T6664] FAULT_INJECTION: forcing a failure. [ 72.382242][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 72.382265][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.4.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.382280][ T6664] Tainted: [L]=SOFTLOCKUP [ 72.382284][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.382291][ T6664] Call Trace: [ 72.382295][ T6664] [ 72.382299][ T6664] dump_stack_lvl+0x100/0x190 [ 72.382318][ T6664] should_fail_ex.cold+0x5/0xa [ 72.382330][ T6664] ? __netlink_lookup+0x652/0x900 [ 72.382344][ T6664] should_failslab+0xc2/0x120 [ 72.382359][ T6664] kmem_cache_alloc_noprof+0x92/0x6a0 [ 72.382372][ T6664] ? skb_clone+0x190/0x400 [ 72.382388][ T6664] skb_clone+0x190/0x400 [ 72.382404][ T6664] netlink_deliver_tap+0xaed/0xcc0 [ 72.382429][ T6664] netlink_unicast+0x62b/0x850 [ 72.382444][ T6664] ? __pfx_netlink_unicast+0x10/0x10 [ 72.382461][ T6664] netlink_sendmsg+0x8b0/0xda0 [ 72.382476][ T6664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.382491][ T6664] ? apparmor_socket_sendmsg+0x165/0x280 [ 72.382509][ T6664] ____sys_sendmsg+0xa4d/0xbe0 [ 72.382518][ T6664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.382532][ T6664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.382549][ T6664] ___sys_sendmsg+0x190/0x1e0 [ 72.382576][ T6664] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.382594][ T6664] ? find_held_lock+0x2b/0x80 [ 72.382614][ T6664] __sys_sendmsg+0x160/0x210 [ 72.382629][ T6664] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.382647][ T6664] ? __pfx_ksys_write+0x10/0x10 [ 72.382662][ T6664] __do_fast_syscall_32+0x13a/0x8b0 [ 72.382678][ T6664] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.382695][ T6664] do_fast_syscall_32+0x32/0x70 [ 72.382712][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.382726][ T6664] RIP: 0023:0xf7fa3fec [ 72.382738][ T6664] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 72.382743][ T6664] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 72.382754][ T6664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080024c80 [ 72.382761][ T6664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.382767][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.382773][ T6664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.382780][ T6664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.382793][ T6664] [ 72.382843][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.215'. [ 73.307637][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.221'. [ 74.066312][ T46] rpcbind: server 127.0.0.1 not responding, timed out [ 74.068272][ T38] rpcbind: server 127.0.0.1 not responding, timed out [ 74.099875][ T5785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.174289][ T5785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.247089][ T5785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.301420][ T5785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.446763][ T5785] bridge_slave_1: left allmulticast mode [ 74.446790][ T5785] bridge_slave_1: left promiscuous mode [ 74.447835][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.453864][ T5785] bridge_slave_0: left allmulticast mode [ 74.453879][ T5785] bridge_slave_0: left promiscuous mode [ 74.454746][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.580704][ T5785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.583746][ T5785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.586104][ T5785] bond0 (unregistering): Released all slaves [ 74.773310][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.013986][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.060283][ T5785] hsr_slave_0: left promiscuous mode [ 75.065318][ T5785] hsr_slave_1: left promiscuous mode [ 75.066761][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.066789][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.073514][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.073532][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.101516][ T5785] veth1_macvtap: left promiscuous mode [ 75.101582][ T5785] veth0_macvtap: left promiscuous mode [ 75.102256][ T5785] veth1_vlan: left promiscuous mode [ 75.102444][ T5785] veth0_vlan: left promiscuous mode [ 75.116658][ T61] usb-storage 8-1:8.14: USB Mass Storage device detected [ 75.207905][ T61] usb-storage 8-1:8.164: USB Mass Storage device detected [ 75.262956][ T61] usb 8-1: USB disconnect, device number 8 [ 75.919605][ T5785] team0 (unregistering): Port device team_slave_1 removed [ 75.996592][ T5785] team0 (unregistering): Port device team_slave_0 removed [ 76.218317][ T6755] 9p: Bad value for 'wfdno' [ 76.237903][ T6752] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 76.404901][ T5822] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.555839][ T5822] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 76.556787][ T5822] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.556809][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.724588][ T6766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.832056][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 76.947709][ T6773] netlink: 'syz.2.239': attribute type 6 has an invalid length. [ 76.949154][ T6773] FAULT_INJECTION: forcing a failure. [ 76.949154][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 76.949174][ T6773] CPU: 3 UID: 0 PID: 6773 Comm: syz.2.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.949189][ T6773] Tainted: [L]=SOFTLOCKUP [ 76.949193][ T6773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.949200][ T6773] Call Trace: [ 76.949203][ T6773] [ 76.949208][ T6773] dump_stack_lvl+0x100/0x190 [ 76.949226][ T6773] should_fail_ex.cold+0x5/0xa [ 76.949241][ T6773] should_failslab+0xc2/0x120 [ 76.949278][ T6773] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.949292][ T6773] ? __pfx_map_id_range_down+0x10/0x10 [ 76.949308][ T6773] ? rcu_is_watching+0x13/0xc0 [ 76.949319][ T6773] ? security_inode_alloc+0x3b/0x2c0 [ 76.949338][ T6773] security_inode_alloc+0x3b/0x2c0 [ 76.949353][ T6773] inode_init_always_gfp+0xc6f/0xfb0 [ 76.949375][ T6773] alloc_inode+0x8e/0x250 [ 76.949391][ T6773] sock_alloc+0x44/0x280 [ 76.949407][ T6773] ? security_socket_create+0x7f/0x250 [ 76.949424][ T6773] __sock_create+0xc2/0x860 [ 76.949438][ T6773] __sys_socket+0x14d/0x260 [ 76.949449][ T6773] ? xfd_validate_state+0x129/0x190 [ 76.949465][ T6773] ? __pfx___sys_socket+0x10/0x10 [ 76.949481][ T6773] __ia32_sys_socket+0x72/0xb0 [ 76.949492][ T6773] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.949508][ T6773] __do_fast_syscall_32+0x13a/0x8b0 [ 76.949524][ T6773] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.949540][ T6773] do_fast_syscall_32+0x32/0x70 [ 76.949556][ T6773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.949570][ T6773] RIP: 0023:0xf708efec [ 76.949583][ T6773] Code: Unable to access opcode bytes at 0xf708efc2. [ 76.949588][ T6773] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 76.949599][ T6773] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 76.949605][ T6773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.949612][ T6773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.949618][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.949624][ T6773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.949637][ T6773] [ 76.949705][ T6773] socket: no more sockets [ 77.104186][ T6777] syzkaller0: entered promiscuous mode [ 77.104200][ T6777] syzkaller0: entered allmulticast mode [ 77.146749][ T6776] (syz.2.240,6776,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 77.146786][ T6776] (syz.2.240,6776,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 77.146820][ T6776] (syz.2.240,6776,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.146832][ T6776] (syz.2.240,6776,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 77.419615][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.185671][ T853] usb 9-1: USB disconnect, device number 2 [ 79.891637][ T6831] FAULT_INJECTION: forcing a failure. [ 79.891637][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 79.891698][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.4.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.891738][ T6831] Tainted: [L]=SOFTLOCKUP [ 79.891746][ T6831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.891757][ T6831] Call Trace: [ 79.891763][ T6831] [ 79.891771][ T6831] dump_stack_lvl+0x100/0x190 [ 79.891799][ T6831] should_fail_ex.cold+0x5/0xa [ 79.891822][ T6831] should_failslab+0xc2/0x120 [ 79.891846][ T6831] __kmalloc_noprof+0xfc/0x840 [ 79.891867][ T6831] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 79.891893][ T6831] blk_rq_map_user_iov+0x2a5/0x1440 [ 79.891912][ T6831] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 79.891938][ T6831] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 79.891962][ T6831] ? rcu_is_watching+0x13/0xc0 [ 79.891980][ T6831] ? trace_contention_end+0x126/0x160 [ 79.892006][ T6831] ? __mutex_lock+0x26c/0x1bd0 [ 79.892031][ T6831] ? sg_common_write.isra.0+0xb79/0x1b90 [ 79.892058][ T6831] ? find_held_lock+0x2b/0x80 [ 79.892075][ T6831] ? sg_common_write.isra.0+0xe26/0x1b90 [ 79.892097][ T6831] ? import_ubuf+0x1b6/0x220 [ 79.892118][ T6831] blk_rq_map_user_io+0x1ff/0x230 [ 79.892141][ T6831] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 79.892173][ T6831] sg_common_write.isra.0+0xf74/0x1b90 [ 79.892206][ T6831] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 79.892238][ T6831] sg_write+0x7eb/0xdb0 [ 79.892261][ T6831] ? __pfx_sg_write+0x10/0x10 [ 79.892283][ T6831] ? __pfx___futex_wait+0x10/0x10 [ 79.892306][ T6831] ? __pfx_aa_file_perm+0x10/0x10 [ 79.892345][ T6831] ? bpf_lsm_file_permission+0x9/0x10 [ 79.892367][ T6831] ? security_file_permission+0x76/0x210 [ 79.892395][ T6831] ? rw_verify_area+0xce/0x6d0 [ 79.892423][ T6831] vfs_write+0x2aa/0x1050 [ 79.892450][ T6831] ? __pfx_sg_write+0x10/0x10 [ 79.892474][ T6831] ? lock_acquire+0x1d1/0x380 [ 79.892498][ T6831] ? __fget_files+0x34/0x3d0 ** 54 printk messages dropped ** ** 164 printk messages dropped ** ** 80 printk messages dropped ** ** 121 printk messages dropped ** ** 154 printk messages dropped ** ** 125 printk messages dropped ** ** 100 printk messages dropped ** ** 168 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 122 printk messages dropped ** ** 106 printk messages dropped ** [ 80.685228][ T5948] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.834868][ T5948] usb 7-1: Using ep0 maxpacket: 32 [ 80.836637][ T5948] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 80.849049][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.849063][ T5948] usb 7-1: config 0 has no interfaces? [ 80.949051][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 80.949061][ T5948] usb 7-1: Product: syz [ 80.949068][ T5948] usb 7-1: Manufacturer: syz [ 80.949076][ T5948] usb 7-1: SerialNumber: syz [ 81.166691][ T5948] usb 7-1: config 0 descriptor?? [ 82.004998][ T5884] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 82.013914][ T6853] net_ratelimit: 54 callbacks suppressed [ 82.210331][ T5884] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 82.221585][ T5822] usb 7-1: USB disconnect, device number 2 [ 82.221954][ T5884] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.222216][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.158105][ T6877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.063764][ T10] usb 9-1: USB disconnect, device number 3 [ 85.545998][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 85.550908][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 85.564550][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. ** 1790 printk messages dropped ** [ 87.151361][ T5451] net_ratelimit: 59 callbacks suppressed [ 87.535217][ T5109] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 87.724993][ T5109] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 87.748830][ T5109] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.752559][ T5109] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.252438][ T43] kauditd_printk_skb: 197 callbacks suppressed [ 88.252448][ T43] audit: type=1326 audit(1789513328.975:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.253467][ T43] audit: type=1326 audit(1789513328.975:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.253492][ T43] audit: type=1326 audit(1789513328.975:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.253512][ T43] audit: type=1326 audit(1789513328.975:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.253847][ T43] audit: type=1326 audit(1789513328.975:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.253961][ T43] audit: type=1326 audit(1789513328.975:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.254054][ T43] audit: type=1326 audit(1789513328.975:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.254317][ T43] audit: type=1326 audit(1789513328.975:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.254413][ T43] audit: type=1326 audit(1789513328.975:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 88.254504][ T43] audit: type=1326 audit(1789513328.975:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 89.618100][ T6959] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 89.618123][ T6959] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 89.618183][ T6959] PKCS7: Unsupported data type 106 [ 89.624307][ T6959] syz_tun: left allmulticast mode [ 89.624318][ T6959] syz_tun: left promiscuous mode [ 89.624422][ T6959] bridge0: port 3(syz_tun) entered disabled state [ 89.662493][ T6959] batman_adv: batadv0: Interface deactivated: dummy0 [ 89.662509][ T6959] batman_adv: batadv0: Removing interface: dummy0 [ 89.676015][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 89.682100][ T6959] bridge_slave_0: left allmulticast mode [ 89.682118][ T6959] bridge_slave_0: left promiscuous mode [ 89.682291][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.690190][ T6959] bridge_slave_1: left allmulticast mode [ 89.690205][ T6959] bridge_slave_1: left promiscuous mode [ 89.690324][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.750822][ T6959] team0: Port device team_slave_0 removed [ 89.788691][ T6959] team0: Port device team_slave_1 removed [ 89.789657][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.789676][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.809876][ T6963] FAULT_INJECTION: forcing a failure. [ 89.809876][ T6963] name failslab, interval 1, probability 0, space 0, times 0 [ 89.809913][ T6963] CPU: 0 UID: 0 PID: 6963 Comm: syz.2.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.809943][ T6963] Tainted: [L]=SOFTLOCKUP [ 89.809952][ T6963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.809964][ T6963] Call Trace: [ 89.809972][ T6963] [ 89.809982][ T6963] dump_stack_lvl+0x100/0x190 [ 89.810017][ T6963] should_fail_ex.cold+0x5/0xa [ 89.810041][ T6963] ? __netlink_lookup+0x652/0x900 [ 89.810068][ T6963] should_failslab+0xc2/0x120 [ 89.810098][ T6963] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.810124][ T6963] ? skb_clone+0x190/0x400 [ 89.810179][ T6963] skb_clone+0x190/0x400 [ 89.810217][ T6963] netlink_deliver_tap+0xaed/0xcc0 [ 89.810249][ T6963] netlink_unicast+0x62b/0x850 [ 89.810279][ T6963] ? __pfx_netlink_unicast+0x10/0x10 [ 89.810315][ T6963] netlink_sendmsg+0x8b0/0xda0 [ 89.810346][ T6963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.810376][ T6963] ? apparmor_socket_sendmsg+0x165/0x280 [ 89.810410][ T6963] ____sys_sendmsg+0xa4d/0xbe0 [ 89.810430][ T6963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.810458][ T6963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.810495][ T6963] ___sys_sendmsg+0x190/0x1e0 [ 89.810520][ T6963] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.810558][ T6963] ? find_held_lock+0x2b/0x80 [ 89.810601][ T6963] __sys_sendmsg+0x160/0x210 [ 89.810631][ T6963] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.810669][ T6963] ? __pfx_ksys_write+0x10/0x10 [ 89.810697][ T6963] __do_fast_syscall_32+0x13a/0x8b0 [ 89.810729][ T6963] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.810763][ T6963] do_fast_syscall_32+0x32/0x70 [ 89.810797][ T6963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.810824][ T6963] RIP: 0023:0xf708efec [ 89.810847][ T6963] Code: Unable to access opcode bytes at 0xf708efc2. [ 89.810858][ T6963] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.810879][ T6963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 89.810894][ T6963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.810907][ T6963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.810919][ T6963] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.810932][ T6963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.810960][ T6963] [ 89.824345][ T6959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.824362][ T6959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.900009][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 89.904283][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 89.908486][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 90.322160][ T5948] usb 9-1: USB disconnect, device number 4 [ 91.315121][ T5948] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 91.474901][ T5948] usb 9-1: Using ep0 maxpacket: 32 [ 91.488876][ T5948] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.529053][ T5948] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.529070][ T5948] usb 9-1: config 0 has no interfaces? [ 91.566905][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.567007][ T5948] usb 9-1: Product: syz [ 91.567016][ T5948] usb 9-1: Manufacturer: syz [ 91.567024][ T5948] usb 9-1: SerialNumber: syz [ 91.861181][ T5948] usb 9-1: config 0 descriptor?? [ 92.544837][ C1] net_ratelimit: 57 callbacks suppressed [ 92.643498][ T5109] usb 9-1: USB disconnect, device number 5 [ 93.063305][ T7015] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 93.469871][ T7027] hfs: can't find a HFS filesystem on dev nbd4 [ 93.489533][ T43] kauditd_printk_skb: 174 callbacks suppressed [ 93.489545][ T43] audit: type=1804 audit(1789513334.215:828): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.297" name="/newroot/36/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 93.549147][ T7032] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 93.602591][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. ** 184 printk messages dropped ** ** 217 printk messages dropped ** ** 245 printk messages dropped ** ** 207 printk messages dropped ** ** 165 printk messages dropped ** ** 167 printk messages dropped ** ** 123 printk messages dropped ** ** 187 printk messages dropped ** ** 154 printk messages dropped ** ** 157 printk messages dropped ** ** 148 printk messages dropped ** ** 155 printk messages dropped ** ** 125 printk messages dropped ** [ 93.904907][ T6005] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 94.079427][ T7032] bond1: entered promiscuous mode [ 94.092689][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.101737][ T6005] usb 9-1: Using ep0 maxpacket: 8 [ 94.109313][ T6005] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.121421][ T6005] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.121433][ T6005] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.121446][ T6005] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.121458][ T6005] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.121489][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.422952][ T6005] usb 9-1: GET_CAPABILITIES returned 0 [ 94.422975][ T6005] usbtmc 9-1:16.0: can't read capabilities [ 94.683998][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.684303][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.877392][ T7045] netlink: 'syz.1.301': attribute type 16 has an invalid length. [ 94.877405][ T7045] netlink: 'syz.1.301': attribute type 17 has an invalid length. [ 94.885249][ T7047] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 94.885268][ T7047] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 94.885316][ T7047] PKCS7: Unsupported data type 106 [ 94.960508][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'. [ 94.960910][ T7047] bridge_slave_0: left allmulticast mode [ 94.960921][ T7047] bridge_slave_0: left promiscuous mode [ 94.961884][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.104241][ T7047] bridge_slave_1: left allmulticast mode [ 95.104256][ T7047] bridge_slave_1: left promiscuous mode [ 95.104403][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.147354][ T1690] usb 9-1: USB disconnect, device number 6 [ 95.190440][ T7047] bond0: (slave bond_slave_0): Releasing backup interface [ 95.194643][ T7047] bond0: (slave bond_slave_1): Releasing backup interface [ 95.239507][ T7047] team0: Port device team_slave_0 removed [ 95.269751][ T7047] team0: Port device team_slave_1 removed [ 95.270582][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.270593][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.282869][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.282885][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.394260][ T7066] syz.4.307 (7066): drop_caches: 2 [ 96.445074][ T5109] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.615076][ T5109] usb 6-1: Using ep0 maxpacket: 32 [ 96.616260][ T5109] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.620254][ T5109] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.620292][ T5109] usb 6-1: config 0 has no interfaces? [ 96.624995][ T5109] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.625043][ T5109] usb 6-1: Product: syz [ 96.625052][ T5109] usb 6-1: Manufacturer: syz [ 96.625059][ T5109] usb 6-1: SerialNumber: syz [ 96.707439][ T5109] usb 6-1: config 0 descriptor?? [ 96.788082][ T7075] FAULT_INJECTION: forcing a failure. [ 96.788082][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 96.788102][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.4.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.788116][ T7075] Tainted: [L]=SOFTLOCKUP [ 96.788121][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.788127][ T7075] Call Trace: [ 96.788131][ T7075] [ 96.788137][ T7075] dump_stack_lvl+0x100/0x190 [ 96.788170][ T7075] should_fail_ex.cold+0x5/0xa [ 96.788189][ T7075] should_failslab+0xc2/0x120 [ 96.788204][ T7075] __kmalloc_noprof+0xfc/0x840 [ 96.788217][ T7075] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 96.788235][ T7075] blk_rq_map_user_iov+0x2a5/0x1440 [ 96.788249][ T7075] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 96.788266][ T7075] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 96.788281][ T7075] ? rcu_is_watching+0x13/0xc0 [ 96.788292][ T7075] ? trace_contention_end+0x126/0x160 [ 96.788308][ T7075] ? __mutex_lock+0x26c/0x1bd0 [ 96.788325][ T7075] ? sg_common_write.isra.0+0xb79/0x1b90 [ 96.788340][ T7075] ? find_held_lock+0x2b/0x80 [ 96.788351][ T7075] ? sg_common_write.isra.0+0xe26/0x1b90 [ 96.788365][ T7075] ? import_ubuf+0x1b6/0x220 [ 96.788380][ T7075] blk_rq_map_user_io+0x1ff/0x230 [ 96.788395][ T7075] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 96.788415][ T7075] sg_common_write.isra.0+0xf74/0x1b90 [ 96.788436][ T7075] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 96.788457][ T7075] sg_write+0x7eb/0xdb0 [ 96.788473][ T7075] ? __pfx_sg_write+0x10/0x10 [ 96.788488][ T7075] ? __pfx___futex_wait+0x10/0x10 [ 96.788502][ T7075] ? __pfx_aa_file_perm+0x10/0x10 [ 96.788525][ T7075] ? bpf_lsm_file_permission+0x9/0x10 [ 96.788540][ T7075] ? security_file_permission+0x76/0x210 [ 96.788557][ T7075] ? rw_verify_area+0xce/0x6d0 [ 96.788574][ T7075] vfs_write+0x2aa/0x1050 [ 96.788585][ T7075] ? __pfx_sg_write+0x10/0x10 [ 96.788599][ T7075] ? lock_acquire+0x1d1/0x380 [ 96.788613][ T7075] ? __fget_files+0x34/0x3d0 [ 96.788651][ T7075] ? __pfx_vfs_write+0x10/0x10 [ 96.788663][ T7075] ? find_held_lock+0x2b/0x80 [ 96.788675][ T7075] ? __fget_files+0x215/0x3d0 [ 96.788687][ T7075] ? __fget_files+0x215/0x3d0 [ 96.788702][ T7075] ? __fget_files+0x21f/0x3d0 [ 96.788719][ T7075] ksys_write+0x12a/0x250 [ 96.788732][ T7075] ? __pfx_ksys_write+0x10/0x10 [ 96.788748][ T7075] __do_fast_syscall_32+0x13a/0x8b0 [ 96.788766][ T7075] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.788784][ T7075] do_fast_syscall_32+0x32/0x70 [ 96.788800][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.788815][ T7075] RIP: 0023:0xf7fa3fec [ 96.788828][ T7075] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 96.788833][ T7075] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 96.788844][ T7075] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 96.788851][ T7075] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.788858][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.788864][ T7075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.788870][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.788883][ T7075] [ 97.658180][ T7079] FAULT_INJECTION: forcing a failure. [ 97.658180][ T7079] name failslab, interval 1, probability 0, space 0, times 0 [ 97.658201][ T7079] CPU: 1 UID: 0 PID: 7079 Comm: syz.3.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.658217][ T7079] Tainted: [L]=SOFTLOCKUP [ 97.658222][ T7079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.658229][ T7079] Call Trace: [ 97.658233][ T7079] [ 97.658238][ T7079] dump_stack_lvl+0x100/0x190 [ 97.658257][ T7079] should_fail_ex.cold+0x5/0xa [ 97.658272][ T7079] should_failslab+0xc2/0x120 [ 97.658294][ T7079] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.658309][ T7079] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 97.658328][ T7079] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 97.658346][ T7079] idr_get_free+0x52e/0xa00 [ 97.658366][ T7079] idr_alloc_u32+0x1ac/0x320 [ 97.658384][ T7079] ? __pfx_idr_alloc_u32+0x10/0x10 [ 97.658400][ T7079] ? do_raw_spin_lock+0x128/0x260 [ 97.658422][ T7079] l2tp_session_register+0x1cd/0xf90 [ 97.658439][ T7079] ? __pfx_l2tp_session_register+0x10/0x10 [ 97.658451][ T7079] ? lockdep_init_map_type+0x5c/0x250 [ 97.658470][ T7079] pppol2tp_connect+0x15da/0x1c20 [ 97.658487][ T7079] ? __pfx_pppol2tp_connect+0x10/0x10 [ 97.658506][ T7079] ? apparmor_socket_connect+0x116/0x1f0 [ 97.658523][ T7079] __sys_connect_file+0x146/0x1a0 [ 97.658538][ T7079] __sys_connect+0x141/0x170 [ 97.658551][ T7079] ? __pfx___sys_connect+0x10/0x10 [ 97.658568][ T7079] ? __sys_setsockopt+0x139/0x190 [ 97.658585][ T7079] __ia32_sys_connect+0x71/0xb0 [ 97.658598][ T7079] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.658615][ T7079] __do_fast_syscall_32+0x13a/0x8b0 [ 97.658635][ T7079] do_fast_syscall_32+0x32/0x70 [ 97.658652][ T7079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.658666][ T7079] RIP: 0023:0xf70aefec [ 97.658679][ T7079] Code: Unable to access opcode bytes at 0xf70aefc2. [ 97.658684][ T7079] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 97.658695][ T7079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 97.658703][ T7079] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.658709][ T7079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.658716][ T7079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.658722][ T7079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.658736][ T7079] [ 97.830000][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 97.830026][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 97.904867][ C1] net_ratelimit: 101 callbacks suppressed [ 98.462445][ T5948] usb 6-1: USB disconnect, device number 5 [ 98.566301][ T43] audit: type=1326 audit(1789513339.295:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.314" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3fec code=0x0 [ 98.980281][ T7103] comedi comedi3: pcl812: I/O base address not correctly aligned [ 99.195238][ T5822] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.345784][ T5822] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 99.346875][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.346912][ T5822] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.346963][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.380108][ T5822] usb-storage 8-1:1.0: USB Mass Storage device detected [ 99.488965][ T5822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 99.658807][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 99.999243][ T5822] gspca_spca501: reg write: error -110 [ 99.999252][ T5822] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 99.999312][ T5822] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 100.272868][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 100.273468][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 101.446851][ T7126] macsec0: entered promiscuous mode [ 101.446993][ T7126] macsec0: entered allmulticast mode [ 101.447002][ T7126] veth1_macvtap: entered allmulticast mode [ 101.447795][ T7126] batman_adv: batadv0: Adding interface: macsec0 [ 101.447801][ T7126] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.448027][ T7126] batman_adv: batadv0: Interface activated: macsec0 [ 101.471777][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 101.643249][ T9] corsair-psu 0003:1B1C:1C03.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 101.847838][ T5109] usb 8-1: USB disconnect, device number 9 [ 101.924896][ T9] corsair-psu 0003:1B1C:1C03.0003: unable to query firmware (-110) [ 101.929168][ T9] corsair-psu 0003:1B1C:1C03.0003: probe with driver corsair-psu failed with error -110 [ 102.049274][ T7146] netlink: 'syz.1.332': attribute type 12 has an invalid length. [ 102.237282][ T7149] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) ** 155 printk messages dropped ** ** 282 printk messages dropped ** ** 270 printk messages dropped ** ** 289 printk messages dropped ** ** 296 printk messages dropped ** ** 305 printk messages dropped ** ** 287 printk messages dropped ** ** 309 printk messages dropped ** ** 463 printk messages dropped ** ** 251 printk messages dropped ** ** 235 printk messages dropped ** ** 262 printk messages dropped ** ** 316 printk messages dropped ** ** 305 printk messages dropped ** ** 303 printk messages dropped ** ** 295 printk messages dropped ** ** 276 printk messages dropped ** ** 313 printk messages dropped ** ** 354 printk messages dropped ** ** 289 printk messages dropped ** ** 283 printk messages dropped ** ** 298 printk messages dropped ** ** 331 printk messages dropped ** ** 296 printk messages dropped ** ** 186 printk messages dropped ** ** 287 printk messages dropped ** ** 337 printk messages dropped ** ** 317 printk messages dropped ** ** 351 printk messages dropped ** ** 349 printk messages dropped ** ** 329 printk messages dropped ** ** 259 printk messages dropped ** ** 175 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 213 printk messages dropped ** ** 168 printk messages dropped ** ** 193 printk messages dropped ** ** 147 printk messages dropped ** ** 163 printk messages dropped ** ** 344 printk messages dropped ** ** 168 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 155 printk messages dropped ** ** 179 printk messages dropped ** ** 53 printk messages dropped ** ** 727 printk messages dropped ** ** 388 printk messages dropped ** ** 381 printk messages dropped ** ** 577 printk messages dropped ** ** 359 printk messages dropped ** ** 326 printk messages dropped ** ** 344 printk messages dropped ** ** 317 printk messages dropped ** ** 214 printk messages dropped ** ** 196 printk messages dropped ** ** 156 printk messages dropped ** ** 196 printk messages dropped ** ** 449 printk messages dropped ** ** 182 printk messages dropped ** ** 167 printk messages dropped ** ** 414 printk messages dropped ** ** 337 printk messages dropped ** ** 1461 printk messages dropped ** ** 375 printk messages dropped ** ** 344 printk messages dropped ** ** 799 printk messages dropped ** ** 421 printk messages dropped ** ** 407 printk messages dropped ** ** 552 printk messages dropped ** ** 400 printk messages dropped ** ** 364 printk messages dropped ** ** 358 printk messages dropped ** ** 339 printk messages dropped ** ** 370 printk messages dropped ** ** 379 printk messages dropped ** ** 426 printk messages dropped ** ** 358 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 176 printk messages dropped ** ** 162 printk messages dropped ** ** 912 printk messages dropped ** ** 178 printk messages dropped ** ** 170 printk messages dropped ** ** 175 printk messages dropped ** ** 167 printk messages dropped ** ** 174 printk messages dropped ** ** 173 printk messages dropped ** ** 176 printk messages dropped ** ** 174 printk messages dropped ** ** 223 printk messages dropped ** ** 273 printk messages dropped ** ** 237 printk messages dropped ** ** 125 printk messages dropped ** ** 120 printk messages dropped ** ** 125 printk messages dropped ** ** 141 printk messages dropped ** ** 420 printk messages dropped ** ** 395 printk messages dropped ** ** 425 printk messages dropped ** ** 409 printk messages dropped ** ** 367 printk messages dropped ** ** 379 printk messages dropped ** ** 401 printk messages dropped ** ** 393 printk messages dropped ** ** 362 printk messages dropped ** ** 326 printk messages dropped ** ** 328 printk messages dropped ** ** 360 printk messages dropped ** ** 375 printk messages dropped ** ** 359 printk messages dropped ** ** 365 printk messages dropped ** ** 310 printk messages dropped ** ** 179 printk messages dropped ** ** 163 printk messages dropped ** ** 176 printk messages dropped ** ** 171 printk messages dropped ** ** 174 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 157 printk messages dropped ** [ 103.495443][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 103.495455][ T7169] net_ratelimit: 194 callbacks suppressed [ 103.495463][ T7169] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 103.536193][ C3] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 103.610275][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 103.724409][ T7172] team0: Port device vxcan0 removed [ 103.871787][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 103.871916][ T7174] FAULT_INJECTION: forcing a failure. [ 103.871916][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 103.871941][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.2.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.871966][ T7174] Tainted: [L]=SOFTLOCKUP [ 103.871974][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.871986][ T7174] Call Trace: [ 103.871992][ T7174] [ 103.872000][ T7174] dump_stack_lvl+0x100/0x190 [ 103.872027][ T7174] should_fail_ex.cold+0x5/0xa [ 103.872050][ T7174] should_failslab+0xc2/0x120 [ 103.872073][ T7174] __kvmalloc_node_noprof+0x113/0x9b0 [ 103.872096][ T7174] ? bucket_table_alloc.isra.0+0x88/0x460 [ 103.872120][ T7174] bucket_table_alloc.isra.0+0x88/0x460 [ 103.872141][ T7174] __rhashtable_init_noprof+0x43a/0x890 [ 103.872162][ T7174] __rhltable_init_noprof+0x28/0x70 [ 103.872180][ T7174] ? wiphy_new_nm+0x19d7/0x21a0 [ 103.872199][ T7174] sta_info_init+0x6d/0x160 [ 103.872224][ T7174] ieee80211_alloc_hw_nm+0x86b/0x2310 [ 103.872255][ T7174] mac80211_hwsim_new_radio+0x1de/0x6510 [ 103.872299][ T7174] ? __pfx__printk+0x10/0x10 [ 103.872316][ T7174] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.872349][ T7174] ? rcu_is_watching+0x13/0xc0 [ 103.872368][ T7174] ? do_trace_netlink_extack+0x72/0x1e0 [ 103.872397][ T7174] ? __nla_validate_parse+0x1e7/0x28b0 [ 103.872417][ T7174] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 103.872452][ T7174] hwsim_new_radio_nl+0xc6b/0x13f0 ** 118 printk messages dropped ** ** 139 printk messages dropped ** ** 134 printk messages dropped ** ** 140 printk messages dropped ** ** 123 printk messages dropped ** ** 147 printk messages dropped ** ** 144 printk messages dropped ** ** 152 printk messages dropped ** ** 128 printk messages dropped ** ** 129 printk messages dropped ** ** 137 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 129 printk messages dropped ** ** 131 printk messages dropped ** ** 126 printk messages dropped ** ** 130 printk messages dropped ** ** 132 printk messages dropped ** ** 130 printk messages dropped ** ** 130 printk messages dropped ** ** 137 printk messages dropped ** ** 380 printk messages dropped ** ** 129 printk messages dropped ** ** 111 printk messages dropped ** ** 97 printk messages dropped ** ** 130 printk messages dropped ** ** 151 printk messages dropped ** ** 179 printk messages dropped ** ** 178 printk messages dropped ** ** 183 printk messages dropped ** ** 179 printk messages dropped ** ** 178 printk messages dropped ** ** 179 printk messages dropped ** ** 181 printk messages dropped ** ** 205 printk messages dropped ** ** 202 printk messages dropped ** ** 377 printk messages dropped ** ** 175 printk messages dropped ** ** 149 printk messages dropped ** ** 129 printk messages dropped ** ** 151 printk messages dropped ** ** 179 printk messages dropped ** ** 183 printk messages dropped ** ** 174 printk messages dropped ** ** 338 printk messages dropped ** ** 144 printk messages dropped ** ** 125 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 126 printk messages dropped ** ** 119 printk messages dropped ** ** 146 printk messages dropped ** ** 118 printk messages dropped ** ** 126 printk messages dropped ** ** 142 printk messages dropped ** ** 125 printk messages dropped ** ** 129 printk messages dropped ** ** 134 printk messages dropped ** ** 129 printk messages dropped ** ** 140 printk messages dropped ** ** 134 printk messages dropped ** ** 138 printk messages dropped ** ** 135 printk messages dropped ** ** 130 printk messages dropped ** ** 135 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 191 printk messages dropped ** ** 152 printk messages dropped ** ** 43 printk messages dropped ** [ 104.117185][ T1690] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 104.122808][ T1690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.122833][ T1690] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.122862][ T1690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.160395][ T1690] usb-storage 6-1:1.0: USB Mass Storage device detected [ 104.229371][ T7180] FAULT_INJECTION: forcing a failure. [ 104.229371][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 104.229394][ T7180] CPU: 1 UID: 0 PID: 7180 Comm: syz.2.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.229411][ T7180] Tainted: [L]=SOFTLOCKUP [ 104.229416][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.229423][ T7180] Call Trace: [ 104.229429][ T7180] [ 104.229434][ T7180] dump_stack_lvl+0x100/0x190 [ 104.229453][ T7180] should_fail_ex.cold+0x5/0xa [ 104.229469][ T7180] should_failslab+0xc2/0x120 [ 104.229486][ T7180] __kmalloc_noprof+0xfc/0x840 [ 104.229500][ T7180] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 104.229517][ T7180] blk_rq_map_user_iov+0x2a5/0x1440 [ 104.229531][ T7180] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 104.229548][ T7180] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 104.229565][ T7180] ? rcu_is_watching+0x13/0xc0 [ 104.229576][ T7180] ? trace_contention_end+0x126/0x160 ** 73 printk messages dropped ** [ 104.230097][ T7180] Code: Unable to access opcode bytes at 0xf708efc2. ** 334 printk messages dropped ** ** 126 printk messages dropped ** ** 134 printk messages dropped ** ** 118 printk messages dropped ** ** 123 printk messages dropped ** ** 115 printk messages dropped ** ** 97 printk messages dropped ** ** 96 printk messages dropped ** ** 134 printk messages dropped ** ** 118 printk messages dropped ** ** 163 printk messages dropped ** ** 331 printk messages dropped ** ** 186 printk messages dropped ** ** 402 printk messages dropped ** ** 176 printk messages dropped ** ** 177 printk messages dropped ** ** 177 printk messages dropped ** ** 192 printk messages dropped ** ** 170 printk messages dropped ** ** 179 printk messages dropped ** ** 191 printk messages dropped ** ** 205 printk messages dropped ** ** 182 printk messages dropped ** ** 180 printk messages dropped ** ** 179 printk messages dropped ** ** 180 printk messages dropped ** ** 181 printk messages dropped ** ** 178 printk messages dropped ** ** 177 printk messages dropped ** [ 104.336734][ T6005] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 104.416961][ T1690] gspca_main: spca501-2.14.0 probing 0000:0000 [ 104.441987][ T1690] gspca_spca501: reg write: error -71 [ 104.441999][ T1690] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 104.442106][ T1690] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 104.468297][ T1690] usb 6-1: USB disconnect, device number 6 [ 104.495751][ T6005] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 104.497633][ T6005] usb 8-1: config index 0 descriptor too short (expected 50, got 32) [ 104.497658][ T6005] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.497695][ T6005] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 104.497713][ T6005] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.499678][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.499694][ T6005] usb 8-1: Product: syz [ 104.499706][ T6005] usb 8-1: Manufacturer: syz [ 104.499718][ T6005] usb 8-1: SerialNumber: syz [ 104.506080][ T7176] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.508058][ T6005] usb_debug 8-1:1.0: debug converter detected [ 104.543049][ T6005] usb 8-1: debug converter now attached to ttyUSB0 [ 104.633216][ T7182] syzkaller0: entered promiscuous mode [ 104.633232][ T7182] syzkaller0: entered allmulticast mode [ 104.677613][ T7182] input: syz0 as /devices/virtual/input/input11 [ 104.761430][ T7187] netlink: 'syz.2.344': attribute type 12 has an invalid length. [ 104.841737][ T42] usb 8-1: USB disconnect, device number 10 [ 104.854123][ T42] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 104.878093][ T7189] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 104.883598][ T42] usb_debug 8-1:1.0: device disconnected [ 105.104931][ T1690] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.158558][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 105.277071][ T7195] FAULT_INJECTION: forcing a failure. [ 105.277071][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 105.277095][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.4.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.277112][ T7195] Tainted: [L]=SOFTLOCKUP [ 105.277117][ T7195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.277125][ T7195] Call Trace: [ 105.277129][ T7195] [ 105.277136][ T7195] dump_stack_lvl+0x100/0x190 [ 105.277156][ T7195] should_fail_ex.cold+0x5/0xa [ 105.277173][ T7195] should_failslab+0xc2/0x120 [ 105.277191][ T7195] __kmalloc_noprof+0xfc/0x840 [ 105.277206][ T7195] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 105.277231][ T7195] blk_rq_map_user_iov+0x2a5/0x1440 [ 105.277247][ T7195] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 105.277265][ T7195] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 105.277283][ T7195] ? rcu_is_watching+0x13/0xc0 [ 105.277296][ T7195] ? trace_contention_end+0x126/0x160 [ 105.277317][ T7195] ? __mutex_lock+0x26c/0x1bd0 [ 105.277338][ T7195] ? sg_common_write.isra.0+0xb79/0x1b90 [ 105.277356][ T7195] ? find_held_lock+0x2b/0x80 [ 105.277368][ T7195] ? sg_common_write.isra.0+0xe26/0x1b90 [ 105.277384][ T7195] ? import_ubuf+0x1b6/0x220 [ 105.277398][ T7195] blk_rq_map_user_io+0x1ff/0x230 [ 105.277416][ T7195] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 105.277439][ T7195] sg_common_write.isra.0+0xf74/0x1b90 [ 105.277463][ T7195] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 105.277485][ T7195] sg_write+0x7eb/0xdb0 [ 105.277502][ T7195] ? __pfx_sg_write+0x10/0x10 [ 105.277518][ T7195] ? __pfx___futex_wait+0x10/0x10 [ 105.277535][ T7195] ? __pfx_aa_file_perm+0x10/0x10 [ 105.277560][ T7195] ? bpf_lsm_file_permission+0x9/0x10 [ 105.277577][ T7195] ? security_file_permission+0x76/0x210 [ 105.277597][ T7195] ? rw_verify_area+0xce/0x6d0 [ 105.277617][ T7195] vfs_write+0x2aa/0x1050 [ 105.277630][ T7195] ? __pfx_sg_write+0x10/0x10 [ 105.277645][ T7195] ? lock_acquire+0x1d1/0x380 [ 105.277662][ T7195] ? __fget_files+0x34/0x3d0 [ 105.277675][ T7195] ? __pfx_vfs_write+0x10/0x10 [ 105.277687][ T7195] ? find_held_lock+0x2b/0x80 [ 105.277699][ T7195] ? __fget_files+0x215/0x3d0 [ 105.277712][ T7195] ? __fget_files+0x215/0x3d0 [ 105.277728][ T7195] ? __fget_files+0x21f/0x3d0 [ 105.277745][ T7195] ksys_write+0x12a/0x250 [ 105.277757][ T7195] ? __pfx_ksys_write+0x10/0x10 [ 105.277774][ T7195] __do_fast_syscall_32+0x13a/0x8b0 [ 105.277793][ T7195] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.277811][ T7195] do_fast_syscall_32+0x32/0x70 [ 105.277830][ T7195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.277847][ T7195] RIP: 0023:0xf7fa3fec [ 105.277862][ T7195] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 105.277868][ T7195] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 105.277881][ T7195] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 105.277889][ T7195] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.277896][ T7195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.277904][ T7195] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.277911][ T7195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.277928][ T7195] [ 105.373943][ T1690] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 105.413451][ T1690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.413476][ T1690] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.413506][ T1690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.670160][ T1690] usb-storage 6-1:1.0: USB Mass Storage device detected [ 105.793889][ T1690] gspca_main: spca501-2.14.0 probing 0000:0000 [ 106.295240][ T1690] gspca_spca501: reg write: error -110 [ 106.295246][ T1690] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 106.295283][ T1690] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 106.339987][ T7213] FAULT_INJECTION: forcing a failure. [ 106.339987][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 106.340007][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.4.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.340023][ T7213] Tainted: [L]=SOFTLOCKUP [ 106.340027][ T7213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.340034][ T7213] Call Trace: [ 106.340038][ T7213] [ 106.340044][ T7213] dump_stack_lvl+0x100/0x190 [ 106.340064][ T7213] should_fail_ex.cold+0x5/0xa [ 106.340078][ T7213] should_failslab+0xc2/0x120 [ 106.340094][ T7213] __kmalloc_noprof+0xfc/0x840 [ 106.340108][ T7213] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 106.340125][ T7213] blk_rq_map_user_iov+0x2a5/0x1440 [ 106.340138][ T7213] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 106.340155][ T7213] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 106.340171][ T7213] ? rcu_is_watching+0x13/0xc0 [ 106.340183][ T7213] ? trace_contention_end+0x126/0x160 [ 106.340200][ T7213] ? __mutex_lock+0x26c/0x1bd0 [ 106.340216][ T7213] ? sg_common_write.isra.0+0xb79/0x1b90 [ 106.340232][ T7213] ? find_held_lock+0x2b/0x80 [ 106.340249][ T7213] ? sg_common_write.isra.0+0xe26/0x1b90 [ 106.340264][ T7213] ? import_ubuf+0x1b6/0x220 [ 106.340279][ T7213] blk_rq_map_user_io+0x1ff/0x230 [ 106.340296][ T7213] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 106.340317][ T7213] sg_common_write.isra.0+0xf74/0x1b90 [ 106.340339][ T7213] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 106.340361][ T7213] sg_write+0x7eb/0xdb0 [ 106.340377][ T7213] ? __pfx_sg_write+0x10/0x10 [ 106.340391][ T7213] ? __pfx___futex_wait+0x10/0x10 [ 106.340406][ T7213] ? __pfx_aa_file_perm+0x10/0x10 [ 106.340428][ T7213] ? bpf_lsm_file_permission+0x9/0x10 [ 106.340443][ T7213] ? security_file_permission+0x76/0x210 [ 106.340460][ T7213] ? rw_verify_area+0xce/0x6d0 [ 106.340478][ T7213] vfs_write+0x2aa/0x1050 [ 106.340489][ T7213] ? __pfx_sg_write+0x10/0x10 [ 106.340502][ T7213] ? lock_acquire+0x1d1/0x380 [ 106.340517][ T7213] ? __fget_files+0x34/0x3d0 [ 106.340528][ T7213] ? __pfx_vfs_write+0x10/0x10 [ 106.340538][ T7213] ? find_held_lock+0x2b/0x80 [ 106.340549][ T7213] ? __fget_files+0x215/0x3d0 [ 106.340560][ T7213] ? __fget_files+0x215/0x3d0 [ 106.340574][ T7213] ? __fget_files+0x21f/0x3d0 [ 106.340629][ T7213] ksys_write+0x12a/0x250 [ 106.340646][ T7213] ? __pfx_ksys_write+0x10/0x10 [ 106.340668][ T7213] __do_fast_syscall_32+0x13a/0x8b0 [ 106.340686][ T7213] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.340703][ T7213] do_fast_syscall_32+0x32/0x70 [ 106.340719][ T7213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.340734][ T7213] RIP: 0023:0xf7fa3fec [ 106.340749][ T7213] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 106.340754][ T7213] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 106.340765][ T7213] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 106.340772][ T7213] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.340778][ T7213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.340784][ T7213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.340791][ T7213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.340804][ T7213] [ 106.733744][ T7225] syz_tun: entered allmulticast mode [ 106.754151][ T7224] syz_tun: left allmulticast mode [ 106.785459][ T7230] FAULT_INJECTION: forcing a failure. [ 106.785459][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 106.785475][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.2.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.785490][ T7230] Tainted: [L]=SOFTLOCKUP [ 106.785495][ T7230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.785502][ T7230] Call Trace: [ 106.785506][ T7230] [ 106.785511][ T7230] dump_stack_lvl+0x100/0x190 [ 106.785529][ T7230] should_fail_ex.cold+0x5/0xa [ 106.785544][ T7230] should_failslab+0xc2/0x120 [ 106.785559][ T7230] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 106.785573][ T7230] ? __alloc_skb+0x140/0x710 [ 106.785590][ T7230] __alloc_skb+0x140/0x710 [ 106.785602][ T7230] ? __alloc_skb+0x5b7/0x710 [ 106.785616][ T7230] ? __pfx___alloc_skb+0x10/0x10 [ 106.785629][ T7230] ? if_nlmsg_size+0x4b/0xdc0 [ 106.785648][ T7230] rtmsg_ifinfo_build_skb+0x81/0x260 [ 106.785668][ T7230] rtnetlink_event+0x137/0x1f0 [ 106.785687][ T7230] notifier_call_chain+0x99/0x3f0 [ 106.785702][ T7230] call_netdevice_notifiers_info+0xbe/0x110 [ 106.785721][ T7230] netdev_features_change+0x79/0xa0 [ 106.785738][ T7230] ? __pfx_netdev_features_change+0x10/0x10 [ 106.785759][ T7230] dev_ethtool+0xd95/0x6bb0 [ 106.785777][ T7230] ? tomoyo_path_number_perm+0x46d/0x580 [ 106.785798][ T7230] ? __pfx_dev_ethtool+0x10/0x10 [ 106.785814][ T7230] ? tomoyo_path_number_perm+0x46d/0x580 [ 106.785830][ T7230] ? kasan_save_stack+0x3f/0x50 [ 106.785848][ T7230] ? kasan_save_track+0x14/0x30 [ 106.785861][ T7230] ? __kasan_slab_free+0x5f/0x80 [ 106.785874][ T7230] ? kfree+0x22b/0x6d0 [ 106.785888][ T7230] ? tomoyo_path_number_perm+0x46d/0x580 [ 106.785903][ T7230] ? security_file_ioctl_compat+0xd3/0x230 [ 106.785918][ T7230] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 106.785935][ T7230] ? __do_fast_syscall_32+0x13a/0x8b0 [ 106.785952][ T7230] ? do_fast_syscall_32+0x32/0x70 [ 106.785986][ T7230] ? kasan_quarantine_put+0x104/0x240 [ 106.785998][ T7230] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.786017][ T7230] ? __lock_acquire+0x5c0/0x1f40 [ 106.786034][ T7230] ? tomoyo_path_number_perm+0x188/0x580 [ 106.786053][ T7230] ? lock_acquire+0x1d1/0x380 [ 106.786068][ T7230] ? dev_load+0x2a/0x240 [ 106.786082][ T7230] ? find_held_lock+0x2b/0x80 [ 106.786093][ T7230] ? dev_load+0x8e/0x240 [ 106.786106][ T7230] ? dev_load+0x8e/0x240 [ 106.786123][ T7230] dev_ioctl+0x63b/0x1070 [ 106.786139][ T7230] compat_sock_ioctl+0x4f9/0x760 [ 106.786153][ T7230] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 106.786165][ T7230] ? hook_file_ioctl_common+0x140/0x440 [ 106.786184][ T7230] ? __fget_files+0x21f/0x3d0 [ 106.786200][ T7230] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 106.786212][ T7230] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 106.786232][ T7230] __do_fast_syscall_32+0x13a/0x8b0 [ 106.786249][ T7230] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.786265][ T7230] do_fast_syscall_32+0x32/0x70 [ 106.786283][ T7230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.786297][ T7230] RIP: 0023:0xf708efec [ 106.786309][ T7230] Code: Unable to access opcode bytes at 0xf708efc2. [ 106.786314][ T7230] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 106.786326][ T7230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 106.786333][ T7230] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.786339][ T7230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.786345][ T7230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.786352][ T7230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.786365][ T7230] [ 107.108961][ T7239] FAULT_INJECTION: forcing a failure. [ 107.108961][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 107.108983][ T7239] CPU: 2 UID: 0 PID: 7239 Comm: syz.3.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.108999][ T7239] Tainted: [L]=SOFTLOCKUP [ 107.109003][ T7239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.109010][ T7239] Call Trace: [ 107.109014][ T7239] [ 107.109035][ T7239] dump_stack_lvl+0x100/0x190 [ 107.109057][ T7239] should_fail_ex.cold+0x5/0xa [ 107.109073][ T7239] should_failslab+0xc2/0x120 [ 107.109090][ T7239] __kmalloc_noprof+0xfc/0x840 [ 107.109103][ T7239] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 107.109121][ T7239] blk_rq_map_user_iov+0x2a5/0x1440 [ 107.109135][ T7239] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 107.109150][ T7239] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 107.109165][ T7239] ? rcu_is_watching+0x13/0xc0 [ 107.109176][ T7239] ? trace_contention_end+0x126/0x160 [ 107.109192][ T7239] ? __mutex_lock+0x26c/0x1bd0 [ 107.109209][ T7239] ? sg_common_write.isra.0+0xb79/0x1b90 [ 107.109224][ T7239] ? find_held_lock+0x2b/0x80 [ 107.109235][ T7239] ? sg_common_write.isra.0+0xe26/0x1b90 [ 107.109249][ T7239] ? import_ubuf+0x1b6/0x220 [ 107.109263][ T7239] blk_rq_map_user_io+0x1ff/0x230 [ 107.109280][ T7239] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 107.109300][ T7239] sg_common_write.isra.0+0xf74/0x1b90 [ 107.109321][ T7239] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 107.109347][ T7239] sg_write+0x7eb/0xdb0 [ 107.109364][ T7239] ? __pfx_sg_write+0x10/0x10 [ 107.109379][ T7239] ? __pfx___futex_wait+0x10/0x10 [ 107.109395][ T7239] ? __pfx_aa_file_perm+0x10/0x10 [ 107.109420][ T7239] ? bpf_lsm_file_permission+0x9/0x10 [ 107.109435][ T7239] ? security_file_permission+0x76/0x210 [ 107.109455][ T7239] ? rw_verify_area+0xce/0x6d0 [ 107.109472][ T7239] vfs_write+0x2aa/0x1050 [ 107.109485][ T7239] ? __pfx_sg_write+0x10/0x10 [ 107.109498][ T7239] ? lock_acquire+0x1d1/0x380 [ 107.109512][ T7239] ? __fget_files+0x34/0x3d0 [ 107.109524][ T7239] ? __pfx_vfs_write+0x10/0x10 [ 107.109535][ T7239] ? find_held_lock+0x2b/0x80 [ 107.109546][ T7239] ? __fget_files+0x215/0x3d0 [ 107.109557][ T7239] ? __fget_files+0x215/0x3d0 [ 107.109571][ T7239] ? __fget_files+0x21f/0x3d0 [ 107.109586][ T7239] ksys_write+0x12a/0x250 [ 107.109597][ T7239] ? __pfx_ksys_write+0x10/0x10 [ 107.109612][ T7239] __do_fast_syscall_32+0x13a/0x8b0 [ 107.109629][ T7239] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.109645][ T7239] do_fast_syscall_32+0x32/0x70 [ 107.109662][ T7239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.109676][ T7239] RIP: 0023:0xf70aefec [ 107.109690][ T7239] Code: Unable to access opcode bytes at 0xf70aefc2. [ 107.109695][ T7239] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 107.109707][ T7239] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 107.109714][ T7239] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.109720][ T7239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.109727][ T7239] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.109733][ T7239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.109747][ T7239] [ 107.741267][ T1690] usb 6-1: USB disconnect, device number 7 [ 107.853804][ T7258] FAULT_INJECTION: forcing a failure. [ 107.853804][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 107.853824][ T7258] CPU: 3 UID: 0 PID: 7258 Comm: syz.2.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.853839][ T7258] Tainted: [L]=SOFTLOCKUP [ 107.853844][ T7258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.853850][ T7258] Call Trace: [ 107.853854][ T7258] [ 107.853859][ T7258] dump_stack_lvl+0x100/0x190 [ 107.853877][ T7258] should_fail_ex.cold+0x5/0xa [ 107.853892][ T7258] should_failslab+0xc2/0x120 [ 107.853907][ T7258] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 107.853921][ T7258] ? __alloc_skb+0x5b7/0x710 [ 107.853934][ T7258] ? __alloc_skb+0x140/0x710 [ 107.853950][ T7258] __alloc_skb+0x140/0x710 [ 107.853963][ T7258] ? __alloc_skb+0x5b7/0x710 [ 107.853976][ T7258] ? __pfx___alloc_skb+0x10/0x10 [ 107.853993][ T7258] alloc_skb_with_frags+0xdd/0x760 [ 107.854009][ T7258] ? __might_fault+0xc5/0x140 [ 107.854026][ T7258] ? __might_fault+0xc5/0x140 [ 107.854045][ T7258] sock_alloc_send_pskb+0x801/0x980 [ 107.854059][ T7258] ? _copy_from_iter+0x270/0x1690 [ 107.854075][ T7258] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 107.854089][ T7258] ? find_held_lock+0x2b/0x80 [ 107.854101][ T7258] ? dev_get_by_index+0x180/0x380 [ 107.854115][ T7258] ? dev_get_by_index+0x180/0x380 [ 107.854133][ T7258] packet_sendmsg+0x1ed1/0x4ef0 [ 107.854155][ T7258] ? aa_sk_perm+0x389/0xab0 [ 107.854172][ T7258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.854201][ T7258] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.854218][ T7258] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 107.854232][ T7258] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.854247][ T7258] ? aa_sock_msg_perm+0x11e/0x200 [ 107.854262][ T7258] ? apparmor_socket_sendmsg+0x165/0x280 [ 107.854278][ T7258] ____sys_sendmsg+0xa4d/0xbe0 [ 107.854293][ T7258] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.854308][ T7258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.854324][ T7258] ___sys_sendmsg+0x190/0x1e0 [ 107.854337][ T7258] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.854355][ T7258] ? find_held_lock+0x2b/0x80 [ 107.854374][ T7258] __sys_sendmsg+0x160/0x210 [ 107.854390][ T7258] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.854408][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 107.854423][ T7258] __do_fast_syscall_32+0x13a/0x8b0 [ 107.854440][ T7258] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.854458][ T7258] do_fast_syscall_32+0x32/0x70 [ 107.854475][ T7258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.854489][ T7258] RIP: 0023:0xf708efec [ 107.854501][ T7258] Code: Unable to access opcode bytes at 0xf708efc2. [ 107.854506][ T7258] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 107.854517][ T7258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 107.854525][ T7258] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.854532][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.854538][ T7258] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.854545][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.854558][ T7258] [ 107.973565][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 107.974653][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 108.324948][ T853] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.420349][ T7268] FAULT_INJECTION: forcing a failure. [ 108.420349][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.420379][ T7268] CPU: 3 UID: 0 PID: 7268 Comm: syz.3.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.420403][ T7268] Tainted: [L]=SOFTLOCKUP [ 108.420409][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.420419][ T7268] Call Trace: [ 108.420425][ T7268] [ 108.420433][ T7268] dump_stack_lvl+0x100/0x190 [ 108.420459][ T7268] should_fail_ex.cold+0x5/0xa [ 108.420483][ T7268] _copy_from_user+0x2e/0xd0 [ 108.420505][ T7268] memdup_user+0x6b/0xe0 [ 108.420522][ T7268] strndup_user+0x78/0xe0 [ 108.420538][ T7268] __ia32_sys_mount+0x136/0x310 [ 108.420562][ T7268] ? __pfx___ia32_sys_mount+0x10/0x10 [ 108.420607][ T7268] ? ksys_write+0x1ac/0x250 [ 108.420625][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 108.420647][ T7268] __do_fast_syscall_32+0x13a/0x8b0 [ 108.420672][ T7268] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.420705][ T7268] do_fast_syscall_32+0x32/0x70 [ 108.420729][ T7268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.420750][ T7268] RIP: 0023:0xf70aefec [ 108.420769][ T7268] Code: Unable to access opcode bytes at 0xf70aefc2. [ 108.420777][ T7268] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 108.420794][ T7268] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000440 [ 108.420806][ T7268] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 108.420816][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.420827][ T7268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.420837][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.420859][ T7268] [ 108.486590][ T853] usb 7-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 108.487866][ T853] usb 7-1: config index 0 descriptor too short (expected 50, got 32) [ 108.487880][ T853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.487907][ T853] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 108.487925][ T853] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.491761][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.491772][ T853] usb 7-1: Product: syz [ 108.491779][ T853] usb 7-1: Manufacturer: syz [ 108.491786][ T853] usb 7-1: SerialNumber: syz [ 108.493642][ T7265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.496820][ T853] usb_debug 7-1:1.0: debug converter detected [ 108.509561][ T853] usb 7-1: debug converter now attached to ttyUSB0 [ 108.575787][ T7276] (syz.4.375,7276,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 108.624844][ C2] net_ratelimit: 60 callbacks suppressed [ 108.647580][ T7276] o2cb: This node has not been configured. [ 108.647589][ T7276] o2cb: Cluster check failed. Fix errors before retrying. [ 108.647614][ T7276] (syz.4.375,7276,0):user_dlm_register:674 ERROR: status = -22 [ 108.647637][ T7276] (syz.4.375,7276,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 108.722390][ T5823] usb 7-1: USB disconnect, device number 3 [ 108.728135][ T5823] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 108.729901][ T5823] usb_debug 7-1:1.0: device disconnected [ 108.948918][ T7289] 9p: Bad value for 'rfdno' [ 109.049760][ T7293] FAULT_INJECTION: forcing a failure. [ 109.049760][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.049779][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.4.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.049795][ T7293] Tainted: [L]=SOFTLOCKUP [ 109.049799][ T7293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.049805][ T7293] Call Trace: [ 109.049810][ T7293] [ 109.049814][ T7293] dump_stack_lvl+0x100/0x190 [ 109.049833][ T7293] should_fail_ex.cold+0x5/0xa [ 109.049848][ T7293] strncpy_from_user+0x3b/0x2d0 [ 109.049866][ T7293] do_getname+0x78/0x390 [ 109.049883][ T7293] do_fchownat+0xc6/0x1f0 [ 109.049898][ T7293] ? __pfx_do_fchownat+0x10/0x10 [ 109.049914][ T7293] ? ksys_write+0x1ac/0x250 [ 109.049927][ T7293] __ia32_sys_lchown16+0xe6/0x120 [ 109.049945][ T7293] __do_fast_syscall_32+0x13a/0x8b0 [ 109.049962][ T7293] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.049979][ T7293] do_fast_syscall_32+0x32/0x70 [ 109.049997][ T7293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.050011][ T7293] RIP: 0023:0xf7fa3fec [ 109.050025][ T7293] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 109.050031][ T7293] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000010 [ 109.050043][ T7293] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 109.050050][ T7293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.050056][ T7293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.050063][ T7293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.050069][ T7293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.050083][ T7293] [ 109.114880][ T42] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 109.275985][ T42] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 109.277452][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.277487][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.277536][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.289563][ T42] usb-storage 6-1:1.0: USB Mass Storage device detected [ 109.321459][ T7301] netlink: 436 bytes leftover after parsing attributes in process `syz.4.385'. [ 109.321478][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 109.601686][ T42] gspca_main: spca501-2.14.0 probing 0000:0000 [ 109.644845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 109.940638][ T7325] FAULT_INJECTION: forcing a failure. [ 109.940638][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 109.940670][ T7325] CPU: 3 UID: 0 PID: 7325 Comm: syz.3.393 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.940693][ T7325] Tainted: [L]=SOFTLOCKUP [ 109.940700][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.940712][ T7325] Call Trace: [ 109.940722][ T7325] [ 109.940730][ T7325] dump_stack_lvl+0x100/0x190 [ 109.940764][ T7325] should_fail_ex.cold+0x5/0xa [ 109.940789][ T7325] should_failslab+0xc2/0x120 [ 109.940821][ T7325] __kmalloc_noprof+0xfc/0x840 [ 109.940846][ T7325] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 109.940880][ T7325] blk_rq_map_user_iov+0x2a5/0x1440 [ 109.940905][ T7325] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 109.940934][ T7325] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 109.940962][ T7325] ? rcu_is_watching+0x13/0xc0 [ 109.940982][ T7325] ? trace_contention_end+0x126/0x160 ** 74 printk messages dropped ** ** 649 printk messages dropped ** ** 222 printk messages dropped ** ** 201 printk messages dropped ** ** 198 printk messages dropped ** ** 220 printk messages dropped ** ** 156 printk messages dropped ** ** 197 printk messages dropped ** ** 191 printk messages dropped ** ** 201 printk messages dropped ** ** 49 printk messages dropped ** ** 132 printk messages dropped ** ** 236 printk messages dropped ** ** 209 printk messages dropped ** ** 205 printk messages dropped ** ** 213 printk messages dropped ** ** 222 printk messages dropped ** ** 197 printk messages dropped ** ** 230 printk messages dropped ** ** 202 printk messages dropped ** ** 183 printk messages dropped ** ** 174 printk messages dropped ** ** 201 printk messages dropped ** ** 193 printk messages dropped ** ** 198 printk messages dropped ** ** 209 printk messages dropped ** ** 223 printk messages dropped ** ** 218 printk messages dropped ** ** 216 printk messages dropped ** ** 221 printk messages dropped ** ** 195 printk messages dropped ** ** 217 printk messages dropped ** ** 220 printk messages dropped ** ** 238 printk messages dropped ** ** 214 printk messages dropped ** ** 51 printk messages dropped ** ** 27 printk messages dropped ** ** 25 printk messages dropped ** ** 4 printk messages dropped ** ** 40 printk messages dropped ** ** 212 printk messages dropped ** ** 213 printk messages dropped ** ** 164 printk messages dropped ** ** 172 printk messages dropped ** ** 156 printk messages dropped ** ** 154 printk messages dropped ** ** 175 printk messages dropped ** ** 165 printk messages dropped ** ** 197 printk messages dropped ** ** 198 printk messages dropped ** ** 175 printk messages dropped ** ** 155 printk messages dropped ** ** 139 printk messages dropped ** ** 179 printk messages dropped ** ** 152 printk messages dropped ** ** 196 printk messages dropped ** ** 167 printk messages dropped ** ** 120 printk messages dropped ** ** 118 printk messages dropped ** ** 97 printk messages dropped ** ** 91 printk messages dropped ** ** 97 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 100 printk messages dropped ** ** 154 printk messages dropped ** ** 121 printk messages dropped ** ** 110 printk messages dropped ** ** 118 printk messages dropped ** ** 119 printk messages dropped ** ** 125 printk messages dropped ** ** 118 printk messages dropped ** ** 118 printk messages dropped ** ** 139 printk messages dropped ** ** 123 printk messages dropped ** ** 129 printk messages dropped ** ** 155 printk messages dropped ** ** 119 printk messages dropped ** ** 129 printk messages dropped ** ** 118 printk messages dropped ** ** 114 printk messages dropped ** ** 17 printk messages dropped ** ** 11 printk messages dropped ** ** 53 printk messages dropped ** ** 144 printk messages dropped ** ** 257 printk messages dropped ** ** 232 printk messages dropped ** ** 238 printk messages dropped ** ** 235 printk messages dropped ** ** 211 printk messages dropped ** ** 241 printk messages dropped ** ** 242 printk messages dropped ** ** 240 printk messages dropped ** ** 239 printk messages dropped ** ** 245 printk messages dropped ** ** 234 printk messages dropped ** ** 236 printk messages dropped ** ** 234 printk messages dropped ** ** 225 printk messages dropped ** ** 236 printk messages dropped ** ** 252 printk messages dropped ** ** 233 printk messages dropped ** ** 209 printk messages dropped ** ** 124 printk messages dropped ** ** 122 printk messages dropped ** ** 114 printk messages dropped ** ** 123 printk messages dropped ** ** 155 printk messages dropped ** ** 151 printk messages dropped ** ** 125 printk messages dropped ** ** 126 printk messages dropped ** ** 121 printk messages dropped ** ** 108 printk messages dropped ** ** 121 printk messages dropped ** ** 102 printk messages dropped ** ** 94 printk messages dropped ** ** 106 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 125 printk messages dropped ** ** 121 printk messages dropped ** ** 117 printk messages dropped ** ** 128 printk messages dropped ** ** 125 printk messages dropped ** ** 118 printk messages dropped ** ** 121 printk messages dropped ** ** 124 printk messages dropped ** ** 115 printk messages dropped ** [ 110.390307][ T7327] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 110.409344][ T7328] serio: Serial port ptm0 [ 110.688631][ T7331] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.725630][ T7339] FAULT_INJECTION: forcing a failure. [ 110.725630][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 110.725651][ T7339] CPU: 3 UID: 0 PID: 7339 Comm: syz.2.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.725666][ T7339] Tainted: [L]=SOFTLOCKUP [ 110.725671][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.725677][ T7339] Call Trace: [ 110.725681][ T7339] [ 110.725686][ T7339] dump_stack_lvl+0x100/0x190 [ 110.725704][ T7339] should_fail_ex.cold+0x5/0xa [ 110.725716][ T7339] ? __netlink_lookup+0x652/0x900 [ 110.725730][ T7339] should_failslab+0xc2/0x120 [ 110.725745][ T7339] kmem_cache_alloc_noprof+0x92/0x6a0 [ 110.725759][ T7339] ? skb_clone+0x190/0x400 [ 110.725776][ T7339] skb_clone+0x190/0x400 [ 110.725791][ T7339] netlink_deliver_tap+0xaed/0xcc0 [ 110.725806][ T7339] netlink_unicast+0x62b/0x850 [ 110.725822][ T7339] ? __pfx_netlink_unicast+0x10/0x10 [ 110.725839][ T7339] netlink_sendmsg+0x8b0/0xda0 [ 110.725854][ T7339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.725868][ T7339] ? apparmor_socket_sendmsg+0x165/0x280 [ 110.725886][ T7339] ____sys_sendmsg+0xa4d/0xbe0 [ 110.725896][ T7339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.725910][ T7339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.725927][ T7339] ___sys_sendmsg+0x190/0x1e0 [ 110.725939][ T7339] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.725970][ T7339] ? find_held_lock+0x2b/0x80 [ 110.725992][ T7339] __sys_sendmsg+0x160/0x210 [ 110.726007][ T7339] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.726025][ T7339] ? __pfx_ksys_write+0x10/0x10 [ 110.726041][ T7339] __do_fast_syscall_32+0x13a/0x8b0 [ 110.726058][ T7339] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.726076][ T7339] do_fast_syscall_32+0x32/0x70 [ 110.726093][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.726107][ T7339] RIP: 0023:0xf708efec [ 110.726120][ T7339] Code: Unable to access opcode bytes at 0xf708efc2. [ 110.726125][ T7339] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 110.726136][ T7339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 110.726143][ T7339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.726150][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.726157][ T7339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.726163][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.726177][ T7339] [ 110.726636][ T7339] netlink: 436 bytes leftover after parsing attributes in process `syz.2.398'. [ 110.726653][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 111.836937][ T7349] FAULT_INJECTION: forcing a failure. [ 111.836937][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 111.836959][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.2.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.836975][ T7349] Tainted: [L]=SOFTLOCKUP [ 111.836979][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.836986][ T7349] Call Trace: [ 111.836990][ T7349] [ 111.836996][ T7349] dump_stack_lvl+0x100/0x190 [ 111.837016][ T7349] should_fail_ex.cold+0x5/0xa [ 111.837032][ T7349] should_failslab+0xc2/0x120 [ 111.837066][ T7349] __kmalloc_noprof+0xfc/0x840 [ 111.837088][ T7349] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 111.837107][ T7349] blk_rq_map_user_iov+0x2a5/0x1440 [ 111.837123][ T7349] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 111.837140][ T7349] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 111.837156][ T7349] ? rcu_is_watching+0x13/0xc0 [ 111.837168][ T7349] ? trace_contention_end+0x126/0x160 [ 111.837185][ T7349] ? __mutex_lock+0x26c/0x1bd0 [ 111.837202][ T7349] ? sg_common_write.isra.0+0xb79/0x1b90 [ 111.837217][ T7349] ? find_held_lock+0x2b/0x80 [ 111.837228][ T7349] ? sg_common_write.isra.0+0xe26/0x1b90 [ 111.837242][ T7349] ? import_ubuf+0x1b6/0x220 [ 111.837255][ T7349] blk_rq_map_user_io+0x1ff/0x230 [ 111.837270][ T7349] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 111.837291][ T7349] sg_common_write.isra.0+0xf74/0x1b90 [ 111.837313][ T7349] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 111.837333][ T7349] sg_write+0x7eb/0xdb0 [ 111.837349][ T7349] ? __pfx_sg_write+0x10/0x10 [ 111.837363][ T7349] ? __pfx___futex_wait+0x10/0x10 [ 111.837377][ T7349] ? __pfx_aa_file_perm+0x10/0x10 [ 111.837400][ T7349] ? bpf_lsm_file_permission+0x9/0x10 [ 111.837415][ T7349] ? security_file_permission+0x76/0x210 [ 111.837433][ T7349] ? rw_verify_area+0xce/0x6d0 [ 111.837451][ T7349] vfs_write+0x2aa/0x1050 [ 111.837462][ T7349] ? __pfx_sg_write+0x10/0x10 [ 111.837476][ T7349] ? lock_acquire+0x1d1/0x380 [ 111.837490][ T7349] ? __fget_files+0x34/0x3d0 [ 111.837502][ T7349] ? __pfx_vfs_write+0x10/0x10 [ 111.837512][ T7349] ? find_held_lock+0x2b/0x80 [ 111.837523][ T7349] ? __fget_files+0x215/0x3d0 [ 111.837535][ T7349] ? __fget_files+0x215/0x3d0 [ 111.837549][ T7349] ? __fget_files+0x21f/0x3d0 [ 111.837564][ T7349] ksys_write+0x12a/0x250 [ 111.837575][ T7349] ? __pfx_ksys_write+0x10/0x10 [ 111.837590][ T7349] __do_fast_syscall_32+0x13a/0x8b0 [ 111.837607][ T7349] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.837624][ T7349] do_fast_syscall_32+0x32/0x70 [ 111.837641][ T7349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.837654][ T7349] RIP: 0023:0xf708efec [ 111.837668][ T7349] Code: Unable to access opcode bytes at 0xf708efc2. [ 111.837673][ T7349] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 111.837684][ T7349] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 111.837691][ T7349] RDX: 0000000000000103 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.837697][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.837704][ T7349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.837710][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.837723][ T7349] [ 111.900253][ T1690] usb 6-1: USB disconnect, device number 8 [ 111.905182][ T5736] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 111.905797][ T5736] Bluetooth: hci1: Injecting HCI hardware error event [ 111.908752][ T5096] Bluetooth: hci1: hardware error 0x00 [ 112.020231][ T7353] Console: switching to colour dummy device 80x25 [ 112.113605][ T7359] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 112.119620][ T7359] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 112.119745][ T7359] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 112.119964][ T7359] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 112.120312][ T7359] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 112.127205][ T7359] pci 0000:00:01.0: Adding to iommu group 1 [ 112.202383][ T7359] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 112.202394][ T7359] pci 0000:00:01.0: vgaarb: bridge control possible [ 112.202401][ T7359] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 112.228059][ T7359] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 112.228201][ T7359] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 112.259996][ T7359] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 112.333192][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 112.337481][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 112.342015][ T7359] [drm] Found bochs VGA, ID 0xb0c5. [ 112.342028][ T7359] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 112.441095][ T7359] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 112.618985][ T7378] serio: Serial port ptm0 [ 112.689195][ T7375] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 112.971437][ T7359] Console: switching [ 112.971444][ T7359] to colour frame buffer device 160x50 [ 112.983439][ T7359] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 112.999206][ T7371] 842_compress: add hash index2 a3 pos f40 data 0 [ 112.999214][ T7371] 842_compress: add 5 bits 1c [ 112.999221][ T7371] 842_compress: add hash index8 e9 pos f48 data 0 [ 112.999229][ T7371] 842_compress: add hash index4 1d2 pos f48 data 0 [ 112.999237][ T7371] 842_compress: add hash index4 1d3 pos f48 data 0 [ 112.999245][ T7371] 842_compress: add hash index2 a4 pos f48 data 0 [ 112.999253][ T7371] 842_compress: add hash index2 a5 pos f48 data 0 [ 112.999262][ T7371] 842_compress: add hash index2 a6 pos f48 data 0 [ 112.999270][ T7371] 842_compress: add hash index2 a7 pos f48 data 0 [ 112.999278][ T7371] 842_compress: template 9 [ 112.999284][ T7371] 842_compress: add 5 bits 9 [ 112.999290][ T7371] 842_compress: op 22 [ 112.999300][ T7371] 842_compress: add 16 bits fbff [ 112.999307][ T7371] 842_compress: op 12 [ 112.999312][ T7371] 842_compress: add 8 bits 99 [ 112.999319][ T7371] 842_compress: op 14 [ 112.999324][ T7371] 842_compress: add 9 bits 1d3 [ 112.999330][ T7371] 842_compress: op 40 [ 112.999336][ T7371] 842_compress: add hash index8 ea pos f50 data fbffff6f00000000 [ 112.999344][ T7371] 842_compress: add hash index4 1d4 pos f50 data fbffff6f [ 112.999353][ T7371] 842_compress: add hash index4 1d5 pos f50 data 0 [ 112.999361][ T7371] 842_compress: add hash index2 a8 pos f50 data fbff [ 112.999370][ T7371] 842_compress: add hash index2 a9 pos f50 data ff6f [ 112.999378][ T7371] 842_compress: add hash index2 aa pos f50 data 0 [ 112.999386][ T7371] 842_compress: add hash index2 ab pos f50 data 0 [ 112.999394][ T7371] 842_compress: template 19 [ 112.999400][ T7371] 842_compress: add 5 bits 19 [ 112.999406][ T7371] 842_compress: op 18 [ 112.999411][ T7371] 842_compress: add 8 bits b9 [ 112.999417][ T7371] 842_compress: op 40 [ 112.999423][ T7371] 842_compress: op 40 [ 112.999428][ T7371] 842_compress: op 40 [ 112.999433][ T7371] 842_compress: add hash index8 eb pos f58 data 100000000000000 [ 112.999442][ T7371] 842_compress: add hash index4 1d6 pos f58 data 1000000 [ 112.999450][ T7371] 842_compress: add hash index4 1d7 pos f58 data 0 [ 112.999458][ T7371] 842_compress: add hash index2 ac pos f58 data 100 [ 112.999467][ T7371] 842_compress: add hash index2 ad pos f58 data 0 [ 112.999475][ T7371] 842_compress: add hash index2 ae pos f58 data 0 [ 112.999483][ T7371] 842_compress: add hash index2 af pos f58 data 0 [ 112.999492][ T7371] 842_compress: template 9 [ 112.999497][ T7371] 842_compress: add 5 bits 9 [ 112.999503][ T7371] 842_compress: op 22 [ 112.999509][ T7371] 842_compress: add 16 bits f0ff [ 112.999515][ T7371] 842_compress: op 12 [ 112.999521][ T7371] 842_compress: add 8 bits a9 [ 112.999527][ T7371] 842_compress: op 14 [ 112.999532][ T7371] 842_compress: add 9 bits 1d7 [ 112.999538][ T7371] 842_compress: op 40 [ 112.999544][ T7371] 842_compress: add hash index8 ec pos f60 data f0ffff6f00000000 [ 112.999552][ T7371] 842_compress: add hash index4 1d8 pos f60 data f0ffff6f [ 112.999561][ T7371] 842_compress: add hash index4 1d9 pos f60 data 0 [ 112.999569][ T7371] 842_compress: add hash index2 b0 pos f60 data f0ff [ 112.999577][ T7371] 842_compress: add hash index2 b1 pos f60 data ff6f [ 112.999586][ T7371] 842_compress: add hash index2 b2 pos f60 data 0 [ 112.999594][ T7371] 842_compress: add hash index2 b3 pos f60 data 0 [ 112.999603][ T7371] 842_compress: template 9 [ 112.999609][ T7371] 842_compress: add 5 bits 9 [ 112.999615][ T7371] 842_compress: op 22 [ 112.999621][ T7371] 842_compress: add 16 bits 623b [ 112.999628][ T7371] 842_compress: op 12 [ 112.999633][ T7371] 842_compress: add 8 bits 7d [ 112.999643][ T7371] 842_compress: op 14 [ 112.999648][ T7371] 842_compress: add 9 bits 1bf [ 112.999655][ T7371] 842_compress: op 40 [ 112.999661][ T7371] 842_compress: add hash index8 ed pos f68 data 623b257be97f0000 [ 112.999670][ T7371] 842_compress: add hash index4 1da pos f68 data 623b257b [ 112.999678][ T7371] 842_compress: add hash index4 1db pos f68 data e97f0000 [ 112.999687][ T7371] 842_compress: add hash index2 b4 pos f68 data 623b [ 112.999695][ T7371] 842_compress: add hash index2 b5 pos f68 data 257b [ 112.999704][ T7371] 842_compress: add hash index2 b6 pos f68 data e97f [ 112.999712][ T7371] 842_compress: add hash index2 b7 pos f68 data 0 [ 112.999721][ T7371] 842_compress: template 9 [ 112.999727][ T7371] 842_compress: add 5 bits 9 [ 112.999733][ T7371] 842_compress: op 22 [ 112.999739][ T7371] 842_compress: add 16 bits 2400 [ 112.999745][ T7371] 842_compress: op 12 [ 112.999751][ T7371] 842_compress: add 8 bits b7 [ 112.999757][ T7371] 842_compress: op 14 [ 112.999763][ T7371] 842_compress: add 9 bits 1d9 [ 112.999769][ T7371] 842_compress: op 40 [ 112.999775][ T7371] 842_compress: add hash index8 ee pos f70 data 2400000000000000 [ 112.999784][ T7371] 842_compress: add hash index4 1dc pos f70 data 24000000 [ 112.999792][ T7371] 842_compress: add hash index4 1dd pos f70 data 0 [ 112.999801][ T7371] 842_compress: add hash index2 b8 pos f70 data 2400 [ 112.999809][ T7371] 842_compress: add hash index2 b9 pos f70 data 0 [ 112.999818][ T7371] 842_compress: add hash index2 ba pos f70 data 0 [ 112.999826][ T7371] 842_compress: add hash index2 bb pos f70 data 0 [ 112.999835][ T7371] 842_compress: template 9 [ 112.999840][ T7371] 842_compress: add 5 bits 9 [ 112.999847][ T7371] 842_compress: op 22 [ 112.999852][ T7371] 842_compress: add 16 bits b83c [ 112.999859][ T7371] 842_compress: op 12 [ 112.999865][ T7371] 842_compress: add 8 bits b5 [ 112.999871][ T7371] 842_compress: op 14 [ 112.999877][ T7371] 842_compress: add 9 bits 1db [ 112.999883][ T7371] 842_compress: op 40 [ 112.999889][ T7371] 842_compress: add hash index8 ef pos f78 data b83c257be97f0000 [ 112.999898][ T7371] 842_compress: add hash index4 1de pos f78 data b83c257b [ 112.999906][ T7371] 842_compress: add hash index4 1df pos f78 data e97f0000 [ 112.999915][ T7371] 842_compress: add hash index2 bc pos f78 data b83c [ 112.999924][ T7371] 842_compress: add hash index2 bd pos f78 data 257b [ 112.999932][ T7371] 842_compress: add hash index2 be pos f78 data e97f [ 112.999941][ T7371] 842_compress: add hash index2 bf pos f78 data 0 [ 112.999950][ T7371] 842_compress: template 9 [ 112.999956][ T7371] 842_compress: add 5 bits 9 [ 112.999962][ T7371] 842_compress: op 22 [ 112.999968][ T7371] 842_compress: add 16 bits 2300 [ 112.999974][ T7371] 842_compress: op 12 [ 112.999980][ T7371] 842_compress: add 8 bits bf [ 112.999986][ T7371] 842_compress: op 14 [ 112.999992][ T7371] 842_compress: add 9 bits 1dd [ 112.999998][ T7371] 842_compress: op 40 [ 113.000004][ T7371] 842_compress: add hash index8 f0 pos f80 data 2300000000000000 [ 113.000013][ T7371] 842_compress: add hash index4 1e0 pos f80 data 23000000 [ 113.000022][ T7371] 842_compress: add hash index4 1e1 pos f80 data 0 [ 113.000030][ T7371] 842_compress: add hash index2 c0 pos f80 data 2300 [ 113.000038][ T7371] 842_compress: add hash index2 c1 pos f80 data 0 [ 113.000047][ T7371] 842_compress: add hash index2 c2 pos f80 data 0 [ 113.000055][ T7371] 842_compress: add hash index2 c3 pos f80 data 0 [ 113.000063][ T7371] 842_compress: template 19 [ 113.000069][ T7371] 842_compress: add 5 bits 19 [ 113.000075][ T7371] 842_compress: op 18 [ 113.000080][ T7371] 842_compress: add 8 bits e8 [ 113.000086][ T7371] 842_compress: op 40 [ 113.000092][ T7371] 842_compress: op 40 [ 113.000097][ T7371] 842_compress: op 40 [ 113.000102][ T7371] 842_compress: add hash index8 f1 pos f88 data 1800000000000000 [ 113.000111][ T7371] 842_compress: add hash index4 1e2 pos f88 data 18000000 [ 113.000119][ T7371] 842_compress: add hash index4 1e3 pos f88 data 0 [ 113.000128][ T7371] 842_compress: add hash index2 c4 pos f88 data 1800 [ 113.000136][ T7371] 842_compress: add hash index2 c5 pos f88 data 0 [ 113.000146][ T7371] 842_compress: add hash index2 c6 pos f88 data 0 [ 113.000154][ T7371] 842_compress: add hash index2 c7 pos f88 data 0 [ 113.000163][ T7371] 842_compress: template 9 [ 113.000168][ T7371] 842_compress: add 5 bits 9 [ 113.000174][ T7371] 842_compress: op 22 [ 113.000180][ T7371] 842_compress: add 16 bits 2500 [ 113.000186][ T7371] 842_compress: op 12 [ 113.000192][ T7371] 842_compress: add 8 bits c7 [ 113.000198][ T7371] 842_compress: op 14 [ 113.000203][ T7371] 842_compress: add 9 bits 1e3 [ 113.000210][ T7371] 842_compress: op 40 [ 113.000215][ T7371] 842_compress: add hash index8 f2 pos f90 data 2500000000000000 [ 113.000223][ T7371] 842_compress: add hash index4 1e4 pos f90 data 25000000 [ 113.000232][ T7371] 842_compress: add hash index4 1e5 pos f90 data 0 [ 113.000240][ T7371] 842_compress: add hash index2 c8 pos f90 data 2500 [ 113.000248][ T7371] 842_compress: add hash index2 c9 pos f90 data 0 [ 113.000256][ T7371] 842_compress: add hash index2 ca pos f90 data 0 [ 113.000264][ T7371] 842_compress: add hash index2 cb pos f90 data 0 [ 113.000273][ T7371] 842_compress: template 19 [ 113.000278][ T7371] 842_compress: add 5 bits 19 [ 113.000284][ T7371] 842_compress: op 18 [ 113.000290][ T7371] 842_compress: add 8 bits e0 [ 113.000296][ T7371] 842_compress: op 40 [ 113.000301][ T7371] 842_compress: op 40 [ 113.000306][ T7371] 842_compress: op 40 [ 113.000312][ T7371] 842_compress: add hash index8 f3 pos f98 data 800000000000000 [ 113.000320][ T7371] 842_compress: add hash index4 1e6 pos f98 data 8000000 [ 113.000329][ T7371] 842_compress: add hash index4 1e7 pos f98 data 0 [ 113.000337][ T7371] 842_compress: add hash index2 cc pos f98 data 800 [ 113.000345][ T7371] 842_compress: add hash index2 cd pos f98 data 0 [ 113.000353][ T7371] 842_compress: add hash index2 ce pos f98 data 0 [ 113.000361][ T7371] 842_compress: add hash index2 cf pos f98 data 0 [ 113.000370][ T7371] 842_compress: add 5 bits 1c [ 113.000376][ T7371] 842_compress: add hash index8 f4 pos fa0 data 0 [ 113.000384][ T7371] 842_compress: add hash index4 1e8 pos fa0 data 0 [ 113.000392][ T7371] 842_compress: add hash index4 1e9 pos fa0 data 0 [ 113.000400][ T7371] 842_compress: add hash index2 d0 pos fa0 data 0 [ 113.000409][ T7371] 842_compress: add hash index2 d1 pos fa0 data 0 [ 113.000417][ T7371] 842_compress: add hash index2 d2 pos fa0 data 0 [ 113.000425][ T7371] 842_compress: add hash index2 d3 pos fa0 data 0 [ 113.000433][ T7371] 842_compress: add hash index8 f5 pos fa8 data 0 [ 113.000441][ T7371] 842_compress: add hash index4 1ea pos fa8 data 0 [ 113.000449][ T7371] 842_compress: add hash index4 1eb pos fa8 data 0 [ 113.000457][ T7371] 842_compress: add hash index2 d4 pos fa8 data 0 [ 113.000465][ T7371] 842_compress: add hash index2 d5 pos fa8 data 0 [ 113.000473][ T7371] 842_compress: add hash index2 d6 pos fa8 data 0 [ 113.000481][ T7371] 842_compress: add hash index2 d7 pos fa8 data 0 [ 113.000490][ T7371] 842_compress: add hash index8 f6 pos fb0 data 0 [ 113.000498][ T7371] 842_compress: add hash index4 1ec pos fb0 data 0 [ 113.000506][ T7371] 842_compress: add hash index4 1ed pos fb0 data 0 [ 113.000514][ T7371] 842_compress: add hash index2 d8 pos fb0 data 0 [ 113.000522][ T7371] 842_compress: add hash index2 d9 pos fb0 data 0 [ 113.000530][ T7371] 842_compress: add hash index2 da pos fb0 data 0 [ 113.000539][ T7371] 842_compress: add hash index2 db pos fb0 data 0 [ 113.000566][ T7371] 842_compress: add hash index8 f7 pos fb8 data 0 [ 113.000575][ T7371] 842_compress: add hash index4 1ee pos fb8 data 0 [ 113.000583][ T7371] 842_compress: add hash index4 1ef pos fb8 data 0 [ 113.000592][ T7371] 842_compress: add hash index2 dc pos fb8 data 0 [ 113.000600][ T7371] 842_compress: add hash index2 dd pos fb8 data 0 [ 113.000608][ T7371] 842_compress: add hash index2 de pos fb8 data 0 [ 113.000616][ T7371] 842_compress: add hash index2 df pos fb8 data 0 [ 113.000624][ T7371] 842_compress: add hash index8 f8 pos fc0 data 0 [ 113.000632][ T7371] 842_compress: add hash index4 1f0 pos fc0 data 0 [ 113.000644][ T7371] 842_compress: add hash index4 1f1 pos fc0 data 0 [ 113.000652][ T7371] 842_compress: add hash index2 e0 pos fc0 data 0 [ 113.000660][ T7371] 842_compress: add hash index2 e1 pos fc0 data 0 [ 113.000668][ T7371] 842_compress: add hash index2 e2 pos fc0 data 0 [ 113.000676][ T7371] 842_compress: add hash index2 e3 pos fc0 data 0 [ 113.000684][ T7371] 842_compress: add hash index8 f9 pos fc8 data 0 [ 113.000693][ T7371] 842_compress: add hash index4 1f2 pos fc8 data 0 [ 113.000701][ T7371] 842_compress: add hash index4 1f3 pos fc8 data 0 [ 113.000709][ T7371] 842_compress: add hash index2 e4 pos fc8 data 0 [ 113.000717][ T7371] 842_compress: add hash index2 e5 pos fc8 data 0 [ 113.000725][ T7371] 842_compress: add hash index2 e6 pos fc8 data 0 [ 113.000733][ T7371] 842_compress: add hash index2 e7 pos fc8 data 0 [ 113.000741][ T7371] 842_compress: add hash index8 fa pos fd0 data 0 [ 113.000749][ T7371] 842_compress: add hash index4 1f4 pos fd0 data 0 [ 113.000757][ T7371] 842_compress: add hash index4 1f5 pos fd0 data 0 [ 113.000766][ T7371] 842_compress: add hash index2 e8 pos fd0 data 0 [ 113.000774][ T7371] 842_compress: add hash index2 e9 pos fd0 data 0 [ 113.000782][ T7371] 842_compress: add hash index2 ea pos fd0 data 0 [ 113.000790][ T7371] 842_compress: add hash index2 eb pos fd0 data 0 [ 113.000798][ T7371] 842_compress: add hash index8 fb pos fd8 data 0 [ 113.000806][ T7371] 842_compress: add hash index4 1f6 pos fd8 data 0 [ 113.000814][ T7371] 842_compress: add hash index4 1f7 pos fd8 data 0 [ 113.000822][ T7371] 842_compress: add hash index2 ec pos fd8 data 0 [ 113.000830][ T7371] 842_compress: add hash index2 ed pos fd8 data 0 [ 113.000839][ T7371] 842_compress: add hash index2 ee pos fd8 data 0 [ 113.000847][ T7371] 842_compress: add hash index2 ef pos fd8 data 0 [ 113.000855][ T7371] 842_compress: add hash index8 fc pos fe0 data 0 [ 113.000863][ T7371] 842_compress: add hash index4 1f8 pos fe0 data 0 [ 113.000871][ T7371] 842_compress: add hash index4 1f9 pos fe0 data 0 [ 113.000879][ T7371] 842_compress: add hash index2 f0 pos fe0 data 0 [ 113.000887][ T7371] 842_compress: add hash index2 f1 pos fe0 data 0 [ 113.000895][ T7371] 842_compress: add hash index2 f2 pos fe0 data 0 [ 113.000903][ T7371] 842_compress: add hash index2 f3 pos fe0 data 0 [ 113.000911][ T7371] 842_compress: add hash index8 fd pos fe8 data 0 [ 113.000919][ T7371] 842_compress: add hash index4 1fa pos fe8 data 0 [ 113.000927][ T7371] 842_compress: add hash index4 1fb pos fe8 data 0 [ 113.000935][ T7371] 842_compress: add hash index2 f4 pos fe8 data 0 [ 113.000943][ T7371] 842_compress: add hash index2 f5 pos fe8 data 0 [ 113.000952][ T7371] 842_compress: add hash index2 f6 pos fe8 data 0 [ 113.000960][ T7371] 842_compress: add hash index2 f7 pos fe8 data 0 [ 113.000968][ T7371] 842_compress: add hash index8 fe pos ff0 data 0 [ 113.000976][ T7371] 842_compress: add hash index4 1fc pos ff0 data 0 [ 113.000984][ T7371] 842_compress: add hash index4 1fd pos ff0 data 0 [ 113.000992][ T7371] 842_compress: add hash index2 f8 pos ff0 data 0 [ 113.001001][ T7371] 842_compress: add hash index2 f9 pos ff0 data 0 [ 113.001009][ T7371] 842_compress: add hash index2 fa pos ff0 data 0 [ 113.001017][ T7371] 842_compress: add hash index2 fb pos ff0 data 0 [ 113.001025][ T7371] 842_compress: add hash index8 ff pos ff8 data 0 [ 113.001033][ T7371] 842_compress: add hash index4 1fe pos ff8 data 0 [ 113.001041][ T7371] 842_compress: add hash index4 1ff pos ff8 data 0 [ 113.001050][ T7371] 842_compress: add hash index2 fc pos ff8 data 0 [ 113.001058][ T7371] 842_compress: add hash index2 fd pos ff8 data 0 [ 113.001066][ T7371] 842_compress: add hash index2 fe pos ff8 data 0 [ 113.001074][ T7371] 842_compress: add hash index2 ff pos ff8 data 0 [ 113.001082][ T7371] 842_compress: add 5 bits 1b [ 113.001089][ T7371] 842_compress: add 6 bits a [ 113.001095][ T7371] 842_compress: add 5 bits 1e [ 113.001121][ T7371] 842_compress: add 32 bits 34703683 [ 113.001600][ T7352] vgaarb: vga_arb_release [ 113.001611][ T7352] ================================================================== [ 113.001616][ T7352] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 113.001690][ T7352] Read of size 8 at addr ffff888045096120 by task syz.3.404/7352 [ 113.001699][ T7352] [ 113.001706][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.001720][ T7352] Tainted: [L]=SOFTLOCKUP [ 113.001725][ T7352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.001731][ T7352] Call Trace: [ 113.001736][ T7352] [ 113.001740][ T7352] dump_stack_lvl+0x100/0x190 [ 113.001756][ T7352] print_report+0x13d/0x4b0 [ 113.001772][ T7352] ? __virt_addr_valid+0x239/0x430 [ 113.001788][ T7352] ? __dynamic_dev_dbg+0x2fc/0x310 [ 113.001803][ T7352] kasan_report+0xdf/0x1c0 [ 113.001818][ T7352] ? __dynamic_dev_dbg+0x2fc/0x310 [ 113.001835][ T7352] __dynamic_dev_dbg+0x2fc/0x310 [ 113.001851][ T7352] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 113.001871][ T7352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.001888][ T7352] ? _raw_spin_lock_irqsave+0x52/0x60 [ 113.001923][ T7352] vga_arb_release+0x3e7/0x540 [ 113.001934][ T7352] ? __pfx_vga_arb_release+0x10/0x10 [ 113.001944][ T7352] __fput+0x3ff/0xb50 [ 113.001958][ T7352] task_work_run+0x150/0x240 [ 113.001972][ T7352] ? __pfx_task_work_run+0x10/0x10 [ 113.001986][ T7352] exit_to_user_mode_loop+0x1d8/0x700 [ 113.002003][ T7352] ? rcu_is_watching+0x13/0xc0 [ 113.002014][ T7352] __do_fast_syscall_32+0x59f/0x8b0 [ 113.002032][ T7352] do_fast_syscall_32+0x32/0x70 [ 113.002049][ T7352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.002062][ T7352] RIP: 0023:0xf70aefec [ 113.002075][ T7352] Code: Unable to access opcode bytes at 0xf70aefc2. [ 113.002080][ T7352] RSP: 002b:00000000ffec058c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 113.002092][ T7352] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 113.002099][ T7352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.002105][ T7352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.002112][ T7352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 113.002119][ T7352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.002128][ T7352] [ 113.002132][ T7352] [ 113.002135][ T7352] Allocated by task 6306: [ 113.002140][ T7352] kasan_save_stack+0x30/0x50 [ 113.002154][ T7352] kasan_save_track+0x14/0x30 [ 113.002165][ T7352] __kasan_kmalloc+0xaa/0xb0 [ 113.002176][ T7352] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 113.002192][ T7352] pci_alloc_dev+0x47/0x270 [ 113.002200][ T7352] pci_scan_single_device+0x10c/0x240 [ 113.002210][ T7352] pci_scan_slot+0x1c9/0x7c0 [ 113.002219][ T7352] pci_scan_child_bus_extend+0x6b/0x7b0 [ 113.002230][ T7352] pci_rescan_bus+0x18/0x40 [ 113.002240][ T7352] rescan_store+0xfb/0x130 [ 113.002250][ T7352] bus_attr_store+0x74/0xb0 [ 113.002259][ T7352] sysfs_kf_write+0xf2/0x150 [ 113.002268][ T7352] kernfs_fop_write_iter+0x3e0/0x5f0 [ 113.002283][ T7352] vfs_write+0x6af/0x1050 [ 113.002292][ T7352] ksys_write+0x12a/0x250 [ 113.002301][ T7352] __do_fast_syscall_32+0x13a/0x8b0 [ 113.002317][ T7352] do_fast_syscall_32+0x32/0x70 [ 113.002332][ T7352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.002344][ T7352] [ 113.002347][ T7352] Freed by task 7353: [ 113.002352][ T7352] kasan_save_stack+0x30/0x50 [ 113.002363][ T7352] kasan_save_track+0x14/0x30 [ 113.002374][ T7352] kasan_save_free_info+0x3b/0x70 [ 113.002389][ T7352] __kasan_slab_free+0x5f/0x80 [ 113.002401][ T7352] kfree+0x22b/0x6d0 [ 113.002415][ T7352] device_release+0xd2/0x270 [ 113.002424][ T7352] kobject_put+0x1f7/0x640 [ 113.002434][ T7352] put_device+0x1f/0x30 [ 113.002443][ T7352] pci_remove_bus_device+0x305/0x3b0 [ 113.002454][ T7352] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 113.002467][ T7352] remove_store+0x123/0x140 [ 113.002480][ T7352] dev_attr_store+0x58/0x80 [ 113.002494][ T7352] sysfs_kf_write+0xf2/0x150 [ 113.002503][ T7352] kernfs_fop_write_iter+0x3e0/0x5f0 [ 113.002517][ T7352] vfs_write+0x6af/0x1050 [ 113.002527][ T7352] ksys_write+0x12a/0x250 [ 113.002536][ T7352] __do_fast_syscall_32+0x13a/0x8b0 [ 113.002552][ T7352] do_fast_syscall_32+0x32/0x70 [ 113.002567][ T7352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.002580][ T7352] [ 113.002582][ T7352] The buggy address belongs to the object at ffff888045096000 [ 113.002582][ T7352] which belongs to the cache kmalloc-4k of size 4096 [ 113.002590][ T7352] The buggy address is located 288 bytes inside of [ 113.002590][ T7352] freed 4096-byte region [ffff888045096000, ffff888045097000) [ 113.002600][ T7352] [ 113.002603][ T7352] The buggy address belongs to the physical page: [ 113.002608][ T7352] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888045094000 pfn:0x45090 [ 113.002618][ T7352] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.002626][ T7352] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 113.002637][ T7352] page_type: f5(slab) [ 113.002650][ T7352] raw: 04fff00000000240 ffff88801c043040 ffffea00013bb810 ffffea0001385810 [ 113.002659][ T7352] raw: ffff888045094000 0000000000040003 00000000f5000000 0000000000000000 [ 113.002669][ T7352] head: 04fff00000000240 ffff88801c043040 ffffea00013bb810 ffffea0001385810 [ 113.002678][ T7352] head: ffff888045094000 0000000000040003 00000000f5000000 0000000000000000 [ 113.002687][ T7352] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 113.002696][ T7352] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 113.002702][ T7352] page dumped because: kasan: bad access detected [ 113.002707][ T7352] page_owner tracks the page as allocated [ 113.002710][ T7352] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8302154350 [ 113.002727][ T7352] post_alloc_hook+0xfd/0x120 [ 113.002741][ T7352] get_page_from_freelist+0x110d/0x35d0 [ 113.002751][ T7352] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 113.002760][ T7352] new_slab+0xa9/0x6e0 [ 113.002768][ T7352] refill_objects+0xe3/0x410 [ 113.002777][ T7352] __pcs_replace_empty_main+0x35e/0x650 [ 113.002792][ T7352] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 113.002808][ T7352] kobject_uevent_env+0x263/0x18b0 [ 113.002819][ T7352] driver_register+0x29c/0x360 [ 113.002833][ T7352] usb_register_driver+0x21c/0x3e0 [ 113.002870][ T7352] do_one_initcall+0x11c/0x6f0 [ 113.002886][ T7352] kernel_init_freeable+0x6ea/0x7b0 [ 113.002899][ T7352] kernel_init+0x21/0x1e0 [ 113.002909][ T7352] ret_from_fork+0x730/0xd60 [ 113.002925][ T7352] ret_from_fork_asm+0x1a/0x30 [ 113.002933][ T7352] page last free pid 853 tgid 853 ts 8285199400 stack trace: [ 113.002940][ T7352] free_pages_prepare+0x586/0xe00 [ 113.002954][ T7352] __free_contig_range_common+0x14f/0x250 [ 113.002969][ T7352] free_pages_bulk+0x12a/0x200 [ 113.002979][ T7352] vm_area_free_pages+0xb2/0x2a0 [ 113.002988][ T7352] vfree+0xf7/0x6d0 [ 113.003000][ T7352] delayed_vfree_work+0x56/0x80 [ 113.003013][ T7352] process_one_work+0xac7/0x1b10 [ 113.003025][ T7352] worker_thread+0x5ef/0xe50 [ 113.003036][ T7352] kthread+0x373/0x450 [ 113.003046][ T7352] ret_from_fork+0x730/0xd60 [ 113.003061][ T7352] ret_from_fork_asm+0x1a/0x30 [ 113.003070][ T7352] [ 113.003072][ T7352] Memory state around the buggy address: [ 113.003078][ T7352] ffff888045096000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.003085][ T7352] ffff888045096080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.003092][ T7352] >ffff888045096100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.003099][ T7352] ^ [ 113.003104][ T7352] ffff888045096180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.003111][ T7352] ffff888045096200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.003117][ T7352] ================================================================== [ 113.003124][ T7352] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.698741][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.701935][ T7352] Tainted: [L]=SOFTLOCKUP [ 113.703245][ T7352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.706174][ T7352] Call Trace: [ 113.707168][ T7352] [ 113.708055][ T7352] dump_stack_lvl+0x100/0x190 [ 113.709537][ T7352] vpanic+0x553/0x970 [ 113.710793][ T7352] ? __pfx_vpanic+0x10/0x10 [ 113.712148][ T7352] ? __pfx_vprintk_emit+0x10/0x10 [ 113.713650][ T7352] ? __dynamic_dev_dbg+0x2fc/0x310 [ 113.715188][ T7352] panic+0xd1/0xe0 [ 113.716296][ T7352] ? __pfx_panic+0x10/0x10 [ 113.717665][ T7352] ? end_report.part.0+0x23/0x90 [ 113.719148][ T7352] ? rcu_is_watching+0x13/0xc0 [ 113.720599][ T7352] ? end_report.part.0+0x23/0x90 [ 113.722097][ T7352] check_panic_on_warn.cold+0x19/0x34 [ 113.723701][ T7352] end_report.part.0+0x3a/0x90 [ 113.725138][ T7352] kasan_report.cold+0xe/0x18 [ 113.726518][ T7352] ? __dynamic_dev_dbg+0x2fc/0x310 [ 113.728026][ T7352] __dynamic_dev_dbg+0x2fc/0x310 [ 113.729528][ T7352] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 113.731196][ T7352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.732784][ T7352] ? _raw_spin_lock_irqsave+0x52/0x60 [ 113.734359][ T7352] vga_arb_release+0x3e7/0x540 [ 113.735781][ T7352] ? __pfx_vga_arb_release+0x10/0x10 [ 113.737329][ T7352] __fput+0x3ff/0xb50 [ 113.738528][ T7352] task_work_run+0x150/0x240 [ 113.739890][ T7352] ? __pfx_task_work_run+0x10/0x10 [ 113.741599][ T7352] exit_to_user_mode_loop+0x1d8/0x700 [ 113.743227][ T7352] ? rcu_is_watching+0x13/0xc0 [ 113.744679][ T7352] __do_fast_syscall_32+0x59f/0x8b0 [ 113.746234][ T7352] do_fast_syscall_32+0x32/0x70 [ 113.747694][ T7352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.749568][ T7352] RIP: 0023:0xf70aefec [ 113.750853][ T7352] Code: Unable to access opcode bytes at 0xf70aefc2. [ 113.752802][ T7352] RSP: 002b:00000000ffec058c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 113.755241][ T7352] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 113.757535][ T7352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.759834][ T7352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.762138][ T7352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 113.764481][ T7352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.766761][ T7352] [ 113.768323][ T7352] Kernel Offset: disabled [ 113.770033][ T7352] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:02:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000265f61 RBX=ffffffff8ea91540 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=fffffbfff1d522a8 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032f24220 CR3=000000002288c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc9002393f328 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000000a R14=0000000000000006 R15=ffffc9002393f640 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096a60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70af000 CR3=000000002288c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888040a84b00 RSI=ffffffff81feab9e RDI=ffff888040a84b00 RBP=ffff88802b343b00 RSP=ffffc9000070f150 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1008150c13 R13=0000000000000003 R14=ffffed1005668761 R15=0000000000000001 RIP=ffffffff81feaba9 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5238605 CR3=0000000075e9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90000617810 RCX=ffffffff91ed0bca RDX=1ffff920000c2edd RSI=0000000000000001 RDI=ffffc900006176e8 RBP=ffffc90000617728 RSP=ffffc90000617670 R8 =ffffffff91ed0bce R9 =0000000000000007 R10=0000000000000200 R11=000000000000f54f R12=ffffc90000617730 R13=ffffc900006176e0 R14=ffffc90000617810 R15=ffffc90000617714 RIP=ffffffff81b95834 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53b6bac CR3=000000002a5f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000020 Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd6a545fb 00007fffd6a545fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd6a54b00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd6a54b00 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6967742033353820 6469702065657266 207473616c206567 6170205d32353337 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3035333435313230 3338207374202c29 302f726570706177 7328203120646967 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74202c3120646970 202c29434f4c4c41 4d454d4f4e5f5046 475f5f7c504d4f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c59 525445524f4e5f50 46475f5f7c4e5241 574f4e5f5046475f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c53465f504647 5f5f7c4f495f5046 475f5f2830633032 647830206b73616d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000