last executing test programs: 2.4388826s ago: executing program 3 (id=382): r0 = userfaultfd(0x801) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000340)="2d9fa93f37a78a010645ea0569e236ffa0ce1c9b1d06a9ef34bf5acc774ba7b5554a468492f680431e716309637451d98f0712fc1fcb4b5b0f34c2bf6798ab47ac03f8a1522bd4c07116aa04945226542c1f4d5e3ea6d94088faa397b8d4d1eb9acf82e72d4ca745ea56f49945d046368e27971af274b958ec2bbc39", &(0x7f00000003c0)="6858fe61c97cfde8192e72ec30b9d7110a3e3ed1a1e4f640087d91f8d6df0538ff9b84dc0080a94b0d192865e9a792feb3191b181b61b4f8b3bab23e41f37946d09ef4fc04a8de7338246f45076c40c4e2a3febbae3b659f4db9d460ff7481badf3920bf8a5458ebc3e08e1b6691a7d97509"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x8, 0x4, 0xf, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10201fc, 0x0, 0x2]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) read(r5, &(0x7f0000000080)=""/72, 0x48) r6 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.340540518s ago: executing program 3 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 2.060015543s ago: executing program 3 (id=388): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', &(0x7f0000000300)='pstore\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)="a06eea64ed8b0746b513d36ad02e2f66696c65300a08240202ed17d70819b4978921ff912341061b306b9482234c4d83a40c3243e5fa4271d8efb5c532c48caf17f400ebf3ef", 0xfffffffffffffe7a) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) close(r6) symlinkat(&(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', r1, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r7, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) sendfile(r7, r5, &(0x7f0000000280)=0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testsubsys\x00', 0x400, 0x41) 1.610404727s ago: executing program 2 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000480)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x1f1) recvmmsg(r2, 0x0, 0x0, 0x10100, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) write(r4, &(0x7f00000001c0)="1aace00cc337da1efbd7f84aee71ebde5097d88fd2781df3e236ef63b676a799f575bf6484193fa39c48040c3a88d7dea4e5a2f2a4f5969db50d5fadb5a2fa3388c5fa1e91c17a2f04", 0x49) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0x12, 0x600, 0x0, 0x202, 0x200, 0x2e8, 0x2e8, 0x200, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xffffff00], 'dvmrp1\x00', 'ip_vti0\x00', {}, {0xff}, 0x1d, 0x6b, 0x0, 0x44}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xa, 0x6, 'snmp\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x3, 0x6, 0x8e1, 'snmp\x00', 'syz0\x00', {0xa136}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x4, 0x6, 0xb, 0x7, 0x2, 0x3ff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) listen(0xffffffffffffffff, 0x80000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file1\x00', 0x0, 0x18, r3}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) (async) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000480)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) creat(&(0x7f0000000040)='./file1\x00', 0x1f1) (async) recvmmsg(r2, 0x0, 0x0, 0x10100, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (async) write(r4, &(0x7f00000001c0)="1aace00cc337da1efbd7f84aee71ebde5097d88fd2781df3e236ef63b676a799f575bf6484193fa39c48040c3a88d7dea4e5a2f2a4f5969db50d5fadb5a2fa3388c5fa1e91c17a2f04", 0x49) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0x12, 0x600, 0x0, 0x202, 0x200, 0x2e8, 0x2e8, 0x200, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xffffff00], 'dvmrp1\x00', 'ip_vti0\x00', {}, {0xff}, 0x1d, 0x6b, 0x0, 0x44}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xa, 0x6, 'snmp\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x3, 0x6, 0x8e1, 'snmp\x00', 'syz0\x00', {0xa136}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x4, 0x6, 0xb, 0x7, 0x2, 0x3ff}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) (async) listen(0xffffffffffffffff, 0x80000000) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file1\x00', 0x0, 0x18, r3}, 0x18) (async) 1.489882228s ago: executing program 3 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 1.347621204s ago: executing program 0 (id=399): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r4, &(0x7f00000005c0)=""/4096, 0x1000) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x404400, 0x0) epoll_create(0x9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x20) close_range(r6, r7, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x8, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r10, {}, {0xfff1, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) ioctl$VIDIOC_DECODER_CMD(r11, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x800, 0x70bd29, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x7, 0x0, 0x4, 0xfd, 0xb, 0x2900}, [@RTA_IIF={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002000000001"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r12, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000840) 1.280902139s ago: executing program 1 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x8080000, 0x58000, {}, 0x0, 0x7}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 74) 1.280607158s ago: executing program 2 (id=401): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.280286215s ago: executing program 3 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff85000000cc00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007ffec00b703000000000000850000007000004095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000000020073797a320000000005005960f0032d00ed3610b0744059c6bb1a0400000000000900500073797a310000000005000500020000001c000100060000007b184a640459b3ffda548a178066c5d8777aa9e02387565a69478f656051f638be07e97b6384c94f9633a99e84f915f2458c9cdb658d00abc5568aeb01dc07804436dc1e631a4483738b543bdfe01eb169ed46a948d155805d9b24"], 0x2a}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000020500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}], @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x4040840) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1.280090587s ago: executing program 0 (id=403): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x200) dup3(r1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) 938.92352ms ago: executing program 0 (id=404): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0xd90f, 0x20}, @ldst={0x0, 0x1, 0x1, 0x8, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 938.712258ms ago: executing program 1 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000100)='4\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 938.377102ms ago: executing program 0 (id=406): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (fail_nth: 3) 690.0533ms ago: executing program 0 (id=407): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x1e, 0x12}}) creat(&(0x7f0000000280)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC]) 640.525657ms ago: executing program 0 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) r4 = dup(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, '\x00', "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7f, 0x9, 0xd5, 0x401}, {0x0, 0x6, 0x8, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x37c, 0x66, 0x6, 0x1ff}, {0x8, 0x8, 0x3, 0x5}, {0x6, 0x1, 0x80, 0x7}]}) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x2) write$hidraw(r6, &(0x7f0000000000)='\x00\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 350.748195ms ago: executing program 2 (id=409): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000001080)='a', 0x1) mkdirat(r0, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40480923, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='3\n', 0x2) 350.590117ms ago: executing program 2 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 267.866227ms ago: executing program 1 (id=411): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001380)={0x0, 0xc0, 0x5, &(0x7f0000000300)={0xc, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$packet(0x11, 0x2, 0x300) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) read(r2, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 267.646513ms ago: executing program 1 (id=412): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x200) dup3(r1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) 60.5353ms ago: executing program 1 (id=413): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x26000, 0x80000000, 0x2, 0x30000, 0x0, [{0xd3, 0x4, 0x3, '\x00', 0xff}, {0x70, 0x66, 0x2, '\x00', 0x7}, {0x8, 0x6, 0x4, '\x00', 0x4}, {0x7a, 0xa, 0x8, '\x00', 0x3}, {0x9, 0x1, 0x0, '\x00', 0x4}, {0x7f, 0x6, 0x0, '\x00', 0x33}, {0x10, 0x81, 0x81, '\x00', 0x3}, {0x1, 0x1, 0x3, '\x00', 0x3}, {0x81, 0x7, 0x3, '\x00', 0x9}, {0x4, 0x9, 0x0, '\x00', 0x2}, {0x7, 0x7, 0x3, '\x00', 0x9}, {0x81, 0xff, 0x7e, '\x00', 0x4}, {0x0, 0x7, 0x4, '\x00', 0x7}, {0x9, 0x0, 0x7f, '\x00', 0xf}, {0x1, 0x5, 0x0, '\x00', 0x7f}, {0x40, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x2, 0x3, '\x00', 0x9}, {0x18, 0x1, 0x8, '\x00', 0x8}, {0x60, 0x1, 0x2, '\x00', 0x8}, {0x40, 0x4, 0x4, '\x00', 0x9}, {0x2, 0x9, 0x81, '\x00', 0x4}, {0x1, 0x6, 0x1, '\x00', 0x8}, {0x7, 0xe2, 0x5, '\x00', 0xd}, {0x3, 0x0, 0x92, '\x00', 0xff}]}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xa) write$hidraw(r0, 0x0, 0xfffffd74) 59.743596ms ago: executing program 2 (id=414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x30000, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 8.493698ms ago: executing program 2 (id=415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)="1e8395e2bd0d152628c70305dc1d683bba23ac1353f39f6c1d1ebdeb81ac6b0b1b6d21098503a16294770cec5e5dabf9645f63b09f7d700b7ea791ddc83f242125fcc466efccd7d3b7f428488301ed8885fb2f74baba39043d7c2195ead98b9c2b7e7402771164ba1b91e1bf60b2d68b4f16b6d8163c62e3981d6b1c713fbb39fd0f5fad509a225d1c97798ba92d471ac3ee4fa61b42f670e7fb6b87e5e2ece519d623f156e6475fb773dd9ca9bb2482c5d1a05e66bab288d99ec1db3f1cf3fafe5c17dd51371596371a40ef9245c4959416e87865375f4a947b1e64395600a101503f6a7da4229c65264115f0a4136d271abb5c1d0958e8ba9ff721dc800d9d1c15ee3af05478431867addab50a9f374b57fa450751c06a69a2eb9830b7aef3004bfdc92a6944885db52dac9c3c57a8f132621ef46308c3fc3b9cb93410a34fa959dde11d8bca0ee6a79bed302acc5666e6cdbccfdef977798e844b2fda3246e4b9ab3e3be51ef08dd3c51070e0cd965124bc9663faceebb3e878358c5de8a1510c8754e7cdaf2f2d6a0b8862d83a9cd57141deb0057c26544083fa1acf6abc25cb8ccdd15e7fb85a22791d538a8bcd45811466a3e460e70325f5e4ef4ba2f749bcaba2d9d3bc8de5d23879fb70bc258fa67268cbb27c60279055f8c3bb8869c22696d6ee1ef3fccaddda098fda773afddc02c8a5c4d1b89d85326233689dfb2c456b4a5b7f0fba2763d452d3abcb028122263342a66993db2391e26217d71dcab7f71bc7b35fefa4db0dea72aaa5f8edffd4ddb2c8e5c2243bccec57d133530617886bd1f0c981a921c66ed8c3dd4f39577fa782ac66fcde68ad2d86b6c6ead9fbc98acae404223e7d9461689816ec6990ccff32db513c0e4abe46bcdcebe804722e4299045c6263c0d4d79237564c01b5bd27d157d82ed7be47d4c786fa609899d830aa88d8341a7c8906fc0857f0b8553f47880b63bc357bb864f6df27b74bba838b78089f7c78e5e45597c6d7f10e0095c2df3cb654aa51efaab8b7a9b935ee54c302ed0f98f8a01cfe250bd54b5812ccb118e48edaf83664bfec7cbf911121cd58aeed23892c7a21db1d57eb62cccca4d1040e07e859e93f146ec6a5c95e99ff786b573da0ad1b13232727ac6b33b32f5d5226fdf36bc23f4741724ba6482c695281d5644be86550bc916a3f5a6ec274a57429d98421a042a2eee561fa64279270fbfaf07e638b43623726ed1242d341d1dc8a4f6ec52915c518178b1638675af7687763aff23cf75b831484dd1a669022a5a2c8599dff7909e7368700a6de96dbb39c65bfd572ac78fe93dc61466556a70fa4ff52c39fc8b9e12e4e3ca964937a2ca7fbf08ffa8b2844c47678dc0850e68646f35364f11b71b27f6729fe96547c8f8e6ce4beb6d95283f3537f2b76cd05c97f1364d87b9a36ce8fc7fb16e5df9d10979de8fd7153b84a784905122587713d0fd527ae215f1127bf4f351f786e7da4c19bedbb92633b842bec3570d102ca2ae7b764310314d6deaf916e91ca891e7b4622c7d045cccf21b9ac49834bf50f16538d02d11ac784252e656b9fda0ccf2583e401e8f6f2164ebae8e21c8b5bd417658ecca2f56ea57a0f44b8c93aee09843b79f449d214876fbd1078160c450dbf4e3988eabe294e2cb6688af4a2d162136e24727a646d52cdc585c1582686198819984327839f332fc57eb65d0ff0208c14c73ecf57003151f71bb7cc7663c6557ee30a3b4d40480530ac7aea0b4aeaebe2a9561339c8aea909cc68debcbd26d368bd43a2068ba0d97d54ec1903a7788da2b42ee16182973e25808050552c67a97354d264b5d64a97713095bf96b10079dd8b4d0c9376f6d7feb15d35b43a4eb95b15463faa3c1cf32de42124c49504b83a80b0044d0239e1b4fae9805e7ca2030a211bfd3505b94be04abe6a50a4a3fd39dcba7cf2f6e5db1191323743ab11de2d6c3eea280a61dcf483477c1c04c62b54053be8b51995cd267a786bf997412f812fe4b7891955f9bb6458a5805fc6e2239a22ee3b7bbab96b10d64d6848468cedf34512bd075c372ebfeae9ea9782147997fccf6ae6d7591cd8c1899fe1ccaadc828c68e41c1949dc0d531f266dcc3db92dd64633a9c35c890dc7e17b2eef8cb33b47558d42b0e4310a7247759870c2392792b64e7e8a34b6de9b516fabb61d8cf477cea91a63c68d6229e4e4d0580ea464e3cdf0de1a0f0ee90d9d107c37476c30ef3f270429763f28aff38931cadd263fd3fd18fcbf1046ac1097f2c95e84cc9e582c9f84d0c9a9b011ce60fc8d39a0f21f8d51ed4f3195e65de3f2c1e1b2d2608bdbdc041ea42a46b1aaa6c150d27a1a27d04e638e8cc92af3187ee72eade3b8373ffc8bf8445e940c43f51713875248002a84583a0ea604e7a49a90751970266b3cb6bfa0e91ed6afb059386eca70eedb3c05d355161f11dc7644beaee7a2453af13d1060e69ed5a2fb77a8650824d0cb5e7c6b8cd75955246064332d1a774218946f82d57ac514026ab2dd425eb026b6abc3df0f756af26299cd8e20895b7c4f155581ad4fb36c3cab418f37cae4cac3cfcfdb6c5ae1452ea047ab26d6f2aea0310d38e34bbb88d418e7fa681af0c3442907d6ae3342a7066cb1b004339a69e2da89b9d53d6433c6133e6b560038fa7fbaae36c3f649290166fbc8a5018e7357d5639c85c1612aa5f395f23abe3e206d1e51d2db1c55887c65e5f47aace8c159d20c6a57bc71ea4eb7ae839f682d93bd8441366dac3f48156bbf971b1da96d46352f3da31b59646e38483e8daff62aa25e339b9bb27a500ef35c6b169b37aed9044666b04a9a668df87a0aea02edde2eef0ad2dd866117419b93b9d7e63709885478d165473bb2fba5bf2b1651b59930530f2a3b418a9b616bb3f9692f51f63873b31f173d3555db4d304fa39a21574cb9fb2cdbca2874f5db8c0e3a134c7132a8ece82448683564550e14e9e004c8f5d3dbd1956d5983694f47d6861c563819d16bb7bae03db5ef7b0421723d5a2c1f305913ee8c1cff8435bff588e2f4b0c929d512fc5058730de63753d64965714047b37eab93ab6fc7b570cd3aa7ef2e5f95237b481a44057c0697b0d1a1ecbcbe72cecc7a9e69818140810c086c0786c05c081100165d501775674cd1bc10c8fa97237e6e3901b64861f92af1601081057f62513fc5f82cfbb5b4ad3e90b65e7f2767d5f379748d7f0ce0a9b8cdbb241d2a7b03173c1b6e5a36b3a6412a2f38330cadb3e00b4c235696353545867720d6e713b01359183a4cbba321c4da1d2d323d470836374e11cb200bde3645df5b4989c95b137aa0ca706d83f1175ee418d0ae1379c07e9d8d96c9883b2e60221d5d6556b04b5b825bee1c2d893537420ce4dcb17b2c25d29f4ebc0925abcdbaa94275b20762a2f858aac6c4f6c06dadb8809805416cde95861455915e2ac9f806a34e8097c9671b7f88afb0d8e72b6b3357666bd1ae8bc24b722db69be36c0bce96472ca40adfd12f95c0abd70c406787416e92cb07493f5eb7123d0c4d5f2f689d5e34a840d063a7a9dd5334e92f807d9f57513e6e954e7492e1a92f5a265110308c92bf926463c3452d8f8012e56178a85e60e8af568430d919cdcec4ea98756d624951ce3970bb5b9fd4c3e43bb11a7e0982ae628eaa272da927babdfb88f63179a4f752d09ddc0a462af6e123240e4b545ca7e27491e16603275ad84f676c6c488079c1fc30993256f59f8ce4fa53706c8f91f2d6f6e3c7a11696b8862e7a8097fcc8b9627aaeec7e0cadbfcd2506633da28dd28b17ed3336d5ff0a0cdedf606d812a8ad514fadb22697a3e2f92edda7e20160522ea85cfcf8636f43e638504c31e25b1eb40b1c6764f29d93e982affef5a1b3027de566554b634ba01f130b116808f1c5fbd4d45ee661456b3d170b051dcdf3beb402b5d19ab8ddcd85edf13c2d29a58b39aca7b29917bd146e21082ff580c5dfbe5e503c63997ec1a6c22d5b17061ff0da79ba641669e8ad5b3920d90e1b88ad0efb81c55c9c623f5bdb799e15bc2745abaa5dce257654b735a071e994e9770c75d1de8ebf0e2c49d484138c65774e3fde2ec1719aa688507879b7819fb61850d1f862f678b3b260304d13a831ca3eb0b10439f6bc3da70d6b361b8c7a03200077346cef85d43f29f286f902d99b5087255875bb728ec5def25af8e74e641a82862aac4645e98db604cef53302f6b71877ed9a1fc58bb6e364a4762b63e4b4b848b8e6ed09cfaf693e7daa0b1f7bdbd297f891c294b76a267b972c8b658ed6db2e6d2a3d64c91de4eb974be30e9a547576bc8db0df293b8480bb5467e9481251bfe0cf831c474e7dc157958afa463eb2e2b7ba6af9e46d853a1ad90677c78aa3f6c5eaee34eb3fdba3d51f042392188ed7899966f89b2f6a3735c0eea1fc957c2cf4c868612b18c9d838b93b058e0fbd48aa34a786b02c82516f0a099ae07cb682ebc05e5e86e531d7df4fdc16aca9af5c87a25042b7077d71d83dabc327e3195323eedc62580d6f9cde5da5cbef3039de47e8df9ee3f6716ad73c3edd47c299953bb8a8212003bc55b92f70feda73ed8c19400ba", 0xcc1}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8089}, 0x4000814) write$nci(r4, 0x0, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="f4ff02"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 869.29µs ago: executing program 1 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add', 0x3f) 0s ago: executing program 3 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="3999084633cd5c5956b2fa44f1ff51fb31047c266a6fc96365cad1c5b70c61a76143fab3c2a8060e9f7e05ba7840c8a591ec083ff903d467bd82a0a3d1fb01837b7ccf5bc7de5fd1a1363d3f1d3a59a18534ee0fd0e7763edbe70e56fed6caa724e956f8c33f0c256e1cfa78f3f27c8569f98d51d0484658193a3f", 0x7b) kernel console output (not intermixed with test programs): 790 [ 68.627602][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.627613][ T6277] RIP: 0033:0x7ff52715e90e [ 68.627623][ T6277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.627634][ T6277] RSP: 002b:00007ff527f83fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.627645][ T6277] RAX: ffffffffffffffda RBX: 00007ff527f846c0 RCX: 00007ff52715e90e [ 68.627651][ T6277] RDX: 000000000000000f RSI: 00007ff527f840a0 RDI: 0000000000000004 [ 68.627657][ T6277] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 68.627663][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.627669][ T6277] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 68.627683][ T6277] [ 68.700946][ T5801] usb 8-1: USB disconnect, device number 2 [ 68.826978][ T6297] ehci-pci 0000:00:1d.7: remove, state 1 [ 68.833771][ T6297] usb usb2: USB disconnect, device number 1 [ 68.837247][ T6297] usb 2-1: USB disconnect, device number 2 [ 68.938805][ T6305] syzkaller0: entered promiscuous mode [ 68.941593][ T6305] syzkaller0: entered allmulticast mode [ 68.953609][ T6297] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 69.221481][ T50] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 69.379800][ T6309] FAULT_INJECTION: forcing a failure. [ 69.379800][ T6309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.387678][ T6309] CPU: 3 UID: 0 PID: 6309 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 69.387705][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.387717][ T6309] Call Trace: [ 69.387723][ T6309] [ 69.387731][ T6309] dump_stack_lvl+0x100/0x190 [ 69.387780][ T6309] should_fail_ex.cold+0x5/0xa [ 69.387807][ T6309] _copy_from_iter+0x1f4/0x1690 [ 69.387842][ T6309] ? __pfx__copy_from_iter+0x10/0x10 [ 69.387870][ T6309] ? trace_kmalloc+0xeb/0x110 [ 69.387896][ T6309] ? __kasan_kmalloc+0xaa/0xb0 [ 69.387921][ T6309] ? __kmalloc_noprof+0x345/0x820 [ 69.387946][ T6309] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 69.387971][ T6309] kernfs_fop_write_iter+0x186/0x5f0 [ 69.387994][ T6309] vfs_write+0x6af/0x1050 [ 69.388016][ T6309] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 69.388038][ T6309] ? __pfx_vfs_write+0x10/0x10 [ 69.388055][ T6309] ? find_held_lock+0x2b/0x80 [ 69.388096][ T6309] ksys_write+0x12a/0x250 [ 69.388115][ T6309] ? __pfx_ksys_write+0x10/0x10 [ 69.388142][ T6309] do_syscall_64+0x123/0x790 [ 69.388167][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.388188][ T6309] RIP: 0033:0x7fe6b579e0d9 [ 69.388206][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.388224][ T6309] RSP: 002b:00007fe6b6593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.388243][ T6309] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa0 RCX: 00007fe6b579e0d9 [ 69.388256][ T6309] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 69.388268][ T6309] RBP: 00007fe6b6593090 R08: 0000000000000000 R09: 0000000000000000 [ 69.388279][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.388298][ T6309] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffc2db77ee8 [ 69.388324][ T6309] [ 69.466167][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 69.469798][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 69.491620][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 69.495396][ T50] usb 1-1: Product: QEMU USB Tablet [ 69.497714][ T50] usb 1-1: Manufacturer: QEMU [ 69.499737][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 69.524941][ T6311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 69.528931][ T6311] nbd: must specify at least one socket [ 69.532450][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input5 [ 69.577860][ T6313] FAULT_INJECTION: forcing a failure. [ 69.577860][ T6313] name fail_futex, interval 1, probability 0, space 0, times 1 [ 69.584765][ T6313] CPU: 3 UID: 0 PID: 6313 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT(full) [ 69.584792][ T6313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.584803][ T6313] Call Trace: [ 69.584811][ T6313] [ 69.584818][ T6313] dump_stack_lvl+0x100/0x190 [ 69.584850][ T6313] should_fail_ex.cold+0x5/0xa [ 69.584874][ T6313] get_futex_key+0x1d0/0x14f0 [ 69.584905][ T6313] ? __pfx_get_futex_key+0x10/0x10 [ 69.584932][ T6313] ? ttwu_queue_wakelist+0x2fd/0x450 [ 69.584962][ T6313] ? __smp_call_single_queue+0x17e/0x450 [ 69.584991][ T6313] ? __pfx___smp_call_single_queue+0x10/0x10 [ 69.585021][ T6313] futex_wait_setup+0x91/0x540 [ 69.585051][ T6313] __futex_wait+0x19f/0x300 [ 69.585077][ T6313] ? __pfx___futex_wait+0x10/0x10 [ 69.585099][ T6313] ? __pfx_try_to_wake_up+0x10/0x10 [ 69.585124][ T6313] ? futex_hash+0x311/0x400 [ 69.585154][ T6313] ? __pfx_futex_wake_mark+0x10/0x10 [ 69.585180][ T6313] ? find_held_lock+0x2b/0x80 [ 69.585200][ T6313] ? futex_wake+0x4ea/0x5e0 [ 69.585228][ T6313] futex_wait+0xe6/0x370 [ 69.585252][ T6313] ? __pfx_futex_wait+0x10/0x10 [ 69.585281][ T6313] ? rcu_read_lock_any_held+0x6a/0x90 [ 69.585303][ T6313] ? find_held_lock+0x2b/0x80 [ 69.585323][ T6313] ? ksys_write+0x190/0x250 [ 69.585339][ T6313] ? ksys_write+0x190/0x250 [ 69.585359][ T6313] do_futex+0x265/0x440 [ 69.585378][ T6313] ? __pfx_do_futex+0x10/0x10 [ 69.585398][ T6313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.585430][ T6313] __x64_sys_futex+0x34f/0x4d0 [ 69.585453][ T6313] ? fput+0x7c/0x100 [ 69.585475][ T6313] ? __pfx___x64_sys_futex+0x10/0x10 [ 69.585494][ T6313] ? ksys_write+0x1ac/0x250 [ 69.585511][ T6313] ? __pfx_ksys_write+0x10/0x10 [ 69.585536][ T6313] do_syscall_64+0x123/0x790 [ 69.585557][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.585576][ T6313] RIP: 0033:0x7fe6b579e0d9 [ 69.585593][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.585611][ T6313] RSP: 002b:00007fe6b65930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.585631][ T6313] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa8 RCX: 00007fe6b579e0d9 [ 69.585643][ T6313] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6b5a25fa8 [ 69.585655][ T6313] RBP: 00007fe6b5a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 69.585666][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.585677][ T6313] R13: 00007fe6b5a26038 R14: 00007ffc2db77e00 R15: 00007ffc2db77ee8 [ 69.585702][ T6313] [ 69.708828][ T5803] usb 7-1: USB disconnect, device number 6 [ 69.710923][ T50] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 69.771110][ T6302] usb 1-1: USB disconnect, device number 2 [ 69.848296][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 69.877680][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 69.877697][ T42] audit: type=1400 audit(1787254575.112:345): avc: denied { ioctl } for pid=6320 comm="syz.3.159" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.901312][ T6326] lo: entered allmulticast mode [ 69.925754][ T6326] syzkaller0: entered promiscuous mode [ 69.928225][ T6326] syzkaller0: entered allmulticast mode [ 69.937208][ T6326] tipc: Started in network mode [ 69.939479][ T6326] tipc: Node identity 3e6dd5627627, cluster identity 4711 [ 69.942990][ T6326] tipc: Enabled bearer , priority 0 [ 69.947473][ T6325] tipc: Resetting bearer [ 69.965391][ T6325] tipc: Disabling bearer [ 69.997179][ T42] audit: type=1400 audit(1787254575.232:346): avc: denied { prog_load } for pid=6329 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.022249][ T6325] lo: left allmulticast mode [ 70.054040][ T6302] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 70.061194][ T6302] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 70.066080][ T6302] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 70.081732][ T6302] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 70.087293][ T6302] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 70.092095][ T6302] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 70.094667][ T6302] usb usb2: Product: EHCI Host Controller [ 70.096730][ T6302] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 70.098786][ T6302] usb usb2: SerialNumber: 0000:00:1d.7 [ 70.116928][ T6302] hub 2-0:1.0: USB hub found [ 70.120420][ T6302] hub 2-0:1.0: 6 ports detected [ 70.121028][ T6333] bridge_slave_0: invalid flags given to default FDB implementation [ 70.169908][ T6302] hub 1-0:1.0: USB hub found [ 70.172322][ T6302] hub 1-0:1.0: 2 ports detected [ 70.216754][ T6302] hub 3-0:1.0: USB hub found [ 70.219357][ T6302] hub 3-0:1.0: 2 ports detected [ 70.257157][ T6302] hub 4-0:1.0: USB hub found [ 70.259297][ T6302] hub 4-0:1.0: 2 ports detected [ 70.261991][ T5801] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.308205][ T42] audit: type=1400 audit(1787254575.542:347): avc: denied { map_create } for pid=6334 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.313053][ T6335] FAULT_INJECTION: forcing a failure. [ 70.313053][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.314812][ T42] audit: type=1400 audit(1787254575.542:348): avc: denied { map_read map_write } for pid=6334 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.319674][ T6335] CPU: 3 UID: 0 PID: 6335 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(full) [ 70.319698][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.319709][ T6335] Call Trace: [ 70.319716][ T6335] [ 70.319724][ T6335] dump_stack_lvl+0x100/0x190 [ 70.319755][ T6335] should_fail_ex.cold+0x5/0xa [ 70.319779][ T6335] _copy_from_user+0x2e/0xd0 [ 70.319809][ T6335] __sys_bpf+0x2f5/0x4a30 [ 70.319839][ T6335] ? __pfx___sys_bpf+0x10/0x10 [ 70.319861][ T6335] ? find_held_lock+0x2b/0x80 [ 70.319881][ T6335] ? get_pid_task+0xfc/0x250 [ 70.319900][ T6335] ? get_pid_task+0xfc/0x250 [ 70.319927][ T6335] ? find_held_lock+0x2b/0x80 [ 70.319952][ T6335] ? rcu_read_lock_any_held+0x6a/0x90 [ 70.319974][ T6335] ? find_held_lock+0x2b/0x80 [ 70.319993][ T6335] ? ksys_write+0x190/0x250 [ 70.320011][ T6335] ? ksys_write+0x190/0x250 [ 70.320046][ T6335] ? fput+0x7c/0x100 [ 70.320067][ T6335] ? ksys_write+0x1ac/0x250 [ 70.320088][ T6335] ? __x64_sys_bpf+0xce/0x140 [ 70.320110][ T6335] __x64_sys_bpf+0xce/0x140 [ 70.320134][ T6335] ? do_syscall_64+0xae/0x790 [ 70.320154][ T6335] do_syscall_64+0x123/0x790 [ 70.320172][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.320192][ T6335] RIP: 0033:0x7f872419e0d9 [ 70.320207][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.320225][ T6335] RSP: 002b:00007f872514c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.320243][ T6335] RAX: ffffffffffffffda RBX: 00007f8724425fa0 RCX: 00007f872419e0d9 [ 70.320254][ T6335] RDX: 000000000000009a RSI: 00002000000003c0 RDI: 0000000000000005 [ 70.320265][ T6335] RBP: 00007f872514c090 R08: 0000000000000000 R09: 0000000000000000 [ 70.320275][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.320285][ T6335] R13: 00007f8724426038 R14: 00007f8724425fa0 R15: 00007ffe1d5fedd8 [ 70.320310][ T6335] [ 70.422174][ T5801] usb 8-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 70.427332][ T5801] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.431505][ T5801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.438348][ T5801] usb 8-1: config 0 descriptor?? [ 70.441475][ T5838] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 70.449121][ T5801] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 70.612145][ T5838] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 70.630228][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 70.633792][ T5838] usb 2-1: Product: QEMU USB Tablet [ 70.636031][ T5838] usb 2-1: Manufacturer: QEMU [ 70.638181][ T5838] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 70.650992][ T42] audit: type=1400 audit(1787254575.882:349): avc: denied { ioctl } for pid=6329 comm="syz.3.162" path="socket:[12482]" dev="sockfs" ino=12482 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.671612][ T5803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.673437][ T5801] usb 8-1: USB disconnect, device number 3 [ 70.682516][ T42] audit: type=1400 audit(1787254575.922:350): avc: denied { read } for pid=6329 comm="syz.3.162" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.696159][ T5838] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input6 [ 70.769601][ T5838] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 70.831434][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 70.833707][ T5803] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.838047][ T5803] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.840787][ T5803] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.844113][ T5803] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.847392][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.850421][ T5803] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.855111][ T5803] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.859163][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.863419][ T5803] usb 5-1: config 0 descriptor?? [ 70.942817][ T6345] hid-generic 0003:0627:0001.0004: pid 6345 passed too large report [ 71.016552][ T42] audit: type=1400 audit(1787254576.252:351): avc: denied { read write } for pid=6348 comm="syz.2.169" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 71.020146][ T6349] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 71.023790][ T42] audit: type=1400 audit(1787254576.252:352): avc: denied { open } for pid=6348 comm="syz.2.169" path="/36/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 71.036277][ T6349] audit: out of memory in audit_log_start [ 71.072541][ T5803] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.100057][ T6351] overlayfs: failed to resolve './file0': -2 [ 71.205154][ T6358] lo: entered allmulticast mode [ 71.219117][ T6358] FAULT_INJECTION: forcing a failure. [ 71.219117][ T6358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.224418][ T6358] CPU: 2 UID: 0 PID: 6358 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT(full) [ 71.224434][ T6358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.224441][ T6358] Call Trace: [ 71.224445][ T6358] [ 71.224450][ T6358] dump_stack_lvl+0x100/0x190 [ 71.224469][ T6358] should_fail_ex.cold+0x5/0xa [ 71.224489][ T6358] _copy_from_iter+0x1f4/0x1690 [ 71.224509][ T6358] ? __asan_memset+0x23/0x50 [ 71.224521][ T6358] ? __pfx__copy_from_iter+0x10/0x10 [ 71.224538][ T6358] ? __pfx___alloc_skb+0x10/0x10 [ 71.224560][ T6358] netlink_sendmsg+0x808/0xda0 [ 71.224578][ T6358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.224595][ T6358] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.224613][ T6358] sock_write_iter+0x53a/0x5b0 [ 71.224655][ T6358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.224678][ T6358] ? __pfx_sock_write_iter+0x10/0x10 [ 71.224705][ T6358] ? bpf_lsm_file_permission+0x9/0x10 [ 71.224720][ T6358] ? security_file_permission+0x76/0x210 [ 71.224740][ T6358] ? rw_verify_area+0xce/0x6d0 [ 71.224757][ T6358] vfs_write+0x6af/0x1050 [ 71.224768][ T6358] ? __pfx_sock_write_iter+0x10/0x10 [ 71.224781][ T6358] ? __pfx_vfs_write+0x10/0x10 [ 71.224790][ T6358] ? find_held_lock+0x2b/0x80 [ 71.224812][ T6358] ksys_write+0x1f8/0x250 [ 71.224822][ T6358] ? __pfx_ksys_write+0x10/0x10 [ 71.224836][ T6358] do_syscall_64+0x123/0x790 [ 71.224849][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.224861][ T6358] RIP: 0033:0x7fe6b579e0d9 [ 71.224870][ T6358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.224881][ T6358] RSP: 002b:00007fe6b6593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.224892][ T6358] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa0 RCX: 00007fe6b579e0d9 [ 71.224899][ T6358] RDX: 0000000000000034 RSI: 0000200000000080 RDI: 0000000000000004 [ 71.224905][ T6358] RBP: 00007fe6b6593090 R08: 0000000000000000 R09: 0000000000000000 [ 71.224911][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.224917][ T6358] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffc2db77ee8 [ 71.224930][ T6358] [ 71.225163][ T6357] lo: left allmulticast mode [ 71.317102][ T6363] CUSE: unknown device info "" [ 71.319893][ T6363] CUSE: unknown device info "" [ 71.323167][ T6363] CUSE: unknown device info "" [ 71.325336][ T6363] CUSE: unknown device info "" [ 71.327666][ T6363] CUSE: zero length info key specified [ 71.337057][ T6363] Bluetooth: MGMT ver 1.23 [ 71.366282][ T6363] dvmrp0: entered allmulticast mode [ 71.384502][ T6363] dvmrp8: entered allmulticast mode [ 71.391258][ T6362] dvmrp0: left allmulticast mode [ 71.577633][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580241][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.630716][ T5736] Bluetooth: hci2: connection err: -111 [ 71.904843][ T6402] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 71.923572][ T5801] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 72.040013][ T6409] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 72.055774][ T6409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.060897][ T6409] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 72.081626][ T5801] usb 7-1: Using ep0 maxpacket: 16 [ 72.084140][ T5801] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 72.091720][ T5801] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.100787][ T5801] usb 7-1: config 0 interface 0 has no altsetting 0 [ 72.108123][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.116307][ T5801] usb 7-1: Product: syz [ 72.120883][ T5801] usb 7-1: Manufacturer: syz [ 72.123700][ T5801] usb 7-1: SerialNumber: syz [ 72.131785][ T5801] usb 7-1: config 0 descriptor?? [ 72.274304][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 72.343214][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 72.350007][ T5801] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 72.363029][ T5801] imon:send_packet: packet tx failed (-71) [ 72.381612][ T5801] imon 7-1:0.0: panel buttons/knobs setup failed [ 72.441579][ T5801] rc_core: IR keymap rc-imon-pad not found [ 72.443444][ T5801] Registered IR keymap rc-empty [ 72.445119][ T5801] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 72.448242][ T5801] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 72.452791][ T5801] imon:send_packet: packet tx failed (-71) [ 72.471618][ T5801] imon 7-1:0.0: remote input dev register failed [ 72.473725][ T5801] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 72.488716][ T5801] imon 7-1:0.0: unable to initialize intf0, err 0 [ 72.490951][ T5801] imon:imon_probe: failed to initialize context! [ 72.493131][ T5801] imon 7-1:0.0: unable to register, err -19 [ 72.496783][ T5801] usb 7-1: USB disconnect, device number 7 [ 72.604728][ T5838] usb 6-1: USB disconnect, device number 3 [ 72.607903][ T5803] usb 5-1: USB disconnect, device number 3 [ 72.637477][ T5803] usblp1: removed [ 72.872584][ T5801] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 73.021957][ T5801] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 73.026373][ T5801] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 73.028734][ T6413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.031026][ T5801] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 73.031043][ T5801] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.034296][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.055276][ T5801] usb 7-1: Product: syz [ 73.056692][ T5801] usb 7-1: Manufacturer: syz [ 73.060813][ T5801] usb 7-1: SerialNumber: syz [ 73.067979][ T5801] usb 7-1: config 0 descriptor?? [ 73.070157][ T6389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.276363][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 73.287597][ T5801] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 73.542099][ T6448] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.549887][ T6448] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 73.551670][ T5801] rc_core: IR keymap rc-imon-pad not found [ 73.556715][ T5801] Registered IR keymap rc-empty [ 73.558888][ T5801] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 73.567599][ T5801] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 73.694178][ T5801] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 73.707105][ T5801] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 73.715972][ T5801] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:8> initialized [ 73.736849][ T6461] FAULT_INJECTION: forcing a failure. [ 73.736849][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 73.741919][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 73.741939][ T6461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.741945][ T6461] Call Trace: [ 73.741950][ T6461] [ 73.741954][ T6461] dump_stack_lvl+0x100/0x190 [ 73.741974][ T6461] should_fail_ex.cold+0x5/0xa [ 73.741988][ T6461] should_failslab+0xc2/0x120 [ 73.742004][ T6461] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 73.742020][ T6461] ? kstrdup_const+0x63/0x80 [ 73.742036][ T6461] kstrdup+0x51/0xe0 [ 73.742048][ T6461] kstrdup_const+0x63/0x80 [ 73.742060][ T6461] kvasprintf_const+0x10f/0x1a0 [ 73.742072][ T6461] kobject_set_name_vargs+0x5a/0x140 [ 73.742090][ T6461] dev_set_name+0xc7/0x100 [ 73.742131][ T6461] ? __pfx_dev_set_name+0x10/0x10 [ 73.742145][ T6461] ? kasan_save_track+0x14/0x30 [ 73.742159][ T6461] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 73.742174][ T6461] tty_register_device_attr+0x2fb/0x7f0 [ 73.742198][ T6461] ? lockdep_init_map_type+0x5c/0x250 [ 73.742216][ T6461] ? __pfx_tty_register_device_attr+0x10/0x10 [ 73.742236][ T6461] ? tty_port_init+0x156/0x1c0 [ 73.742248][ T6461] gsm_activate_mux+0x155/0x2a0 [ 73.742266][ T6461] gsmld_ioctl+0xbbc/0x15c0 [ 73.742281][ T6461] ? kasan_quarantine_put+0x104/0x240 [ 73.742295][ T6461] ? __pfx_gsmld_ioctl+0x10/0x10 [ 73.742316][ T6461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.742333][ T6461] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 73.742349][ T6461] ? __pfx_gsmld_ioctl+0x10/0x10 [ 73.742361][ T6461] tty_ioctl+0x11b4/0x1640 [ 73.742378][ T6461] ? __pfx_tty_ioctl+0x10/0x10 [ 73.742393][ T6461] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 73.742412][ T6461] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.742440][ T6461] ? selinux_file_ioctl+0x13b/0x290 [ 73.742455][ T6461] ? selinux_file_ioctl+0xb6/0x290 [ 73.742471][ T6461] ? __pfx_tty_ioctl+0x10/0x10 [ 73.742489][ T6461] __x64_sys_ioctl+0x18e/0x210 [ 73.742501][ T6461] do_syscall_64+0x123/0x790 [ 73.742512][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.742524][ T6461] RIP: 0033:0x7ff52719e0d9 [ 73.742534][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.742545][ T6461] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.742556][ T6461] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 73.742562][ T6461] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 73.742569][ T6461] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 73.742575][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.742581][ T6461] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 73.742595][ T6461] [ 73.879658][ T6389] imon:lcd_write: invalid payload size: 0 (expected 8) [ 73.940909][ T6467] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 74.034316][ T6476] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 74.061178][ T6476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.065206][ T6476] bond1: (slave bond2): making interface the new active one [ 74.068142][ T6476] bond1: (slave bond2): Enslaving as an active interface with an up link [ 74.078950][ T6476] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 74.084788][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 74.087973][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.358028][ T6495] usb usb1: usbfs: process 6495 (syz.0.220) did not claim interface 0 before use [ 74.395660][ T6493] affs: No valid root block on device sr0 [ 74.621829][ T5838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 74.765145][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 74.768119][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 74.772740][ T6512] netlink: 'syz.0.228': attribute type 11 has an invalid length. [ 74.775172][ T6512] netlink: 'syz.0.228': attribute type 7 has an invalid length. [ 74.831058][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.231'. [ 75.059802][ T5803] usb 7-1: USB disconnect, device number 8 [ 75.618103][ T6524] FAULT_INJECTION: forcing a failure. [ 75.618103][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.622856][ T6524] CPU: 3 UID: 0 PID: 6524 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 75.622878][ T6524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.622888][ T6524] Call Trace: [ 75.622895][ T6524] [ 75.622901][ T6524] dump_stack_lvl+0x100/0x190 [ 75.622933][ T6524] should_fail_ex.cold+0x5/0xa [ 75.622948][ T6524] _copy_from_iter+0x1f4/0x1690 [ 75.622978][ T6524] ? __asan_memset+0x23/0x50 [ 75.622996][ T6524] ? __pfx__copy_from_iter+0x10/0x10 [ 75.623021][ T6524] ? __pfx___alloc_skb+0x10/0x10 [ 75.623057][ T6524] netlink_sendmsg+0x808/0xda0 [ 75.623086][ T6524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.623112][ T6524] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.623141][ T6524] ____sys_sendmsg+0xa4d/0xbe0 [ 75.623162][ T6524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.623188][ T6524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.623220][ T6524] ___sys_sendmsg+0x190/0x1e0 [ 75.623242][ T6524] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.623262][ T6524] ? get_pid_task+0x106/0x250 [ 75.623282][ T6524] ? find_held_lock+0x2b/0x80 [ 75.623303][ T6524] __sys_sendmsg+0x160/0x210 [ 75.623320][ T6524] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.623343][ T6524] do_syscall_64+0x123/0x790 [ 75.623357][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.623368][ T6524] RIP: 0033:0x7ff33a39e0d9 [ 75.623379][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.623389][ T6524] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.623400][ T6524] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 75.623407][ T6524] RDX: 0000000000000840 RSI: 0000200000000300 RDI: 0000000000000004 [ 75.623415][ T6524] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 75.623421][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.623427][ T6524] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 75.623441][ T6524] [ 75.778105][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 75.778124][ T42] audit: type=1400 audit(1787254581.012:395): avc: denied { bind } for pid=6527 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.785401][ T6529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.235'. [ 75.803103][ T42] audit: type=1400 audit(1787254581.012:396): avc: denied { map } for pid=6525 comm="syz.0.233" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.832880][ T42] audit: type=1400 audit(1787254581.072:397): avc: denied { write } for pid=6527 comm="syz.2.235" name="/" dev="9p" ino=77361239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.847176][ T42] audit: type=1400 audit(1787254581.072:398): avc: denied { associate } for pid=6527 comm="syz.2.235" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.866655][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 75.882935][ T6529] Invalid/unusable pipe [ 75.883909][ T42] audit: type=1400 audit(1787254581.122:399): avc: denied { mounton } for pid=6527 comm="syz.2.235" path="/46/file0/file1" dev="9p" ino=77361253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.909113][ T42] audit: type=1400 audit(1787254581.142:400): avc: denied { read } for pid=6527 comm="syz.2.235" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.913129][ T6529] fuse: Bad value for 'group_id' [ 75.926402][ T6529] fuse: Bad value for 'group_id' [ 75.940356][ T42] audit: type=1400 audit(1787254581.142:401): avc: denied { open } for pid=6527 comm="syz.2.235" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.964363][ T42] audit: type=1400 audit(1787254581.182:402): avc: denied { bind } for pid=6525 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.102064][ T42] audit: type=1400 audit(1787254581.332:403): avc: denied { mount } for pid=6537 comm="syz.3.239" name="/" dev="hugetlbfs" ino=12666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 76.136088][ T42] audit: type=1400 audit(1787254581.372:404): avc: denied { mounton } for pid=6537 comm="syz.3.239" path="/65/file0/file0" dev="hugetlbfs" ino=12669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 76.138860][ T6538] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.161258][ T6538] overlayfs: failed to set xattr on upper [ 76.163232][ T6538] overlayfs: ...falling back to redirect_dir=nofollow. [ 76.165774][ T6538] overlayfs: ...falling back to index=off. [ 76.167677][ T6538] overlayfs: ...falling back to uuid=null. [ 76.169743][ T6538] overlayfs: maximum fs stacking depth exceeded [ 76.187533][ T6544] dlm: no locking on control device [ 76.324971][ T6555] FAULT_INJECTION: forcing a failure. [ 76.324971][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 76.330199][ T6555] CPU: 3 UID: 0 PID: 6555 Comm: syz.3.244 Not tainted syzkaller #0 PREEMPT(full) [ 76.330223][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.330234][ T6555] Call Trace: [ 76.330241][ T6555] [ 76.330249][ T6555] dump_stack_lvl+0x100/0x190 [ 76.330309][ T6555] should_fail_ex.cold+0x5/0xa [ 76.330331][ T6555] should_failslab+0xc2/0x120 [ 76.330360][ T6555] __kmalloc_cache_noprof+0x91/0x6b0 [ 76.330377][ T6555] ? __hashtab_insert+0xf3/0x140 [ 76.330404][ T6555] ? perm_read.isra.0+0xb7/0x3c0 [ 76.330433][ T6555] perm_read.isra.0+0xb7/0x3c0 [ 76.330457][ T6555] ? __pfx_perm_read.isra.0+0x10/0x10 [ 76.330479][ T6555] ? str_read+0x95/0x250 [ 76.330515][ T6555] ? __asan_memcpy+0x3c/0x60 [ 76.330536][ T6555] ? str_read+0x1b6/0x250 [ 76.330562][ T6555] common_read+0x39f/0x570 [ 76.330587][ T6555] ? __pfx_common_read+0x10/0x10 [ 76.330610][ T6555] ? __kmalloc_noprof+0x345/0x820 [ 76.330630][ T6555] ? hashtab_init+0x10a/0x280 [ 76.330659][ T6555] ? __pfx_common_read+0x10/0x10 [ 76.330682][ T6555] policydb_read+0x7f7/0x3ed0 [ 76.330721][ T6555] ? __pfx_policydb_read+0x10/0x10 [ 76.330744][ T6555] ? kasan_save_track+0x14/0x30 [ 76.330764][ T6555] ? __kasan_kmalloc+0xaa/0xb0 [ 76.330793][ T6555] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 76.330812][ T6555] ? security_load_policy+0x113/0x1080 [ 76.330836][ T6555] security_load_policy+0x15c/0x1080 [ 76.330854][ T6555] ? irqentry_exit+0x24d/0xa10 [ 76.330926][ T6555] ? __pfx___mutex_lock+0x10/0x10 [ 76.330946][ T6555] ? __pfx_security_load_policy+0x10/0x10 [ 76.330980][ T6555] sel_write_load+0x28f/0x560 [ 76.331003][ T6555] ? __pfx_sel_write_load+0x10/0x10 [ 76.331033][ T6555] vfs_write+0x2aa/0x1050 [ 76.331052][ T6555] ? __pfx_sel_write_load+0x10/0x10 [ 76.331077][ T6555] ? __pfx_vfs_write+0x10/0x10 [ 76.331092][ T6555] ? find_held_lock+0x2b/0x80 [ 76.331113][ T6555] ? __fget_files+0x215/0x3d0 [ 76.331138][ T6555] ? __fget_files+0x21f/0x3d0 [ 76.331165][ T6555] ksys_write+0x12a/0x250 [ 76.331182][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 76.331207][ T6555] do_syscall_64+0x123/0x790 [ 76.331228][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.331247][ T6555] RIP: 0033:0x7ff52719e0d9 [ 76.331263][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.331280][ T6555] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.331299][ T6555] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 76.331310][ T6555] RDX: 000000000001feff RSI: 0000200000000000 RDI: 0000000000000003 [ 76.331339][ T6555] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 76.331349][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.331360][ T6555] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 76.331385][ T6555] [ 76.463638][ T6555] SELinux: failed to load policy [ 76.476082][ T6551] warning: `syz.0.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.969398][ T6579] netlink: 'syz.2.254': attribute type 7 has an invalid length. [ 77.008343][ T6576] md: could not open device unknown-block(0,0). [ 77.010531][ T6576] md: error, md_import_device() returned -6 [ 77.012949][ T6577] FAULT_INJECTION: forcing a failure. [ 77.012949][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.017025][ T6577] CPU: 2 UID: 0 PID: 6577 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 77.017041][ T6577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.017047][ T6577] Call Trace: [ 77.017053][ T6577] [ 77.017057][ T6577] dump_stack_lvl+0x100/0x190 [ 77.017076][ T6577] should_fail_ex.cold+0x5/0xa [ 77.017091][ T6577] _copy_from_user+0x2e/0xd0 [ 77.017109][ T6577] md_ioctl+0x15fa/0x36b0 [ 77.017161][ T6577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.017177][ T6577] ? __pfx_md_ioctl+0x10/0x10 [ 77.017193][ T6577] ? do_vfs_ioctl+0x226/0x13e0 [ 77.017206][ T6577] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.017228][ T6577] ? __pfx_md_ioctl+0x10/0x10 [ 77.017244][ T6577] blkdev_ioctl+0x5ad/0x6f0 [ 77.017256][ T6577] ? __pfx_blkdev_ioctl+0x10/0x10 [ 77.017267][ T6577] ? selinux_file_ioctl+0x13b/0x290 [ 77.017282][ T6577] ? selinux_file_ioctl+0xb6/0x290 [ 77.017299][ T6577] ? __pfx_blkdev_ioctl+0x10/0x10 [ 77.017311][ T6577] __x64_sys_ioctl+0x18e/0x210 [ 77.017323][ T6577] do_syscall_64+0x123/0x790 [ 77.017335][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.017347][ T6577] RIP: 0033:0x7f872419e0d9 [ 77.017357][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.017368][ T6577] RSP: 002b:00007f872512b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.017379][ T6577] RAX: ffffffffffffffda RBX: 00007f8724426090 RCX: 00007f872419e0d9 [ 77.017386][ T6577] RDX: 0000200000000440 RSI: 0000000040140921 RDI: 0000000000000003 [ 77.017392][ T6577] RBP: 00007f872512b090 R08: 0000000000000000 R09: 0000000000000000 [ 77.017398][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.017404][ T6577] R13: 00007f8724426128 R14: 00007f8724426090 R15: 00007ffe1d5fedd8 [ 77.017418][ T6577] [ 77.134921][ T6585] ehci-pci 0000:00:1d.7: remove, state 1 [ 77.137292][ T6585] usb usb2: USB disconnect, device number 1 [ 77.139320][ T6585] usb 2-1: USB disconnect, device number 2 [ 77.173485][ T5736] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 77.179301][ T5736] Bluetooth: hci0: Injecting HCI hardware error event [ 77.183454][ T5736] Bluetooth: hci0: hardware error 0x00 [ 77.249286][ T6593] FAULT_INJECTION: forcing a failure. [ 77.249286][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 77.249889][ T6594] syzkaller0: entered promiscuous mode [ 77.253980][ T6593] CPU: 3 UID: 0 PID: 6593 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(full) [ 77.253996][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.254003][ T6593] Call Trace: [ 77.254008][ T6593] [ 77.254024][ T6593] dump_stack_lvl+0x100/0x190 [ 77.254045][ T6593] should_fail_ex.cold+0x5/0xa [ 77.254060][ T6593] should_failslab+0xc2/0x120 [ 77.254076][ T6593] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 77.254090][ T6593] ? rcu_is_watching+0x13/0xc0 [ 77.254102][ T6593] ? trace_kmem_cache_alloc+0xdd/0x100 [ 77.254118][ T6593] ? nf_ct_ext_add+0x1b0/0x3c0 [ 77.254151][ T6593] krealloc_node_align_noprof+0x321/0x3e0 [ 77.254166][ T6593] nf_ct_ext_add+0x1b0/0x3c0 [ 77.254179][ T6593] init_conntrack.isra.0+0x6bf/0x1380 [ 77.254192][ T6593] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 77.254202][ T6593] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 77.254214][ T6593] ? ipv4_get_l4proto+0x232/0x3a0 [ 77.254233][ T6593] ? ipt_do_table+0xd4f/0x1b00 [ 77.254251][ T6593] ? __local_bh_enable_ip+0xa5/0x120 [ 77.254270][ T6593] nf_conntrack_in+0xe9e/0x16d0 [ 77.254285][ T6593] ? __lock_acquire+0x422/0x1ec0 [ 77.254301][ T6593] ? __pfx_nf_conntrack_in+0x10/0x10 [ 77.254311][ T6593] ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530 [ 77.254340][ T6593] ? lock_acquire+0x1b9/0x370 [ 77.254357][ T6593] nf_hook_slow+0xbf/0x220 [ 77.254374][ T6593] nf_hook.constprop.0+0x2a6/0x750 [ 77.254390][ T6593] ? __pfx_ip_rcv_finish+0x10/0x10 [ 77.254405][ T6593] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 77.254419][ T6593] ? sock_wfree+0x12e/0x7f0 [ 77.254437][ T6593] ? __pfx_ip_rcv_finish+0x10/0x10 [ 77.254451][ T6593] ? ip_rcv_core+0x93c/0xe80 [ 77.254467][ T6593] ? __pfx_ip_rcv+0x10/0x10 [ 77.254481][ T6593] ip_rcv+0x7d/0x3c0 [ 77.254495][ T6593] ? __pfx_ip_rcv+0x10/0x10 [ 77.254509][ T6593] __netif_receive_skb_one_core+0x197/0x1e0 [ 77.254524][ T6593] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 77.254541][ T6593] ? lock_acquire+0x1b9/0x370 [ 77.254560][ T6593] __netif_receive_skb+0x1f/0x120 [ 77.254575][ T6593] netif_receive_skb+0x139/0x7d0 [ 77.254590][ T6593] ? __pfx_netif_receive_skb+0x10/0x10 [ 77.254608][ T6593] tun_rx_batched.isra.0+0x3f6/0x750 [ 77.254647][ T6593] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 77.254666][ T6593] ? tun_get_user+0x1e1e/0x3cc0 [ 77.254685][ T6593] tun_get_user+0x1f53/0x3cc0 [ 77.254708][ T6593] ? __pfx_tun_get_user+0x10/0x10 [ 77.254726][ T6593] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.254744][ T6593] ? find_held_lock+0x2b/0x80 [ 77.254755][ T6593] ? tun_get+0x191/0x370 [ 77.254770][ T6593] ? tun_get+0x191/0x370 [ 77.254789][ T6593] tun_chr_write_iter+0xdc/0x200 [ 77.254800][ T6593] vfs_write+0x6af/0x1050 [ 77.254811][ T6593] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 77.254823][ T6593] ? __pfx_vfs_write+0x10/0x10 [ 77.254832][ T6593] ? find_held_lock+0x2b/0x80 [ 77.254856][ T6593] ksys_write+0x12a/0x250 [ 77.254866][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 77.254880][ T6593] do_syscall_64+0x123/0x790 [ 77.254894][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.254905][ T6593] RIP: 0033:0x7fe6b575e90e [ 77.254916][ T6593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.254927][ T6593] RSP: 002b:00007fe6b6592fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.254938][ T6593] RAX: ffffffffffffffda RBX: 00007fe6b65936c0 RCX: 00007fe6b575e90e [ 77.254945][ T6593] RDX: 00000000000000be RSI: 0000200000000100 RDI: 00000000000000c8 [ 77.254951][ T6593] RBP: 00007fe6b6593090 R08: 0000000000000000 R09: 0000000000000000 [ 77.254957][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.254963][ T6593] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffc2db77ee8 [ 77.254976][ T6593] [ 77.279028][ T6585] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 77.294539][ T6594] syzkaller0: entered allmulticast mode [ 77.558794][ T6604] FAULT_INJECTION: forcing a failure. [ 77.558794][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 77.568011][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 77.568038][ T6604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.568049][ T6604] Call Trace: [ 77.568055][ T6604] [ 77.568062][ T6604] dump_stack_lvl+0x100/0x190 [ 77.568117][ T6604] should_fail_ex.cold+0x5/0xa [ 77.568142][ T6604] should_failslab+0xc2/0x120 [ 77.568171][ T6604] kmem_cache_alloc_noprof+0x91/0x6a0 [ 77.568194][ T6604] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 77.568223][ T6604] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 77.568254][ T6604] mmu_topup_memory_caches+0x25/0x170 [ 77.568284][ T6604] kvm_mmu_load+0xe2/0x2570 [ 77.568310][ T6604] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 77.568332][ T6604] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 77.568357][ T6604] ? __pfx_kvm_mmu_load+0x10/0x10 [ 77.568381][ T6604] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 77.568406][ T6604] ? kvm_check_and_inject_events+0x873/0x12a0 [ 77.568431][ T6604] ? record_steal_time+0x3c0/0xbb0 [ 77.568455][ T6604] vcpu_run+0x3ab0/0x5df0 [ 77.568478][ T6604] ? __pfx____ratelimit+0x10/0x10 [ 77.568548][ T6604] ? __pfx_vcpu_run+0x10/0x10 [ 77.568571][ T6604] ? rcu_is_watching+0x13/0xc0 [ 77.568616][ T6604] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 77.568634][ T6604] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 77.568659][ T6604] kvm_vcpu_ioctl+0x730/0x1700 [ 77.568683][ T6604] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.568708][ T6604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.568739][ T6604] ? do_vfs_ioctl+0x226/0x13e0 [ 77.568757][ T6604] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.568771][ T6604] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 77.568799][ T6604] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.568849][ T6604] ? selinux_file_ioctl+0x13b/0x290 [ 77.568876][ T6604] ? selinux_file_ioctl+0xb6/0x290 [ 77.568905][ T6604] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.568930][ T6604] __x64_sys_ioctl+0x18e/0x210 [ 77.568950][ T6604] do_syscall_64+0x123/0x790 [ 77.568973][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.568992][ T6604] RIP: 0033:0x7f872419e0d9 [ 77.569009][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.569026][ T6604] RSP: 002b:00007f872514c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.569044][ T6604] RAX: ffffffffffffffda RBX: 00007f8724425fa0 RCX: 00007f872419e0d9 [ 77.569057][ T6604] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 77.569070][ T6604] RBP: 00007f872514c090 R08: 0000000000000000 R09: 0000000000000000 [ 77.569080][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.569090][ T6604] R13: 00007f8724426038 R14: 00007f8724425fa0 R15: 00007ffe1d5fedd8 [ 77.569114][ T6604] [ 77.576095][ T5928] usb 1-1: new full-speed USB device number 3 using uhci_hcd [ 77.847540][ T5928] usb 1-1: not running at top speed; connect to a high speed hub [ 77.850196][ T5928] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 77.877323][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 77.880080][ T5928] usb 1-1: Product: QEMU USB Tablet [ 77.882141][ T5928] usb 1-1: Manufacturer: QEMU [ 77.883946][ T5928] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 77.902514][ T5928] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input12 [ 77.973610][ T5928] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 77.992157][ T6589] usb 1-1: USB disconnect, device number 3 [ 78.023454][ T6631] syzkaller1: entered promiscuous mode [ 78.025832][ T6631] syzkaller1: entered allmulticast mode [ 78.039023][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 78.124572][ T6633] fido_id[6633]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 78.157184][ T6589] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 78.178098][ T6589] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 78.185034][ T6589] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 78.214070][ T6589] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 78.216953][ T6589] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 78.221124][ T6589] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 78.223933][ T6589] usb usb2: Product: EHCI Host Controller [ 78.225853][ T6589] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 78.227975][ T6589] usb usb2: SerialNumber: 0000:00:1d.7 [ 78.241873][ T6589] hub 2-0:1.0: USB hub found [ 78.245155][ T6639] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 78.248499][ T6589] hub 2-0:1.0: 6 ports detected [ 78.306042][ T6589] hub 1-0:1.0: USB hub found [ 78.308183][ T6589] hub 1-0:1.0: 2 ports detected [ 78.342965][ T6589] hub 3-0:1.0: USB hub found [ 78.345454][ T6589] hub 3-0:1.0: 2 ports detected [ 78.378704][ T6589] hub 4-0:1.0: USB hub found [ 78.380694][ T6589] hub 4-0:1.0: 2 ports detected [ 78.455791][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 78.500514][ T6653] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 78.515840][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.519126][ T6654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6654 comm=syz.1.279 [ 78.525225][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6653 comm=syz.1.279 [ 78.540133][ T6653] bond1: (slave geneve2): making interface the new active one [ 78.544970][ T6653] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.551620][ T1036] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 78.668841][ T6665] netlink: 156 bytes leftover after parsing attributes in process `syz.3.283'. [ 78.738892][ T6672] ehci-pci 0000:00:1d.7: remove, state 1 [ 78.740745][ T6672] usb usb2: USB disconnect, device number 1 [ 78.744644][ T1036] usb 2-1: device descriptor read/all, error -108 [ 78.748180][ T1036] usb usb2-port1: attempt power cycle [ 78.835793][ T6679] geneve2: entered promiscuous mode [ 78.852333][ T6672] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 78.857066][ T6682] syzkaller0: entered promiscuous mode [ 78.859679][ T6682] syzkaller0: entered allmulticast mode [ 79.000707][ T6695] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 79.047435][ T6696] FAULT_INJECTION: forcing a failure. [ 79.047435][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 79.053096][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 79.053113][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.053120][ T6696] Call Trace: [ 79.053124][ T6696] [ 79.053129][ T6696] dump_stack_lvl+0x100/0x190 [ 79.053164][ T6696] should_fail_ex.cold+0x5/0xa [ 79.053179][ T6696] should_failslab+0xc2/0x120 [ 79.053198][ T6696] kmem_cache_alloc_noprof+0x91/0x6a0 [ 79.053213][ T6696] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 79.053231][ T6696] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 79.053249][ T6696] mmu_topup_memory_caches+0x25/0x170 [ 79.053267][ T6696] kvm_mmu_load+0xe2/0x2570 [ 79.053288][ T6696] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 79.053300][ T6696] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 79.053315][ T6696] ? __pfx_kvm_mmu_load+0x10/0x10 [ 79.053330][ T6696] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 79.053345][ T6696] ? kvm_check_and_inject_events+0x873/0x12a0 [ 79.053362][ T6696] ? record_steal_time+0x3c0/0xbb0 [ 79.053376][ T6696] vcpu_run+0x3ab0/0x5df0 [ 79.053391][ T6696] ? __pfx____ratelimit+0x10/0x10 [ 79.053439][ T6696] ? __pfx_vcpu_run+0x10/0x10 [ 79.053453][ T6696] ? rcu_is_watching+0x13/0xc0 [ 79.053468][ T6696] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 79.053478][ T6696] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 79.053492][ T6696] kvm_vcpu_ioctl+0x730/0x1700 [ 79.053507][ T6696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.053521][ T6696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.053539][ T6696] ? do_vfs_ioctl+0x226/0x13e0 [ 79.053549][ T6696] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 79.053558][ T6696] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 79.053577][ T6696] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.053603][ T6696] ? selinux_file_ioctl+0x13b/0x290 [ 79.053619][ T6696] ? selinux_file_ioctl+0xb6/0x290 [ 79.053636][ T6696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.053650][ T6696] __x64_sys_ioctl+0x18e/0x210 [ 79.053661][ T6696] do_syscall_64+0x123/0x790 [ 79.053673][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.053685][ T6696] RIP: 0033:0x7ff52719e0d9 [ 79.053695][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.053705][ T6696] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.053729][ T6696] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 79.053737][ T6696] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 79.053743][ T6696] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 79.053749][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.053756][ T6696] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 79.053770][ T6696] [ 79.131475][ T1036] usb 1-1: new full-speed USB device number 4 using uhci_hcd [ 79.252958][ T5736] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 79.337858][ T1036] usb 1-1: not running at top speed; connect to a high speed hub [ 79.341303][ T1036] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 79.365059][ T1036] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 79.368700][ T1036] usb 1-1: Product: QEMU USB Tablet [ 79.370998][ T1036] usb 1-1: Manufacturer: QEMU [ 79.372930][ T1036] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 79.392796][ T1036] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input13 [ 79.403968][ T1036] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 79.414308][ T6675] usb 1-1: USB disconnect, device number 4 [ 79.519521][ T6707] fido_id[6707]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 79.579329][ T6675] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 79.583172][ T6675] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 79.588637][ T6675] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 79.603280][ T6675] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 79.606436][ T6675] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 79.610100][ T6675] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 79.612881][ T6675] usb usb2: Product: EHCI Host Controller [ 79.615150][ T6675] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 79.617723][ T6675] usb usb2: SerialNumber: 0000:00:1d.7 [ 79.627302][ T6675] hub 2-0:1.0: USB hub found [ 79.629157][ T6675] hub 2-0:1.0: 6 ports detected [ 79.664209][ T6675] hub 1-0:1.0: USB hub found [ 79.666311][ T6675] hub 1-0:1.0: 2 ports detected [ 79.693777][ T6675] hub 3-0:1.0: USB hub found [ 79.696137][ T6675] hub 3-0:1.0: 2 ports detected [ 79.734750][ T6675] hub 4-0:1.0: USB hub found [ 79.738509][ T6675] hub 4-0:1.0: 2 ports detected [ 79.901780][ T5801] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 80.031913][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.072102][ T5801] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 80.088730][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 80.091717][ T5801] usb 2-1: Product: QEMU USB Tablet [ 80.093399][ T5801] usb 2-1: Manufacturer: QEMU [ 80.094936][ T5801] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 80.122290][ T5801] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input14 [ 80.183947][ T5838] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 80.190894][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.194241][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.200086][ T5838] usb 6-1: config 0 descriptor?? [ 80.204085][ T5838] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 80.213788][ T5801] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 80.326485][ T6725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.361563][ T6725] md: array md0 already has disks! [ 80.383497][ T6727] ehci-pci 0000:00:1d.7: remove, state 1 [ 80.385454][ T6727] usb usb2: USB disconnect, device number 1 [ 80.387369][ T6727] usb 2-1: USB disconnect, device number 2 [ 80.422128][ T5838] usb 6-1: USB disconnect, device number 4 [ 80.441645][ T6725] md: could not open device unknown-block(1,1). [ 80.442204][ T5736] Bluetooth: hci3: command 0x206a tx timeout [ 80.443235][ T5728] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 80.446179][ T6725] md: error, md_import_device() returned -16 [ 80.478292][ T6725] md/raid10:md0: not enough operational mirrors. [ 80.482364][ T6725] md: pers->run() failed ... [ 80.488376][ T6731] syzkaller0: entered promiscuous mode [ 80.490242][ T6731] syzkaller0: entered allmulticast mode [ 80.503304][ T6727] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 80.532163][ T6725] md: could not open device unknown-block(1,2). [ 80.537777][ T6725] md: error, md_import_device() returned -16 [ 80.771456][ T5928] usb 1-1: new full-speed USB device number 5 using uhci_hcd [ 80.958882][ T5928] usb 1-1: not running at top speed; connect to a high speed hub [ 80.965653][ T5928] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 80.985741][ T6741] FAULT_INJECTION: forcing a failure. [ 80.985741][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 80.989559][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 80.989762][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT(full) [ 80.989777][ T6741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.989783][ T6741] Call Trace: [ 80.989789][ T6741] [ 80.989793][ T6741] dump_stack_lvl+0x100/0x190 [ 80.989812][ T6741] should_fail_ex.cold+0x5/0xa [ 80.989827][ T6741] should_failslab+0xc2/0x120 [ 80.989842][ T6741] __kmalloc_cache_noprof+0x91/0x6b0 [ 80.989854][ T6741] ? call_usermodehelper_setup+0xaf/0x360 [ 80.989871][ T6741] ? __pfx_free_modprobe_argv+0x10/0x10 [ 80.989883][ T6741] call_usermodehelper_setup+0xaf/0x360 [ 80.989901][ T6741] __request_module+0x3c7/0x6a0 [ 80.989912][ T6741] ? __pfx___request_module+0x10/0x10 [ 80.989934][ T6741] md_run+0x6e4/0x2510 [ 80.989986][ T6741] ? cred_has_capability.isra.0+0x186/0x300 [ 80.990008][ T6741] ? __pfx_md_run+0x10/0x10 [ 80.990027][ T6741] do_md_run+0x36/0x660 [ 80.990040][ T6741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.990057][ T6741] md_ioctl+0x2613/0x36b0 [ 80.990075][ T6741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.990091][ T6741] ? __pfx_md_ioctl+0x10/0x10 [ 80.990107][ T6741] ? do_vfs_ioctl+0x226/0x13e0 [ 80.990118][ T6741] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.990127][ T6741] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 80.990145][ T6741] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.990167][ T6741] ? __pfx_md_ioctl+0x10/0x10 [ 80.990184][ T6741] blkdev_ioctl+0x5ad/0x6f0 [ 80.990196][ T6741] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.990207][ T6741] ? selinux_file_ioctl+0x13b/0x290 [ 80.990222][ T6741] ? selinux_file_ioctl+0xb6/0x290 [ 80.990239][ T6741] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.990250][ T6741] __x64_sys_ioctl+0x18e/0x210 [ 80.990263][ T6741] do_syscall_64+0x123/0x790 [ 80.990278][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.990289][ T6741] RIP: 0033:0x7ff52719e0d9 [ 80.990299][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.990310][ T6741] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.990321][ T6741] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 80.990328][ T6741] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003 [ 80.990334][ T6741] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 80.990340][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.990346][ T6741] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 80.990360][ T6741] [ 80.993554][ T6741] md/raid10:md0: not enough operational mirrors. [ 80.996756][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 80.996880][ T5928] usb 1-1: Product: QEMU USB Tablet [ 80.996896][ T5928] usb 1-1: Manufacturer: QEMU [ 80.996909][ T5928] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 81.019529][ T5928] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input15 [ 81.020327][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2578 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.025334][ T6741] md: pers->run() failed ... [ 81.025380][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.096485][ T5928] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 81.097392][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.117254][ T6728] usb 1-1: USB disconnect, device number 5 [ 81.119585][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.134629][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.138467][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.142355][ T6738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6738 comm=syz.1.309 [ 81.175050][ T6751] FAULT_INJECTION: forcing a failure. [ 81.175050][ T6751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.181264][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.1.313 Not tainted syzkaller #0 PREEMPT(full) [ 81.181281][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.181287][ T6751] Call Trace: [ 81.181292][ T6751] [ 81.181296][ T6751] dump_stack_lvl+0x100/0x190 [ 81.181331][ T6751] should_fail_ex.cold+0x5/0xa [ 81.181346][ T6751] _copy_from_iter+0x1f4/0x1690 [ 81.181368][ T6751] ? __pfx__copy_from_iter+0x10/0x10 [ 81.181384][ T6751] ? trace_kmalloc+0xeb/0x110 [ 81.181399][ T6751] ? __kasan_kmalloc+0xaa/0xb0 [ 81.181413][ T6751] ? __kmalloc_noprof+0x345/0x820 [ 81.181426][ T6751] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 81.181440][ T6751] kernfs_fop_write_iter+0x186/0x5f0 [ 81.181453][ T6751] vfs_write+0x6af/0x1050 [ 81.181464][ T6751] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 81.181476][ T6751] ? __pfx_vfs_write+0x10/0x10 [ 81.181486][ T6751] ? find_held_lock+0x2b/0x80 [ 81.181508][ T6751] ksys_write+0x12a/0x250 [ 81.181518][ T6751] ? __pfx_ksys_write+0x10/0x10 [ 81.181533][ T6751] do_syscall_64+0x123/0x790 [ 81.181545][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.181557][ T6751] RIP: 0033:0x7ff33a39e0d9 [ 81.181567][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.181578][ T6751] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.181589][ T6751] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 81.181596][ T6751] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000006 [ 81.181602][ T6751] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 81.181608][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.181614][ T6751] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 81.181628][ T6751] [ 81.184622][ T6753] FAULT_INJECTION: forcing a failure. [ 81.184622][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 81.261741][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(full) [ 81.261762][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.261772][ T6753] Call Trace: [ 81.261779][ T6753] [ 81.261787][ T6753] dump_stack_lvl+0x100/0x190 [ 81.261815][ T6753] should_fail_ex.cold+0x5/0xa [ 81.261835][ T6753] should_failslab+0xc2/0x120 [ 81.261855][ T6753] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 81.261877][ T6753] ? __d_alloc+0x35/0xa50 [ 81.261905][ T6753] __d_alloc+0x35/0xa50 [ 81.261926][ T6753] d_alloc_parallel+0x105/0x14c0 [ 81.261943][ T6753] ? __pfx_d_alloc_parallel+0x10/0x10 [ 81.261953][ T6753] ? __d_lookup+0x25c/0x4a0 [ 81.261966][ T6753] ? __d_lookup+0x266/0x4a0 [ 81.261986][ T6753] lookup_open+0x6bb/0x1990 [ 81.262022][ T6753] path_openat+0xa2c/0x2440 [ 81.262046][ T6753] ? __pfx_path_openat+0x10/0x10 [ 81.262066][ T6753] do_file_open+0x20e/0x430 [ 81.262087][ T6753] ? __pfx_do_file_open+0x10/0x10 [ 81.262124][ T6753] ? _raw_spin_unlock+0x28/0x50 [ 81.262145][ T6753] ? alloc_fd+0x471/0x7a0 [ 81.262172][ T6753] do_sys_openat2+0x10f/0x1e0 [ 81.262194][ T6753] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.262217][ T6753] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.262231][ T6753] ? __fget_files+0x21f/0x3d0 [ 81.262246][ T6753] __x64_sys_openat+0x12d/0x210 [ 81.262261][ T6753] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.262276][ T6753] ? ksys_write+0x1ac/0x250 [ 81.262301][ T6753] do_syscall_64+0x123/0x790 [ 81.262320][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.262336][ T6753] RIP: 0033:0x7ff52719e0d9 [ 81.262351][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.262362][ T6753] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.262379][ T6753] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 81.262385][ T6753] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 81.262392][ T6753] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 81.262398][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.262404][ T6753] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 81.262427][ T6753] [ 81.388333][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 81.388350][ T42] audit: type=1400 audit(1787254586.622:445): avc: denied { bind } for pid=6758 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.482749][ T6763] FAULT_INJECTION: forcing a failure. [ 81.482749][ T6763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.487026][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(full) [ 81.487041][ T6763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.487048][ T6763] Call Trace: [ 81.487052][ T6763] [ 81.487056][ T6763] dump_stack_lvl+0x100/0x190 [ 81.487076][ T6763] should_fail_ex.cold+0x5/0xa [ 81.487091][ T6763] _copy_to_user+0x32/0xd0 [ 81.487111][ T6763] simple_read_from_buffer+0xcb/0x170 [ 81.487125][ T6763] proc_fail_nth_read+0x1af/0x230 [ 81.487140][ T6763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.487154][ T6763] ? rw_verify_area+0xce/0x6d0 [ 81.487169][ T6763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.487182][ T6763] vfs_read+0x1e4/0xb40 [ 81.487194][ T6763] ? __pfx_vfs_read+0x10/0x10 [ 81.487203][ T6763] ? find_held_lock+0x2b/0x80 [ 81.487216][ T6763] ? __fget_files+0x215/0x3d0 [ 81.487231][ T6763] ? __fget_files+0x21f/0x3d0 [ 81.487247][ T6763] ksys_read+0x12a/0x250 [ 81.487257][ T6763] ? __pfx_ksys_read+0x10/0x10 [ 81.487271][ T6763] do_syscall_64+0x123/0x790 [ 81.487284][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.487295][ T6763] RIP: 0033:0x7ff33a35e90e [ 81.487304][ T6763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.487315][ T6763] RSP: 002b:00007ff33b274fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.487326][ T6763] RAX: ffffffffffffffda RBX: 00007ff33b2756c0 RCX: 00007ff33a35e90e [ 81.487332][ T6763] RDX: 000000000000000f RSI: 00007ff33b2750a0 RDI: 0000000000000004 [ 81.487338][ T6763] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 81.487344][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.487350][ T6763] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 81.487364][ T6763] [ 81.496461][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 81.525062][ T6728] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 81.574292][ T6728] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 81.579777][ T6728] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 81.652050][ T1036] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.672139][ T6728] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 81.674893][ T6728] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 81.678420][ T6728] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 81.681157][ T6728] usb usb2: Product: EHCI Host Controller [ 81.683658][ T6728] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 81.685921][ T6728] usb usb2: SerialNumber: 0000:00:1d.7 [ 81.699050][ T6728] hub 2-0:1.0: USB hub found [ 81.702464][ T6728] hub 2-0:1.0: 6 ports detected [ 81.743745][ T6728] hub 1-0:1.0: USB hub found [ 81.745998][ T6728] hub 1-0:1.0: 2 ports detected [ 81.784009][ T6728] hub 3-0:1.0: USB hub found [ 81.785794][ T6728] hub 3-0:1.0: 2 ports detected [ 81.804394][ T41] cfg80211: failed to load regulatory.db [ 81.821867][ T1036] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 81.824778][ T6728] hub 4-0:1.0: USB hub found [ 81.830464][ T6728] hub 4-0:1.0: 2 ports detected [ 81.833794][ T1036] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.839504][ T1036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.848220][ T1036] usb 7-1: config 0 descriptor?? [ 81.852164][ T1036] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 81.894418][ T42] audit: type=1400 audit(1787254587.132:446): avc: denied { mount } for pid=6776 comm="syz.3.322" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 81.895751][ T6777] ima: policy update failed [ 81.903091][ T42] audit: type=1802 audit(1787254587.142:447): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.322" res=0 errno=0 [ 81.919269][ T42] audit: type=1400 audit(1787254587.152:448): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 81.952224][ T6779] Console: switching to colour dummy device 80x25 [ 81.981600][ T5801] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 82.004747][ T42] audit: type=1400 audit(1787254587.242:449): avc: denied { bind } for pid=6778 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.011010][ T42] audit: type=1400 audit(1787254587.242:450): avc: denied { listen } for pid=6778 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.017673][ T42] audit: type=1400 audit(1787254587.242:451): avc: denied { accept } for pid=6778 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.024996][ T42] audit: type=1400 audit(1787254587.242:452): avc: denied { write } for pid=6778 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=x25_socket permissive=1 [ 82.033126][ T42] audit: type=1400 audit(1787254587.252:453): avc: denied { search } for pid=5437 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.041209][ T42] audit: type=1400 audit(1787254587.252:454): avc: denied { search } for pid=5437 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.061422][ T50] usb 7-1: USB disconnect, device number 9 [ 82.154101][ T5801] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 82.172453][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 82.184710][ T5801] usb 2-1: Product: QEMU USB Tablet [ 82.186457][ T5801] usb 2-1: Manufacturer: QEMU [ 82.188291][ T5801] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 82.237772][ T6796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.243229][ T5801] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input16 [ 82.291890][ T6796] md: array md0 already has disks! [ 82.304078][ T5801] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 82.393256][ T6799] md: could not open device unknown-block(1,1). [ 82.395997][ T6799] md: error, md_import_device() returned -16 [ 82.425646][ T6796] md/raid10:md0: not enough operational mirrors. [ 82.455003][ T6796] md: pers->run() failed ... [ 82.489079][ T6799] md: could not open device unknown-block(1,2). [ 82.492640][ T6799] md: error, md_import_device() returned -16 [ 82.523359][ T6811] ehci-pci 0000:00:1d.7: remove, state 1 [ 82.525704][ T6811] usb usb2: USB disconnect, device number 1 [ 82.527594][ T6811] usb 2-1: USB disconnect, device number 2 [ 82.556843][ T6815] FAULT_INJECTION: forcing a failure. [ 82.556843][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 82.561705][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(full) [ 82.561721][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.561728][ T6815] Call Trace: [ 82.561731][ T6815] [ 82.561736][ T6815] dump_stack_lvl+0x100/0x190 [ 82.561772][ T6815] should_fail_ex.cold+0x5/0xa [ 82.561787][ T6815] should_failslab+0xc2/0x120 [ 82.561805][ T6815] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 82.561820][ T6815] ? __get_vm_area_node+0x124/0x350 [ 82.561838][ T6815] __get_vm_area_node+0x124/0x350 [ 82.561855][ T6815] __vmalloc_node_range_noprof+0x228/0x1630 [ 82.561876][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.561895][ T6815] ? __lock_acquire+0x4c5/0x1ec0 [ 82.561913][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.561933][ T6815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 82.561950][ T6815] ? find_held_lock+0x2b/0x80 [ 82.561961][ T6815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.561974][ T6815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.561988][ T6815] ? avc_has_perm_noaudit+0x145/0x3b0 [ 82.562001][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.562017][ T6815] __vmalloc_node_noprof+0xad/0xf0 [ 82.562033][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.562052][ T6815] __vmalloc_noprof+0xa3/0x120 [ 82.562068][ T6815] ? __pfx___vmalloc_noprof+0x10/0x10 [ 82.562085][ T6815] ? rcu_is_watching+0x13/0xc0 [ 82.562097][ T6815] ? cap_capable+0x107/0x430 [ 82.562112][ T6815] bpf_prog_alloc_no_stats+0x59/0x690 [ 82.562128][ T6815] ? security_capable+0x80/0x260 [ 82.562142][ T6815] bpf_prog_alloc+0x3b/0x200 [ 82.562158][ T6815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.562175][ T6815] bpf_prog_load+0x49e/0x2a80 [ 82.562189][ T6815] ? __pfx_bpf_prog_load+0x10/0x10 [ 82.562210][ T6815] __sys_bpf+0x1f46/0x4a30 [ 82.562227][ T6815] ? __pfx___sys_bpf+0x10/0x10 [ 82.562240][ T6815] ? find_held_lock+0x2b/0x80 [ 82.562252][ T6815] ? get_pid_task+0xfc/0x250 [ 82.562264][ T6815] ? get_pid_task+0xfc/0x250 [ 82.562279][ T6815] ? find_held_lock+0x2b/0x80 [ 82.562294][ T6815] ? rcu_read_lock_any_held+0x6a/0x90 [ 82.562306][ T6815] ? find_held_lock+0x2b/0x80 [ 82.562318][ T6815] ? ksys_write+0x190/0x250 [ 82.562328][ T6815] ? ksys_write+0x190/0x250 [ 82.562347][ T6815] ? fput+0x7c/0x100 [ 82.562360][ T6815] ? ksys_write+0x1ac/0x250 [ 82.562372][ T6815] ? __x64_sys_bpf+0xce/0x140 [ 82.562385][ T6815] __x64_sys_bpf+0xce/0x140 [ 82.562400][ T6815] ? do_syscall_64+0xae/0x790 [ 82.562441][ T6815] do_syscall_64+0x123/0x790 [ 82.562452][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.562463][ T6815] RIP: 0033:0x7ff33a39e0d9 [ 82.562473][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.562484][ T6815] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.562495][ T6815] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 82.562502][ T6815] RDX: 000000000000009a RSI: 00002000000003c0 RDI: 0000000000000005 [ 82.562508][ T6815] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 82.562514][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.562520][ T6815] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 82.562533][ T6815] [ 82.562540][ T6815] warn_alloc: 2 callbacks suppressed [ 82.562545][ T6815] syz.1.331: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 82.638834][ T6825] syzkaller0: entered promiscuous mode [ 82.641185][ T6815] ,cpuset=/ [ 82.643645][ T6825] syzkaller0: entered allmulticast mode [ 82.644946][ T6815] ,mems_allowed=0-1 [ 82.660533][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 82.666542][ T6815] [ 82.706486][ T6811] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 82.731442][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(full) [ 82.731470][ T6815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.731482][ T6815] Call Trace: [ 82.731489][ T6815] [ 82.731495][ T6815] dump_stack_lvl+0x100/0x190 [ 82.731528][ T6815] warn_alloc.cold+0x94/0xa8 [ 82.731549][ T6815] ? __pfx_warn_alloc+0x10/0x10 [ 82.731566][ T6815] ? __kasan_kmalloc+0x8a/0xb0 [ 82.731597][ T6815] ? __get_vm_area_node+0x22b/0x350 [ 82.731628][ T6815] __vmalloc_node_range_noprof+0xccd/0x1630 [ 82.731658][ T6815] ? __lock_acquire+0x4c5/0x1ec0 [ 82.731687][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.731723][ T6815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 82.731749][ T6815] ? find_held_lock+0x2b/0x80 [ 82.731769][ T6815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.731789][ T6815] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 82.731820][ T6815] ? avc_has_perm_noaudit+0x145/0x3b0 [ 82.731842][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.731869][ T6815] __vmalloc_node_noprof+0xad/0xf0 [ 82.731894][ T6815] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 82.731921][ T6815] __vmalloc_noprof+0xa3/0x120 [ 82.731947][ T6815] ? __pfx___vmalloc_noprof+0x10/0x10 [ 82.731976][ T6815] ? rcu_is_watching+0x13/0xc0 [ 82.731996][ T6815] ? cap_capable+0x107/0x430 [ 82.732021][ T6815] bpf_prog_alloc_no_stats+0x59/0x690 [ 82.732048][ T6815] ? security_capable+0x80/0x260 [ 82.732073][ T6815] bpf_prog_alloc+0x3b/0x200 [ 82.732098][ T6815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.732126][ T6815] bpf_prog_load+0x49e/0x2a80 [ 82.732150][ T6815] ? __pfx_bpf_prog_load+0x10/0x10 [ 82.732189][ T6815] __sys_bpf+0x1f46/0x4a30 [ 82.732219][ T6815] ? __pfx___sys_bpf+0x10/0x10 [ 82.732238][ T6815] ? find_held_lock+0x2b/0x80 [ 82.732256][ T6815] ? get_pid_task+0xfc/0x250 [ 82.732272][ T6815] ? get_pid_task+0xfc/0x250 [ 82.732296][ T6815] ? find_held_lock+0x2b/0x80 [ 82.732317][ T6815] ? rcu_read_lock_any_held+0x6a/0x90 [ 82.732338][ T6815] ? find_held_lock+0x2b/0x80 [ 82.732356][ T6815] ? ksys_write+0x190/0x250 [ 82.732373][ T6815] ? ksys_write+0x190/0x250 [ 82.732408][ T6815] ? fput+0x7c/0x100 [ 82.732431][ T6815] ? ksys_write+0x1ac/0x250 [ 82.732451][ T6815] ? __x64_sys_bpf+0xce/0x140 [ 82.732473][ T6815] __x64_sys_bpf+0xce/0x140 [ 82.732497][ T6815] ? do_syscall_64+0xae/0x790 [ 82.732518][ T6815] do_syscall_64+0x123/0x790 [ 82.732537][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.732556][ T6815] RIP: 0033:0x7ff33a39e0d9 [ 82.732599][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.732617][ T6815] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.732635][ T6815] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 82.732646][ T6815] RDX: 000000000000009a RSI: 00002000000003c0 RDI: 0000000000000005 [ 82.732656][ T6815] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 82.732667][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.732677][ T6815] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 82.732700][ T6815] [ 82.732708][ T6815] Mem-Info: [ 82.854325][ T6815] active_anon:26630 inactive_anon:7 isolated_anon:0 [ 82.854325][ T6815] active_file:2383 inactive_file:62425 isolated_file:0 [ 82.854325][ T6815] unevictable:0 dirty:96 writeback:0 [ 82.854325][ T6815] slab_reclaimable:7332 slab_unreclaimable:65083 [ 82.854325][ T6815] mapped:25400 shmem:17015 pagetables:1255 [ 82.854325][ T6815] sec_pagetables:293 bounce:0 [ 82.854325][ T6815] kernel_misc_reclaimable:0 [ 82.854325][ T6815] free:430536 free_pcp:21250 free_cma:0 [ 82.868371][ T6815] Node 0 active_anon:106504kB inactive_anon:28kB active_file:9532kB inactive_file:249504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101600kB dirty:384kB writeback:0kB shmem:68044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4788kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 82.880323][ T6815] Node 1 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 82.890882][ T6815] Node 0 DMA free:13312kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.900025][ T6815] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 82.902093][ T6815] Node 0 DMA32 free:64840kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106380kB inactive_anon:28kB active_file:9532kB inactive_file:249504kB unevictable:0kB writepending:384kB zspages:400kB present:2080628kB managed:1254228kB mlocked:0kB bounce:0kB free_pcp:71844kB local_pcp:9572kB free_cma:0kB [ 82.912204][ T6815] lowmem_reserve[]: 0 0 0 0 0 [ 82.913755][ T6815] Node 1 Normal free:1644064kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:12732kB local_pcp:3520kB free_cma:0kB [ 82.923813][ T6815] lowmem_reserve[]: 0 0 0 0 0 [ 82.925392][ T6815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 3*4096kB (M) = 13312kB [ 82.929196][ T6815] Node 0 DMA32: 2*4kB (ME) 360*8kB (UE) 837*16kB (UME) 636*32kB (UME) 119*64kB (UME) 45*128kB (UME) 20*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 64856kB [ 82.934911][ T6815] Node 1 Normal: 4*4kB (UM) 0*8kB 1*16kB (M) 4*32kB (UM) 2*64kB (M) 4*128kB (UM) 1*256kB (U) 3*512kB (M) 1*1024kB (U) 1*2048kB (M) 400*4096kB (M) = 1644064kB [ 82.940008][ T6815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.943080][ T6815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.946317][ T6815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.949460][ T6815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.952420][ T6815] 81814 total pagecache pages [ 82.953914][ T6815] 7 pages in swap cache [ 82.955213][ T6815] Free swap = 124860kB [ 82.956513][ T6815] Total swap = 124996kB [ 82.957828][ T6815] 1048443 pages RAM [ 82.959043][ T6815] 0 pages HighMem/MovableOnly [ 82.960497][ T6815] 285575 pages reserved [ 82.961938][ T6815] 0 pages cma reserved [ 82.969424][ T6835] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 82.973517][ T6835] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 83.001974][ T50] usb 1-1: new full-speed USB device number 6 using uhci_hcd [ 83.027190][ T6846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.083155][ T6846] md: array md0 already has disks! [ 83.164181][ T6849] md/raid10:md0: not enough operational mirrors. [ 83.169886][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 83.175128][ T6849] md: pers->run() failed ... [ 83.177241][ T50] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 83.177277][ T6846] md: could not open device unknown-block(1,1). [ 83.184372][ T6846] md: error, md_import_device() returned -16 [ 83.187672][ T6849] md: could not open device unknown-block(1,2). [ 83.190644][ T6849] md: error, md_import_device() returned -16 [ 83.202732][ T50] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 83.206409][ T50] usb 1-1: Product: QEMU USB Tablet [ 83.208527][ T50] usb 1-1: Manufacturer: QEMU [ 83.210668][ T50] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 83.239108][ T50] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.000A/input/input17 [ 83.316312][ T50] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 83.327034][ T6819] usb 1-1: USB disconnect, device number 6 [ 83.372488][ T6857] fido_id[6857]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 83.503045][ T6819] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 83.508107][ T6819] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 83.513916][ T6819] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 83.552761][ T1036] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.571954][ T6819] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 83.575142][ T6819] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 83.579061][ T6819] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 83.582321][ T6819] usb usb2: Product: EHCI Host Controller [ 83.584383][ T6819] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 83.587066][ T6819] usb usb2: SerialNumber: 0000:00:1d.7 [ 83.597320][ T6819] hub 2-0:1.0: USB hub found [ 83.599839][ T6819] hub 2-0:1.0: 6 ports detected [ 83.642291][ T6819] hub 1-0:1.0: USB hub found [ 83.645181][ T6819] hub 1-0:1.0: 2 ports detected [ 83.673585][ T6819] hub 3-0:1.0: USB hub found [ 83.675920][ T6819] hub 3-0:1.0: 2 ports detected [ 83.712833][ T6819] hub 4-0:1.0: USB hub found [ 83.716109][ T6819] hub 4-0:1.0: 2 ports detected [ 83.732460][ T1036] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 83.733225][ T6859] FAULT_INJECTION: forcing a failure. [ 83.733225][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 83.736960][ T1036] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.740449][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 83.740471][ T6859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.740481][ T6859] Call Trace: [ 83.740487][ T6859] [ 83.740494][ T6859] dump_stack_lvl+0x100/0x190 [ 83.740523][ T6859] should_fail_ex.cold+0x5/0xa [ 83.740546][ T6859] should_failslab+0xc2/0x120 [ 83.740589][ T6859] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 83.740612][ T6859] ? __alloc_skb+0x5b7/0x710 [ 83.740675][ T6859] ? __alloc_skb+0x140/0x710 [ 83.740701][ T6859] __alloc_skb+0x140/0x710 [ 83.740722][ T6859] ? __alloc_skb+0x5b7/0x710 [ 83.740744][ T6859] ? __pfx___alloc_skb+0x10/0x10 [ 83.740772][ T6859] alloc_skb_with_frags+0xdd/0x760 [ 83.740789][ T6859] ? __might_fault+0xc5/0x140 [ 83.740805][ T6859] ? __might_fault+0xc5/0x140 [ 83.740826][ T6859] sock_alloc_send_pskb+0x801/0x980 [ 83.740849][ T6859] ? _copy_from_iter+0x270/0x1690 [ 83.740879][ T6859] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 83.740901][ T6859] ? _parse_integer_limit+0x1ac/0x220 [ 83.740929][ T6859] ? _kstrtoull+0x13c/0x1f0 [ 83.740947][ T6859] ? iov_iter_advance+0xac/0x6d0 [ 83.740969][ T6859] ? __pfx__kstrtoull+0x10/0x10 [ 83.740991][ T6859] tun_get_user+0x7d0/0x3cc0 [ 83.741049][ T6859] ? __pfx_tun_get_user+0x10/0x10 [ 83.741075][ T6859] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 83.741101][ T6859] ? find_held_lock+0x2b/0x80 [ 83.741119][ T6859] ? tun_get+0x191/0x370 [ 83.741140][ T6859] ? tun_get+0x191/0x370 [ 83.741168][ T6859] tun_chr_write_iter+0xdc/0x200 [ 83.741186][ T6859] vfs_write+0x6af/0x1050 [ 83.741204][ T6859] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 83.741222][ T6859] ? __pfx_vfs_write+0x10/0x10 [ 83.741236][ T6859] ? find_held_lock+0x2b/0x80 [ 83.741267][ T6859] ksys_write+0x12a/0x250 [ 83.741283][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 83.741304][ T6859] do_syscall_64+0x123/0x790 [ 83.741341][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.741358][ T6859] RIP: 0033:0x7ff52719e0d9 [ 83.741373][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.741388][ T6859] RSP: 002b:00007ff527f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.741406][ T6859] RAX: ffffffffffffffda RBX: 00007ff527425fa0 RCX: 00007ff52719e0d9 [ 83.741416][ T6859] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 83.741426][ T6859] RBP: 00007ff527f84090 R08: 0000000000000000 R09: 0000000000000000 [ 83.741436][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.741445][ T6859] R13: 00007ff527426038 R14: 00007ff527425fa0 R15: 00007ffead295b58 [ 83.741466][ T6859] [ 83.833778][ T1036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.841594][ T1036] usb 6-1: config 0 descriptor?? [ 83.857189][ T1036] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 83.871658][ T5801] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 83.942159][ T6866] lo: entered allmulticast mode [ 83.944791][ T6865] lo: left allmulticast mode [ 83.954300][ T6868] FAULT_INJECTION: forcing a failure. [ 83.954300][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 83.958748][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.346 Not tainted syzkaller #0 PREEMPT(full) [ 83.958769][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.958780][ T6868] Call Trace: [ 83.958785][ T6868] [ 83.958792][ T6868] dump_stack_lvl+0x100/0x190 [ 83.958820][ T6868] should_fail_ex.cold+0x5/0xa [ 83.958861][ T6868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 83.958885][ T6868] should_failslab+0xc2/0x120 [ 83.958907][ T6868] kmem_cache_alloc_noprof+0x91/0x6a0 [ 83.958929][ T6868] ? skb_clone+0x190/0x400 [ 83.958958][ T6868] skb_clone+0x190/0x400 [ 83.958983][ T6868] netlink_deliver_tap+0xaed/0xcc0 [ 83.959024][ T6868] netlink_unicast+0x62b/0x850 [ 83.959046][ T6868] ? __pfx_netlink_unicast+0x10/0x10 [ 83.959064][ T6868] netlink_sendmsg+0x8b0/0xda0 [ 83.959082][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.959098][ T6868] ? selinux_socket_sendmsg+0x198/0x2f0 [ 83.959116][ T6868] ____sys_sendmsg+0xa4d/0xbe0 [ 83.959129][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.959144][ T6868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.959163][ T6868] ___sys_sendmsg+0x190/0x1e0 [ 83.959182][ T6868] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.959202][ T6868] ? get_pid_task+0x106/0x250 [ 83.959230][ T6868] ? find_held_lock+0x2b/0x80 [ 83.959264][ T6868] __sys_sendmsg+0x160/0x210 [ 83.959290][ T6868] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.959328][ T6868] do_syscall_64+0x123/0x790 [ 83.959347][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.959364][ T6868] RIP: 0033:0x7f872419e0d9 [ 83.959379][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.959395][ T6868] RSP: 002b:00007f872514c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.959415][ T6868] RAX: ffffffffffffffda RBX: 00007f8724425fa0 RCX: 00007f872419e0d9 [ 83.959426][ T6868] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 83.959436][ T6868] RBP: 00007f872514c090 R08: 0000000000000000 R09: 0000000000000000 [ 83.959445][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.959455][ T6868] R13: 00007f8724426038 R14: 00007f8724425fa0 R15: 00007ffe1d5fedd8 [ 83.959477][ T6868] [ 84.065647][ T5838] usb 6-1: USB disconnect, device number 5 [ 84.072107][ T5801] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 84.097133][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 84.099611][ T6875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.099764][ T5801] usb 2-1: Product: QEMU USB Tablet [ 84.106457][ T5801] usb 2-1: Manufacturer: QEMU [ 84.108179][ T5801] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 84.143776][ T5801] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000B/input/input18 [ 84.151736][ T6875] md: array md0 already has disks! [ 84.152049][ T5801] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 84.290387][ T6875] md/raid10:md0: not enough operational mirrors. [ 84.298429][ T6875] md: pers->run() failed ... [ 84.300601][ T6880] md: could not open device unknown-block(1,1). [ 84.304455][ T6880] md: error, md_import_device() returned -16 [ 84.307085][ T6875] md: could not open device unknown-block(1,2). [ 84.309667][ T6875] md: error, md_import_device() returned -16 [ 84.448888][ T6895] capability: warning: `syz.3.356' uses deprecated v2 capabilities in a way that may be insecure [ 84.486276][ T6899] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 84.495017][ T6899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.498899][ T6899] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 84.544647][ T6901] FAULT_INJECTION: forcing a failure. [ 84.544647][ T6901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.550810][ T6901] CPU: 3 UID: 0 PID: 6901 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT(full) [ 84.550827][ T6901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.550834][ T6901] Call Trace: [ 84.550839][ T6901] [ 84.550844][ T6901] dump_stack_lvl+0x100/0x190 [ 84.550863][ T6901] should_fail_ex.cold+0x5/0xa [ 84.550876][ T6901] ? prepare_alloc_pages+0x16d/0x5f0 [ 84.550893][ T6901] should_fail_alloc_page+0xeb/0x140 [ 84.550909][ T6901] prepare_alloc_pages+0x1f0/0x5f0 [ 84.550925][ T6901] ? __kernel_text_address+0xd/0x30 [ 84.550941][ T6901] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 84.550958][ T6901] ? stack_trace_save+0x8e/0xc0 [ 84.550972][ T6901] ? __pfx_stack_trace_save+0x10/0x10 [ 84.550985][ T6901] ? stack_depot_save_flags+0x27/0x9f0 [ 84.550998][ T6901] ? is_bpf_text_address+0x94/0x1a0 [ 84.551009][ T6901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.551022][ T6901] ? kasan_save_stack+0x3f/0x50 [ 84.551035][ T6901] ? kasan_save_stack+0x30/0x50 [ 84.551047][ T6901] ? kasan_save_track+0x14/0x30 [ 84.551059][ T6901] ? __kasan_slab_alloc+0x89/0x90 [ 84.551072][ T6901] ? kmem_cache_alloc_node_noprof+0x27f/0x6b0 [ 84.551085][ T6901] ? alloc_vmap_area+0x182f/0x2bb0 [ 84.551098][ T6901] ? __get_vm_area_node+0x1ed/0x350 [ 84.551113][ T6901] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 84.551129][ T6901] ? __vmalloc_node_noprof+0xad/0xf0 [ 84.551143][ T6901] ? __vmalloc_noprof+0xa3/0x120 [ 84.551158][ T6901] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551174][ T6901] ? bpf_prog_alloc+0x3b/0x200 [ 84.551190][ T6901] ? bpf_prog_load+0x49e/0x2a80 [ 84.551199][ T6901] ? __sys_bpf+0x1f46/0x4a30 [ 84.551212][ T6901] ? __x64_sys_bpf+0xce/0x140 [ 84.551230][ T6901] ? do_syscall_64+0x123/0x790 [ 84.551241][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.551257][ T6901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.551274][ T6901] ? policy_nodemask+0xed/0x4f0 [ 84.551291][ T6901] alloc_pages_mpol+0x1fb/0x540 [ 84.551307][ T6901] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.551339][ T6901] alloc_pages_noprof+0x1a/0x160 [ 84.551357][ T6901] get_free_pages_noprof+0x10/0xb0 [ 84.551371][ T6901] __kasan_populate_vmalloc+0xa0/0x210 [ 84.551387][ T6901] alloc_vmap_area+0x95d/0x2bb0 [ 84.551405][ T6901] ? kasan_save_track+0x14/0x30 [ 84.551417][ T6901] ? __kasan_kmalloc+0xaa/0xb0 [ 84.551430][ T6901] ? __pfx_alloc_vmap_area+0x10/0x10 [ 84.551445][ T6901] ? __get_vm_area_node+0x124/0x350 [ 84.551499][ T6901] __get_vm_area_node+0x1ed/0x350 [ 84.551518][ T6901] __vmalloc_node_range_noprof+0x228/0x1630 [ 84.551535][ T6901] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551554][ T6901] ? __lock_acquire+0x4c5/0x1ec0 [ 84.551571][ T6901] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551592][ T6901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.551609][ T6901] ? find_held_lock+0x2b/0x80 [ 84.551620][ T6901] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 84.551633][ T6901] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 84.551647][ T6901] ? avc_has_perm_noaudit+0x145/0x3b0 [ 84.551660][ T6901] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551676][ T6901] __vmalloc_node_noprof+0xad/0xf0 [ 84.551692][ T6901] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551711][ T6901] __vmalloc_noprof+0xa3/0x120 [ 84.551727][ T6901] ? __pfx___vmalloc_noprof+0x10/0x10 [ 84.551744][ T6901] ? rcu_is_watching+0x13/0xc0 [ 84.551755][ T6901] ? cap_capable+0x107/0x430 [ 84.551770][ T6901] bpf_prog_alloc_no_stats+0x59/0x690 [ 84.551787][ T6901] ? security_capable+0x80/0x260 [ 84.551801][ T6901] bpf_prog_alloc+0x3b/0x200 [ 84.551817][ T6901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.551833][ T6901] bpf_prog_load+0x49e/0x2a80 [ 84.551847][ T6901] ? __pfx_bpf_prog_load+0x10/0x10 [ 84.551869][ T6901] __sys_bpf+0x1f46/0x4a30 [ 84.551886][ T6901] ? __pfx___sys_bpf+0x10/0x10 [ 84.551899][ T6901] ? find_held_lock+0x2b/0x80 [ 84.551911][ T6901] ? get_pid_task+0xfc/0x250 [ 84.551922][ T6901] ? get_pid_task+0xfc/0x250 [ 84.551938][ T6901] ? find_held_lock+0x2b/0x80 [ 84.551952][ T6901] ? rcu_read_lock_any_held+0x6a/0x90 [ 84.551965][ T6901] ? find_held_lock+0x2b/0x80 [ 84.551977][ T6901] ? ksys_write+0x190/0x250 [ 84.551987][ T6901] ? ksys_write+0x190/0x250 [ 84.552007][ T6901] ? fput+0x7c/0x100 [ 84.552020][ T6901] ? ksys_write+0x1ac/0x250 [ 84.552031][ T6901] ? __x64_sys_bpf+0xce/0x140 [ 84.552044][ T6901] __x64_sys_bpf+0xce/0x140 [ 84.552059][ T6901] ? do_syscall_64+0xae/0x790 [ 84.552069][ T6901] do_syscall_64+0x123/0x790 [ 84.552080][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.552091][ T6901] RIP: 0033:0x7f872419e0d9 [ 84.552101][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.552112][ T6901] RSP: 002b:00007f872514c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.552123][ T6901] RAX: ffffffffffffffda RBX: 00007f8724425fa0 RCX: 00007f872419e0d9 [ 84.552130][ T6901] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 84.552136][ T6901] RBP: 00007f872514c090 R08: 0000000000000000 R09: 0000000000000000 [ 84.552142][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.552148][ T6901] R13: 00007f8724426038 R14: 00007f8724425fa0 R15: 00007ffe1d5fedd8 [ 84.552161][ T6901] [ 84.823968][ T6911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.881788][ T6911] md: array md0 already has disks! [ 84.884616][ T6912] md: could not open device unknown-block(1,1). [ 84.887552][ T6912] md: error, md_import_device() returned -16 [ 84.918370][ T6911] md/raid10:md0: not enough operational mirrors. [ 84.931608][ T6911] md: pers->run() failed ... [ 84.979275][ T6916] capability: warning: `syz.1.363' uses 32-bit capabilities (legacy support in use) [ 84.992074][ T6911] md: could not open device unknown-block(1,2). [ 84.999148][ T6911] md: error, md_import_device() returned -16 [ 85.172077][ T6922] md: array md0 already has disks! [ 85.288382][ T6931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.321775][ T5803] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 85.494599][ T5803] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.499651][ T5803] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 85.503212][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.508325][ T5803] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.512904][ T50] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 85.513514][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.520538][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.527032][ T5803] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 85.530255][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.535609][ T5803] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.540517][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.545229][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.550944][ T5803] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 85.554041][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.558251][ T5803] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.562896][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.567671][ T5803] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.575273][ T5803] usb 5-1: string descriptor 0 read error: -22 [ 85.578183][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.591933][ T5803] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.647934][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 85.681967][ T50] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 85.685789][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.689050][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.694524][ T50] usb 7-1: config 0 descriptor?? [ 85.698822][ T50] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 85.903920][ T29] usb 7-1: USB disconnect, device number 10 [ 86.112490][ T6947] __vm_enough_memory: pid: 6947, comm: syz.1.373, bytes: 4503599627366400 not enough memory for the allocation [ 86.157999][ T6949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.211452][ T6949] md: array md0 already has disks! [ 86.345375][ T6949] md/raid10:md0: not enough operational mirrors. [ 86.348837][ T6949] md: pers->run() failed ... [ 86.350633][ T6950] md: could not open device unknown-block(1,1). [ 86.352765][ T6950] md: error, md_import_device() returned -16 [ 86.354893][ T6949] md: could not open device unknown-block(1,2). [ 86.357442][ T6949] md: error, md_import_device() returned -16 [ 88.531161][ T6937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.592127][ T6962] FAULT_INJECTION: forcing a failure. [ 88.592127][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 88.597405][ T6962] CPU: 3 UID: 0 PID: 6962 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) [ 88.597428][ T6962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.597438][ T6962] Call Trace: [ 88.597444][ T6962] [ 88.597451][ T6962] dump_stack_lvl+0x100/0x190 [ 88.597499][ T6962] should_fail_ex.cold+0x5/0xa [ 88.597520][ T6962] should_failslab+0xc2/0x120 [ 88.597548][ T6962] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 88.597570][ T6962] ? __alloc_skb+0x5b7/0x710 [ 88.597621][ T6962] ? __alloc_skb+0x140/0x710 [ 88.597648][ T6962] __alloc_skb+0x140/0x710 [ 88.597669][ T6962] ? __alloc_skb+0x5b7/0x710 [ 88.597692][ T6962] ? __pfx___alloc_skb+0x10/0x10 [ 88.597722][ T6962] alloc_skb_with_frags+0xdd/0x760 [ 88.597736][ T6962] ? __might_fault+0xc5/0x140 [ 88.597751][ T6962] ? __might_fault+0xc5/0x140 [ 88.597772][ T6962] sock_alloc_send_pskb+0x801/0x980 [ 88.597796][ T6962] ? _copy_from_iter+0x270/0x1690 [ 88.597826][ T6962] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 88.597848][ T6962] ? _parse_integer_limit+0x1ac/0x220 [ 88.597867][ T6962] ? _kstrtoull+0x13c/0x1f0 [ 88.597885][ T6962] ? iov_iter_advance+0xac/0x6d0 [ 88.597911][ T6962] ? __pfx__kstrtoull+0x10/0x10 [ 88.597933][ T6962] tun_get_user+0x7d0/0x3cc0 [ 88.597985][ T6962] ? __pfx_tun_get_user+0x10/0x10 [ 88.598012][ T6962] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 88.598040][ T6962] ? find_held_lock+0x2b/0x80 [ 88.598058][ T6962] ? tun_get+0x191/0x370 [ 88.598080][ T6962] ? tun_get+0x191/0x370 [ 88.598104][ T6962] tun_chr_write_iter+0xdc/0x200 [ 88.598122][ T6962] vfs_write+0x6af/0x1050 [ 88.598139][ T6962] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 88.598157][ T6962] ? __pfx_vfs_write+0x10/0x10 [ 88.598170][ T6962] ? find_held_lock+0x2b/0x80 [ 88.598203][ T6962] ksys_write+0x12a/0x250 [ 88.598214][ T6962] ? __pfx_ksys_write+0x10/0x10 [ 88.598236][ T6962] do_syscall_64+0x123/0x790 [ 88.598299][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.598316][ T6962] RIP: 0033:0x7fe6b579e0d9 [ 88.598328][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.598342][ T6962] RSP: 002b:00007fe6b6593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.598361][ T6962] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa0 RCX: 00007fe6b579e0d9 [ 88.598372][ T6962] RDX: 0000000000000628 RSI: 0000200000000240 RDI: 0000000000000003 [ 88.598382][ T6962] RBP: 00007fe6b6593090 R08: 0000000000000000 R09: 0000000000000000 [ 88.598392][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.598402][ T6962] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffc2db77ee8 [ 88.598425][ T6962] [ 88.605915][ T6964] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.871991][ T6975] netlink: 'syz.3.382': attribute type 13 has an invalid length. [ 88.881938][ T6975] libceph: resolve '0' (ret=-3): failed [ 88.927342][ T6978] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.971747][ T6978] md: array md0 already has disks! [ 88.983380][ T6980] afs: Unknown parameter 'dynproc' [ 89.034855][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 89.034867][ T42] audit: type=1400 audit(1787254594.272:486): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.104190][ T6983] md/raid10:md0: not enough operational mirrors. [ 89.106182][ T6987] FAULT_INJECTION: forcing a failure. [ 89.106182][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.112534][ T6987] CPU: 3 UID: 0 PID: 6987 Comm: syz.2.386 Not tainted syzkaller #0 PREEMPT(full) [ 89.112581][ T6987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.112589][ T6987] Call Trace: [ 89.112594][ T6987] [ 89.112600][ T6987] dump_stack_lvl+0x100/0x190 [ 89.112625][ T6987] should_fail_ex.cold+0x5/0xa [ 89.112644][ T6987] strncpy_from_user+0x3b/0x2d0 [ 89.112661][ T6987] do_getname+0x78/0x390 [ 89.112683][ T6987] __x64_sys_symlinkat+0x8b/0xe0 [ 89.112702][ T6987] do_syscall_64+0x123/0x790 [ 89.112718][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.112734][ T6987] RIP: 0033:0x7fe6b579e0d9 [ 89.112746][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.112760][ T6987] RSP: 002b:00007fe6b6593028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 89.112775][ T6987] RAX: ffffffffffffffda RBX: 00007fe6b5a25fa0 RCX: 00007fe6b579e0d9 [ 89.112784][ T6987] RDX: 0000200000000400 RSI: ffffffffffffff9c RDI: 0000200000000380 [ 89.112793][ T6987] RBP: 00007fe6b6593090 R08: 0000000000000000 R09: 0000000000000000 [ 89.112801][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.112810][ T6987] R13: 00007fe6b5a26038 R14: 00007fe6b5a25fa0 R15: 00007ffc2db77ee8 [ 89.112831][ T6987] [ 89.115022][ T6983] md: pers->run() failed ... [ 89.162601][ T6978] md: could not open device unknown-block(1,1). [ 89.164645][ T6978] md: error, md_import_device() returned -16 [ 89.166756][ T6988] md: could not open device unknown-block(1,2). [ 89.168887][ T6988] md: error, md_import_device() returned -16 [ 89.178562][ T6990] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 89.181205][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 89.262804][ T1158] nvmet: connect request for invalid subsystem testsubsys! [ 89.266915][ T6992] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 89.419860][ T7001] md: md0 stopped. [ 89.676142][ T7009] FAULT_INJECTION: forcing a failure. [ 89.676142][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 89.680413][ T7009] CPU: 3 UID: 0 PID: 7009 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(full) [ 89.680432][ T7009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.680451][ T7009] Call Trace: [ 89.680456][ T7009] [ 89.680461][ T7009] dump_stack_lvl+0x100/0x190 [ 89.680481][ T7009] should_fail_ex.cold+0x5/0xa [ 89.680495][ T7009] should_failslab+0xc2/0x120 [ 89.680511][ T7009] __kvmalloc_node_noprof+0x116/0x970 [ 89.680525][ T7009] ? rcu_is_watching+0x13/0xc0 [ 89.680556][ T7009] ? bpf_test_run_xdp_live+0x13a/0x760 [ 89.680584][ T7009] bpf_test_run_xdp_live+0x13a/0x760 [ 89.680598][ T7009] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 89.680617][ T7009] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 89.680630][ T7009] ? find_held_lock+0x2b/0x80 [ 89.680642][ T7009] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 89.680663][ T7009] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 89.680679][ T7009] ? 0xffffffffa0404e00 [ 89.680690][ T7009] ? 0xffffffffa0404e00 [ 89.680698][ T7009] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 89.680714][ T7009] bpf_prog_test_run_xdp+0xd86/0x1670 [ 89.680734][ T7009] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.680752][ T7009] ? fput+0x7c/0x100 [ 89.680765][ T7009] ? __bpf_prog_get+0x97/0x290 [ 89.680776][ T7009] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.680790][ T7009] __sys_bpf+0x2265/0x4a30 [ 89.680808][ T7009] ? __pfx___sys_bpf+0x10/0x10 [ 89.680821][ T7009] ? find_held_lock+0x2b/0x80 [ 89.680833][ T7009] ? get_pid_task+0xfc/0x250 [ 89.680844][ T7009] ? get_pid_task+0xfc/0x250 [ 89.680860][ T7009] ? find_held_lock+0x2b/0x80 [ 89.680875][ T7009] ? rcu_read_lock_any_held+0x6a/0x90 [ 89.680888][ T7009] ? find_held_lock+0x2b/0x80 [ 89.680900][ T7009] ? ksys_write+0x190/0x250 [ 89.680909][ T7009] ? ksys_write+0x190/0x250 [ 89.680929][ T7009] ? fput+0x7c/0x100 [ 89.680942][ T7009] ? ksys_write+0x1ac/0x250 [ 89.680954][ T7009] ? __x64_sys_bpf+0xce/0x140 [ 89.680967][ T7009] __x64_sys_bpf+0xce/0x140 [ 89.680982][ T7009] ? do_syscall_64+0xae/0x790 [ 89.680994][ T7009] do_syscall_64+0x123/0x790 [ 89.681005][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.681016][ T7009] RIP: 0033:0x7ff33a39e0d9 [ 89.681026][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.681037][ T7009] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.681048][ T7009] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 89.681055][ T7009] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 89.681061][ T7009] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 89.681067][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.681073][ T7009] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 89.681087][ T7009] [ 89.835539][ T7016] FAULT_INJECTION: forcing a failure. [ 89.835539][ T7016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.840805][ T7016] CPU: 2 UID: 0 PID: 7016 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 89.840830][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.840840][ T7016] Call Trace: [ 89.840849][ T7016] [ 89.840855][ T7016] dump_stack_lvl+0x100/0x190 [ 89.840883][ T7016] should_fail_ex.cold+0x5/0xa [ 89.840906][ T7016] _copy_to_user+0x32/0xd0 [ 89.840935][ T7016] simple_read_from_buffer+0xcb/0x170 [ 89.840958][ T7016] proc_fail_nth_read+0x1af/0x230 [ 89.840979][ T7016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.841001][ T7016] ? rw_verify_area+0xce/0x6d0 [ 89.841027][ T7016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.841048][ T7016] vfs_read+0x1e4/0xb40 [ 89.841068][ T7016] ? __pfx_vfs_read+0x10/0x10 [ 89.841084][ T7016] ? find_held_lock+0x2b/0x80 [ 89.841105][ T7016] ? __fget_files+0x215/0x3d0 [ 89.841128][ T7016] ? __fget_files+0x21f/0x3d0 [ 89.841154][ T7016] ksys_read+0x12a/0x250 [ 89.841170][ T7016] ? __pfx_ksys_read+0x10/0x10 [ 89.841192][ T7016] do_syscall_64+0x123/0x790 [ 89.841213][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.841232][ T7016] RIP: 0033:0x7ff33a35e90e [ 89.841247][ T7016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.841264][ T7016] RSP: 002b:00007ff33b274fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.841282][ T7016] RAX: ffffffffffffffda RBX: 00007ff33b2756c0 RCX: 00007ff33a35e90e [ 89.841292][ T7016] RDX: 000000000000000f RSI: 00007ff33b2750a0 RDI: 0000000000000004 [ 89.841303][ T7016] RBP: 00007ff33b275090 R08: 0000000000000000 R09: 0000000000000000 [ 89.841334][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.841351][ T7016] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 89.841375][ T7016] [ 89.915046][ T29] usb 5-1: USB disconnect, device number 4 [ 89.955050][ T7015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.957967][ T7024] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 89.972526][ T7024] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 89.981163][ T7024] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 90.047407][ T7033] FAULT_INJECTION: forcing a failure. [ 90.047407][ T7033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.055905][ T7033] CPU: 2 UID: 0 PID: 7033 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 90.055931][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.055940][ T7033] Call Trace: [ 90.055946][ T7033] [ 90.055953][ T7033] dump_stack_lvl+0x100/0x190 [ 90.055984][ T7033] should_fail_ex.cold+0x5/0xa [ 90.056004][ T7033] ? prepare_alloc_pages+0x16d/0x5f0 [ 90.056032][ T7033] should_fail_alloc_page+0xeb/0x140 [ 90.056058][ T7033] prepare_alloc_pages+0x1f0/0x5f0 [ 90.056086][ T7033] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 90.056108][ T7033] ? __pfx_stack_trace_save+0x10/0x10 [ 90.056132][ T7033] ? stack_depot_save_flags+0x27/0x9f0 [ 90.056152][ T7033] ? stack_depot_save_flags+0x27/0x9f0 [ 90.056175][ T7033] ? kasan_save_stack+0x3f/0x50 [ 90.056196][ T7033] ? kasan_save_stack+0x30/0x50 [ 90.056214][ T7033] ? kasan_save_track+0x14/0x30 [ 90.056234][ T7033] ? __kasan_kmalloc+0xaa/0xb0 [ 90.056252][ T7033] ? __kvmalloc_node_noprof+0x351/0x970 [ 90.056273][ T7033] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 90.056296][ T7033] ? mmu_topup_memory_caches+0xbc/0x170 [ 90.056324][ T7033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 90.056349][ T7033] ? kvm_vcpu_ioctl+0x730/0x1700 [ 90.056368][ T7033] ? do_syscall_64+0x123/0x790 [ 90.056421][ T7033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.056450][ T7033] ? policy_nodemask+0xed/0x4f0 [ 90.056476][ T7033] alloc_pages_mpol+0x1fb/0x540 [ 90.056501][ T7033] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 90.056524][ T7033] ? __kvmalloc_node_noprof+0x36f/0x970 [ 90.056573][ T7033] alloc_pages_noprof+0x1a/0x160 [ 90.056600][ T7033] get_free_pages_noprof+0x10/0xb0 [ 90.056622][ T7033] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 90.056652][ T7033] mmu_topup_memory_caches+0xbc/0x170 [ 90.056679][ T7033] kvm_mmu_load+0xe2/0x2570 [ 90.056706][ T7033] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 90.056727][ T7033] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 90.056748][ T7033] ? __pfx_kvm_mmu_load+0x10/0x10 [ 90.056773][ T7033] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 90.056796][ T7033] ? kvm_check_and_inject_events+0x873/0x12a0 [ 90.056823][ T7033] ? record_steal_time+0x3c0/0xbb0 [ 90.056846][ T7033] vcpu_run+0x3ab0/0x5df0 [ 90.056869][ T7033] ? __pfx___schedule+0x10/0x10 [ 90.056893][ T7033] ? __pfx____ratelimit+0x10/0x10 [ 90.056918][ T7033] ? __pfx_vcpu_run+0x10/0x10 [ 90.056941][ T7033] ? rcu_is_watching+0x13/0xc0 [ 90.056965][ T7033] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 90.056980][ T7033] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 90.057004][ T7033] kvm_vcpu_ioctl+0x730/0x1700 [ 90.057028][ T7033] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 90.057049][ T7033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.057076][ T7033] ? do_vfs_ioctl+0x226/0x13e0 [ 90.057094][ T7033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 90.057108][ T7033] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 90.057136][ T7033] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 90.057178][ T7033] ? selinux_file_ioctl+0x13b/0x290 [ 90.057201][ T7033] ? selinux_file_ioctl+0xb6/0x290 [ 90.057228][ T7033] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 90.057251][ T7033] __x64_sys_ioctl+0x18e/0x210 [ 90.057270][ T7033] do_syscall_64+0x123/0x790 [ 90.057287][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.057307][ T7033] RIP: 0033:0x7ff33a39e0d9 [ 90.057321][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.057343][ T7033] RSP: 002b:00007ff33b254028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.057361][ T7033] RAX: ffffffffffffffda RBX: 00007ff33a626090 RCX: 00007ff33a39e0d9 [ 90.057372][ T7033] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 90.057381][ T7033] RBP: 00007ff33b254090 R08: 0000000000000000 R09: 0000000000000000 [ 90.057393][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.057402][ T7033] R13: 00007ff33a626128 R14: 00007ff33a626090 R15: 00007ffc721102a8 [ 90.057425][ T7033] [ 90.323372][ T5838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.394536][ T7042] FAULT_INJECTION: forcing a failure. [ 90.394536][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.399927][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT(full) [ 90.399951][ T7042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.399962][ T7042] Call Trace: [ 90.399969][ T7042] [ 90.399976][ T7042] dump_stack_lvl+0x100/0x190 [ 90.400005][ T7042] should_fail_ex.cold+0x5/0xa [ 90.400029][ T7042] _copy_from_user+0x2e/0xd0 [ 90.400058][ T7042] ppp_write+0x1a0/0x400 [ 90.400093][ T7042] ? __pfx_ppp_write+0x10/0x10 [ 90.400109][ T7042] vfs_writev+0x5ed/0xdd0 [ 90.400143][ T7042] ? __pfx_vfs_writev+0x10/0x10 [ 90.400187][ T7042] ? __fget_files+0x21f/0x3d0 [ 90.400213][ T7042] ? do_pwritev+0x1ac/0x270 [ 90.400239][ T7042] do_pwritev+0x1ac/0x270 [ 90.400267][ T7042] ? __pfx_do_pwritev+0x10/0x10 [ 90.400304][ T7042] do_syscall_64+0x123/0x790 [ 90.400327][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.400346][ T7042] RIP: 0033:0x7f872419e0d9 [ 90.400361][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.400377][ T7042] RSP: 002b:00007f872514c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 90.400396][ T7042] RAX: ffffffffffffffda RBX: 00007f8724425fa0 RCX: 00007f872419e0d9 [ 90.400407][ T7042] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 90.400418][ T7042] RBP: 00007f872514c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.400429][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.400439][ T7042] R13: 00007f8724426038 R14: 00007f8724425fa0 R15: 00007ffe1d5fedd8 [ 90.400463][ T7042] [ 90.502847][ T5838] usb 8-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 90.512031][ T5838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.515366][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.522010][ T5838] usb 8-1: config 0 descriptor?? [ 90.530563][ T5838] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 90.585050][ T7045] 9p: Unknown access argument 18446744073709551615: -34 [ 90.735679][ T5803] usb 8-1: USB disconnect, device number 4 [ 90.962698][ T7056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.110349][ T7056] md/raid10:md0: not clean -- starting background reconstruction [ 91.113213][ T7056] md/raid10:md0: active with 1 out of 2 devices [ 91.117568][ T7056] md0: detected capacity change from 0 to 2048 [ 91.126795][ T7069] md: resync of RAID array md0 [ 91.141065][ T7069] md: md0: resync done. [ 91.227097][ T7074] md: recover of RAID array md0 [ 91.244433][ T7074] md: md0: recover done. [ 91.333604][ T7087] ================================================================== [ 91.336119][ T7087] BUG: KASAN: global-out-of-bounds in kobject_synth_uevent+0x79d/0x7d0 [ 91.338629][ T7087] Read of size 1 at addr ffffffff8d7101be by task syz.1.416/7087 [ 91.341764][ T7087] [ 91.342789][ T7087] CPU: 3 UID: 0 PID: 7087 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) [ 91.342807][ T7087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.342816][ T7087] Call Trace: [ 91.342820][ T7087] [ 91.342826][ T7087] dump_stack_lvl+0x100/0x190 [ 91.342849][ T7087] print_report+0x13d/0x4b0 [ 91.342869][ T7087] ? __virt_addr_valid+0x239/0x430 [ 91.342889][ T7087] ? kobject_synth_uevent+0x79d/0x7d0 [ 91.342905][ T7087] kasan_report+0xdf/0x1c0 [ 91.342921][ T7087] ? kobject_synth_uevent+0x79d/0x7d0 [ 91.342937][ T7087] kobject_synth_uevent+0x79d/0x7d0 [ 91.342954][ T7087] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 91.342970][ T7087] ? find_held_lock+0x2b/0x80 [ 91.342986][ T7087] uevent_store+0x46/0x90 [ 91.343023][ T7087] ? __pfx_uevent_store+0x10/0x10 [ 91.343039][ T7087] drv_attr_store+0x74/0xb0 [ 91.343056][ T7087] ? __pfx_drv_attr_store+0x10/0x10 [ 91.343072][ T7087] sysfs_kf_write+0xf2/0x150 [ 91.343088][ T7087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 91.343099][ T7087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 91.343115][ T7087] vfs_write+0x6af/0x1050 [ 91.343128][ T7087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 91.343139][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 91.343149][ T7087] ? find_held_lock+0x2b/0x80 [ 91.343165][ T7087] ksys_write+0x12a/0x250 [ 91.343175][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 91.343187][ T7087] do_syscall_64+0x123/0x790 [ 91.343198][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.343210][ T7087] RIP: 0033:0x7ff33a39e0d9 [ 91.343220][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.343231][ T7087] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.343242][ T7087] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 91.343250][ T7087] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 91.343256][ T7087] RBP: 00007ff33a435024 R08: 0000000000000000 R09: 0000000000000000 [ 91.343263][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.343270][ T7087] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 91.343282][ T7087] [ 91.343287][ T7087] [ 91.392962][ T42] audit: type=1400 audit(1787254596.632:487): avc: denied { read } for pid=7088 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.395610][ T7087] The buggy address belongs to the variable: [ 91.395618][ T7087] uevent_helper_sysctl_table+0xde/0x2a0 [ 91.422677][ T7087] [ 91.423453][ T7087] The buggy address belongs to the physical page: [ 91.425453][ T7087] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd710 [ 91.428472][ T7087] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 91.431002][ T7087] raw: 00fff00000002000 ffffea000035c408 ffffea000035c408 0000000000000000 [ 91.433673][ T7087] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 91.436321][ T7087] page dumped because: kasan: bad access detected [ 91.438313][ T7087] page_owner info is not present (never set?) [ 91.440209][ T7087] [ 91.441001][ T7087] Memory state around the buggy address: [ 91.442839][ T7087] ffffffff8d710080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 91.445347][ T7087] ffffffff8d710100: 00 00 00 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 91.447814][ T7087] >ffffffff8d710180: 04 f9 f9 f9 f9 f9 f9 f9 07 f9 f9 f9 f9 f9 f9 f9 [ 91.450264][ T7087] ^ [ 91.452114][ T7087] ffffffff8d710200: 07 f9 f9 f9 f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 [ 91.454615][ T7087] ffffffff8d710280: 07 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 91.457407][ T7087] ================================================================== [ 91.461383][ T7087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.463649][ T7087] CPU: 3 UID: 0 PID: 7087 Comm: syz.1.416 Not tainted syzkaller #0 PREEMPT(full) [ 91.466465][ T7087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.469616][ T7087] Call Trace: [ 91.470693][ T7087] [ 91.471629][ T7087] dump_stack_lvl+0x100/0x190 [ 91.473073][ T7087] vpanic+0x553/0x970 [ 91.474581][ T7087] ? __pfx_vpanic+0x10/0x10 [ 91.476332][ T7087] ? mark_held_locks+0x40/0x70 [ 91.477882][ T7087] ? kobject_synth_uevent+0x79d/0x7d0 [ 91.479811][ T7087] panic+0xd1/0xe0 [ 91.481340][ T7087] ? __pfx_panic+0x10/0x10 [ 91.482762][ T7087] ? kobject_synth_uevent+0x79d/0x7d0 [ 91.484369][ T7087] ? preempt_schedule_common+0x3c/0xb0 [ 91.486066][ T7087] check_panic_on_warn.cold+0x19/0x34 [ 91.487800][ T7087] end_report.part.0+0x3a/0x90 [ 91.489318][ T7087] kasan_report.cold+0xe/0x18 [ 91.490773][ T7087] ? kobject_synth_uevent+0x79d/0x7d0 [ 91.492366][ T7087] kobject_synth_uevent+0x79d/0x7d0 [ 91.493997][ T7087] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 91.495752][ T7087] ? find_held_lock+0x2b/0x80 [ 91.497391][ T7087] uevent_store+0x46/0x90 [ 91.498726][ T7087] ? __pfx_uevent_store+0x10/0x10 [ 91.500309][ T7087] drv_attr_store+0x74/0xb0 [ 91.501639][ T7087] ? __pfx_drv_attr_store+0x10/0x10 [ 91.503245][ T7087] sysfs_kf_write+0xf2/0x150 [ 91.504690][ T7087] kernfs_fop_write_iter+0x3e0/0x5f0 [ 91.506317][ T7087] ? __pfx_sysfs_kf_write+0x10/0x10 [ 91.507969][ T7087] vfs_write+0x6af/0x1050 [ 91.509755][ T7087] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 91.511912][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 91.513821][ T7087] ? find_held_lock+0x2b/0x80 [ 91.515690][ T7087] ksys_write+0x12a/0x250 [ 91.517367][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 91.518905][ T7087] do_syscall_64+0x123/0x790 [ 91.520351][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.522172][ T7087] RIP: 0033:0x7ff33a39e0d9 [ 91.523548][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.530062][ T7087] RSP: 002b:00007ff33b275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.532592][ T7087] RAX: ffffffffffffffda RBX: 00007ff33a625fa0 RCX: 00007ff33a39e0d9 [ 91.534988][ T7087] RDX: 000000000000003f RSI: 0000200000000300 RDI: 0000000000000003 [ 91.537593][ T7087] RBP: 00007ff33a435024 R08: 0000000000000000 R09: 0000000000000000 [ 91.540261][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.542875][ T7087] R13: 00007ff33a626038 R14: 00007ff33a625fa0 R15: 00007ffc721102a8 [ 91.545484][ T7087] [ 91.547214][ T7087] Kernel Offset: disabled [ 91.548957][ T7087] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:36:36 Registers: info registers vcpu 0 CPU#0 RAX=8f5c28f5c28f5c29 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ede9ac0 RBP=00000000000000af RSP=ffffc9002530f098 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000001 R12=ffff88802f5c2580 R13=0000000000000002 R14=0000000000000000 R15=ffffffff8ede9ac0 RIP=ffffffff81e622be RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32723ffc CR3=00000000591f8000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000008670b RBX=ffff88801eef2580 RCX=ffffffff8bc36115 RDX=0000000000000001 RSI=ffffffff8e3ced6e RDI=ffffffff8c613480 RBP=ffffed1003dde4b0 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bc346bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff527187700 CR3=0000000027925000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c6e1b70 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5f19f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5f19f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c6ed968 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060178ea00237761 726469682f766564 2f01ffffffffffff ffffe5080a80033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7465676461675f 6273752f6769666e 6f632f2e01ffffff ffffffffffa5080c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b8004060175ce00 306273752e726573 672f312e632f7367 69666e6f632f3167 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752f6769666e6f 632f2e01ffffffff ffffffffc9080d80 030c800401c70800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04000208000d8004 01c70800080a46f6 004344552f31672f 7465676461675f62 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff0401000002 080606010180e216 10000e8004010000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a080606017b9830 2e6364755f796d6d 756416080e800300 04000208000d8004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c70800080a46f6 004344552f31672f 7465676461675f62 73752f6769666e6f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f2e01ffffffff ffffffffc9080d80 030c800401c70800 0b8004060175ce00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802cb1cb00 RSI=ffffffff84d4488a RDI=ffff88802cb1cb00 RBP=ffff88802671da40 RSP=ffffc90003f27da8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000004 R13=ffff88802671da88 R14=ffff88803bb5af80 R15=ffff88802671daa0 RIP=ffffffff820adfbc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f924cbde880 ffffffff 00c00000 GS =0000 ffff8880d5db6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff33b15da08 CR3=0000000029120000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000076 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000010410 Opmask02=00000000ffffffff Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b53f88e6a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b53f6bc7b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f924c5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 737326c64c1f2cf3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730ce13f2c6813 73730ce13f2c6813 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 736576616c732f33 706f6f6c2f6b636f 6c622f6c61757472 69762f7365636976 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 00736576616c732f 33706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d2409adc4dc9663 000055b064382236 0000000000000251 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000141 0000000000000070 000032746e657665 2f38317475706e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4631653534303070 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a73cb5 RDI=ffffffff9bc0e340 RBP=ffffffff9bc0e300 RSP=ffffc900232bf598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b9001f6 R15=ffffffff85a73c50 RIP=ffffffff85a73cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff33b2756c0 ffffffff 00c00000 GS =0000 ffff8880d5eb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d1f87 CR3=00000000274a7000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc72110796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc72110796 00007ffc7211079c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff33a435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff33a435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff33a4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff33a435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff33a5f25f8 00007ff33a5f25c8 00007ff33a5f2600 00007ff33a5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000