last executing test programs: 7.921901296s ago: executing program 1 (id=555): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000005) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0xffffffffffffffb0, 0x0}, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x72, 0x2c000000, 0xb, 0xb, 0xf94}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) (async) r5 = socket$alg(0x26, 0x5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.519724337s ago: executing program 1 (id=558): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) 6.791536365s ago: executing program 0 (id=567): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000008b89e831ef000000000000000000200090019294969a293d77c9b427748f068b1c60fde23e4727cd8c308af00449c28ca9e7f337cc9a06400183e8e9f1dc49fb4da8894a3ad3e0f8ffe6977c1be776c2459df3c612204ab45b308945c961196f657032323ff9712629166bb127735bf7", @ANYRESHEX, @ANYBLOB="000000000000000000000000e30000002f8368794e8441", @ANYRES32=0x0, @ANYBLOB="3521830f4f7cc9c686ddb6"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0xfff3}}}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x800000, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240)='msdos\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 6.611209377s ago: executing program 2 (id=560): ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x8014010) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0xb, 0x3}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2a4}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x8000, 0x40000, 0x8, 0x4, 0x1ff}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e65740000000500010007000000050005000a0000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x24064800}, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, 0x0) r8 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r8, 0x4}) write$eventfd(r8, &(0x7f0000000080)=0x430f, 0x8) 5.774044819s ago: executing program 0 (id=561): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) dup(r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r7, 0x7, 0x2, r7}) r8 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r7}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r10, 0x29, 0x13, 0x0, &(0x7f0000000080)) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x17, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x31c126ec, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x2ec}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f00000003c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r14 = fsopen(0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r15, &(0x7f0000004180)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) 5.688183602s ago: executing program 1 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 5.687987492s ago: executing program 2 (id=564): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x20000001, 0x2600) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000080)={0x0, 0x22, 0x1002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0) pwrite64(r4, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) 5.663448453s ago: executing program 1 (id=565): socket$inet6_sctp(0xa, 0x5, 0x84) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x80ae, 0x800, 0x3, 0x255, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40, 0xfffffffe, 0x8000146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1, 0xfffffffe, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000400)=[r11, r10, r1, 0xffffffffffffffff], 0x4) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 4.427736242s ago: executing program 0 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x2, r1, 0x0, 0x4, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) sendmsg$nl_generic(r6, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46ee6c5456902a3cfafbc39b7eff6e4f0b77a82deb80000"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r7 = openat(r6, &(0x7f0000000040)='./file0\x00', 0x418202, 0x9) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000080)=0x6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r9, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) fchown(0xffffffffffffffff, r9, r11) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r4) 4.414425381s ago: executing program 1 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0xfffffffffffffccd, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3}}, 'dev/ttyUSB0\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0508460c"], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) lseek(r1, 0x4c1, 0x1) 4.212528257s ago: executing program 2 (id=570): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000008b89e831ef000000000000000000200090019294969a293d77c9b427748f068b1c60fde23e4727cd8c308af00449c28ca9e7f337cc9a06400183e8e9f1dc49fb4da8894a3ad3e0f8ffe6977c1be776c2459df3c612204ab45b308945c961196f657032323ff9712629166bb127735bf7", @ANYRESHEX, @ANYBLOB="000000000000000000000000e30000002f8368794e8441", @ANYRES32=0x0, @ANYBLOB="3521830f4f7cc9c686ddb6"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0xfff3}}}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x800000, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240)='msdos\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 4.212086862s ago: executing program 3 (id=571): socket$inet6_sctp(0xa, 0x5, 0x84) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x80ae, 0x800, 0x3, 0x255, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40, 0xfffffffe, 0x8000146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1, 0xfffffffe, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000400)=[r11, r10, r1, 0xffffffffffffffff], 0x4) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 4.119759149s ago: executing program 0 (id=572): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xf8, 0x70, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x7, 0xb6, 0x5, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x5, 0xce, {0x7, 0x25, 0x1, 0x8, 0x8, 0xfb}}}}}}}}]}}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r3, 0x3000) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.176149008s ago: executing program 1 (id=573): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3cb}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x36}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x175fc06b}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x851}, 0x14008009) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x1c) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) syz_fuse_handle_req(r6, &(0x7f00000001c0)="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", 0x2000, &(0x7f00000035c0)={0x0, &(0x7f0000002240)={0x18, 0x0, 0x3, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd4(r6, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r7 = memfd_secret(0x91bd5b23429a7665) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x9, &(0x7f00000005c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @generic={0xf9, 0x2, 0x7, 0xf437, 0x6}, @exit], &(0x7f0000000640)='GPL\x00', 0x3922a707, 0x6f, &(0x7f0000000680)=""/111, 0x41000, 0x0, '\x00', r4, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x6, 0x101, 0x2}, 0x10, 0xc6a0, r7, 0x4, &(0x7f00000007c0)=[r8], &(0x7f0000000800)=[{0x3, 0x2, 0x4, 0x4}, {0x0, 0x1, 0x10, 0x8}, {0x3, 0x2, 0x9, 0x5}, {0x3, 0x5, 0x0, 0x7}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000100000d00000000020000000400000009000000000000100400400000003000"], &(0x7f0000000040)=""/41, 0x3c, 0x29, 0x0, 0x7}, 0x28) 3.172780746s ago: executing program 2 (id=581): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p', 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000003c0)='gretap0\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r2, &(0x7f0000000880)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="119c270900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r4}, 0xc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) 2.071889324s ago: executing program 3 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 2.029228489s ago: executing program 2 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0xf8) 1.706539388s ago: executing program 3 (id=575): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0x0, 0xd1]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.579021333s ago: executing program 3 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 341.499452ms ago: executing program 0 (id=577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 341.245141ms ago: executing program 2 (id=578): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x84, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xf8, 0x70, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x7, 0xb6, 0x5, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x5, 0xce, {0x7, 0x25, 0x1, 0x8, 0x8, 0xfb}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0xfd, 0x40, 0x8, 0x8, 0x6}, 0x2b, &(0x7f0000000580)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0xb, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x2, 0xeccd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0x8, 0x6, 0x4}]}}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r3, 0x3000) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 340.925639ms ago: executing program 3 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="d45b83db154f28fe5d16e258caad670c6eacb7e3567a69e13266313835bfaccc0d8a87c04dea4c9014bf3dc1ac622d37ac21344f1095bd4c8125ce96617fc2746471e9451641e50abc7a2d28728b119c1d7422467f5e52a311c7996185718cce6fd28ba0f8c1ae6a18366d906e4c1b4a240cce627b341ed8c54a97ef618b588ba1c87628e1986722d53a9e5fb43e98e6d1f867e3437e7cd0ffbc222eb9e24198df655e05f9138c9fe3b55f09216f0aa503f88df030f6ff421af5629e1c88ee934c72a0f32671b1183874b19e122201c868db43d6c92b1adc0c8b0f215cb0cc863bcaa077acf520de0fbedc285254693a43cfb3fe313a8db286a0eb1589128dbfcb0f9b50495c84606c8d915ca95f7318aadb59f54c2a8417a31778bd895ee5c9f69bf5726702733666c59b6e733ecf0386b5bc08239ffc308cb5bc24a282548e832a3659633f4f9a0e5353e5ea44bd4cde4b6aa14db416860a0267e047a4c92243998565b7641e549304b25d44de5ae373501ab4450b7fca7ec680d60b86a81ccab5fa2e82d0a4da0c1e9132364cab0e8ce9da9022dda9a5bb136c316685b6025e89f03e64d4622104328144decd42c3481d9e964704906374f7e1c2077fbd5b01cf48443b80c5d4f8af5de4adfd272a54984acc83a1530f54ddaaf0c87459d4938e466ef48764be6175b7ea91326f5f3295fbccea16c9fe65c4e688c2db1667c6faf4a8512035ce987e52cc71239593c340a20fb37f4cb3b2ee444559f33ce82d9b4d67ba57aed19055a37b895fe52267eda2cecd81f838dc7765f553828ff1a78a67ff7f861bcdc8553e462417ac82469ca569d27bcce98e62e3f7ce5ef492a761277ff076b2749ced5b318eaeb038cffa7cdce0214550bac53ce71cf0aa686dfa10679f929b938abc872c3839bd543dfe040bc4401c25ffdbb5f2b1f8c01080752ff0d208e76520e93bdebd7722d47681cf709db77874e89d9307b66b9bb296d3be9658f66fa99ae1874f0e23cae267cf32c37859588a1e8f9ebe6f0588c9f3cbc02b64eac3284af33c5f2e615a2bccfa7189ed7158637b84a370ccd3cb4ec4909af4e077b5adb3c5ce08f8cd80196054eb259e50624fc3fb1c6f5460b7e2056434c98065988428638d57675bbca5c471711692d533ba5ca076ff2c56e620ec08644fc3ee6007f6b9a0b849bdbcd2c05b89993a0c38a26eb36bc758b1d77891e2edefc657db397620be8d5642769f6e015774aa758e568b15aae5907377a7d3c56de4de5358ac165634b026ecf3311d2a0233069bc2284946e12aaf8dc7407f7457684a13da2b7952c19f366e459e5bea177da5e88ff26887c98382879a666efce687d4bb0b0c789bfbd7e6114f0e02b08804a1d7c1ee701bb893d6b73f949861feb4931d3365a8b0c2d50a1b1415b3cd5ce3090d907f3cb625a3e5e563b9b4bd39d65e4f925c95fdc9823d0f97136c6227e2f971da2aa49587d587b52882e8a89826a664245aff21dfc96c7c8b0c7b5031b86ad474ec61d25456cbc12f4f330be0669ef7939530138a08319bb518b6e8d44f658decc5cbdc416393602583cdb503dab96fdad120c080dcebee449bb934f1a06f120b8e27bb651880932aa43bbb6812cb58461eab2e9133447596df9476933a66d78b34237b4b8833b5dd9bbb852a82ba22698a7e878c05415b0f0edd24dd2ae317fc698e5d498ffe2b00ec00826a08f3585c2bdfc4b9583133bf6a60ebd8c7a91a0cc6d1b58217c89179bd08131827963d6b4babf747f1cc930c7d939d6dc2f5b04333405ea374cdcb2b948be2be2eebf073b1697795e21b08bada3a842dd68dd7c47bfa29047feed8c12ee72af97fd8681a750c2be596f8529890511a6b1180feee43ea9ddf4fcff5467ed83c7b96a22efdbee09e3283b726edfc4aa594cdd8f65a0f1ad38357dcfce979a951dcb4c61b3aa08a9ae43930147985d7b8dba22a1cbf9ecd3c2fd53da3d14a00edfd7206079633f1b512cd743d38ef16add1fbe7ff13a2bf222dbd892b9683e7f9c55729c6de81eec4339545f0879df6441f648ef3c5d73ee94fe5b619d3a1f0ca14a481bf5073894deaa0d175cb6eee57f6147d81aee7418aa949cba9da932fced0b71a01c6221c0665a904bcc297e70b471fc25866b4918c22f67e94d48bf2eb05b7d5cfdbbc8501fdd9e2126a877ea25f63177ae3dc3833fb176ab56e28d7210b029299e33d16f501eb903de7c4df702e9b5799578b90c4bebb4d38e630f14fcfff2eb46397f4ad72ea6ae30bf94c341f85a333ae3975054117681bdfa1b9837cf31d6a53f00ce356c166731055dcd033d526a146de35116f6cef5996622d70de81064f77bebfad069c51c8af4c9a31a568467bf4f706450bde8ea48d6cfaf6136ff37b9543b6492b5f583f434c6bbb482be4158baa5e2f27c7f56a735453f91ed8d369c5e598bec63ad4fbb48dd5e26b83b68d4e782eee656b33fc19062a576ac26dc3a05a16d2beeebe61886f09c308368ea536ea9e678e995ee1577d1d118e01412ce3e43b1d9164528da2b1b0d015e9cfd139691acf90fc05e3ff6a0ae8ab53bb74a6c2a1f18b2c4b2920cf14afe8b41d9e5fb5f2980dc97c0afaf0d7f797c5d9c2e40283d8b68b4f5ab57ace5f12c5af71e7a4f5972140b6967797db0b630a7617e417b10ae75c1f23f61a26e75a09cae1e54d191163449a27a1f880d64f0c3d4016520a1ba768be88e9e87c99815f80f593625c9ffcd5929747878816c74897433ad49538c8c3057ba0d8128fc3ec664d8aaf1739a1075c42b9ec9d47700f471eb51644426958dc6ef04b0d2e9c49f592089222c89403dea545b47ad354718a4cc03f2d41bcdaa86ceb2fb3fb5251c281665f7d448f481954e57068ce1a31fc6c2724afd2fdd389e67f4dc23c761df5060321ce8b03487d262e937bc47497a91f45c2b604706271d052edc200fd28d56a5be74c4b3b57d625bc509de46702b6e4c17bbb584211853ea1e1fc1f165a1d3f76768ea5cf342024e5a865d317e7958b2e6da5f3710453201df63a3b6f7a8459f41d4bac2252128e4ccd3b31eaeca3ae1efb431afcf48181ec8069af71a7a594cca717c9d6f5a0a5b9db384c98b013e48c880fce8a67b99d9194bca89b6b7c467dafd9d74f31dfe51d5a5c8e83e156b93e97936dfb077a6d9895bdd01c96b08dfdeb27b4af58b172d01dbbebafa2996c51c73f2964e6cc8df1e0e6203c9bec7f44c68439204a7e35d9e625c76b45cc57c51ca9a8a3e8875da1502cb0faff4788178554d699f23efc3ad247e1154a87baec9be094c6d74332b30475e7472a24f79774b11c6fa35e8ad77c442cc36aeb75c572b90a3afab95f95c613a61af5a8eccf5fe349f1a0f3ddbcbff38a2158860024b294200921c2c2d596787abde6b9cef5493d36ef76e7538b28dee58e2aee2a1b960fd6d96e7b335d607d23e6078a0264109450e479fe7b71c47800744a698a974f7fcd54264f5620873a4a114822fb88821f300f40fd31346c9f1fb21283615e2ebac1346f54d5ff4341b6984ec23c0757a8f6b1952f1c65186b0ddd5ad7c7e00706cf1c6ee19a5b4db73d4b30972dcead673cfff67e13157af6ae69d4df2653dafe4dfd26c61e0deb75e9b3d2935706dc564bb0ff2a404a3e979dc0411efd9e5cc8bd2e75612f484801e32a0add8f4d0e637498a47c89e72ed8c958d277e436c5b56df717104aba8b78977e85ec52d542b64952534f9ecffd952ed81762cf107e32e01d7a86732b7ffb6aa7165f8a22f33d97688648f055515aec126605fe90ab4dad9961473a404e28dc0d63954a1268e14a2daf933883fb44e4269cec4c7e2069d66269b7a05d6ee38e5b928ae00125f44e01754a35fe855b5132a7d351682e76903463611b276ea80e9a376b787ea9dbdd1347fda0a23a752ca23bfce0384a72a5eb33171c9dcec8ddb482efa46ef8d0ddc4bc149a75949a4fee5e1424b5dd7cf1a3b8940fa8d2229219e51a5cd62db24e7edc0be4796a79f9ca0a8cd1ee9a4a51522a6cc2d6070fb33370cf1be8c6107716dfe8314c0434b186c4772e578d38c85a65316e69cd4f15654551bcabbbfed6b7754de931e052e4dd4bddb16e7feb5a31dab1f0eefbae8f2d1fa079556554cbd25c77c146736011b42ed14b260288036eabb9fbf5ca38a117365e9d7241c8bc51f8eb1eb6857bec46f9d95abccb721c44e60f28fe96a15fd9ce88bbac61695b775647745f51f804e6e293ae929545fe6fc33720cb76001838eb75c89aa56565071cb6ed43065336398861870e8d7fb44b8f7a5b01205e5b342d3d61f1cd9b561eeaae89e015cf3d271d0d86f3edc5250414133421afdeac9811599ca6d40e8b32a1eac87c47f1d5a49d46798b91eee6bdd3b20b27bb2011478d4793299691fbe78247d2db4214ec0e0b38b022ef952de6f77a437f04427fe11ef145dbbeca37bed97847e9607bb8e9446ca597a908fbfc7e945bd5a7c906b671a2e48dc4ca9b595b1afb2f85986ed14b1d3ed61d228341338bbf0947578b1b91be1f5a897720a8eb34a02ace9491748e1b956228afbfd46143a6a92f1dfa72334bae9d7315c5709384de2693c579763b9e9939de4287d6fec972f35bbba01a466cb6a1d02cae85b8b48d712562127f3eea0574e753fec74e56f73b6ce2619aced373eff0d7ac64dfc7fd56450484f82079bb815ba4fdc0d68a0cf7c3a42bd0b1fe0eace83cc79a4e4a11b97c0111536b62c2cb1d6543ef93bd113724568b0c0f15c422666f022dbb7455459de7c24c446d7fde9b3b7c2efe9ee5a1a31fc86ffdafa6a8f3cd5aeafa91efd7195330ddf542a72357b06def53e820190cf2959e04a143d349f887d808620dc54ea094114242907ed7161dc6c61df0023e39ccdfa1670605e69539622965d8c43df8dd4f92bf15ac9252d285d9599e6d79e3fad7c64ac75061ff6735214b7486fc13fb454fe4b92e88cd469f218472dad523f39916b5f4fe8da914e44dbf10e6546c6fceec9192b929d49b5a3eb3aa58aac77948dddb5c473da4a4f7b26c0d7db759295a7329903f620c1c937308c694f8a5dd5381db251debb61b54074aea5defc78b0d646091a3f2e6ab8bd26f1588b99439fcc834fd6730836c5fa58001188b5b8f146e972352a21bbb91a8177575a4f91bef8aa55f4c7af15a66dd877ffb70e146e67d83a3946d19d16efd2fb39fb6c6ec413792e97c31e3e20fd91b64680be19732e47d2dd4c230b55a8b138ac8e55fe72158d56c270fd3fda00e98f933172b47d8185189f59a147c30dc6de5dc06bcdafb41d89bd477c911abfe2142fee931cd3f436ce271595cfbe5c97d201b5002c96ce733727ef82427a1ba1db3f77243f43eb6558c122110eb48700dc9583ddf88018c0bec1c304a7c868fdede78ed3c3c0864723e85f6fc78053a58163c9ab1cb5ca522c60354287cb017522f5a5a721b19f21b15045f738c191d7a3e451890e2d1791a0261d0a06c643f60e03beacb1377e6cea8e5bb2f4abbb69cbc6efbecf65ee7e286142a4e7f9a59a66ebb7a28f13c694626baf078b130f1e97e429f9bb1f8e48b2f8cd035b420b80fe82fa1c71957a4f95e06e175d275cdeb5389be97eda747a9a09344c45e71cee05927afa8ac2b8fd8b407638c02fb3ff3399d52df9a4488bff97dc2f4fe77c2cc45ff30369acf3ee9fcf384e4b964931f3a4ef07ed0d1e1863f2b69e1350448d7436ebbe5140baf78b14a9416ebedbfab20f1303f2395a6bc5a73a85a7314ae49d107501a2f1ac1a2b87e6e03d056e02d4c575ce71302532bc39f845d329a51aedf124f95f71b415f514fd19ac79e348a2c047d4d0b32cfe61aa3ae7457dad92e6092b2885ecf630cd32b366cfaaa17eab88b036414f1534316e5895f26fc27c31a74c725466a877821e92047e2f3a31f3a6660577c73188f6411710cccb87bdc476e0a2ba91658752f21727cc0878fce97a2c4dbc4e28ba2618e894ed478f6ce04dee54eab5c3e6bfc42aeff5606884456fe20cb9837d0ef252ef8bdf2e083beeeaa7e99c617c82b5367979463fba6756bfcc51d78d16227652ed666f4937ff888453087b1b44f0e5b015c1f3bc018d29f29cea3076ce11b9fc11e91b6f986b9de371d78173be72fb2f587248b50829326d7c32b1670f35c762f487faecf77232b35892926566e359c1dfc8043fb1871ca2f151902df4eb3dd4974f83c82bbe7829f47728cc2885cf93bb499bdc8e8a2869d723a8aebdb4f290476b3f38989f562a6c73f6d796391c80de2026561553dffb5259381eb8d4e7b76119df7f945d27994d87c716e8e2d93c384fd25ea33ba2260feedfd23305ad700c2dfe000e77009826ed853abb034871cbed3098a15b23dffcadbac933ec47f26912e9aafacf7ffd0261207017ef7a915a6a9eee4ca02008e463092aba3f7b7249c4bb41c0a8fa50dc4df741dcac02e47a3a9dcc27ed28247dc1e2ef85eefa2a0c6ba900aa172f94fd17bce96459622034d208df5edc0563016b7bc9ffae1ad75e9859b4d1cc792570e5efa5459ef4ffa1401e342efb2721cb459fb07ddad6105fe31848bd35be085142924b15700fe71605fe5fc2ddbd9b3df6b08327fe3cfa19628ae6b11b9a9d6b8a1554b8d93ce98074709d3b7d54dbf8eda41c0a427304d6b149db60f35504f4a1daec34bde9e4c11d93c2c8371d6f7e2e4af4155a8d14138dcd8fe18934dd4e95dbc603004860e6cbc89f8eaa0fb0de782c9a6efc71a117be5d0314d2f2605241045340b60ad9f6d73213dcfe75d5f28a3852091e2081a22736269c111710abaf046ea21d2192aa15dd244eaa23169e888c100bf2b4fb8967721d29083b16795887a6d635a31519f1cc0194ef7701a1b6ab39f856ac41bc0400010b3dc6ad5caddcf84cb4e4944094d8141c288c35874872f5c7cbf1d26610994633b77f8a2a4650e4a1639afbd2439f29d5d7384af291b9606ccf7c11c0216596bb50b12f62bf6a7ef6232d856c5217830fe38916d02cf1148a704c31718b61681f7e20bd7e8b431aff641442ccdae10b528d96465684dfcfd76282812444e5bf81405111e696ea7389d4ee485dbf5a4c0a19e31bf0f734997b05908fdc15f4612ee4d46c34c54fc2d38b7d4fc13e046266f4de44c98a6fcd28287d6bf3d656c660f497c36dc9a11134d24a58d18475d9523e47170f7b7137745f8d3db09825db9b4f4249f423b34723547470d8b9f013685ce827b42421cb931e281c27f39cc6d104dc8972c236c31962f806bc5ae24ca12b46ab1055c88737c8373e58fbe698cd068958737e9a5fa1dab06c0cf3ecb1336bdbfd5c1d35e6c39b8d97677b544941057c2562bf7b2db9ceffa0e3c900c462c0b3c29aee796a2d10fa7c2dc616e95f7918fa0ccfc246b38f6ffd819fcf8053469ffc030e4bc0f5d5747435e5239e311095f798e8dfe53fd759988722a4a89d4edb8f08971a0261b6df07aad8960b67a4b75ea6064bed72a7ef11044cb33fde83b0cd49d8d15a15568043f11b197555bbf9d2f69476947b020d3e8987991f0d8e6405e1b8bdc67bc1e66de69f046752970b85aceb417437ccc073f98937a475ab0010b220be123394f58c3f35cd14f65abd3a78b88772719df82ee35a1779c556eadf03ab143fd139f4aa2de2718e6dc83bf24a14c47a94696ad14426202542e02d17e10f8ea65266c639c38f0115c96e724545e3c40c1c76b09799238cf928c8171dec0de973845610bbb4e3da0c02397e107077e6c62f11a54b1105da3311dbae90428fb59a02a561c61e1ae5f337d2c0ca3253f2ed3480d156c7d51ef975695b988952494cb4bbe919c9fcb960094e7e4e4e730610259f4c4b59c26b95fee0bb877b972ad65dbee9609c65b4c2ae0f413f589cf3d0be29995d2ed2266c02fc024067c6544e070d8331836f372a5f6ea04aaccc2c47ab6a1a442d30eb1e8135b2fc8cd174bc89c84cac89fdfa66995a0734d5f1e3919db0d4c6ca43983409d4af86c4e885afaaff09ec053a20887e5d1a58a8b4cc59122b92c63ea3cbd3bca4ef4b7dcb4c48da21972b796a01cb74852a214b9446a1fac6e7aef3c3a26962a196366977af572a4482d89b35fa6e0e054189d012c0f2e68c5cdd0697308b3748d48e7648ff1e9e564ffe47079e97499b34220edcdf6764b3117ec9fadc196f03c01ce7783ab688b22838d22c1e500ee19ece580480031bb45ccce2dab12c20cd11093cb7ed2321200b7a0170abbb0f07eac8473dddde55cdac6af05bf618094e0b443d946de9b6329ddf424270677ca8f3ab3937bb941550a61a543817c4693afda8d1c6de9dfe7a61c51cb33c42b338845902c8cee76478e950f94d3dc8fa4a27510db74bf8e82e04d5e1d3b8fdf003a7962b3b8d00b1b83d8373ae593e06d2630c01667b482af8997955430b1e7ac83a8c26bf3f8405aa9590a4a11e876674a5dc41f9b68a36e05316d4b0e8a8c42fec0efee0ea20e512737632a2afbfb4e8e45534f452923cdb367acf88159e43734b2ea33ab38377f9379424672cd17766b325319d7321ce3afcd4fdcb009587e14915f0ab74573d3959c16c5f154718160f8acc317804592c6001a0bcd6b3559edd9181138e0c34c66b2c7feba3cd96bda82d480cd7e083b793ba85d65f3deada184da82081927a978965a4514bf5d0d8317d0d8284704ffe7a70071da81112d7793c2be7d6f42d4ab5cb8788493b337ecfffe02d9f1ca64dd985b6ae0fdbd83b797ffe01980a22818b23a8084fcbfa02441f6c7f89940e44e9b0f2aac8a8acb71d1fc82dae16a2354cb6aa30519c442dc4b76d9b6bc95c52472f8e9f17a7d16da97bde359b543b1bb71d5a6cf4f27d63a6a0f77490851fef0e88b0632b1e1cdf418d0a014d64cdcf91651e8b6bd24322beb8f9ff839db50f14a10e36229166a187feb9883f6df8b5d9e0a8903463471e17b29daff29eabc001e4f766cd134c59afdf9d9d345e90b60976a8d1480e0c3a2d43da70321c5284c4a2241e72ed58daefb70a27744ca395265db551efce31baf6ffb5e2e70a5492c05b81b2a14ae77fa699818d859024accb5d4ab839c8ee33e0b5f4091b082438b4c73c233358431e37173dcdfbf4da52b8c9e1bcb61929d38fb7145beb5e3cc050cd76286fcc64edad7d5718139ef4a46f3df90a7f21d39a6feed696bbac8113fa6969e68314c4d886c7802c82d03235a3306ccc6801f208ceb7332a2e73824fe198f1136ae4f62509c1ec7485523d4d727227099131e08fdb42e37559685d5738f6b829a9d6aa7dbed568397389384aafc9521cbd89060c8dd9f87002765e4bccaea181390893232d16a377c0d7b12f364497a716720c20bed4c3e03f6139c730d8fece7f8b815768d08e9e03aa058a18f91950fffa541bf011447d494277907a2418b5f777bf8ad0f79b3a4a2433ae643cba96f9b950e6fa62caf981eecc94be6c0a117b8f67bbc561c972055fde8f5534a2dfe0da15eb4b8f2405ae8fbc7e1d4e9040eaa0e3321127e795fe55e5c625f51eb22e4094a65aab0fdb88639d6f14664b912b91f95cd68bd6bd9ad8e746df71e1b311b68394c866f51f49391e0bbb69ee7ca8304d7b88bcb8cb2451050d7399a130ef54e74a346641660883a7270e652cffb24de90d9f9360918c0badaa0de33719b5fe047f252c70d3f2cfeb8f7a3e6869c49ef6bf885c0f83c44d821569271b9673b67c39d4148b440ce0c6cfa7e6a7c2c533414dbdb8e61154fd30cb2c4f545aa0b2be300052c0022bb8b92a3b272f4bf256abdc1ab9a983eb31f8518112c45d293e85c74d6e978dc8e5e445936b9377ba461300b698000f581294c60b674d422f87b994ffafd20b8e57d4a331894315cd49a505a245a698524214e2cbd2a0800f1c5bda31d71adea052f8a621a7b7b00d05b04b3fdc38856bbd0058bc5f2e856a09d5da02da84e1b5bf01ac0e1ba5151b54d4cabc0624f114239bd6c59d169485c213cd329d189429611155cae9b210fd443284c78b8e6504fd280664f77fac1185e848fc663a2c3e1d1f980377c9ba2e8ac68b36a55903a425058ecfd6fac07bb697c566bb763e07469d73ae5a4a768b79eb760bb09900964a2e3931def048f4b5b31c90a12e3f89a25479c1e4790e315b207d15788c439b640358e38d33ecd5086329a61329bbfa498db50022a40d55bc61b2ede0e668658a051a8a3b02b9f9c676c1e58a883f7091e9c59efa35ccdda0df22658e3de5b593e1fd9c5ada431011659526e6c2efdad9d28f06e488a7f7bea73cc1cd0154f2d4015ce2ec4eb1795decaabe0ad5ba642841cec4c670aa14c1c5ab3bdc4c9a31944e66d0a0fb95ef31401049d00bd370c091a92565ddf145790424f51a3316fa0f37475ad99be05191fa9d3fc75706c8a25c4c6cb088ab4e1ae2bed4c313d5051563ff19e53aeb70a21f8ef23bc4a23cc220c0f8be439300b93210721f86aa8f0c44010d4f8b29db62b41fec5d2691944d612cae6ecea286edb342b00132ba4b275c525d08fe2efc35ca55a9865c7f1386f37d874bf7088bcbb7eb75a5a6edf98c5ee6ec1bc927b3d1f635c76934e3493c49bd0131fdd7ed4b04247acbabdd2ca16d1614f354d67f9be0ef753590699e6ebe1d14cb96cc99bbed804ec06abe21c32b53a1cb31a1d68d85f49b695aca3ad729a4c87663f9079c5ea342be1a3ddd08fe5d2612089021de66c54b1dd7daf216378fe023c6b8ef9436e265e0786e1595b35d7bc5f5ed1da14335fc0fe8d369e2b568ff129998e601dd3a69684cc2b3d8fb18ab9b35f2a513f4e58969b4d99416c1620abf0a4630557ccb85172ce8c5c8a8f65e1f42d955147664bd9aa3a01ba0621eeacf50787e0df77bab6ab23b9ecc43d6242e0ad0386f36afb8fa2d60d75acf5fda26c31cb9b2b1010af299f0942915c354821c62cf13811e96fbe3ae3486f00d31269244919f57f1f66079db3d67758b8bf17af28da067a4c5a90b258f712b2efa9df18621a0190667f1893bdda1c7a19a58b86bc4fcd59393787c6507bf883b8655d8976e483063d571c1c0544ff1b3dfdb205dbf7e5e442dcaed8acfb6de9d475bdee64100f0dc4388f39d6ed403c3daca66d6ca45296dc928d05337e824ba32046dedabc4de14f30d54dbb77b4f98453dd402f6c2bc8b354f22b0fb0597cfdf1c354ac46abf20c1d5f3e66dd27da2130644f9877065b6ab90ea9da95771ce5c3c10984259497b7ee0a19dbf42e7cce886afa20a689b273302617addfb08b086bcc958fb1b2e0b72ccdf32863b59d945050233ced941a33cdf94c6c2b4ea0e71a8151d1bf134032e2d9662ba8887fd4cbc507da745bf345f1d021e18ae9413fa4a93f1d040e327a5f863464cdbd38827e8ccedcbec05b29cb460acb2c12f5eed915134377ce85b493a6675e1569664474f7d8c69548e07dd1a650afcadfcf2e5cda30d98c392d90fc9a81a3c2cccf390ac325e8231f06601d3f2920c2ce1289f71870092b7c5783e33e70216634bc68573b6447b21b9697e5dc79fb2e110080ea936db9f55660f395f8d0", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0xfffffffffffffffd, 0xfc4, 0x124, 0x4749, 0x6, 0x9, 0x9, 0x8000, 0x800, r2, r3, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x600) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 74.455978ms ago: executing program 0 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x801) pselect6(0x40, &(0x7f00000005c0)={0xc, 0xe, 0x80000000, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0xc8d1}, &(0x7f0000000640)={0x2, 0x8, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8}, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=582): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000008b89e831ef000000000000000000200090019294969a293d77c9b427748f068b1c60fde23e4727cd8c308af00449c28ca9e7f337cc9a06400183e8e9f1dc49fb4da8894a3ad3e0f8ffe6977c1be776c2459df3c612204ab45b308945c961196f657032323ff9712629166bb127735bf7", @ANYRESHEX, @ANYBLOB="000000000000000000000000e30000002f8368794e8441", @ANYRES32=0x0, @ANYBLOB="3521830f4f7cc9c686ddb6"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0xfff3}}}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x800000, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240)='msdos\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): 88/0x460 [ 115.844039][ T6955] __rhashtable_init_noprof+0x43a/0x890 [ 115.844052][ T6955] __rhltable_init_noprof+0x28/0x70 [ 115.844064][ T6955] nf_tables_newtable+0xf70/0x1a90 [ 115.844081][ T6955] ? __pfx_nf_tables_newtable+0x10/0x10 [ 115.844097][ T6955] ? __nla_parse+0x40/0x60 [ 115.844109][ T6955] nfnetlink_rcv_batch+0x1410/0x2880 [ 115.844131][ T6955] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 115.844144][ T6955] ? find_held_lock+0x2b/0x80 [ 115.844155][ T6955] ? __local_bh_enable_ip+0xa5/0x120 [ 115.844170][ T6955] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.844183][ T6955] ? __dev_queue_xmit+0xa12/0x4970 [ 115.844217][ T6955] ? __nla_parse+0x40/0x60 [ 115.844229][ T6955] nfnetlink_rcv+0x3bd/0x440 [ 115.844242][ T6955] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.844259][ T6955] netlink_unicast+0x585/0x850 [ 115.844271][ T6955] ? __pfx_netlink_unicast+0x10/0x10 [ 115.844285][ T6955] netlink_sendmsg+0x8b0/0xda0 [ 115.844298][ T6955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.844310][ T6955] ? apparmor_socket_sendmsg+0x15b/0x270 [ 115.844327][ T6955] ____sys_sendmsg+0xa4d/0xbe0 [ 115.844342][ T6955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.844354][ T6955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.844375][ T6955] ___sys_sendmsg+0x190/0x1e0 [ 115.844392][ T6955] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.844414][ T6955] ? find_held_lock+0x2b/0x80 [ 115.844432][ T6955] __sys_sendmsg+0x160/0x210 [ 115.844445][ T6955] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.844460][ T6955] ? __pfx_ksys_write+0x10/0x10 [ 115.844478][ T6955] __do_fast_syscall_32+0x13a/0x8b0 [ 115.844491][ T6955] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.844518][ T6955] do_fast_syscall_32+0x32/0x70 [ 115.844533][ T6955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.844547][ T6955] RIP: 0023:0xf7fe4fec [ 115.844560][ T6955] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 115.844565][ T6955] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 115.844575][ T6955] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 115.844594][ T6955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.844600][ T6955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.844606][ T6955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.844612][ T6955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.844626][ T6955] [ 116.074713][ T6958] gadgetfs: bound to dummy_udc driver [ 116.314600][ T61] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 116.319310][ C2] gadgetfs: connected [ 116.320990][ T61] gadgetfs: disconnected [ 116.536896][ C2] gadgetfs: connected [ 116.539832][ T61] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 116.558280][ T61] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 116.571485][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.642117][ C2] gadgetfs: configuration #1 [ 116.701202][ T6968] openvswitch: netlink: IP tunnel TTL not specified. [ 116.707695][ T6968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.964970][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.971481][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.024647][ T6956] gadgetfs: suspended from state 3 [ 117.029382][ T6956] gadgetfs: disconnected [ 117.033080][ T9] usb 5-1: USB disconnect, device number 13 [ 117.468986][ T42] audit: type=1326 audit(1787601365.555:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.292" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cefec code=0x0 [ 117.675094][ T5843] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 117.827089][ T5843] usb 8-1: not running at top speed; connect to a high speed hub [ 117.832838][ T5843] usb 8-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 117.841600][ T5843] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 117.850590][ T5843] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.864699][ T5843] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 117.877376][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.884791][ T5843] usb 8-1: Product: Ф [ 117.889150][ T5843] usb 8-1: Manufacturer: у [ 117.893401][ T5843] usb 8-1: SerialNumber: 㳓욠톟䆩ᧁⳍﾑ䶚휮쓬㛧ᖦҝ㤐䅧䩰腛ઘ只녌ܺ쟼俲殎츍慄癛ꒅ᪽ሃ䠪⑵㯤쯳웩億㬞ꎾ툵゘ﭜ⽆垄쐥㇈Ẵ⠚䅠ꍾ趟寣꺌⼦礩⦏׆塢裕⡒패뗭⃪椲톳留ट밈牫阦晼뗪⟠꧲쪠롿針ⱹ百ᐂ뇍獂襕畲ᰱ鴉⛌䲴䏎쏢㿺膭ᦚ [ 117.921726][ T6991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 118.140097][ T5843] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.191399][ T5843] usb 8-1: USB disconnect, device number 8 [ 118.290043][ T6154] udevd[6154]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.475731][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 118.623069][ T7005] msdos: Unknown parameter 'addr' [ 118.740487][ T7009] FAULT_INJECTION: forcing a failure. [ 118.740487][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 118.746153][ T7009] CPU: 2 UID: 0 PID: 7009 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(full) [ 118.746168][ T7009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.746174][ T7009] Call Trace: [ 118.746178][ T7009] [ 118.746182][ T7009] dump_stack_lvl+0x100/0x190 [ 118.746205][ T7009] should_fail_ex.cold+0x5/0xa [ 118.746218][ T7009] should_failslab+0xc2/0x120 [ 118.746229][ T7009] __kvmalloc_node_noprof+0x116/0x970 [ 118.746246][ T7009] ? percpu_ref_init+0xec/0x3f0 [ 118.746262][ T7009] ? io_alloc_cache_init+0x38/0x170 [ 118.746275][ T7009] io_alloc_cache_init+0x38/0x170 [ 118.746286][ T7009] io_uring_setup.cold+0x4aa/0x1c5e [ 118.746302][ T7009] ? rcu_read_lock_any_held+0x6a/0x90 [ 118.746313][ T7009] ? find_held_lock+0x2b/0x80 [ 118.746323][ T7009] ? __pfx_io_uring_setup+0x10/0x10 [ 118.746336][ T7009] ? ksys_write+0x190/0x250 [ 118.746354][ T7009] ? __mutex_unlock_slowpath+0x35d/0x930 [ 118.746374][ T7009] ? fput+0x7c/0x100 [ 118.746383][ T7009] ? ksys_write+0x1ac/0x250 [ 118.746397][ T7009] ? __pfx_ksys_write+0x10/0x10 [ 118.746413][ T7009] __ia32_sys_io_uring_setup+0xc2/0x170 [ 118.746429][ T7009] __do_fast_syscall_32+0x13a/0x8b0 [ 118.746442][ T7009] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.746455][ T7009] do_fast_syscall_32+0x32/0x70 [ 118.746469][ T7009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.746482][ T7009] RIP: 0023:0xf705efec [ 118.746495][ T7009] Code: Unable to access opcode bytes at 0xf705efc2. [ 118.746500][ T7009] RSP: 002b:00000000f544d43c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 118.746511][ T7009] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 118.746517][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.746523][ T7009] RBP: 00000000f544d4fc R08: 0000000000000000 R09: 0000000000000000 [ 118.746530][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.746536][ T7009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.746548][ T7009] [ 118.864006][ T7012] Zero length message leads to an empty skb [ 119.478254][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.301'. [ 119.646642][ T7030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.304'. [ 119.962647][ T7038] FAULT_INJECTION: forcing a failure. [ 119.962647][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.967112][ T7038] CPU: 3 UID: 0 PID: 7038 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 119.967126][ T7038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.967133][ T7038] Call Trace: [ 119.967137][ T7038] [ 119.967141][ T7038] dump_stack_lvl+0x100/0x190 [ 119.967159][ T7038] should_fail_ex.cold+0x5/0xa [ 119.967172][ T7038] _copy_to_user+0x32/0xd0 [ 119.967187][ T7038] bpf_log_attr_finalize+0x169/0x1a0 [ 119.967209][ T7038] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 119.967225][ T7038] ? btf_new_fd+0x1de4/0x5bc0 [ 119.967237][ T7038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.967252][ T7038] btf_new_fd+0x9c7/0x5bc0 [ 119.967272][ T7038] ? __pfx_btf_new_fd+0x10/0x10 [ 119.967287][ T7038] ? rcu_is_watching+0x13/0xc0 [ 119.967303][ T7038] ? apparmor_capable+0x1d7/0x4d0 [ 119.967320][ T7038] ? security_capable+0x80/0x260 [ 119.967334][ T7038] ? ns_capable+0xd2/0xf0 [ 119.967349][ T7038] __sys_bpf+0x13ef/0x4a30 [ 119.967368][ T7038] ? __pfx___sys_bpf+0x10/0x10 [ 119.967384][ T7038] ? find_held_lock+0x2b/0x80 [ 119.967393][ T7038] ? get_pid_task+0xfc/0x250 [ 119.967409][ T7038] ? get_pid_task+0xfc/0x250 [ 119.967428][ T7038] ? proc_fail_nth_write+0x9f/0x220 [ 119.967443][ T7038] ? find_held_lock+0x2b/0x80 [ 119.967455][ T7038] ? rcu_read_lock_any_held+0x6a/0x90 [ 119.967465][ T7038] ? find_held_lock+0x2b/0x80 [ 119.967473][ T7038] ? ksys_write+0x190/0x250 [ 119.967487][ T7038] ? ksys_write+0x190/0x250 [ 119.967511][ T7038] ? fput+0x7c/0x100 [ 119.967522][ T7038] ? __ia32_sys_bpf+0xcc/0x170 [ 119.967537][ T7038] __ia32_sys_bpf+0xcc/0x170 [ 119.967553][ T7038] ? __do_fast_syscall_32+0xb3/0x8b0 [ 119.967568][ T7038] __do_fast_syscall_32+0x13a/0x8b0 [ 119.967582][ T7038] ? lockdep_hardirqs_on+0x7d/0x110 [ 119.967595][ T7038] do_fast_syscall_32+0x32/0x70 [ 119.967609][ T7038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.967622][ T7038] RIP: 0023:0xf705efec [ 119.967635][ T7038] Code: Unable to access opcode bytes at 0xf705efc2. [ 119.967640][ T7038] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 119.967650][ T7038] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000000 [ 119.967657][ T7038] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.967663][ T7038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.967669][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.967675][ T7038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.967687][ T7038] [ 120.116451][ T7043] FAULT_INJECTION: forcing a failure. [ 120.116451][ T7043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.123241][ T7043] CPU: 0 UID: 0 PID: 7043 Comm: syz.3.308 Not tainted syzkaller #0 PREEMPT(full) [ 120.123258][ T7043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.123265][ T7043] Call Trace: [ 120.123291][ T7043] [ 120.123297][ T7043] dump_stack_lvl+0x100/0x190 [ 120.123316][ T7043] should_fail_ex.cold+0x5/0xa [ 120.123329][ T7043] _copy_from_user+0x2e/0xd0 [ 120.123343][ T7043] kstrtouint_from_user+0xd6/0x1d0 [ 120.123360][ T7043] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 120.123376][ T7043] ? __lock_acquire+0x4c5/0x1ec0 [ 120.123395][ T7043] proc_fail_nth_write+0x83/0x220 [ 120.123410][ T7043] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.123429][ T7043] vfs_write+0x2aa/0x1050 [ 120.123444][ T7043] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.123461][ T7043] ? __pfx_vfs_write+0x10/0x10 [ 120.123474][ T7043] ? find_held_lock+0x2b/0x80 [ 120.123484][ T7043] ? __fget_files+0x215/0x3d0 [ 120.123501][ T7043] ? __fget_files+0x21f/0x3d0 [ 120.123521][ T7043] ksys_write+0x12a/0x250 [ 120.123535][ T7043] ? __pfx_ksys_write+0x10/0x10 [ 120.123553][ T7043] do_int80_emulation+0x166/0x650 [ 120.123570][ T7043] asm_int80_emulation+0x1a/0x20 [ 120.123580][ T7043] RIP: 0023:0xf71974eb [ 120.123589][ T7043] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 120.123600][ T7043] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 120.123610][ T7043] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d5d0 [ 120.123617][ T7043] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.123623][ T7043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.123629][ T7043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.123635][ T7043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.123651][ T7043] [ 120.585648][ T7055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'. [ 120.649371][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.311'. [ 120.665010][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.670502][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.674674][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.678042][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.712690][ T7064] loop5: detected capacity change from 0 to 9439 [ 120.726435][ T6050] buffer_io_error: 28 callbacks suppressed [ 120.726445][ T6050] Buffer I/O error on dev loop5, logical block 1179, async page read [ 120.868046][ T7069] ntfs3(sr0): Primary boot signature is not NTFS. [ 120.870924][ T7069] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 120.903525][ T7071] hpfs: hpfs_map_sector(): read error [ 121.087744][ T7077] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 121.098767][ T7075] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 121.103421][ T7075] CPU: 3 UID: 0 PID: 7075 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 121.103450][ T7075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.103459][ T7075] Call Trace: [ 121.103464][ T7075] [ 121.103469][ T7075] dump_stack_lvl+0x100/0x190 [ 121.103488][ T7075] sysfs_warn_dup.cold+0x1c/0x28 [ 121.103517][ T7075] sysfs_create_dir_ns+0x24b/0x2b0 [ 121.103536][ T7075] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.103551][ T7075] ? find_held_lock+0x2b/0x80 [ 121.103561][ T7075] ? kobject_add_internal+0x25f/0x930 [ 121.103577][ T7075] ? kobject_add_internal+0x25f/0x930 [ 121.103594][ T7075] ? class_dir_child_ns_type+0xd/0x60 [ 121.103609][ T7075] kobject_add_internal+0x2c8/0x930 [ 121.103628][ T7075] kobject_add+0x16a/0x1e0 [ 121.103646][ T7075] ? __pfx_kobject_add+0x10/0x10 [ 121.103663][ T7075] ? get_device_parent+0x1b3/0x4c0 [ 121.103676][ T7075] ? kobject_put+0xb9/0x640 [ 121.103694][ T7075] device_add+0x294/0x1970 [ 121.103708][ T7075] ? lockdep_init_map_type+0x5c/0x250 [ 121.103722][ T7075] ? __pfx_device_add+0x10/0x10 [ 121.103735][ T7075] ? lockdep_init_map_type+0x5c/0x250 [ 121.103748][ T7075] ? __init_waitqueue_head+0xca/0x150 [ 121.103766][ T7075] tty_register_device_attr+0x388/0x7f0 [ 121.103781][ T7075] ? lockdep_init_map_type+0x5c/0x250 [ 121.103795][ T7075] ? __pfx_tty_register_device_attr+0x10/0x10 [ 121.103812][ T7075] ? tty_port_init+0x156/0x1c0 [ 121.103828][ T7075] gsm_activate_mux+0x155/0x2a0 [ 121.103843][ T7075] gsmld_ioctl+0xbbc/0x15c0 [ 121.103862][ T7075] ? __pfx_gsmld_ioctl+0x10/0x10 [ 121.103888][ T7075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.103904][ T7075] ? __pfx_gsmld_ioctl+0x10/0x10 [ 121.103919][ T7075] tty_compat_ioctl+0x396/0x420 [ 121.103933][ T7075] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 121.103946][ T7075] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 121.103963][ T7075] __do_fast_syscall_32+0x13a/0x8b0 [ 121.103978][ T7075] do_fast_syscall_32+0x32/0x70 [ 121.103994][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.104008][ T7075] RIP: 0023:0xf7fe4fec [ 121.104021][ T7075] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 121.104026][ T7075] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 121.104037][ T7075] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 121.104044][ T7075] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.104050][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.104055][ T7075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.104061][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.104075][ T7075] [ 121.190675][ T7075] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.198490][ T7082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 121.209527][ T42] audit: type=1326 audit(1787601369.295:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 121.228800][ T42] audit: type=1326 audit(1787601369.295:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 121.742550][ T5843] kernel write not supported for file /radio9 (pid: 5843 comm: kworker/1:3) [ 121.825961][ T7106] netlink: 'syz.1.328': attribute type 6 has an invalid length. [ 122.250616][ T7113] syzkaller0: entered promiscuous mode [ 122.252363][ T7113] syzkaller0: entered allmulticast mode [ 122.413576][ T7117] FAULT_INJECTION: forcing a failure. [ 122.413576][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 122.417638][ T7117] CPU: 2 UID: 0 PID: 7117 Comm: syz.1.330 Not tainted syzkaller #0 PREEMPT(full) [ 122.417654][ T7117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.417660][ T7117] Call Trace: [ 122.417664][ T7117] [ 122.417668][ T7117] dump_stack_lvl+0x100/0x190 [ 122.417686][ T7117] should_fail_ex.cold+0x5/0xa [ 122.417700][ T7117] should_failslab+0xc2/0x120 [ 122.417711][ T7117] __kmalloc_cache_noprof+0x91/0x6b0 [ 122.417731][ T7117] ? taprio_change+0x4ef/0x3980 [ 122.417747][ T7117] taprio_change+0x4ef/0x3980 [ 122.417763][ T7117] ? taprio_dequeue+0x181/0x5f0 [ 122.417775][ T7117] ? find_held_lock+0x2b/0x80 [ 122.417785][ T7117] ? jump_label_update+0x37a/0x550 [ 122.417800][ T7117] ? jump_label_update+0x37a/0x550 [ 122.417815][ T7117] ? find_held_lock+0x2b/0x80 [ 122.417824][ T7117] ? static_key_slow_inc_cpuslocked+0xd2/0x120 [ 122.417840][ T7117] ? static_key_slow_inc_cpuslocked+0xd2/0x120 [ 122.417858][ T7117] ? __pfx_taprio_change+0x10/0x10 [ 122.417871][ T7117] ? __mutex_unlock_slowpath+0x35d/0x930 [ 122.417885][ T7117] ? arch_jump_label_transform_queue+0xc0/0x120 [ 122.417908][ T7117] taprio_init+0x69b/0x920 [ 122.417923][ T7117] ? __pfx_taprio_init+0x10/0x10 [ 122.417936][ T7117] ? qdisc_alloc+0x81b/0xb30 [ 122.417951][ T7117] ? __pfx_taprio_init+0x10/0x10 [ 122.417963][ T7117] qdisc_create+0x47b/0x1060 [ 122.417977][ T7117] tc_modify_qdisc+0xdcf/0x2120 [ 122.417992][ T7117] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 122.418004][ T7117] ? __lock_acquire+0x4c5/0x1ec0 [ 122.418026][ T7117] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 122.418039][ T7117] rtnetlink_rcv_msg+0x3c9/0xe90 [ 122.418055][ T7117] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.418072][ T7117] ? ref_tracker_free+0x37e/0x6c0 [ 122.418090][ T7117] netlink_rcv_skb+0x159/0x420 [ 122.418101][ T7117] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.418115][ T7117] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.418131][ T7117] ? netlink_deliver_tap+0x1ae/0xcc0 [ 122.418149][ T7117] netlink_unicast+0x585/0x850 [ 122.418162][ T7117] ? __pfx_netlink_unicast+0x10/0x10 [ 122.418176][ T7117] netlink_sendmsg+0x8b0/0xda0 [ 122.418188][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.418200][ T7117] ? apparmor_socket_sendmsg+0x15b/0x270 [ 122.418218][ T7117] ____sys_sendmsg+0xa4d/0xbe0 [ 122.418233][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.418244][ T7117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.418266][ T7117] ___sys_sendmsg+0x190/0x1e0 [ 122.418284][ T7117] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.418306][ T7117] ? find_held_lock+0x2b/0x80 [ 122.418324][ T7117] __sys_sendmsg+0x160/0x210 [ 122.418337][ T7117] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.418353][ T7117] ? __pfx_ksys_write+0x10/0x10 [ 122.418371][ T7117] __do_fast_syscall_32+0x13a/0x8b0 [ 122.418384][ T7117] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.418397][ T7117] do_fast_syscall_32+0x32/0x70 [ 122.418411][ T7117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.418424][ T7117] RIP: 0023:0xf70cefec [ 122.418437][ T7117] Code: Unable to access opcode bytes at 0xf70cefc2. [ 122.418442][ T7117] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 122.418453][ T7117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 122.418459][ T7117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.418465][ T7117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.418471][ T7117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.418477][ T7117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.418490][ T7117] [ 122.763659][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 122.876986][ T7130] msdos: Unknown parameter 'addr' [ 124.048140][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 124.051077][ T7138] bridge_slave_1: left allmulticast mode [ 124.052823][ T7138] bridge_slave_1: left promiscuous mode [ 124.057714][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.076865][ T7138] bridge_slave_0: left allmulticast mode [ 124.078728][ T7138] bridge_slave_0: left promiscuous mode [ 124.080619][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.906692][ T7161] futex_wake_op: syz.3.341 tries to shift op by 144; fix this program [ 125.634679][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.005247][ T7173] msdos: Unknown parameter 'addr' [ 126.026055][ T7171] 9pnet_virtio: no channels available for device syz [ 126.675364][ T61] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 126.895168][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 126.916720][ T61] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.922717][ T61] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 126.935700][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.938392][ T61] usb 6-1: Product: syz [ 126.939702][ T61] usb 6-1: Manufacturer: syz [ 126.941419][ T61] usb 6-1: SerialNumber: syz [ 126.966539][ T7179] FAULT_INJECTION: forcing a failure. [ 126.966539][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.970844][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 126.970859][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.970876][ T7179] Call Trace: [ 126.970882][ T7179] [ 126.970886][ T7179] dump_stack_lvl+0x100/0x190 [ 126.970904][ T7179] should_fail_ex.cold+0x5/0xa [ 126.970918][ T7179] _copy_from_user+0x2e/0xd0 [ 126.970932][ T7179] get_compat_msghdr+0xb3/0x480 [ 126.970949][ T7179] ? __pfx_get_compat_msghdr+0x10/0x10 [ 126.970965][ T7179] ? find_held_lock+0x2b/0x80 [ 126.970975][ T7179] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 126.970994][ T7179] ___sys_sendmsg+0x1b6/0x1e0 [ 126.971011][ T7179] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.971027][ T7179] ? do_user_addr_fault+0x7d7/0x12f0 [ 126.971043][ T7179] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.971056][ T7179] ? irqentry_exit+0x24d/0xa10 [ 126.971074][ T7179] ? __pfx___might_resched+0x10/0x10 [ 126.971086][ T7179] ? __sys_sendmmsg+0x31d/0x440 [ 126.971100][ T7179] __sys_sendmmsg+0x309/0x440 [ 126.971117][ T7179] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.971128][ T7179] ? rcu_is_watching+0x13/0xc0 [ 126.971155][ T7179] ? fput+0x7c/0x100 [ 126.971165][ T7179] ? exit_to_user_mode_loop+0x166/0x700 [ 126.971181][ T7179] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 126.971197][ T7179] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.971209][ T7179] __do_fast_syscall_32+0x13a/0x8b0 [ 126.971223][ T7179] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.971236][ T7179] do_fast_syscall_32+0x32/0x70 [ 126.971250][ T7179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.971263][ T7179] RIP: 0023:0xf705efec [ 126.971276][ T7179] Code: Unable to access opcode bytes at 0xf705efc2. [ 126.971281][ T7179] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 126.971291][ T7179] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080003e40 [ 126.971298][ T7179] RDX: 00000000fffffe3d RSI: 00000000000000f5 RDI: 0000000000000000 [ 126.971304][ T7179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.971310][ T7179] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.971316][ T7179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.971329][ T7179] [ 127.406226][ T7181] netlink: 27 bytes leftover after parsing attributes in process `syz.0.347'. [ 127.466479][ T62] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 127.482628][ T62] wiimote 0005:057E:0306.0002: New device registered [ 127.714727][ T5816] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 127.746040][ T61] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.752355][ T61] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 127.774377][ T61] usb 6-1: USB disconnect, device number 11 [ 127.801259][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.874720][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 127.879254][ T5816] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 127.883747][ T5816] usb 5-1: config 0 has no interfaces? [ 127.889916][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.893295][ T5816] usb 5-1: Product: syz [ 127.895232][ T5816] usb 5-1: Manufacturer: syz [ 127.896981][ T5816] usb 5-1: SerialNumber: syz [ 127.900423][ T5816] usb 5-1: config 0 descriptor?? [ 128.110286][ T5738] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 128.117704][ T7181] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 128.122789][ T7181] nbd: must specify at least one socket [ 128.170507][ T5738] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input6 [ 128.189492][ T5738] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 128.211948][ T5738] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input5 [ 128.545651][ T7187] 9p: Bad value for 'wfdno' [ 128.794320][ T62] usb 5-1: USB disconnect, device number 14 [ 128.803925][ T7180] wiimote 0005:057E:0306.0002: Device removed [ 129.514621][ T7200] netlink: 76 bytes leftover after parsing attributes in process `syz.2.351'. [ 129.629833][ T7202] ======================================================= [ 129.629833][ T7202] WARNING: The mand mount option has been deprecated and [ 129.629833][ T7202] and is ignored by this kernel. Remove the mand [ 129.629833][ T7202] option from the mount to silence this warning. [ 129.629833][ T7202] ======================================================= [ 129.668244][ T7202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.677759][ T7202] FAULT_INJECTION: forcing a failure. [ 129.677759][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 129.683287][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 129.683304][ T7202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.683311][ T7202] Call Trace: [ 129.683315][ T7202] [ 129.683320][ T7202] dump_stack_lvl+0x100/0x190 [ 129.683339][ T7202] should_fail_ex.cold+0x5/0xa [ 129.683353][ T7202] should_failslab+0xc2/0x120 [ 129.683365][ T7202] kmem_cache_alloc_noprof+0x91/0x6a0 [ 129.683381][ T7202] ? __pfx_map_id_range_down+0x10/0x10 [ 129.683394][ T7202] ? security_inode_alloc+0x3b/0x2c0 [ 129.683413][ T7202] security_inode_alloc+0x3b/0x2c0 [ 129.683429][ T7202] inode_init_always_gfp+0xc6f/0xfb0 [ 129.683447][ T7202] alloc_inode+0x8e/0x250 [ 129.683461][ T7202] iget_locked+0x1d9/0x6d0 [ 129.683474][ T7202] ? __pfx_iget_locked+0x10/0x10 [ 129.683486][ T7202] ? kernfs_root+0xee/0x2a0 [ 129.683501][ T7202] ? kernfs_root+0xee/0x2a0 [ 129.683520][ T7202] kernfs_get_inode+0x46/0x470 [ 129.683537][ T7202] kernfs_iop_lookup+0x1a7/0x2d0 [ 129.683548][ T7202] __lookup_slow+0x155/0x320 [ 129.683562][ T7202] lookup_slow+0x50/0x70 [ 129.683574][ T7202] lookup_one_unlocked+0xb8/0xd0 [ 129.683591][ T7202] ovl_lookup_single+0x3df/0x1280 [ 129.683607][ T7202] ? __pfx_ovl_lookup_single+0x10/0x10 [ 129.683625][ T7202] ovl_lookup_layer+0x3f1/0x4b0 [ 129.683636][ T7202] ? trace_kmalloc+0xc0/0x110 [ 129.683648][ T7202] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 129.683660][ T7202] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 129.683674][ T7202] ovl_lookup_layers+0x16d4/0x2ac0 [ 129.683693][ T7202] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 129.683710][ T7202] ? find_held_lock+0x2b/0x80 [ 129.683720][ T7202] ? d_alloc_parallel+0x46e/0x14c0 [ 129.683733][ T7202] ? d_alloc_parallel+0x46e/0x14c0 [ 129.683749][ T7202] ovl_lookup+0x4a8/0x6b0 [ 129.683759][ T7202] ? d_alloc_parallel+0x9f6/0x14c0 [ 129.683774][ T7202] ? __pfx_ovl_lookup+0x10/0x10 [ 129.683788][ T7202] ? __pfx_d_alloc_parallel+0x10/0x10 [ 129.683806][ T7202] ? down_read+0x13b/0x4c0 [ 129.683820][ T7202] ? __pfx_down_read+0x10/0x10 [ 129.683841][ T7202] __lookup_slow+0x155/0x320 [ 129.683860][ T7202] lookup_slow+0x50/0x70 [ 129.683879][ T7202] path_lookupat+0x5e8/0xc40 [ 129.683902][ T7202] ? __do_fast_syscall_32+0x13a/0x8b0 [ 129.683923][ T7202] ? do_fast_syscall_32+0x32/0x70 [ 129.683948][ T7202] filename_lookup+0x202/0x590 [ 129.683975][ T7202] ? __pfx_filename_lookup+0x10/0x10 [ 129.684019][ T7202] ? find_held_lock+0x2b/0x80 [ 129.684033][ T7202] ? __might_fault+0xc5/0x140 [ 129.684046][ T7202] ? __might_fault+0xc5/0x140 [ 129.684063][ T7202] filename_setxattr+0xa1/0x1d0 [ 129.684074][ T7202] ? __pfx_filename_setxattr+0x10/0x10 [ 129.684085][ T7202] ? do_getname+0x191/0x390 [ 129.684098][ T7202] path_setxattrat+0x1ff/0x3b0 [ 129.684109][ T7202] ? __pfx_path_setxattrat+0x10/0x10 [ 129.684126][ T7202] ? rcu_read_lock_any_held+0x6a/0x90 [ 129.684137][ T7202] ? find_held_lock+0x2b/0x80 [ 129.684159][ T7202] ? fput+0x7c/0x100 [ 129.684169][ T7202] ? ksys_write+0x1ac/0x250 [ 129.684185][ T7202] __ia32_sys_setxattr+0xc4/0x140 [ 129.684195][ T7202] ? __do_fast_syscall_32+0xb3/0x8b0 [ 129.684208][ T7202] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.684221][ T7202] __do_fast_syscall_32+0x13a/0x8b0 [ 129.684234][ T7202] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.684248][ T7202] do_fast_syscall_32+0x32/0x70 [ 129.684262][ T7202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.684276][ T7202] RIP: 0023:0xf7fb6fec [ 129.684300][ T7202] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 129.684306][ T7202] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 129.684317][ T7202] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000800001c0 [ 129.684324][ T7202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 129.684330][ T7202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.684336][ T7202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.684342][ T7202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.684356][ T7202] [ 130.096244][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 130.101213][ T7212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.355'. [ 130.104341][ T7212] netlink: 64 bytes leftover after parsing attributes in process `syz.3.355'. [ 131.862738][ T7222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 131.865443][ T7222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.869421][ T7222] vhci_hcd vhci_hcd.0: Device attached [ 131.971892][ T7222] wg2 speed is unknown, defaulting to 1000 [ 131.997139][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.002182][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.154758][ T5843] usb 44-1: SetAddress Request (2) to port 0 [ 132.161962][ T5843] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 132.258344][ T7227] gre1: entered promiscuous mode [ 132.295857][ T7223] vhci_hcd: connection reset by peer [ 132.296645][ T5740] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 132.303373][ T5787] vhci_hcd vhci_hcd.3: stop threads [ 132.314792][ T5787] vhci_hcd vhci_hcd.3: release socket [ 132.316276][ T41] wg2 speed is unknown, defaulting to 1000 [ 132.318754][ T5787] vhci_hcd vhci_hcd.3: disconnect device [ 132.320260][ T7222] infiniband syz2: set active [ 132.323690][ T7222] infiniband syz2: added wg2 [ 132.331399][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.350589][ T7222] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.356543][ T7222] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.363134][ T7222] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.392067][ T7222] RDS/IB: syz2: added [ 132.395874][ T7222] smc: adding ib device syz2 with port count 1 [ 132.399035][ T7222] smc: ib device syz2 port 1 has no pnetid [ 132.403349][ T41] wg2 speed is unknown, defaulting to 1000 [ 132.413459][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.559251][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.692440][ T7231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.701348][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.911840][ T7222] wg2 speed is unknown, defaulting to 1000 [ 132.970941][ T7241] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.974139][ T7241] overlayfs: failed to set xattr on upper [ 132.979696][ T7241] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.983775][ T7241] overlayfs: ...falling back to index=off. [ 132.986055][ T7241] overlayfs: ...falling back to uuid=null. [ 132.987835][ T7241] overlayfs: ...falling back to xino=off. [ 132.989876][ T7241] overlayfs: conflicting lowerdir path [ 133.304641][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 133.471358][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.491486][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.507795][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.517326][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.529911][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.548087][ T61] usb 6-1: config 0 descriptor?? [ 134.610388][ T61] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 134.790072][ T5738] usb 6-1: USB disconnect, device number 12 [ 135.470512][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 135.944744][ T61] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 136.118893][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 136.129936][ T61] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.150297][ T61] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 136.183191][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.192161][ T61] usb 7-1: Product: syz [ 136.193599][ T61] usb 7-1: Manufacturer: syz [ 136.201044][ T7276] 9pnet_virtio: no channels available for device syz [ 136.204016][ T61] usb 7-1: SerialNumber: syz [ 136.353398][ T7279] msdos: Unknown parameter 'addr' [ 136.791227][ T61] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.795815][ T61] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 137.104701][ T71] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 137.181498][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 137.255096][ T71] usb 5-1: Using ep0 maxpacket: 32 [ 137.259745][ T61] usb 7-1: USB disconnect, device number 13 [ 137.262360][ T5843] usb 44-1: device descriptor read/8, error -110 [ 137.294606][ T71] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.315828][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 137.341694][ T71] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 137.391142][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.409171][ T71] usb 5-1: Product: syz [ 137.412753][ T71] usb 5-1: Manufacturer: syz [ 137.431257][ T71] usb 5-1: SerialNumber: syz [ 138.023388][ T7293] msdos: Unknown parameter 'addr' [ 138.053143][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.381836][ T7297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.390806][ T71] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.393883][ T71] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 138.399589][ T7297] overlayfs: failed to set xattr on upper [ 138.401423][ T7297] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.404287][ T7297] overlayfs: ...falling back to index=off. [ 138.406496][ T7297] overlayfs: ...falling back to uuid=null. [ 138.408428][ T7297] overlayfs: ...falling back to xino=off. [ 138.415049][ T7297] overlayfs: conflicting lowerdir path [ 138.424201][ T71] usb 5-1: USB disconnect, device number 15 [ 138.439608][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.367590][ T5843] usb usb44-port1: attempt power cycle [ 140.043053][ T5843] usb usb44-port1: unable to enumerate USB device [ 140.108732][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 140.684733][ T5843] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 140.844721][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 140.853816][ T5843] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.863675][ T5843] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 140.881963][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.892972][ T5843] usb 8-1: Product: syz [ 140.918048][ T5843] usb 8-1: Manufacturer: syz [ 140.942067][ T5843] usb 8-1: SerialNumber: syz [ 141.387431][ T7334] 9pnet_virtio: no channels available for device syz [ 142.032908][ T5843] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.036075][ T5843] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.094303][ T5843] usb 8-1: USB disconnect, device number 9 [ 142.134142][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.184764][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 142.185242][ T5738] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 142.209142][ T7343] netlink: 68 bytes leftover after parsing attributes in process `syz.0.389'. [ 142.222650][ T7343] netlink: 64 bytes leftover after parsing attributes in process `syz.0.389'. [ 142.255292][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 142.344626][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 142.362809][ T5738] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.368146][ T5738] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 142.379099][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.382037][ T5738] usb 6-1: Product: syz [ 142.383965][ T5738] usb 6-1: Manufacturer: syz [ 142.390277][ T5738] usb 6-1: SerialNumber: syz [ 142.393851][ T7348] msdos: Unknown parameter 'addr' [ 142.735287][ T7350] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 142.737731][ T7350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.763261][ T7350] vhci_hcd vhci_hcd.0: Device attached [ 142.827790][ T7350] rdma_rxe: rxe_newlink: failed to add wg2 [ 142.913791][ T5738] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.918249][ T5738] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.945023][ T5738] usb 6-1: USB disconnect, device number 13 [ 142.978340][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.056815][ T5843] usb 38-1: SetAddress Request (2) to port 0 [ 143.062826][ T5843] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 143.216513][ T7351] vhci_hcd: connection reset by peer [ 143.276925][ T5787] vhci_hcd vhci_hcd.0: stop threads [ 143.278676][ T5787] vhci_hcd vhci_hcd.0: release socket [ 143.281915][ T5787] vhci_hcd vhci_hcd.0: disconnect device [ 143.732217][ T7363] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.734646][ T7363] overlayfs: failed to set xattr on upper [ 143.736984][ T7363] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.741486][ T7363] overlayfs: ...falling back to index=off. [ 143.743415][ T7363] overlayfs: ...falling back to uuid=null. [ 143.748109][ T7363] overlayfs: ...falling back to xino=off. [ 143.749988][ T7363] overlayfs: conflicting lowerdir path [ 143.946305][ T7372] FAULT_INJECTION: forcing a failure. [ 143.946305][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 143.951175][ T7372] CPU: 2 UID: 0 PID: 7372 Comm: syz.3.396 Not tainted syzkaller #0 PREEMPT(full) [ 143.951191][ T7372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.951197][ T7372] Call Trace: [ 143.951201][ T7372] [ 143.951205][ T7372] dump_stack_lvl+0x100/0x190 [ 143.951224][ T7372] should_fail_ex.cold+0x5/0xa [ 143.951238][ T7372] should_failslab+0xc2/0x120 [ 143.951249][ T7372] kmem_cache_alloc_noprof+0x91/0x6a0 [ 143.951266][ T7372] ? __kernfs_new_node+0xd2/0xa10 [ 143.951280][ T7372] __kernfs_new_node+0xd2/0xa10 [ 143.951292][ T7372] ? __pfx___kernfs_new_node+0x10/0x10 [ 143.951302][ T7372] ? check_noncircular+0x97/0x160 [ 143.951317][ T7372] ? find_held_lock+0x2b/0x80 [ 143.951326][ T7372] ? kernfs_root+0xee/0x2a0 [ 143.951341][ T7372] ? kernfs_root+0xee/0x2a0 [ 143.951360][ T7372] kernfs_new_node+0x117/0x150 [ 143.951373][ T7372] __kernfs_create_file+0x53/0x350 [ 143.951388][ T7372] sysfs_add_file_mode_ns+0x207/0x3c0 [ 143.951407][ T7372] sysfs_create_file_ns+0x145/0x1e0 [ 143.951422][ T7372] ? rcu_is_watching+0x13/0xc0 [ 143.951438][ T7372] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 143.951454][ T7372] ? __pfx___up_read+0x10/0x10 [ 143.951483][ T7372] ? acpi_device_notify+0x464/0x500 [ 143.951500][ T7372] ? kobject_put+0xb9/0x640 [ 143.951517][ T7372] device_create_file+0xf2/0x1d0 [ 143.951535][ T7372] device_add+0x2cb/0x1970 [ 143.951549][ T7372] ? rcu_is_watching+0x13/0xc0 [ 143.951565][ T7372] ? __pfx_device_add+0x10/0x10 [ 143.951578][ T7372] ? __kasan_kmalloc+0xaa/0xb0 [ 143.951595][ T7372] ? lockdep_init_map_type+0x5c/0x250 [ 143.951610][ T7372] ? lockdep_init_map_type+0x5c/0x250 [ 143.951624][ T7372] input_register_device+0x7d2/0xe00 [ 143.951643][ T7372] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 143.951655][ T7372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 143.951669][ T7372] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 143.951685][ T7372] ? find_held_lock+0x2b/0x80 [ 143.951694][ T7372] ? __fget_files+0x215/0x3d0 [ 143.951713][ T7372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.951728][ T7372] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 143.951740][ T7372] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 143.951756][ T7372] __do_fast_syscall_32+0x13a/0x8b0 [ 143.951769][ T7372] ? lockdep_hardirqs_on+0x7d/0x110 [ 143.951783][ T7372] do_fast_syscall_32+0x32/0x70 [ 143.951796][ T7372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.951810][ T7372] RIP: 0023:0xf705efec [ 143.951822][ T7372] Code: Unable to access opcode bytes at 0xf705efc2. [ 143.951827][ T7372] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 143.951838][ T7372] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 143.951844][ T7372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.951850][ T7372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.951856][ T7372] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.951862][ T7372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.951875][ T7372] [ 144.194777][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 144.454633][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 144.604588][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 144.610199][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.616763][ T29] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 144.625587][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.631165][ T29] usb 7-1: Product: syz [ 144.633464][ T29] usb 7-1: Manufacturer: syz [ 144.636328][ T29] usb 7-1: SerialNumber: syz [ 145.253253][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 145.373789][ T7392] msdos: Unknown parameter 'addr' [ 145.476919][ T29] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.481862][ T29] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 145.514307][ T29] usb 7-1: USB disconnect, device number 14 [ 145.762968][ T7398] 9pnet_virtio: no channels available for device syz [ 145.772772][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.055101][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 146.259666][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 146.270736][ T7399] 9pnet_virtio: no channels available for device syz [ 146.309037][ T29] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.359755][ T29] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 146.498398][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.519727][ T29] usb 8-1: Product: syz [ 146.537743][ T29] usb 8-1: Manufacturer: syz [ 146.559682][ T29] usb 8-1: SerialNumber: syz [ 146.597190][ T71] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 146.784624][ T71] usb 5-1: Using ep0 maxpacket: 32 [ 146.817586][ T71] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.893133][ T71] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 147.079250][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.137540][ T71] usb 5-1: Product: syz [ 147.142382][ T71] usb 5-1: Manufacturer: syz [ 147.210267][ T71] usb 5-1: SerialNumber: syz [ 147.733462][ T29] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.739851][ T29] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 147.774608][ T29] usb 8-1: USB disconnect, device number 10 [ 147.806709][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.901087][ T42] audit: type=1800 audit(1787601395.985:111): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.405" name="/newroot/107/file0" dev="tmpfs" ino=614 res=0 errno=0 [ 147.904550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 148.037632][ T71] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 148.040595][ T71] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 148.057606][ T71] usb 5-1: USB disconnect, device number 16 [ 148.076700][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.174644][ T5843] usb 38-1: device descriptor read/8, error -110 [ 148.350930][ T7415] input: syz1 as /devices/virtual/input/input9 [ 148.551752][ T7417] 9p: Bad value for 'rfdno' [ 148.585218][ T5843] usb usb38-port1: attempt power cycle [ 148.809799][ T7425] aoe: unknown AoE command type 0x30 [ 148.978519][ T7440] netlink: 64 bytes leftover after parsing attributes in process `syz.3.412'. [ 149.025823][ T7440] overlay: Unknown parameter '/' [ 149.163180][ T5843] usb usb38-port1: unable to enumerate USB device [ 150.139733][ T7473] netlink: 'syz.3.416': attribute type 10 has an invalid length. [ 150.205122][ T1038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 150.761028][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 150.807367][ T5842] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 150.904827][ T7492] msdos: Unknown parameter 'addr' [ 150.954116][ T7486] capability: warning: `syz.0.420' uses 32-bit capabilities (legacy support in use) [ 150.964685][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 150.976594][ T5842] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.993023][ T5842] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 151.003385][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.006243][ T5842] usb 7-1: Product: syz [ 151.007600][ T5842] usb 7-1: Manufacturer: syz [ 151.009099][ T5842] usb 7-1: SerialNumber: syz [ 152.254110][ T5842] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.259592][ T5842] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.281908][ T5842] usb 7-1: USB disconnect, device number 15 [ 152.312512][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.723444][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 152.734727][ T5738] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.896298][ T5738] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 152.905844][ T5738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.910989][ T5738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.920157][ T5738] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 152.928725][ T5738] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.939071][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.943288][ T5738] usb 5-1: Product: syz [ 152.949345][ T5738] usb 5-1: Manufacturer: syz [ 152.952839][ T5738] usb 5-1: SerialNumber: syz [ 152.967947][ T42] audit: type=1800 audit(1787601401.055:112): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.427" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 152.970408][ T5738] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 152.994637][ T5738] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 152.998682][ T5738] usbserial_generic 5-1:1.0: generic converter detected [ 153.018540][ T5738] usb 5-1: generic converter now attached to ttyUSB0 [ 153.155113][ T71] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 153.196154][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 153.199946][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 153.261737][ T7533] msdos: Unknown parameter 'addr' [ 153.348704][ T29] usb 5-1: USB disconnect, device number 17 [ 153.360884][ T29] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 153.371535][ T29] usbserial_generic 5-1:1.0: device disconnected [ 153.494641][ T5844] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 153.645108][ T5844] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 153.649099][ T5844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.652437][ T5844] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.655887][ T5844] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 153.659537][ T5844] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.666028][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.669137][ T5844] usb 7-1: Product: syz [ 153.670737][ T5844] usb 7-1: Manufacturer: syz [ 153.672328][ T5844] usb 7-1: SerialNumber: syz [ 153.676926][ T5844] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.683517][ T5844] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.687303][ T5844] usbserial_generic 7-1:1.0: generic converter detected [ 153.691725][ T5844] usb 7-1: generic converter now attached to ttyUSB0 [ 153.887184][ T5816] usb 7-1: USB disconnect, device number 16 [ 153.907746][ T5816] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 153.912870][ T5816] usbserial_generic 7-1:1.0: device disconnected [ 154.141909][ T7564] loop6: detected capacity change from 0 to 2640 [ 154.150615][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.153765][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.158347][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.163211][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.166947][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.171378][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.176531][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.179977][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.183986][ T7564] ldm_validate_partition_table(): Disk read failed. [ 154.187646][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.191312][ T7564] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.196184][ T7564] Dev loop6: unable to read RDB block 0 [ 154.206117][ T7564] loop6: unable to read partition table [ 154.214030][ T7564] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 155.163073][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 155.472668][ T7599] msdos: Unknown parameter 'addr' [ 155.577322][ T5816] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 155.744595][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 155.786153][ T5816] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.856353][ T5816] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 155.895871][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.916680][ T5816] usb 6-1: Product: syz [ 156.002360][ T5816] usb 6-1: Manufacturer: syz [ 156.016613][ T5816] usb 6-1: SerialNumber: syz [ 156.326691][ T1038] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 156.477392][ T7613] FAULT_INJECTION: forcing a failure. [ 156.477392][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 156.502173][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.0.450 Not tainted syzkaller #0 PREEMPT(full) [ 156.502190][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.502196][ T7613] Call Trace: [ 156.502201][ T7613] [ 156.502205][ T7613] dump_stack_lvl+0x100/0x190 [ 156.502224][ T7613] should_fail_ex.cold+0x5/0xa [ 156.502237][ T7613] should_failslab+0xc2/0x120 [ 156.502248][ T7613] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 156.502266][ T7613] ? __alloc_skb+0x140/0x710 [ 156.502280][ T7613] __alloc_skb+0x140/0x710 [ 156.502292][ T7613] ? __pfx___alloc_skb+0x10/0x10 [ 156.502307][ T7613] tipc_buf_acquire+0x26/0xe0 [ 156.502319][ T7613] tipc_msg_create+0x39/0x1d0 [ 156.502333][ T7613] tipc_group_proto_xmit+0x150/0x7c0 [ 156.502350][ T7613] tipc_group_cong+0x44a/0x550 [ 156.502365][ T7613] ? __pfx_tipc_group_cong+0x10/0x10 [ 156.502382][ T7613] ? kfree+0x22b/0x6c0 [ 156.502397][ T7613] ? tipc_dest_find+0xe4/0x130 [ 156.502413][ T7613] tipc_send_group_anycast+0x723/0x840 [ 156.502434][ T7613] ? __pfx_tipc_send_group_anycast+0x10/0x10 [ 156.502451][ T7613] ? aa_label_sk_perm+0x194/0x5f0 [ 156.502463][ T7613] ? __lock_acquire+0x4c5/0x1ec0 [ 156.502476][ T7613] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 156.502486][ T7613] ? __pfx_woken_wake_function+0x10/0x10 [ 156.502505][ T7613] __tipc_sendmsg+0x14f4/0x1ab0 [ 156.502516][ T7613] ? find_held_lock+0x2b/0x80 [ 156.502528][ T7613] ? __pfx___tipc_sendmsg+0x10/0x10 [ 156.502542][ T7613] ? __lock_acquire+0x4c5/0x1ec0 [ 156.502557][ T7613] ? aa_sk_perm+0x30c/0xaa0 [ 156.502574][ T7613] ? __local_bh_enable_ip+0xa5/0x120 [ 156.502590][ T7613] tipc_sendmsg+0x4f/0x70 [ 156.502601][ T7613] ____sys_sendmsg+0xa4d/0xbe0 [ 156.502617][ T7613] ? __pfx_tipc_sendmsg+0x10/0x10 [ 156.502629][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.502650][ T7613] ___sys_sendmsg+0x190/0x1e0 [ 156.502667][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.502689][ T7613] ? find_held_lock+0x2b/0x80 [ 156.502707][ T7613] __sys_sendmsg+0x160/0x210 [ 156.502720][ T7613] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.502736][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 156.502753][ T7613] __do_fast_syscall_32+0x13a/0x8b0 [ 156.502767][ T7613] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.502781][ T7613] do_fast_syscall_32+0x32/0x70 [ 156.502795][ T7613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.502809][ T7613] RIP: 0023:0xf7fe4fec [ 156.502822][ T7613] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 156.502827][ T7613] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 156.502838][ T7613] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800008c0 [ 156.502845][ T7613] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.502851][ T7613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.502857][ T7613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.502863][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.502876][ T7613] [ 156.907179][ T7628] FAULT_INJECTION: forcing a failure. [ 156.907179][ T7628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.921141][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) [ 156.921157][ T7628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.921164][ T7628] Call Trace: [ 156.921168][ T7628] [ 156.921172][ T7628] dump_stack_lvl+0x100/0x190 [ 156.921190][ T7628] should_fail_ex.cold+0x5/0xa [ 156.921204][ T7628] _copy_to_user+0x32/0xd0 [ 156.921218][ T7628] msr_read+0x144/0x240 [ 156.921231][ T7628] ? __pfx_msr_read+0x10/0x10 [ 156.921243][ T7628] ? bpf_lsm_file_permission+0x9/0x10 [ 156.921255][ T7628] ? security_file_permission+0x76/0x210 [ 156.921267][ T7628] ? rw_verify_area+0xce/0x6d0 [ 156.921280][ T7628] ? __pfx_msr_read+0x10/0x10 [ 156.921292][ T7628] vfs_read+0x1e4/0xb40 [ 156.921308][ T7628] ? __pfx_vfs_read+0x10/0x10 [ 156.921321][ T7628] ? find_held_lock+0x2b/0x80 [ 156.921331][ T7628] ? __fget_files+0x215/0x3d0 [ 156.921346][ T7628] ? __fget_files+0x215/0x3d0 [ 156.921363][ T7628] ? __fget_files+0x21f/0x3d0 [ 156.921382][ T7628] ksys_read+0x12a/0x250 [ 156.921396][ T7628] ? __pfx_ksys_read+0x10/0x10 [ 156.921410][ T7628] ? ksys_write+0x1ac/0x250 [ 156.921424][ T7628] ? __pfx_ksys_write+0x10/0x10 [ 156.921460][ T7628] __do_fast_syscall_32+0x13a/0x8b0 [ 156.921476][ T7628] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.921490][ T7628] do_fast_syscall_32+0x32/0x70 [ 156.921504][ T7628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.921518][ T7628] RIP: 0023:0xf705efec [ 156.921531][ T7628] Code: Unable to access opcode bytes at 0xf705efc2. [ 156.921536][ T7628] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 156.921547][ T7628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080032680 [ 156.921554][ T7628] RDX: 0000000000019000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.921560][ T7628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.921566][ T7628] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.921572][ T7628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.921584][ T7628] [ 157.051144][ T7635] lo speed is unknown, defaulting to 1000 [ 157.068373][ T7635] wg2 speed is unknown, defaulting to 1000 [ 157.072648][ T5816] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 157.075065][ T5816] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 157.103309][ T5816] usb 6-1: USB disconnect, device number 14 [ 157.123789][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.522154][ T7645] gadgetfs: bound to dummy_udc driver [ 157.597849][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 157.601768][ T7648] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 157.606941][ T7648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 157.626538][ T7648] geneve2: entered promiscuous mode [ 157.628771][ T7648] geneve2: entered allmulticast mode [ 157.786651][ T1038] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 157.789362][ C2] gadgetfs: connected [ 157.791149][ T1038] gadgetfs: disconnected [ 170.836396][ T7674] XFS (mtdblock0): Invalid superblock magic number [ 170.988275][ T7691] syzkaller0: entered promiscuous mode [ 170.990016][ T7691] syzkaller0: entered allmulticast mode [ 171.084662][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 171.104622][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 171.157610][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 171.245257][ T29] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 171.250908][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.255278][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.260381][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 171.264255][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.264677][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 171.273029][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.276517][ T29] usb 7-1: Product: syz [ 171.278237][ T29] usb 7-1: Manufacturer: syz [ 171.280181][ T29] usb 7-1: SerialNumber: syz [ 171.286310][ T29] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 171.287866][ T9] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 171.292574][ T29] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 171.294020][ T9] usb 8-1: config 1 has no interfaces? [ 171.298177][ T29] usbserial_generic 7-1:1.0: generic converter detected [ 171.304258][ T29] usb 7-1: generic converter now attached to ttyUSB0 [ 171.306145][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.310850][ T9] usb 8-1: Product: syz [ 171.312141][ T9] usb 8-1: Manufacturer: syz [ 171.319867][ T9] usb 8-1: SerialNumber: syz [ 171.501002][ T5740] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 171.533618][ T7686] lo speed is unknown, defaulting to 1000 [ 171.539191][ T9] usb 8-1: USB disconnect, device number 11 [ 171.664266][ T63] usb 7-1: USB disconnect, device number 17 [ 171.688377][ T63] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 171.695661][ T63] usbserial_generic 7-1:1.0: device disconnected [ 171.914635][ T1038] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 172.034653][ T5738] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 172.067949][ T1038] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.071432][ T1038] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 172.078413][ T1038] usb 6-1: config 12 has an invalid interface number: 99 but max is 0 [ 172.081746][ T1038] usb 6-1: config 12 has no interface number 0 [ 172.084273][ T1038] usb 6-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 172.096174][ T1038] usb 6-1: config 12 interface 99 has no altsetting 0 [ 172.101088][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.104913][ T1038] usb 6-1: Product: syz [ 172.106692][ T1038] usb 6-1: Manufacturer: syz [ 172.108670][ T1038] usb 6-1: SerialNumber: syz [ 172.129220][ T7718] XFS (mtdblock0): Invalid superblock magic number [ 172.207641][ T5738] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.278636][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 172.334601][ T5738] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 172.514706][ T5738] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.523779][ T5738] usb usb5-port1: attempt power cycle [ 172.961163][ T5738] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 172.987364][ T5738] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.125241][ T5738] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 173.147336][ T5738] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.153746][ T5738] usb usb5-port1: unable to enumerate USB device [ 173.625503][ T1038] usb 6-1: no audio or video endpoints found [ 174.094829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 174.546661][ T1038] usb 6-1: USB disconnect, device number 15 [ 174.874913][ T1038] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 174.986062][ T7754] XFS (mtdblock0): Invalid superblock magic number [ 175.038074][ T1038] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 175.057185][ T1038] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.073749][ T1038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.077171][ T7761] gadgetfs: bound to dummy_udc driver [ 175.078017][ T1038] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 175.083725][ T1038] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.093923][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.098381][ T1038] usb 6-1: Product: syz [ 175.100162][ T1038] usb 6-1: Manufacturer: syz [ 175.102184][ T1038] usb 6-1: SerialNumber: syz [ 175.112846][ T1038] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 175.118744][ T1038] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 175.123160][ T1038] usbserial_generic 6-1:1.0: generic converter detected [ 175.130366][ T1038] usb 6-1: generic converter now attached to ttyUSB0 [ 175.194608][ T5843] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 175.314611][ T5816] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 175.317240][ C3] gadgetfs: connected [ 175.319759][ T5816] gadgetfs: disconnected [ 175.339642][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 175.344608][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 175.347855][ T5843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.350222][ T5843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 175.353677][ T5843] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 175.356726][ T5843] usb 5-1: config 8 has no interface number 0 [ 175.359988][ T5843] usb 5-1: config 8 interface 188 has no altsetting 0 [ 175.364469][ T5843] usb 5-1: string descriptor 0 read error: -22 [ 175.366693][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.374737][ T5843] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 175.377828][ T5843] dw2102: su3000_power_ctrl: 1, initialized 0 [ 175.380300][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 175.391500][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.395321][ T5843] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 175.398191][ T5843] usb 5-1: media controller created [ 175.400089][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.402011][ T5843] dw2102: i2c transfer failed. [ 175.403703][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.407831][ T5843] dw2102: i2c transfer failed. [ 175.410406][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.412057][ T5843] dw2102: i2c transfer failed. [ 175.413531][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.415448][ T5843] dw2102: i2c transfer failed. [ 175.417002][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.418711][ T5843] dw2102: i2c transfer failed. [ 175.420166][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 175.423164][ T5843] dw2102: i2c transfer failed. [ 175.425858][ T5843] dvb-usb: MAC address: 02:02:02:02:02:02 [ 175.435095][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.459356][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 175.462286][ T5843] dw2102: command 0x0e transfer failed. [ 175.464250][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 175.467009][ T5843] dw2102: command 0x0e transfer failed. [ 175.491132][ T1038] usb 6-1: USB disconnect, device number 16 [ 175.497803][ T1038] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 175.500881][ T1038] usbserial_generic 6-1:1.0: device disconnected [ 175.508134][ T7771] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 175.576007][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.579399][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.777853][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 175.785959][ T5843] dw2102: command 0x0e transfer failed. [ 175.788142][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 175.789986][ T5843] dw2102: command 0x0e transfer failed. [ 175.791689][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 175.793455][ T5843] dw2102: command 0x51 transfer failed. [ 175.795874][ T7775] dvb-usb: bulk message failed: -22 (5/0) [ 175.800659][ T7775] dw2102: i2c transfer failed. [ 175.802707][ T7779] FAULT_INJECTION: forcing a failure. [ 175.802707][ T7779] name failslab, interval 1, probability 0, space 0, times 0 [ 175.802733][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.3.488 Not tainted syzkaller #0 PREEMPT(full) [ 175.802751][ T7779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.802760][ T7779] Call Trace: [ 175.802766][ T7779] [ 175.802772][ T7779] dump_stack_lvl+0x100/0x190 [ 175.802799][ T7779] should_fail_ex.cold+0x5/0xa [ 175.802821][ T7779] should_failslab+0xc2/0x120 [ 175.802839][ T7779] __kmalloc_cache_noprof+0x91/0x6b0 [ 175.802862][ T7779] ? xfs_init_fs_context+0x45/0x5f0 [ 175.802892][ T7779] xfs_init_fs_context+0x45/0x5f0 [ 175.802919][ T7779] alloc_fs_context+0x60c/0xf40 [ 175.802941][ T7779] path_mount+0xdbd/0x24c0 [ 175.802970][ T7779] ? __pfx_path_mount+0x10/0x10 [ 175.802984][ T7779] ? lockdep_hardirqs_on+0x7d/0x110 [ 175.802998][ T7779] ? putname+0xb1/0x110 [ 175.803007][ T7779] ? kmem_cache_free+0x127/0x6b0 [ 175.803026][ T7779] ? __ia32_sys_mount+0x292/0x310 [ 175.803036][ T7779] __ia32_sys_mount+0x292/0x310 [ 175.803048][ T7779] ? __pfx___ia32_sys_mount+0x10/0x10 [ 175.803059][ T7779] ? ksys_write+0x1ac/0x250 [ 175.803073][ T7779] ? __pfx_ksys_write+0x10/0x10 [ 175.803090][ T7779] __do_fast_syscall_32+0x13a/0x8b0 [ 175.803103][ T7779] ? lockdep_hardirqs_on+0x7d/0x110 [ 175.803116][ T7779] do_fast_syscall_32+0x32/0x70 [ 175.803130][ T7779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.803144][ T7779] RIP: 0023:0xf705efec [ 175.803156][ T7779] Code: Unable to access opcode bytes at 0xf705efc2. [ 175.803161][ T7779] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 175.803171][ T7779] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000200 [ 175.803178][ T7779] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.803184][ T7779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.803189][ T7779] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.803196][ T7779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.803208][ T7779] [ 175.814192][ T5843] DVB: Unable to find symbol ds3000_attach() [ 175.815195][ T7775] retu-mfd 2-0002: Tahvo v0.1 found [ 175.815760][ T5843] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 175.818255][ T7775] dvb-usb: bulk message failed: -22 (6/0) [ 175.874598][ T5843] rc_core: IR keymap rc-su3000 not found [ 175.878512][ T7775] dw2102: i2c transfer failed. [ 175.883319][ T5843] Registered IR keymap rc-empty [ 175.892951][ T7775] dvb-usb: bulk message failed: -22 (5/0) [ 175.895953][ T7775] dw2102: i2c transfer failed. [ 175.898061][ T5843] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 175.902576][ T7775] genirq: Flags mismatch irq 0. 00002000 (TAHVO) vs. 00215a00 (timer) [ 175.907743][ T7775] retu-mfd 2-0002: Failed to request IRQ 0 for TAHVO: -16 [ 175.920045][ T7775] retu-mfd 2-0002: probe with driver retu-mfd failed with error -16 [ 175.921334][ T7775] i2c i2c-2: new_device: Instantiated device tahvo at 0x02 [ 175.927075][ T5843] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input11 [ 175.946524][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 175.951115][ T5843] dw2102: su3000_power_ctrl: 0, initialized 1 [ 175.955174][ T5843] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 175.964352][ T5843] usb 5-1: USB disconnect, device number 23 [ 176.018548][ T5843] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 176.055213][ T7789] FAULT_INJECTION: forcing a failure. [ 176.055213][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.061937][ T7789] CPU: 2 UID: 0 PID: 7789 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT(full) [ 176.061959][ T7789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.061969][ T7789] Call Trace: [ 176.061975][ T7789] [ 176.061981][ T7789] dump_stack_lvl+0x100/0x190 [ 176.062006][ T7789] should_fail_ex.cold+0x5/0xa [ 176.062025][ T7789] _copy_from_user+0x2e/0xd0 [ 176.062044][ T7789] input_event_from_user+0x137/0x290 [ 176.062068][ T7789] ? __pfx_input_event_from_user+0x10/0x10 [ 176.062091][ T7789] ? _raw_spin_unlock_irq_enable+0x56/0x90 [ 176.062107][ T7789] ? input_inject_event+0x18e/0x370 [ 176.062131][ T7789] evdev_write+0x27a/0x430 [ 176.062155][ T7789] ? __pfx_evdev_write+0x10/0x10 [ 176.062177][ T7789] ? bpf_lsm_file_permission+0x9/0x10 [ 176.062194][ T7789] ? security_file_permission+0x76/0x210 [ 176.062210][ T7789] ? rw_verify_area+0xce/0x6d0 [ 176.062230][ T7789] vfs_write+0x2aa/0x1050 [ 176.062250][ T7789] ? __pfx_evdev_write+0x10/0x10 [ 176.062272][ T7789] ? __pfx_vfs_write+0x10/0x10 [ 176.062289][ T7789] ? find_held_lock+0x2b/0x80 [ 176.062302][ T7789] ? __fget_files+0x215/0x3d0 [ 176.062322][ T7789] ? __fget_files+0x215/0x3d0 [ 176.062345][ T7789] ? __fget_files+0x21f/0x3d0 [ 176.062370][ T7789] ksys_write+0x1f8/0x250 [ 176.062390][ T7789] ? __pfx_ksys_write+0x10/0x10 [ 176.062407][ T7789] ? ksys_write+0x1ac/0x250 [ 176.062425][ T7789] ? __pfx_ksys_write+0x10/0x10 [ 176.062448][ T7789] __do_fast_syscall_32+0x13a/0x8b0 [ 176.062466][ T7789] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.062484][ T7789] do_fast_syscall_32+0x32/0x70 [ 176.062503][ T7789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.062521][ T7789] RIP: 0023:0xf7fb6fec [ 176.062538][ T7789] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 176.062545][ T7789] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 176.062559][ T7789] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 176.062568][ T7789] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.062576][ T7789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.062584][ T7789] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.062593][ T7789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.062616][ T7789] [ 176.105968][ T63] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 176.305077][ T63] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 176.308929][ T63] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.312618][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 176.315860][ T63] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.321305][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 176.324179][ T63] usb 8-1: Product: syz [ 176.327173][ T63] usb 8-1: Manufacturer: syz [ 176.330881][ T7782] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 176.333165][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 176.334322][ T63] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 176.336486][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 176.342344][ T63] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 176.345732][ T7799] FAULT_INJECTION: forcing a failure. [ 176.345732][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 176.349743][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) [ 176.349758][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.349764][ T7799] Call Trace: [ 176.349769][ T7799] [ 176.349773][ T7799] dump_stack_lvl+0x100/0x190 [ 176.349792][ T7799] should_fail_ex.cold+0x5/0xa [ 176.349819][ T7799] should_failslab+0xc2/0x120 [ 176.349830][ T7799] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 176.349848][ T7799] ? __alloc_skb+0x140/0x710 [ 176.349863][ T7799] __alloc_skb+0x140/0x710 [ 176.349873][ T7799] ? __alloc_skb+0x5b7/0x710 [ 176.349884][ T7799] ? __pfx___alloc_skb+0x10/0x10 [ 176.349899][ T7799] netlink_ack+0x117/0xb80 [ 176.349910][ T7799] ? trace_contention_end+0x126/0x160 [ 176.349928][ T7799] netlink_rcv_skb+0x333/0x420 [ 176.349938][ T7799] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 176.349951][ T7799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.349970][ T7799] xfrm_netlink_rcv+0x71/0x90 [ 176.349981][ T7799] netlink_unicast+0x585/0x850 [ 176.349993][ T7799] ? __pfx_netlink_unicast+0x10/0x10 [ 176.350007][ T7799] netlink_sendmsg+0x8b0/0xda0 [ 176.350019][ T7799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.350032][ T7799] ? apparmor_socket_sendmsg+0x15b/0x270 [ 176.350049][ T7799] ____sys_sendmsg+0xa4d/0xbe0 [ 176.350063][ T7799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.350075][ T7799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.350096][ T7799] ___sys_sendmsg+0x190/0x1e0 [ 176.350113][ T7799] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.350136][ T7799] ? find_held_lock+0x2b/0x80 [ 176.350154][ T7799] __sys_sendmsg+0x160/0x210 [ 176.350167][ T7799] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.350183][ T7799] ? __pfx_ksys_write+0x10/0x10 [ 176.350201][ T7799] __do_fast_syscall_32+0x13a/0x8b0 [ 176.350215][ T7799] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.350228][ T7799] do_fast_syscall_32+0x32/0x70 [ 176.350243][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.350256][ T7799] RIP: 0023:0xf7fb6fec [ 176.350269][ T7799] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 176.350274][ T7799] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 176.350284][ T7799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 176.350291][ T7799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.350297][ T7799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.350303][ T7799] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.350309][ T7799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.350322][ T7799] [ 176.542684][ T5843] usb 8-1: USB disconnect, device number 12 [ 176.560661][ T5843] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 176.564159][ T5843] garmin_gps 8-1:1.0: device disconnected [ 177.203862][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.501'. [ 177.209957][ T7815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.501'. [ 177.275265][ T63] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 177.425462][ T63] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 177.430633][ T63] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.435969][ T63] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.440239][ T63] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 177.444234][ T63] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.452860][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.456351][ T63] usb 6-1: Product: syz [ 177.458267][ T63] usb 6-1: Manufacturer: syz [ 177.460521][ T63] usb 6-1: SerialNumber: syz [ 177.470920][ T63] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 177.476580][ T63] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 177.481660][ T63] usbserial_generic 6-1:1.0: generic converter detected [ 177.486952][ T63] usb 6-1: generic converter now attached to ttyUSB0 [ 177.584624][ T5843] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 177.668091][ T7819] FAULT_INJECTION: forcing a failure. [ 177.668091][ T7819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.673597][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(full) [ 177.673621][ T7819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.673632][ T7819] Call Trace: [ 177.673640][ T7819] [ 177.673647][ T7819] dump_stack_lvl+0x100/0x190 [ 177.673678][ T7819] should_fail_ex.cold+0x5/0xa [ 177.673698][ T7819] ? prepare_alloc_pages+0x16d/0x5b0 [ 177.673720][ T7819] should_fail_alloc_page+0xeb/0x140 [ 177.673742][ T7819] prepare_alloc_pages+0x1f0/0x5b0 [ 177.673765][ T7819] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 177.673795][ T7819] ? prepare_alloc_pages+0x111/0x5b0 [ 177.673817][ T7819] ? rcu_is_watching+0x13/0xc0 [ 177.673844][ T7819] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 177.673874][ T7819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.673902][ T7819] ? find_held_lock+0x2b/0x80 [ 177.673918][ T7819] ? is_bpf_text_address+0x8a/0x1a0 [ 177.673938][ T7819] ? is_bpf_text_address+0x8a/0x1a0 [ 177.673959][ T7819] ? bpf_ksym_find+0x124/0x1c0 [ 177.673985][ T7819] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.674008][ T7819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.674033][ T7819] ? is_bpf_text_address+0x94/0x1a0 [ 177.674056][ T7819] ? __kernel_text_address+0xd/0x30 [ 177.674092][ T7819] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 177.674123][ T7819] ? policy_nodemask+0xed/0x4f0 [ 177.674146][ T7819] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 177.674185][ T7819] __kasan_populate_vmalloc+0xf0/0x210 [ 177.674217][ T7819] alloc_vmap_area+0x95d/0x2bb0 [ 177.674254][ T7819] ? kasan_save_track+0x14/0x30 [ 177.674280][ T7819] ? __kasan_kmalloc+0xaa/0xb0 [ 177.674306][ T7819] ? __pfx_alloc_vmap_area+0x10/0x10 [ 177.674337][ T7819] ? __get_vm_area_node+0x124/0x350 [ 177.674359][ T7819] __get_vm_area_node+0x1ed/0x350 [ 177.674383][ T7819] __vmalloc_node_range_noprof+0x262/0x1460 [ 177.674405][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.674431][ T7819] ? rcu_read_unlock+0x17/0x60 [ 177.674454][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.674478][ T7819] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.674518][ T7819] ? rcu_is_watching+0x13/0xc0 [ 177.674547][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.674566][ T7819] __vmalloc_node_noprof+0xad/0xf0 [ 177.674586][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.674613][ T7819] fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.674633][ T7819] kvm_arch_vcpu_create+0x529/0xab0 [ 177.674666][ T7819] kvm_vm_ioctl+0x752/0x4180 [ 177.674689][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.674718][ T7819] ? stack_trace_save+0x8e/0xc0 [ 177.674737][ T7819] ? __pfx_stack_trace_save+0x10/0x10 [ 177.674757][ T7819] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 177.674773][ T7819] ? __lock_acquire+0x4c5/0x1ec0 [ 177.674796][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.674823][ T7819] ? kasan_save_stack+0x3f/0x50 [ 177.674849][ T7819] ? kasan_save_stack+0x30/0x50 [ 177.674874][ T7819] ? kasan_save_track+0x14/0x30 [ 177.674899][ T7819] ? kasan_save_free_info+0x3b/0x70 [ 177.674921][ T7819] ? __kasan_slab_free+0x5f/0x80 [ 177.674936][ T7819] ? kfree+0x22b/0x6c0 [ 177.674957][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.674982][ T7819] ? security_file_ioctl_compat+0xd3/0x230 [ 177.675010][ T7819] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 177.675033][ T7819] ? __do_fast_syscall_32+0x13a/0x8b0 [ 177.675056][ T7819] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 177.675078][ T7819] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 177.675138][ T7819] ? kasan_quarantine_put+0x104/0x240 [ 177.675163][ T7819] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.675186][ T7819] ? find_held_lock+0x2b/0x80 [ 177.675202][ T7819] ? tomoyo_path_number_perm+0x28f/0x580 [ 177.675229][ T7819] ? tomoyo_path_number_perm+0x28f/0x580 [ 177.675260][ T7819] ? tomoyo_path_number_perm+0x188/0x580 [ 177.675289][ T7819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.675319][ T7819] ? get_pid_task+0x106/0x250 [ 177.675352][ T7819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.675375][ T7819] ? do_vfs_ioctl+0x226/0x13e0 [ 177.675398][ T7819] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.675423][ T7819] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 177.675442][ T7819] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 177.675461][ T7819] ? find_held_lock+0x2b/0x80 [ 177.675477][ T7819] ? __fget_files+0x215/0x3d0 [ 177.675501][ T7819] ? hook_file_ioctl_common+0x140/0x440 [ 177.675533][ T7819] ? __fget_files+0x21f/0x3d0 [ 177.675563][ T7819] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 177.675582][ T7819] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 177.675612][ T7819] __do_fast_syscall_32+0x13a/0x8b0 [ 177.675635][ T7819] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.675658][ T7819] do_fast_syscall_32+0x32/0x70 [ 177.675681][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.675704][ T7819] RIP: 0023:0xf7fe4fec [ 177.675724][ T7819] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 177.675732][ T7819] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.675750][ T7819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae41 [ 177.675761][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.675771][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.675781][ T7819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.675792][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.675815][ T7819] [ 177.691941][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 177.701914][ T7819] syz.0.502: vmalloc error: size 2496, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 177.724769][ T7820] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.727068][ T7819] ,cpuset= [ 177.748535][ T5843] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.750499][ T7819] / [ 177.760317][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.761474][ T7819] ,mems_allowed=0-1 [ 177.770739][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.774630][ T7819] [ 177.777729][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.777926][ T7819] CPU: 3 UID: 0 PID: 7819 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(full) [ 177.777940][ T7819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.777947][ T7819] Call Trace: [ 177.777951][ T7819] [ 177.777955][ T7819] dump_stack_lvl+0x100/0x190 [ 177.777974][ T7819] warn_alloc.cold+0x9e/0xb2 [ 177.777985][ T7819] ? __pfx_warn_alloc+0x10/0x10 [ 177.778000][ T7819] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.778014][ T7819] ? __get_vm_area_node+0x2f0/0x350 [ 177.778032][ T7819] ? __get_vm_area_node+0x22b/0x350 [ 177.778045][ T7819] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 177.778062][ T7819] ? rcu_read_unlock+0x17/0x60 [ 177.778075][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.778089][ T7819] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.778104][ T7819] ? rcu_is_watching+0x13/0xc0 [ 177.778121][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.778132][ T7819] __vmalloc_node_noprof+0xad/0xf0 [ 177.778144][ T7819] ? fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.778156][ T7819] fpu_alloc_guest_fpstate+0x20/0x4a0 [ 177.778167][ T7819] kvm_arch_vcpu_create+0x529/0xab0 [ 177.778187][ T7819] kvm_vm_ioctl+0x752/0x4180 [ 177.778199][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.778216][ T7819] ? stack_trace_save+0x8e/0xc0 [ 177.778228][ T7819] ? __pfx_stack_trace_save+0x10/0x10 [ 177.778239][ T7819] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 177.778248][ T7819] ? __lock_acquire+0x4c5/0x1ec0 [ 177.778262][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.778278][ T7819] ? kasan_save_stack+0x3f/0x50 [ 177.778293][ T7819] ? kasan_save_stack+0x30/0x50 [ 177.778309][ T7819] ? kasan_save_track+0x14/0x30 [ 177.778324][ T7819] ? kasan_save_free_info+0x3b/0x70 [ 177.778337][ T7819] ? __kasan_slab_free+0x5f/0x80 [ 177.778346][ T7819] ? kfree+0x22b/0x6c0 [ 177.778359][ T7819] ? tomoyo_path_number_perm+0x46d/0x580 [ 177.778374][ T7819] ? security_file_ioctl_compat+0xd3/0x230 [ 177.778391][ T7819] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 177.778404][ T7819] ? __do_fast_syscall_32+0x13a/0x8b0 [ 177.778417][ T7819] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 177.778430][ T7819] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 177.778453][ T7819] ? kasan_quarantine_put+0x104/0x240 [ 177.778469][ T7819] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.778481][ T7819] ? find_held_lock+0x2b/0x80 [ 177.778490][ T7819] ? tomoyo_path_number_perm+0x28f/0x580 [ 177.778520][ T7819] ? tomoyo_path_number_perm+0x28f/0x580 [ 177.778541][ T7819] ? tomoyo_path_number_perm+0x188/0x580 [ 177.778558][ T7819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.778575][ T7819] ? get_pid_task+0x106/0x250 [ 177.778595][ T7819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.778608][ T7819] ? do_vfs_ioctl+0x226/0x13e0 [ 177.778621][ T7819] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.778636][ T7819] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 177.778647][ T7819] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 177.778657][ T7819] ? find_held_lock+0x2b/0x80 [ 177.778666][ T7819] ? __fget_files+0x215/0x3d0 [ 177.778680][ T7819] ? hook_file_ioctl_common+0x140/0x440 [ 177.778699][ T7819] ? __fget_files+0x21f/0x3d0 [ 177.778717][ T7819] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 177.778727][ T7819] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 177.778743][ T7819] __do_fast_syscall_32+0x13a/0x8b0 [ 177.778758][ T7819] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.778778][ T7819] do_fast_syscall_32+0x32/0x70 [ 177.778799][ T7819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.778823][ T7819] RIP: 0023:0xf7fe4fec [ 177.778844][ T7819] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 177.778852][ T7819] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.778863][ T7819] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae41 [ 177.778870][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.778876][ T7819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.778882][ T7819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.778888][ T7819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.778901][ T7819] [ 177.779398][ T7819] Mem-Info: [ 177.782905][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.783386][ T7819] active_anon:11588 inactive_anon:344 isolated_anon:0 [ 177.783386][ T7819] active_file:3461 inactive_file:49963 isolated_file:0 [ 177.783386][ T7819] unevictable:0 dirty:276 writeback:0 [ 177.783386][ T7819] slab_reclaimable:7467 slab_unreclaimable:54796 [ 177.783386][ T7819] mapped:27061 shmem:8100 pagetables:1210 [ 177.783386][ T7819] sec_pagetables:303 bounce:0 [ 177.783386][ T7819] kernel_misc_reclaimable:0 [ 177.783386][ T7819] free:32843 free_pcp:15083 free_cma:0 [ 177.798463][ T5843] usb 7-1: config 0 descriptor?? [ 177.798780][ T7819] Node 0 active_anon:684kB inactive_anon:104kB active_file:88kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1924kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 177.863704][ T9] usb 6-1: USB disconnect, device number 17 [ 177.866987][ T7825] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 177.879579][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 177.880352][ T7819] Node 1 active_anon:47400kB inactive_anon:1272kB active_file:13756kB inactive_file:199764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108380kB dirty:1092kB writeback:0kB shmem:32900kB shmem_thp:6144kB shmem_pmdmapped:4096kB anon_thp:0kB kernel_stack:4840kB pagetables:2916kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 177.886114][ T9] usbserial_generic 6-1:1.0: device disconnected [ 177.886588][ T7819] Node 0 DMA free:2004kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:368kB local_pcp:112kB free_cma:0kB [ 178.098918][ T7819] lowmem_reserve[]: 0 278 278 278 278 [ 178.101211][ T7819] Node 0 DMA32 free:15732kB boost:0kB min:12636kB low:15792kB high:18948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:684kB inactive_anon:104kB active_file:88kB inactive_file:88kB unevictable:0kB writepending:12kB zspages:0kB present:1032196kB managed:285068kB mlocked:0kB bounce:0kB free_pcp:12144kB local_pcp:2792kB free_cma:0kB [ 178.113000][ T7819] lowmem_reserve[]: 0 0 0 0 0 [ 178.114661][ T7819] Node 1 DMA32 free:113508kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47500kB inactive_anon:1272kB active_file:13756kB inactive_file:199764kB unevictable:0kB writepending:1092kB zspages:2556kB present:1048432kB managed:948204kB mlocked:0kB bounce:0kB free_pcp:50016kB local_pcp:1884kB free_cma:0kB [ 178.125231][ T7819] lowmem_reserve[]: 0 0 0 0 0 [ 178.126909][ T7819] Node 0 DMA: 63*4kB (UM) 1*8kB (M) 3*16kB (M) 5*32kB (M) 2*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2004kB [ 178.131520][ T7819] Node 0 DMA32: 287*4kB (UE) 35*8kB (UME) 2*16kB (UM) 74*32kB (UME) 36*64kB (UME) 11*128kB (ME) 12*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 15732kB [ 178.136602][ T7819] Node 1 DMA32: 524*4kB (UE) 604*8kB (UE) 224*16kB (UE) 80*32kB (UE) 73*64kB (UE) 37*128kB (UME) 55*256kB (UME) 42*512kB (UME) 24*1024kB (UME) 5*2048kB (UM) 5*4096kB (UM) = 113360kB [ 178.143085][ T7819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.146674][ T7819] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 178.149834][ T7819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.152812][ T7819] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 178.155598][ T7819] 62337 total pagecache pages [ 178.157053][ T7819] 786 pages in swap cache [ 178.158397][ T7819] Free swap = 111568kB [ 178.159801][ T7819] Total swap = 124996kB [ 178.161462][ T7819] 524155 pages RAM [ 178.162917][ T7825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.167152][ T7819] 0 pages HighMem/MovableOnly [ 178.167163][ T7819] 211997 pages reserved [ 178.167170][ T7819] 0 pages cma reserved [ 178.167177][ T7819] kvm: failed to allocate vcpu's fpu [ 178.227828][ T5843] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 178.303036][ T7825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.379933][ T7825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.475264][ T7825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.536104][ T7835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.619055][ T7835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.635152][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.638637][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.659406][ T7837] bond2: Removing last arp target with arp_interval on [ 178.667939][ T7837] bond2: entered promiscuous mode [ 178.670055][ T7837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.699198][ T7835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.734674][ T5814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.738099][ T5814] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.944711][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.947532][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.950319][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.953580][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.920458][ T7864] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 179.923252][ T7864] netlink: 220 bytes leftover after parsing attributes in process `syz.2.519'. [ 179.954649][ T63] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 180.076010][ T5816] usb 7-1: USB disconnect, device number 19 [ 180.105198][ T63] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 180.109161][ T63] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.112515][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.117047][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 180.120334][ T63] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.129246][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.131859][ T63] usb 8-1: Product: syz [ 180.133270][ T63] usb 8-1: Manufacturer: syz [ 180.136136][ T63] usb 8-1: SerialNumber: syz [ 180.142128][ T63] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 180.146277][ T63] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 180.149754][ T63] usbserial_generic 8-1:1.0: generic converter detected [ 180.153763][ T63] usb 8-1: generic converter now attached to ttyUSB0 [ 180.246017][ T5738] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 180.340600][ T7878] jffs2: notice: (7878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.358286][ T5740] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 180.414803][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 180.417293][ T5738] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 180.421113][ T5738] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 180.422012][ T7883] FAULT_INJECTION: forcing a failure. [ 180.422012][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.423697][ T5738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.427634][ T7883] CPU: 2 UID: 0 PID: 7883 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(full) [ 180.427649][ T7883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.427656][ T7883] Call Trace: [ 180.427660][ T7883] [ 180.427665][ T7883] dump_stack_lvl+0x100/0x190 [ 180.427683][ T7883] should_fail_ex.cold+0x5/0xa [ 180.427696][ T7883] _copy_from_iter+0x1f4/0x1690 [ 180.427710][ T7883] ? __lock_acquire+0x4c5/0x1ec0 [ 180.427725][ T7883] ? __lock_acquire+0x4c5/0x1ec0 [ 180.427737][ T7883] ? __pfx__copy_from_iter+0x10/0x10 [ 180.427751][ T7883] ? _parse_integer_limit+0x1ac/0x220 [ 180.427771][ T7883] tun_get_user+0x265/0x3cc0 [ 180.427786][ T7883] ? aa_file_perm+0x7f3/0x14d0 [ 180.427801][ T7883] ? __pfx_tun_get_user+0x10/0x10 [ 180.427814][ T7883] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 180.427834][ T7883] ? find_held_lock+0x2b/0x80 [ 180.427843][ T7883] ? tun_get+0x191/0x370 [ 180.427853][ T7883] ? tun_get+0x191/0x370 [ 180.427867][ T7883] tun_chr_write_iter+0xdc/0x200 [ 180.427880][ T7883] vfs_write+0x6af/0x1050 [ 180.427895][ T7883] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 180.427914][ T7883] ? __pfx_vfs_write+0x10/0x10 [ 180.427927][ T7883] ? find_held_lock+0x2b/0x80 [ 180.427944][ T7883] ksys_write+0x12a/0x250 [ 180.427962][ T7883] ? __pfx_ksys_write+0x10/0x10 [ 180.427976][ T7883] ? ksys_write+0x1ac/0x250 [ 180.427991][ T7883] ? __pfx_ksys_write+0x10/0x10 [ 180.428007][ T7883] __do_fast_syscall_32+0x13a/0x8b0 [ 180.428022][ T7883] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.428035][ T7883] do_fast_syscall_32+0x32/0x70 [ 180.428049][ T7883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.428064][ T7883] RIP: 0023:0xf70cefec [ 180.428078][ T7883] Code: Unable to access opcode bytes at 0xf70cefc2. [ 180.428083][ T7883] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 180.428094][ T7883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 180.428100][ T7883] RDX: 0000000000000072 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.428106][ T7883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.428112][ T7883] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.428118][ T7883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.428131][ T7883] [ 180.504099][ T5738] usb 5-1: config 0 has no interface number 0 [ 180.506229][ T5738] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.509619][ T5738] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 180.512512][ T63] usb 8-1: USB disconnect, device number 13 [ 180.513214][ T5738] usb 5-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.514972][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.522692][ T5738] usb 5-1: Product: syz [ 180.523990][ T5738] usb 5-1: Manufacturer: syz [ 180.525983][ T5738] usb 5-1: SerialNumber: syz [ 180.536304][ T63] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 180.536486][ T5738] usb 5-1: config 0 descriptor?? [ 180.540044][ T63] usbserial_generic 8-1:1.0: device disconnected [ 180.559208][ T5738] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 180.698855][ T7887] siw: device registration error -23 [ 180.702040][ T7887] [U]  [ 180.703248][ T7887] [U] K{ [ 180.704323][ T7887] [U] t 1ŠFfˊ`GJgo/mC [ 180.706750][ T7887] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 180.712281][ T7887] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 180.716073][ T7887] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 180.727546][ T7887] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 180.734993][ T7887] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 180.738880][ T7887] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 180.742967][ T7887] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 180.772182][ T7887] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 180.775355][ T7887] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 180.779561][ T7887] [U] 22Ʃx?0;3u [ 180.780917][ T7887] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 180.788977][ T7887] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 180.792181][ T7887] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 180.795037][ T7887] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 180.796970][ T7887] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 180.801204][ T7887] [U] ec [ 180.802318][ T7887] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 180.813963][ T7887] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 180.911394][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 181.130617][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 181.149418][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 181.172368][ T7900] sctp: [Deprecated]: syz.0.521 (pid 7900) Use of int in max_burst socket option. [ 181.172368][ T7900] Use struct sctp_assoc_value instead [ 181.572027][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 181.731814][ T7902] msdos: Unknown parameter 'addr' [ 182.164623][ T29] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 182.346307][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 182.368108][ T29] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.397533][ T29] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 182.482140][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.511087][ T29] usb 8-1: Product: syz [ 182.532827][ T29] usb 8-1: Manufacturer: syz [ 182.550550][ T29] usb 8-1: SerialNumber: syz [ 183.514478][ T5846] usb 5-1: USB disconnect, device number 24 [ 183.645304][ T7930] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 183.934613][ T1038] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 183.974626][ T5846] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 184.086938][ T1038] usb 6-1: Using ep0 maxpacket: 8 [ 184.089222][ T1038] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 184.095063][ T1038] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 184.097646][ T1038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.100808][ T1038] usb 6-1: config 0 has no interface number 0 [ 184.102824][ T1038] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.106565][ T1038] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 184.109936][ T1038] usb 6-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.115709][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.118341][ T1038] usb 6-1: Product: syz [ 184.119659][ T1038] usb 6-1: Manufacturer: syz [ 184.121135][ T1038] usb 6-1: SerialNumber: syz [ 184.123740][ T1038] usb 6-1: config 0 descriptor?? [ 184.132390][ T1038] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 184.156057][ T5846] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 184.160029][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.163347][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.167101][ T5846] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 184.170413][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.176094][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.178886][ T5846] usb 5-1: Product: syz [ 184.180204][ T5846] usb 5-1: Manufacturer: syz [ 184.181873][ T5846] usb 5-1: SerialNumber: syz [ 184.188501][ T5846] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 184.192449][ T5846] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 184.196025][ T5846] usbserial_generic 5-1:1.0: generic converter detected [ 184.199666][ T5846] usb 5-1: generic converter now attached to ttyUSB0 [ 184.410441][ T5740] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 184.462151][ T29] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.487597][ T7936] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f800 [ 184.561053][ T5846] usb 5-1: USB disconnect, device number 25 [ 184.579663][ T5846] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 184.582470][ T5846] usbserial_generic 5-1:1.0: device disconnected [ 184.901878][ T7940] netlink: 208 bytes leftover after parsing attributes in process `syz.1.540'. [ 184.906395][ T7940] netlink: 208 bytes leftover after parsing attributes in process `syz.1.540'. [ 184.910385][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 184.916160][ T7940] sctp: [Deprecated]: syz.1.540 (pid 7940) Use of int in max_burst socket option. [ 184.916160][ T7940] Use struct sctp_assoc_value instead [ 184.981382][ T29] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 185.014477][ T29] usb 8-1: USB disconnect, device number 14 [ 185.063321][ T7942] FAULT_INJECTION: forcing a failure. [ 185.063321][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 185.068492][ T7942] CPU: 3 UID: 0 PID: 7942 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 185.068508][ T7942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.068514][ T7942] Call Trace: [ 185.068518][ T7942] [ 185.068523][ T7942] dump_stack_lvl+0x100/0x190 [ 185.068543][ T7942] should_fail_ex.cold+0x5/0xa [ 185.068570][ T7942] should_failslab+0xc2/0x120 [ 185.068583][ T7942] __kmalloc_noprof+0xfc/0x820 [ 185.068599][ T7942] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.068615][ T7942] ? hash_ip4_add+0x17e7/0x25e0 [ 185.068631][ T7942] hash_ip4_add+0x17e7/0x25e0 [ 185.068651][ T7942] ? __pfx_hash_ip4_add+0x10/0x10 [ 185.068663][ T7942] ? __lock_acquire+0x4c5/0x1ec0 [ 185.068680][ T7942] hash_ip4_uadt+0x586/0x910 [ 185.068691][ T7942] ? __pfx_hash_ip4_add+0x10/0x10 [ 185.068705][ T7942] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 185.068720][ T7942] ? find_held_lock+0x2b/0x80 [ 185.068729][ T7942] ? is_bpf_text_address+0x8a/0x1a0 [ 185.068741][ T7942] ? is_bpf_text_address+0x8a/0x1a0 [ 185.068755][ T7942] call_ad.isra.0+0x171/0x950 [ 185.068772][ T7942] ? __pfx_call_ad.isra.0+0x10/0x10 [ 185.068785][ T7942] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.068802][ T7942] ? __nla_parse+0x40/0x60 [ 185.068813][ T7942] ip_set_ad.isra.0+0x3f1/0x8b0 [ 185.068830][ T7942] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 185.068845][ T7942] ? trace_contention_end+0x126/0x160 [ 185.068870][ T7942] ? find_held_lock+0x2b/0x80 [ 185.068882][ T7942] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 185.068900][ T7942] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.068913][ T7942] ? skb_release_data+0x6ca/0x8e0 [ 185.068933][ T7942] ? kfree_skbmem+0x19f/0x210 [ 185.068961][ T7942] ? __pfx___dev_queue_xmit+0x10/0x10 [ 185.068979][ T7942] netlink_rcv_skb+0x159/0x420 [ 185.068990][ T7942] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.069004][ T7942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.069020][ T7942] ? ns_capable+0xd2/0xf0 [ 185.069035][ T7942] nfnetlink_rcv+0x1b3/0x440 [ 185.069048][ T7942] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 185.069061][ T7942] ? netlink_deliver_tap+0x1ae/0xcc0 [ 185.069080][ T7942] netlink_unicast+0x585/0x850 [ 185.069092][ T7942] ? __pfx_netlink_unicast+0x10/0x10 [ 185.069106][ T7942] netlink_sendmsg+0x8b0/0xda0 [ 185.069118][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.069130][ T7942] ? apparmor_socket_sendmsg+0x15b/0x270 [ 185.069148][ T7942] ____sys_sendmsg+0xa4d/0xbe0 [ 185.069163][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.069174][ T7942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.069195][ T7942] ___sys_sendmsg+0x190/0x1e0 [ 185.069212][ T7942] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.069235][ T7942] ? find_held_lock+0x2b/0x80 [ 185.069252][ T7942] __sys_sendmsg+0x160/0x210 [ 185.069265][ T7942] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.069281][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 185.069298][ T7942] __do_fast_syscall_32+0x13a/0x8b0 [ 185.069330][ T7942] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.069345][ T7942] do_fast_syscall_32+0x32/0x70 [ 185.069359][ T7942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.069372][ T7942] RIP: 0023:0xf7fe4fec [ 185.069385][ T7942] Code: Unable to access opcode bytes at 0xf7fe4fc2. [ 185.069390][ T7942] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 185.069400][ T7942] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 185.069407][ T7942] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.069413][ T7942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.069419][ T7942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.069425][ T7942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.069438][ T7942] [ 185.080538][ T7683] udevd[7683]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.369168][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 185.434583][ T5843] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 185.506973][ T7949] msdos: Unknown parameter 'addr' [ 185.584580][ T5843] usb 7-1: Using ep0 maxpacket: 16 [ 185.586853][ T5843] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 185.590360][ T5843] usb 7-1: config 0 has no interfaces? [ 185.594111][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 185.597393][ T5843] usb 7-1: Product: syz [ 185.598779][ T5843] usb 7-1: Manufacturer: syz [ 185.600439][ T5843] usb 7-1: SerialNumber: syz [ 185.610522][ T5843] usb 7-1: config 0 descriptor?? [ 185.825540][ T9] usb 7-1: USB disconnect, device number 20 [ 186.190288][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 186.204003][ T7958] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 186.213514][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 186.242029][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.547'. [ 186.374026][ T7964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.380087][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 186.390984][ T7970] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 186.527039][ T7970] bridge3: entered promiscuous mode [ 186.537133][ T7970] bond4: (slave bridge3): making interface the new active one [ 186.545373][ T7970] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 186.592473][ T7977] usbip-vudc usbip-vudc.0: gadget not bound [ 186.716325][ T5846] usb 6-1: USB disconnect, device number 18 [ 187.164675][ T1038] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 187.190189][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 187.333820][ T1038] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 187.352399][ T1038] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.367580][ T8001] binder: BINDER_SET_CONTEXT_MGR already set [ 187.367627][ T1038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.370661][ T8001] binder: 8000:8001 ioctl 4018620d 80004a80 returned -16 [ 187.385537][ T1038] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 187.399565][ T1038] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.416242][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.421510][ T1038] usb 7-1: Product: syz [ 187.422831][ T1038] usb 7-1: Manufacturer: syz [ 187.430140][ T1038] usb 7-1: SerialNumber: syz [ 187.440793][ T1038] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 187.452337][ T1038] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 187.460359][ T1038] usbserial_generic 7-1:1.0: generic converter detected [ 187.471227][ T1038] usb 7-1: generic converter now attached to ttyUSB0 [ 187.650701][ T8006] msdos: Unknown parameter 'addr' [ 187.659000][ T5740] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 187.820978][ T9] usb 7-1: USB disconnect, device number 21 [ 187.829597][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 187.834831][ T9] usbserial_generic 7-1:1.0: device disconnected [ 188.064871][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 188.123627][ T8012] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 188.178396][ T8019] msdos: Unknown parameter 'addr' [ 189.405070][ T1038] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 189.555571][ T1038] usb 8-1: Using ep0 maxpacket: 8 [ 189.562075][ T1038] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.571291][ T1038] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.575397][ T1038] usb 8-1: config 0 has no interface number 0 [ 189.578546][ T1038] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.590346][ T1038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.818451][ T1038] usb 8-1: config 0 descriptor?? [ 189.915272][ T1038] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.055536][ T1038] usb 8-1: USB disconnect, device number 15 [ 190.620573][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 190.644626][ T5843] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 190.733205][ T8058] msdos: Unknown parameter 'addr' [ 190.815467][ T5843] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 190.823392][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.834552][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.837667][ T5843] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 190.840654][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.857108][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.859623][ T5843] usb 6-1: Product: syz [ 190.860864][ T5843] usb 6-1: Manufacturer: syz [ 190.862303][ T5843] usb 6-1: SerialNumber: syz [ 190.876633][ T5843] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 190.880325][ T5843] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 190.887583][ T5843] usbserial_generic 6-1:1.0: generic converter detected [ 190.901095][ T5843] usb 6-1: generic converter now attached to ttyUSB0 [ 191.104389][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 191.260652][ T5843] usb 6-1: USB disconnect, device number 19 [ 191.272049][ T5843] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 191.278996][ T5843] usbserial_generic 6-1:1.0: device disconnected [ 191.663103][ T8066] usbip-vudc usbip-vudc.0: gadget not bound [ 193.114861][ T63] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 193.264948][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 193.775777][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.846379][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.848859][ T63] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.853007][ T63] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 193.855701][ T63] usb 5-1: can't read configurations, error -71 [ 194.698823][ T42] audit: type=1800 audit(1787601442.785:113): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.579" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 194.874891][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 194.991586][ T8100] msdos: Unknown parameter 'addr' [ 195.191508][ T27] ================================================================== [ 195.194003][ T27] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.196722][ T27] Read of size 8 at addr ffff8880452ce9a8 by task migration/1/27 [ 195.199786][ T27] [ 195.201125][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 195.201139][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.201145][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 195.201173][ T27] Call Trace: [ 195.201178][ T27] [ 195.201182][ T27] dump_stack_lvl+0x100/0x190 [ 195.201197][ T27] print_report+0x13d/0x4b0 [ 195.201212][ T27] ? __virt_addr_valid+0x239/0x430 [ 195.201226][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.201242][ T27] kasan_report+0xdf/0x1c0 [ 195.201259][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.201293][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.201310][ T27] ? native_cpu_disable+0x54/0x80 [ 195.201325][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 195.201340][ T27] fixup_irqs+0x2b/0x280 [ 195.201354][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 195.201367][ T27] native_cpu_disable+0x59/0x80 [ 195.201381][ T27] take_cpu_down+0xb6/0x190 [ 195.201394][ T27] multi_cpu_stop+0x16a/0x4b0 [ 195.201409][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 195.201423][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 195.201438][ T27] cpu_stopper_thread+0x21e/0x450 [ 195.201453][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 195.201468][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 195.201484][ T27] ? kthread+0x13a/0x450 [ 195.201493][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 195.201509][ T27] kthread+0x373/0x450 [ 195.201517][ T27] ? __pfx_kthread+0x10/0x10 [ 195.201527][ T27] ret_from_fork+0x730/0xd60 [ 195.201541][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 195.201556][ T27] ? __switch_to+0x800/0x10f0 [ 195.201567][ T27] ? __pfx_kthread+0x10/0x10 [ 195.201576][ T27] ret_from_fork_asm+0x1a/0x30 [ 195.201588][ T27] [ 195.201592][ T27] [ 195.256748][ T27] Allocated by task 124: [ 195.258101][ T27] kasan_save_stack+0x30/0x50 [ 195.259582][ T27] kasan_save_track+0x14/0x30 [ 195.261068][ T27] __kasan_kmalloc+0xaa/0xb0 [ 195.262550][ T27] __kmalloc_noprof+0x324/0x820 [ 195.264068][ T27] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 195.265912][ T27] ieee80211_inform_bss+0x159/0x1170 [ 195.267548][ T27] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 195.269503][ T27] cfg80211_inform_bss_data+0x230/0x3c20 [ 195.271260][ T27] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 195.273145][ T27] ieee80211_bss_info_update+0x310/0xab0 [ 195.274895][ T27] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 195.276757][ T27] ieee80211_iface_work+0xa9a/0x1070 [ 195.278405][ T27] cfg80211_wiphy_work+0x2b7/0x550 [ 195.280029][ T27] process_one_work+0xac7/0x1b10 [ 195.281595][ T27] worker_thread+0x5ef/0xe50 [ 195.283015][ T27] kthread+0x373/0x450 [ 195.284273][ T27] ret_from_fork+0x730/0xd60 [ 195.285716][ T27] ret_from_fork_asm+0x1a/0x30 [ 195.287194][ T27] [ 195.287951][ T27] Freed by task 124: [ 195.289163][ T27] kasan_save_stack+0x30/0x50 [ 195.290660][ T27] kasan_save_track+0x14/0x30 [ 195.292138][ T27] kasan_save_free_info+0x3b/0x70 [ 195.293695][ T27] __kasan_slab_free+0x5f/0x80 [ 195.295194][ T27] kfree+0x22b/0x6c0 [ 195.296425][ T27] ieee80211_inform_bss+0x8f5/0x1170 [ 195.298132][ T27] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 195.300140][ T27] cfg80211_inform_bss_data+0x230/0x3c20 [ 195.301912][ T27] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 195.303779][ T27] ieee80211_bss_info_update+0x310/0xab0 [ 195.305518][ T27] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 195.307393][ T27] ieee80211_iface_work+0xa9a/0x1070 [ 195.309038][ T27] cfg80211_wiphy_work+0x2b7/0x550 [ 195.310678][ T27] process_one_work+0xac7/0x1b10 [ 195.312225][ T27] worker_thread+0x5ef/0xe50 [ 195.313709][ T27] kthread+0x373/0x450 [ 195.314986][ T27] ret_from_fork+0x730/0xd60 [ 195.316447][ T27] ret_from_fork_asm+0x1a/0x30 [ 195.317963][ T27] [ 195.318751][ T27] The buggy address belongs to the object at ffff8880452ce800 [ 195.318751][ T27] which belongs to the cache kmalloc-1k of size 1024 [ 195.323177][ T27] The buggy address is located 424 bytes inside of [ 195.323177][ T27] freed 1024-byte region [ffff8880452ce800, ffff8880452cec00) [ 195.327549][ T27] [ 195.328319][ T27] The buggy address belongs to the physical page: [ 195.330342][ T27] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880452c9800 pfn:0x452c8 [ 195.333417][ T27] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 195.336124][ T27] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 195.338776][ T27] page_type: f5(slab) [ 195.340076][ T27] raw: 04fff00000000240 ffff88801c042dc0 ffffea0001a59010 ffffea0001a4dc10 [ 195.342961][ T27] raw: ffff8880452c9800 000000080010000e 00000000f5000000 0000000000000000 [ 195.345964][ T27] head: 04fff00000000240 ffff88801c042dc0 ffffea0001a59010 ffffea0001a4dc10 [ 195.348686][ T27] head: ffff8880452c9800 000000080010000e 00000000f5000000 0000000000000000 [ 195.351389][ T27] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 195.354050][ T27] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 195.356709][ T27] page dumped because: kasan: bad access detected [ 195.358713][ T27] page_owner tracks the page as allocated [ 195.360490][ T27] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 60, tgid 60 (kworker/u33:3), ts 50706110143 [ 195.366150][ T27] post_alloc_hook+0xfd/0x120 [ 195.367636][ T27] get_page_from_freelist+0x110d/0x35b0 [ 195.369748][ T27] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 195.372290][ T27] new_slab+0xa5/0x640 [ 195.374026][ T27] refill_objects+0xe3/0x410 [ 195.375827][ T27] __pcs_replace_empty_main+0x372/0x680 [ 195.378007][ T27] __kmalloc_noprof+0x66b/0x820 [ 195.380014][ T27] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 195.382588][ T27] ieee80211_inform_bss+0x159/0x1170 [ 195.384792][ T27] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 195.387242][ T27] cfg80211_inform_bss_data+0x230/0x3c20 [ 195.389466][ T27] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 195.391890][ T27] ieee80211_bss_info_update+0x310/0xab0 [ 195.394246][ T27] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 195.396832][ T27] ieee80211_iface_work+0xa9a/0x1070 [ 195.399529][ T27] cfg80211_wiphy_work+0x2b7/0x550 [ 195.401634][ T27] page last free pid 5870 tgid 5870 ts 49087045837 stack trace: [ 195.404666][ T27] __free_frozen_pages+0x79f/0x10f0 [ 195.406772][ T27] qlist_free_all+0x47/0xf0 [ 195.408850][ T27] kasan_quarantine_reduce+0x1a0/0x1f0 [ 195.411535][ T27] __kasan_slab_alloc+0x69/0x90 [ 195.413680][ T27] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 195.415972][ T27] do_getname+0x35/0x390 [ 195.417650][ T27] vfs_fstatat+0xd0/0xe0 [ 195.419300][ T27] __do_sys_newfstatat+0x9d/0x120 [ 195.421296][ T27] do_syscall_64+0x121/0x770 [ 195.423112][ T27] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.425393][ T27] [ 195.426334][ T27] Memory state around the buggy address: [ 195.428480][ T27] ffff8880452ce880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.431550][ T27] ffff8880452ce900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.434639][ T27] >ffff8880452ce980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.437724][ T27] ^ [ 195.439841][ T27] ffff8880452cea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.442936][ T27] ffff8880452cea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.446004][ T27] ================================================================== [ 195.449066][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.451861][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 195.455370][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.458942][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 195.462337][ T27] Call Trace: [ 195.463663][ T27] [ 195.464833][ T27] dump_stack_lvl+0x100/0x190 [ 195.466699][ T27] vpanic+0x553/0x970 [ 195.468258][ T27] ? __pfx_vpanic+0x10/0x10 [ 195.470057][ T27] ? __pfx_vprintk_emit+0x10/0x10 [ 195.472019][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.474376][ T27] panic+0xd1/0xe0 [ 195.475847][ T27] ? __pfx_panic+0x10/0x10 [ 195.477629][ T27] check_panic_on_warn.cold+0x19/0x34 [ 195.479495][ T27] end_report.part.0+0x3a/0x90 [ 195.481367][ T27] kasan_report.cold+0xe/0x18 [ 195.483209][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.485535][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 195.487772][ T27] ? native_cpu_disable+0x54/0x80 [ 195.489751][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 195.491742][ T27] fixup_irqs+0x2b/0x280 [ 195.493404][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 195.495383][ T27] native_cpu_disable+0x59/0x80 [ 195.497312][ T27] take_cpu_down+0xb6/0x190 [ 195.499083][ T27] multi_cpu_stop+0x16a/0x4b0 [ 195.500944][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 195.503085][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 195.505112][ T27] cpu_stopper_thread+0x21e/0x450 [ 195.507084][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 195.509212][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 195.511157][ T27] ? kthread+0x13a/0x450 [ 195.512800][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 195.514936][ T27] kthread+0x373/0x450 [ 195.516512][ T27] ? __pfx_kthread+0x10/0x10 [ 195.518352][ T27] ret_from_fork+0x730/0xd60 [ 195.520092][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 195.521822][ T27] ? __switch_to+0x800/0x10f0 [ 195.523379][ T27] ? __pfx_kthread+0x10/0x10 [ 195.525149][ T27] ret_from_fork_asm+0x1a/0x30 [ 195.527127][ T27] [ 196.596650][ T27] Shutting down cpus with NMI [ 196.599076][ T27] Kernel Offset: disabled [ 196.600756][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:57:23 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b23d0c0 RCX=0000000000000001 RDX=ffff88802b23d224 RSI=ffffffff8c61bb00 RDI=ffff88802b23d224 RBP=0000000000000000 RSP=ffffc9000045fd18 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000006cc R11=0000000000000000 R12=ffffc90004117870 R13=fffff52000822f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81ef951c RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096982000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5473edc CR3=0000000068fb7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ab1905 RDI=ffffffff9bc35140 RBP=ffffffff9bc35100 RSP=ffffc90000557658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b9341ee R15=ffffffff85ab18a0 RIP=ffffffff85ab192f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cb32580 RSI=ffffffff8206c945 RDI=ffff88801cb32580 RBP=ffffc90004117894 RSP=ffffc900004ffd28 R8 =0000000000000004 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=ffffc90004117870 R13=fffff52000822f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820a827b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50ac3fa CR3=000000006b962000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801cf00000 RSI=0000000000000003 RDI=0000000000000001 RBP=ffffc90004117894 RSP=ffffc900005afd28 R8 =0000000000000004 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=ffffc90004117870 R13=fffff52000822f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820a7c80 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080005000 CR3=0000000068fb7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd 0000000500001500 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a3b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000