last executing test programs: 7.918377166s ago: executing program 1 (id=597): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 7.271056754s ago: executing program 3 (id=602): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6.840042925s ago: executing program 1 (id=604): move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x800, 0x4) socket$kcm(0x29, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r2}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 6.709476004s ago: executing program 1 (id=605): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 6.568736124s ago: executing program 1 (id=606): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x28, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 6.038221729s ago: executing program 1 (id=610): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 4.739956842s ago: executing program 3 (id=617): r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0xb8a00, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x4f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000ea00034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20040000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) 4.310056334s ago: executing program 1 (id=621): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x6103) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/138, 0x8a}], 0x1) syz_usb_control_io$uac2(r1, &(0x7f0000000380)={0xc, &(0x7f0000000280)={0x0, 0x9, 0xa4, {0xa4, 0x23, "6a76262fe40153fde090765297fc05292e06b12c76e7576909f03936d8a241851df8795065f8cf47d90ecc3c3b646629077ae19b86f8594857a0d3f49ab8fa9b34b63452debe5f6666bc217f762fc9a073b0f3b5c3c7b94329fb39e0a36479003e8c32f93e104f68256fd7bae634868b008cc1800b6e833e665cb579333b3d8123c9bf5cc2e25d1c86961df1aecaa2e08cf16e1bd44dc158f64099ca369d44a8ffa9"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000640)={0x24, &(0x7f00000003c0)={0x20, 0x8, 0x4d, "c39e1cc7cd5b5199a87cf0f21a6802e79c1817965beceaa415154854480188b4aaf81e57237b97dfc34e389d2a820323d4dcdf25776fda61a480f4183c332f601afdb1e8fd01d812ead0bf770c"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x81, 0x1, "8a"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "f44d"}, &(0x7f0000000580)={0x20, 0x83, 0x1, '1'}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "9fb083"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "0aae4b"}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000001640)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0xd) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x2000080, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r7) ioctl$NBD_SET_SOCK(r0, 0xab00, r7) 3.009350045s ago: executing program 2 (id=624): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (fail_nth: 2) 2.909890439s ago: executing program 2 (id=625): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x80000001, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 2.463659215s ago: executing program 3 (id=626): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x70) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x70) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x10001, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c000100000080000000002507000000", @ANYRESHEX=r0, @ANYBLOB="0a000d0010000000aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0403001904"], 0x7) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fanotify_init(0x4000, 0x0) (async) fanotify_init(0x4000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) read$FUSE(0xffffffffffffffff, 0x0, 0x0) readv(r4, 0x0, 0x0) (async) readv(r4, 0x0, 0x0) r5 = landlock_create_ruleset(0x0, 0x3, 0x0) landlock_restrict_self(r5, 0x8) 2.424289206s ago: executing program 2 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="e5f4", 0x2) 2.339850731s ago: executing program 2 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="e5f4", 0x2) (fail_nth: 2) 2.129254134s ago: executing program 2 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000280)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x39d026ae32760d2f, 0x61) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="003c8300000000001800128008000100707070"], 0x40}}, 0x84) r2 = openat(r0, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) stat(&(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)) write(r2, &(0x7f0000000000)="e5f4", 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x4e22, @loopback}}) 2.049832895s ago: executing program 2 (id=630): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005340)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000004c40)=[{&(0x7f0000000240)="bd17d997f6f4eb00556620c23c4927e73479da479fbdb8908ea779fe86543eaaa4eae466a0a87415ff3e5ba390bfc9088a179888b81b59ea7eb73d25cbda88205f6a23b74a38ef2b1673b8aea0b2e45b4c8db7fb74ba072eb72071125b60951e666efff55a6664c84914eaa72a01fd44195108bb90ad27ae1d3e03c9099ae875d1d8bd0a2a6e5b5ded8e7a6bf64f7acaf07a86ce15a4460987544281e82ec403975e47dfc9cf9d0d79411ca50f9d2bb0b6", 0xb1}, {&(0x7f0000004680)="eb9949c83c8b65fd9a9f519247d929c0962fd22307411985a16c788ea0105daf7db6860d190e1b9b796b11940a0dff586c2c5888b64e2300efbd6e4283c1a2fccaaf68eab189b9c10494f97f7396d7b8ed8aa85b1b590e44bc889d83a6e59867c381e72c478ab8dcefb45c7d7b77df5d492fcb39549cc8a90fff51a5ffafb00436141d52f471fc5905db55694a5a650b742fe73071d0380aade7561206202a0950247018851b", 0xa6}, {&(0x7f0000004740)="93b243dbcdb1b1dcc469b6b0f7091491c70231ee2e89d300508b4e8c6c8fa2c99153ce93ffd1fe72af11b74f388f7cc0e49620df8054cdc7106e32ddb9808a266efb1f92362301d475b547af43bb693fc7cded48c2e849906d87a8169ca0503f9438ff5b26301ba04e7179e0d66a6527954e4b605a09c9fe9e4c19a9285ef6ce191001bc0259975a56e2d68d0d9ccceeb46735d89d88d959ad3b4dccbba8459c347d132480ce7bbd1959d86142a574620ba64a401bbfd9627f7c6eb786b595df478e0cfd91bc01be21c5070131a4699c7ea0238fcd2c4be89bf3255a7dd935f576bd3de4a0e766", 0xe7}, {&(0x7f0000004840)="ce4ede7b2230485a72e6693e4c2b125cca43f9292eafee99132ae0b821fd3b24c57ea5ded69c0f7be6bcb514506e9454f75e2af68f69d071a71bd295297b74658b8de80f1f62929adde52b88891acc99906f8c5d5b574805f58b02389f06b73c84a5", 0x62}, {&(0x7f0000004940)="c7e534ba7527b91506e19663c7404013b39eee246adc560935a284b0d10c570158d62f1d5a4139b7452ede161ccd1dd4ae12aa308e2699774023aa747d7ec9f263b840ff869cb11501a2745708a080b729c8ce08bd212bd6d46e7823523ee5b74d723ff8c3477ca3e5686c4f3782cd8bf88cf65d9b135d8039cea89326d4068fba767056cbd7cb3e98c75afc894114fbb7fce5374b37fcb801fc0b60a8970b42ad5b0b16b60c88c376cfc19f40e84fb4ee4fa5145ffa0e5c249254657135e8decc06d463e41bb8933a43c23d4ca30e5da40a6c5222635570da7f4cc748605f589630ea", 0xe3}, {&(0x7f0000004a40)="2c44a58bd9f328afb9c4416976389e43a4e4f1e90fade639cf4cc89f01c17c680dbf309ed0522f39a04d1cc7415aea90c8088680c26ccd2c67d562ffff482d33daf5564e4cac0ec8db701259923176f19b909a1cbcecb2e9bcd23be3ea48b9687f46b38ef0661cc31afe6f77ddc1cd0259ca6fd904b7fd7c028c5d7408e9c89784aa534225fed9e71d2d46596fd1b5c5069d68ed699ef4a01f4b2c1b1cc389e7fcf9735f28266d5bc97d4cf75a103d3270830166163878ab725c5629e24e7597630f14cb400489d746fadcc085ebced70ac4e83c4e667e16845f2fd50b5b28af69a3b01bf07f5c019fb94f", 0xeb}, {&(0x7f0000004b40)="f80e972df8c6d0aa4c6c06a1f782f098daac7d210a6aefd925a3b7a85d8bbcedd818f2e3802a316f5b49ecc58e8917bf6936fe80885f513003fd03a432fdfb4979bf1702f5015bd297fb8bdd266e19a53dac598f051639a60c422c77e182231cad616b33f190f7703f640e255513d5d502e52d3def03468c7b36e46e8a3a770ac60b107501691dd9c7d5a7e2e3a33153e9871760ac053ccbf73d90b62b4c9872c51ea0ba4dd7f3", 0xa7}, {&(0x7f0000004c00)="e976037576ca13ef7d4bcc4703866c1274cd5ed74cabe9225f3d1d1ed3a5a4364d2d368df7e1adef47722676be1ed8f9", 0x30}], 0x8, &(0x7f0000004d80)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffffa}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0xb, "931c340f51de81076c"}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x7a, 0x1, 0x9, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xa2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x7}, {@local, 0x1000}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x4}}], 0xd8}}, {{&(0x7f0000004f00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000005100)=[{&(0x7f0000004f40)="cf9908e9bd8f6b80a30299801d721ddfdd5189d00620ef474e960b8b3c055ebdbde8802b2fd233e6794a5e19546eb62bc2258a556f4a0426c5a401a94888dd0a2db0208ec626231b433e035c20c505a52b42cdae58eefc5f4b1916628c137c464fb2d82b9be887b4279efe2b0325bf15f94d65b9fbb4fabc273bf03bdf690cbeb6d9a68bb5ab1727537d772fb42ac9efb6aa09d575b38a", 0x97}, {&(0x7f00000050c0)="a9a0d419d8ae9a976d9a96f963", 0xd}], 0x2, &(0x7f0000005140)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x98, [@private=0xa010101, @multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2]}, @noop, @end, @lsrr={0x83, 0x7, 0xad, [@empty]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}], 0x88}}, {{&(0x7f0000005200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000052c0)=[{&(0x7f0000005240)="549edc704eed7b3be52c6c14fb734d06d33c69969b350b231962eed7b45d90626f690562938b67e7d3ea76", 0x2b}, {&(0x7f0000005280)}], 0x2, &(0x7f0000005300)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0x28}}], 0x3, 0x2404c00c) sendmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000380)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="390bb7d6ca44cfbc72f45b92be1ccf27a4328aea6b8d559654ae5edb1d8e325e3d6ca3b2d3d7bf417252f36a8402874cf84bac286fe04691e78ce76eac68fb981d87f44ebd194426f25815d3706a4139e5a0886b3e6db80e9ed7958c8347aab53d5d1e7349581639286dac310ae35206d68a697420e1014900029ac05e6c57cf9d287752dbd01ebea1777f88284656a066980d65d01e2a7c84355680093fce6e2db315f9700a35e50b3f27119ed2e6ce49df72909d25034f5b3f236e1464344f140476be81cbc54b8866aa3f2a", 0xcd}, {&(0x7f0000000500)="5625df40de5324d5902f1de2cc4d0f7724e3e5eb617cad338b96493668fed774611da3a18d4989e24488d0f70a79312c482c7b16b0a913192802e47e1fb26006849581eaeeb20a31287199270bf5cc10b75e06f5f834461112f9c0d9f9158bd06f7d80ccaa4077c66ebc3c5dec279008da6a6b0809683ee75132264d7f2890362560cfb77b", 0x85}, {&(0x7f00000005c0)="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", 0xfd}], 0x3, &(0x7f0000000700)=[{0xa8, 0x0, 0x6, "fc4a82c3f1fde9d3536d26031c59d46ae65a83ec191bbbb34d39ae46a61e92695fcf91def44b6e88f719e26e97eac2eacf90a86a469ffa355a669be9bf3504904d41a08338fd9d1bf0046d0699bb323b0dec270d1843496b506bf2154cfdfe99dda99ec5c1b504347e7166ad9850d76bbcdd9377a636aa856050a06366b05d0f15e9bf0fc5816570a4d1d5516834bdfbf0e50c3dfb13fe86688a"}, {0xd4, 0x118, 0x5800, "d7a2e50b3580ac6a799489cd5158db46804109e752430bbe458fbad816a1db096af596ec935fa48565074501f9aa28a32dcb4d910b8c709e9949dd5f6170da5f403a453396bf5d9392557c1549787d6d886dec9ba71486031dc8caa40f3b85d131db4a7a60c3c7244c067caa348b25f5c91f7dde61234ecd9e2c6c96e5d9f4b5c9d80a1ec326ea3caad796009a30a95ab08722bdd903f2cc530d77fa9c6cec795deb9cc1498fed7f569e3e42da4c333b1a4eee3cf097143728a556e3edae0250bc5aa56df4e2850e"}, {0x4c, 0x29, 0x70, "20823f974a032f2816882d89e11839e45a89a5c8a6d96f0728a4c4ca081865d4f1145f26b9fae31cbfc340780e23356f945704668fb458677d28afb0cc6d81"}, {0x50, 0x10b, 0x6285135b, "f28588d7bfb3dcbcb55fff563e56c5bd44bf315f151dcc027f76d2e36499fe21988de94d3f6f3882ac8a7596760291534f6312eecd0467b0827b9489275bbbb9e7e48e"}, {0xe4, 0x108, 0x7, "a995bdd009f00a6be1cb364624639e41ea7771f7933adc1c57859b5126daca6eb6d57b983e85fd3fe41a0202bb2d2c77a77ccf1acd014eec67be53b6de9e802ae9cad8623040c42086a841520b95c501fa91ac916ffea962508a6aa14b8b874be4dd7b273f42374ea0b0ad64558e09fe0fb02ba9ddeafd64837c241649171cca329c292800a4768af72d12cb63c34ba1e2de3b6d3efd434f6d2ab655c50c21cf4c3df6ca2845b88de6ef8f5c481c44ed18654768df5b63fdad25b8a9e5f44f949dc17ec2a13e1ad0a32714a72df101bb2244215ac7"}, {0xa8, 0x116, 0x6, "7f515fc551674d0c534d385b0dc7d3fbce8c8356d2b8095dc215ca31420efdf3a3d4df2c4690621bf8d7cb78b3de2a838c3ab0dabfc9b318ae99ad18c752b1d43cda3354d05803143b5d92cbcfe7e6385d010c5190e2b6026bc752079da9cfb430947046732a0886201e4309cd16a265a577f0468396bc65bae9a62620b32fe393a027fd437749f35f2c289488657176c3f5bb737bc270ec91"}], 0x3a4}}, {{&(0x7f0000000ac0)=@rc={0x1f, @none, 0x2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)="d677c16f19e660d9059c20d1da6c034dd7b1a4461c4ebcfad782c987351f5bed00940bc7cf234aa7912fb99688ed93edef4f57dbac33a35c5c646f57fd926c0e847986daae9ac21fd9aa", 0x4a}, {&(0x7f0000000bc0)="259b1145437568f11cc093c5f3d0826bdb54ab323cc17be6a355197b2dd655c55506c0b48a7cfce8277a482f84837cbc7b8a315632da5b4975359385cb6287bce9fcef6272372d9135f89d5ce2a2587ddc3e4086fb1232ab395fdf9a217b4a6cd67de378abb15f241e1e4af9272b057302125e4b8b93230ec0858e5e05a202e907b419755c02e68dd4", 0x89}, {&(0x7f0000000c80)="0e3a34c04f73a12847851fed4b835170cd0a121e907d53664be5c77abb632fe02d997154b100c0afd1ac012a8e986ad028522137f52894373e361525f884e003ee66f8330bacc76e5e5ae59828e382fcd2137619a41e0550501e76681bafd1f2760d34bec730ca3b90ff053f01c2ad5b6b159b01da7c6a72", 0x78}, {&(0x7f0000000d00)="f1f8b2dee90b46476b8ac9129b3d70873355e00c34a7d10cf0aad898fb9f6777d1abaf77e9c86bcc1fee9abe4d9a790b583143bf3547eacae59cd7ed2e035893052f698428238ce04a5e2817bf05994bd5bf27f9597e27c3b345f2bb3ec168a7648e45f95eeb81419bd4248937c6e30d6debf21a1985ab82d72b0c70216055c5661cbd793132e4ce49796ad0114d287b9a6cfe2faab3bf14f38a028b4fc1f49de63ffc588e4b015ee377", 0xaa}, {&(0x7f0000000dc0)="c3ddb09661a19b8ce139eb013768022b7723b39ed45d4c9a6598999462feaeb556823fe23c9ae9857adfac7ccac71181570480064b57c6159cf911b990ee12647c79b3ffcd8c2595e83280b080371c5b3ab8d26f7d594383ae883dc2472553e134770f9051d1b77b09dd21b36fd8a1c340838dd5ef4fb78efe2e062b4b97d92d0666379b1b5241a6a25ef3b9b2db89", 0x8f}], 0x5, &(0x7f0000000ec0)=[{0x6c, 0x111, 0x9, "51aa5c67b4de072ec74f422e46661605e5706d5a346d8b679652eced2901929f08f124f8003d4f4bbaa8c02734414796a194d913b4c2cc34e834219f9c0267fd625c62a3fcbc9f3a9baf434493baa1b84668cc42497abab1920a5a114d"}, {0xac, 0x1, 0x8, "d7461e97790a956e35605b0c3c412301ceb5ac9bc2b8e7acee1495b38ebe9b31732463bc513c6782a1497c740bb73c10138e5a13f8c0af9ffcef6bef580677f2cb899dc89420ae18a137e4545d4943f36e62fc6d522e598732b040e7ed083be36007e72a6cd6cfc032eadc5d9217499d081432d4a6e102102c5f3647001d261bb5b9714c8aa27548ab4a50e7294b7dcf524aec45b8b4d71cbbe97d171a0eaa"}, {0xd0, 0x29, 0x3, "dabc1d645d5fcfffe1a6384e748ed2a1cff70baacbbba1e048a28794be35f13c78a0ecc35f770efafa319188920161353160e1748dc01bfd78a769698967e703d5508b66fb8fc1cfa320d866d1740500e05d28d1db945079d88b63d93810bf82e4ed094af009592e1c407c82fb4b314259ea93d3204e90edc0cfc5206d3abfd8fa85b614e483014d319e95ee360bb1fb0b198ec13433d77c12bd05c6b8d5a22aff7bbbb14da45e31c8e22c14967f929035c974173bf9da5410fd894f8c195bbe9bb3"}, {0xc4, 0x189, 0xfb5, "4f858e7edaf471b79f059e2c670d8087e983b32fd8995cb563a3ff7c9dde6f812eea34879df306d852d2e0193380462d98937604e8e82e9d52db6cf021d09921422b9541417971bb4b2e58919030ff3085c3c5613dd351cdf32a9613294d3cd834e685bb1411bb6f86eab2ff188c18cb0f0971c439ae31b7404503be891ee64f1fcde779ea704eb75c3f67fce6cbc5798ddacab0c77308e509873f5414d6dc67b1c442e2d3d632fe4795ed837821e26e6222d53821345c28"}, {0xd0, 0x1, 0xf9, "f864d85bd73beee469866cce52d2f5c7d4f587021da6ec7ba54f5f5b36aa04b4f2ec4206b63b3cc78f01abc0423638076f544e412bf9422efe1b7aa6bef78711ad9ea5a549f0256bba33b6f778fe258a6e46e4c9be16f76ab605d615a7979c5566bdeeb9fea7966dde9a4cc2b088716738dedaf3e08db640211baab2046853a9eec545c1b59c78740453a53f02453bc2a177c171d972490e4a027c8ad3fa0b71ac8ebb7b1970fae85d1692f48c0b0341a59128d57d31a1d802c276240551aa339ff5cb"}, {0x100c, 0x10a, 0x2, "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"}], 0x1388}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)="49f2c95d92d9e5f8274793ebae94262261320584df6b95ead819b972ad7f", 0x1e}], 0x1, &(0x7f0000002300)=[{0x58, 0x29, 0x876, "d6265ee6efc99740aa124fee2d1ec2101151b04583ad164a02a5b43cbac4e616b1219a8f2357911f9764fe18ebdd6a2955508e4cdd28dc86ad2114e87273d724ee33b6a356de8f07a9a9ded1"}, {0xdc, 0x84, 0x5, "94635d72260199d4ef57fe928fa7a001c04337d16087918d02e5ecad35b1c129f340b148aec7ffb179c7e1e496e9f692ac049ca43f39ec847420a51bf68546f46d8f0a6fc631544fa48fc4211d581aa53d4a97b289875aebc1e533a19c13982f42779c51459f6c87c6029c238afcc9f2ebbd43f471eb06c230496e5d04bdc4240f757ee29142a4313cf0ccf8a193ad7d0693af61edb5ef22df54ccc1c41d14fdcb13a6706d159728eb63fc6aaa464f4ce3574d17d78d68f02e624998ed6ea3182836114d11003177b9bd43df174c8c"}, {0xe0, 0x112, 0x3, "496c1d569d177a6e9f05371138a15384a10eeef2ec8cd84c2a48022f8df450e5e93f07fe641a9ae2838f908e5cf97eee9344c7481bd6f3f2d7c51a65e1ff49e57115b530104df9e45ce627a292a81a5a5e436f603a4f6488add0fee5741675a67385a80a7c81f861e8560722b844b2bfddd86ef7ef3a9e462854d7206a72ca5524fdfa92d19ddb4d779d763471527945dafb06f2a8bd141a94e029fc94599f8f8b77640a9af5ce7609cb6a77b573b31f71571bccea50fb476e9e3b87f49ced4ed0d70c5b37743d648c7a650a3206205a752b7d"}, {0xc4, 0x0, 0x80, "7a43c847ab807517e5fdaca233d99a9f62b4d0b39c161b70dbda9ac68f44d7a5f165db8dd2e0aa1e2cb2f9243c54314089fa6bcd4f5b21f6e6048ade50cbaa4fd2fda2665df346d3989cad9a623eaea89dbb109deeed2eb1da8d95de7fbb7bbb8effe4f50cccc9ec3df57c795620a5e65f9693af445368df187bc1e43f8d6f1244b0afd1bc3d632bea35cfe4e657e7ed9a94a63c4b605a11000b9235d8384fca39cca1c7a2afbecf01a49a7ad9b93f612254b78ca1"}], 0x2d8}}, {{&(0x7f0000002600)=@sco={0x1f, @none}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002680)="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", 0xfe}, {&(0x7f0000002780)="d33709e79def2cb7bb05acec90a7e059b3a1a0e86c06175b5e25cac2030771ec46ec19798b", 0x25}, {&(0x7f00000027c0)="8a291acfc3e915fac5ac33843cdbb126e5df29fdcfdea799657a0d84c603512a29257373763fdd62a302940a704ef3a9804a15d036c1782d9b2f7b72ed3a43ea69a1936ad401edbc3c40eddec0c15c819984964520a521c3e46dcbb9b494bdc33d2d411e19e14dd186bfd2018f9456a8706655e00d3d9d6ed87a1614cd22c42528d888e65fc16a9290dc9af11427", 0x8e}, {&(0x7f0000002880)="83b36aebb756259a5460b2dcecb74c49e7602891f0289f739b9903456e52b4da09fd039fc730b3f156b9fc95051cae4d04cd", 0x32}], 0x4, &(0x7f0000002900)=[{0xe4, 0x109, 0x6, "c92b6e1bdc0d8e453d4272a1b6ac65e0a7233f152102bf62bb66e64e3b05cf45337ceaec79ffb9240963735c25d03202902d0ab11aeaf40b80ec2964dae5e2fa991d5ff30812b34fc66774d633fbaab2ca805a02b70e40c9ee1c07afb798616faf7223723974943c942b334cbd42ff48755dd906cb7b93df9e0b3ec9731adc16fd17ac38cd0fe9c181c98d8ef19f7fe7d377e9022164e69ed6d662302f904644bf7c322e8236a9535f9e8763e01e80c0934407bcb9aa4e55843fcd5a8840829a4e1bf61620fb8c5364a2b10c524f53e93defaebc9e"}, {0xc, 0x110, 0x6}, {0x4c, 0x103, 0x9, "67d9cbb884c99a6da8674017e66f21e309af6eb54dca69a2c564c6fc74b8e1c9fe4c19e35a283380bb6f6933f0a86d60994d56f4a8f7b2d4c8000aa914"}, {0x38, 0x29, 0xd, "ec3be185cb170db8c893528171cdafd1ec6ed335cf62bf24af59aeb38615effeda986a7be81ba2d9887d"}, {0x100c, 0x10e, 0x4, "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"}, {0x9c, 0x112, 0x6, "5a7d72c89b3a034c4ef59ccc694cd7a0b57a8e6bf6006fa9dfc08979921bef6b7de5af8b368768186d2c2891147bbd1b44e5dd0399a2e3c4a64d2eb0d6ed47b15eb951051e45ec06b7bfcc35f2f301d7b24f22dbc5d5635b91f9d26902d8bdd7fa6e213cf4795b9a09a387bdef76fabc6391f942f428818d2c8af341463451bc2c7812559342668302900d80c4"}, {0xdc, 0x3a, 0x8, "7474dede71bdfd614a95a042cf4d73eb76cbd6865180cd881c7b8ae5c1bfe599d937285904279938f3005f7f8023fae14fafaf813fe9a37f6ba19bcfc71bd30af525eac3227ab7226651d04fe67ff5b61e6390a01a5079f6dafb3769af7c10bce600d67fcbf110bb78aba4c745a97b055f1101a6bb6726bddf9e28452a8901b0a3b80b09235e339a849bd4ab6f8ac9f962d72f1899dfff2afbaefacd12309f3d071d4786201cdc4978a4882d614939aad82b5080f38eb1523bfc2444937bda00400ff544055a229c45c0a5e2fd0cd9c0"}], 0x12f8}}], 0x4, 0x8884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r6, &(0x7f00000003c0)={0x11, 0x12, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) 1.533799965s ago: executing program 3 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x11f}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfffd, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r12, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.390688181s ago: executing program 0 (id=632): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000400)="2177edb885e5", 0x6}], 0x2}}], 0x1, 0x4400c800) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x34, r2, 0xe05, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008000}, 0x200000c4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x400883, 0x0) write(r3, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0xc) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.261582905s ago: executing program 0 (id=633): sched_getaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0xf, 0x8402ba5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet(r2, &(0x7f0000007980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="ea", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)='G', 0x1}], 0x1}}], 0x2, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6735, 0x9, 0xb}) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.138262003s ago: executing program 0 (id=634): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x3e3e, 0x20, 0x3, 0x3b3}, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000050000009500000000abdb2572aeab22331a0000000000000000afe100000072201eb0009393f373ca08472a984280667047041cdb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.083567413s ago: executing program 0 (id=635): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x80000001, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 659.844222ms ago: executing program 0 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r2, 0x3, 0x20}, 0x47) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0xffff, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() syz_pidfd_open(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000340), 0x2000011a) splice(r9, 0x0, r8, 0x0, 0x4ff9c, 0x7) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 381.778402ms ago: executing program 3 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0xc01c6f06, &(0x7f0000000800)) 224.659883ms ago: executing program 3 (id=638): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1b) timer_settime(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000003600)) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c0000180045801400040007000000000000001f000000000000aa080001"], 0x34}}, 0x2004c000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) read$FUSE(r8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f00000023c0)={0x10, 0x0, r9}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.134'. [ 79.518799][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 79.521803][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 79.524717][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 79.527610][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 79.531897][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 79.578587][ T845] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 79.586324][ T845] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 79.646736][ T6381] kvm: emulating exchange as write [ 79.700775][ T42] usb 6-1: USB disconnect, device number 5 [ 79.703340][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.703395][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.784533][ T6384] ======================================================= [ 79.784533][ T6384] WARNING: The mand mount option has been deprecated and [ 79.784533][ T6384] and is ignored by this kernel. Remove the mand [ 79.784533][ T6384] option from the mount to silence this warning. [ 79.784533][ T6384] ======================================================= [ 79.940490][ T5747] ffs_data_put(): freeing [ 80.634969][ T6409] UDC core: g1: couldn't find an available UDC or it's busy [ 80.756098][ T6415] syz_tun: entered allmulticast mode [ 80.759539][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.825603][ T6416] syz_tun: left allmulticast mode [ 81.576995][ T41] usb 5-1: USB disconnect, device number 2 [ 81.653977][ T41] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 81.840869][ T6430] gretap1: entered promiscuous mode [ 81.849345][ T1041] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 82.144745][ T34] cfg80211: failed to load regulatory.db [ 82.183396][ T1041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 82.191913][ T1041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 82.203515][ T1041] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 82.212219][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.219407][ T1041] usb 8-1: Product: syz [ 82.221183][ T1041] usb 8-1: Manufacturer: syz [ 82.228997][ T1041] usb 8-1: SerialNumber: syz [ 82.241831][ T1041] usb 8-1: config 0 descriptor?? [ 82.250928][ T1041] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.256665][ T1041] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.273408][ T1041] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 82.768425][ T50] IPVS: starting estimator thread 0... [ 82.879134][ T6441] IPVS: using max 42 ests per chain, 100800 per kthread [ 82.880300][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.059388][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 83.063709][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 83.067314][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.072240][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.083210][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.091915][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.102866][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.111834][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.342075][ T6455] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 83.365214][ T42] usb 6-1: usb_control_msg returned -32 [ 83.369596][ T42] usbtmc 6-1:16.0: can't read capabilities [ 83.596051][ T1041] usb 8-1: USB disconnect, device number 3 [ 83.703961][ T6440] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 83.709211][ T6464] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 83.910643][ T42] usb 6-1: USB disconnect, device number 6 [ 83.939029][ T1041] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 84.099068][ T1041] usb 8-1: Using ep0 maxpacket: 8 [ 84.102562][ T1041] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.105629][ T1041] usb 8-1: config 179 has no interface number 0 [ 84.107872][ T1041] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.112295][ T1041] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.116450][ T1041] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.120172][ T1041] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.124277][ T1041] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.128721][ T1041] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.134019][ T1041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.141094][ T6457] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.060701][ T6475] syzkaller1: entered promiscuous mode [ 85.066719][ T6475] syzkaller1: entered allmulticast mode [ 85.283503][ T24] usb 8-1: USB disconnect, device number 4 [ 85.283551][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.288614][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.644237][ T6499] usbcore.quirks: string doesn't fit in 127 chars. [ 85.659677][ T6501] bond2: entered allmulticast mode [ 85.679470][ T6499] bond2: Removing last arp target with arp_interval on [ 85.683192][ T6499] bond2: entered promiscuous mode [ 85.685832][ T6499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.693513][ T6501] macvlan2: entered promiscuous mode [ 85.694030][ T6499] comedi comedi3: pcmda12: I/O base address not correctly aligned [ 85.695249][ T6501] macvlan2: entered allmulticast mode [ 85.701502][ T6501] bond2: (slave macvlan2): Opening slave failed [ 86.157552][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.073368][ T6535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.480391][ T6547] loop7: detected capacity change from 0 to 7 [ 87.536970][ T6547] Dev loop7: unable to read RDB block 7 [ 87.539276][ T6547] loop7: unable to read partition table [ 87.542689][ T6547] loop7: partition table beyond EOD, truncated [ 87.544863][ T6547] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 87.893777][ T6567] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.915837][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.606778][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.843354][ T6581] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 88.849369][ T6581] i2c i2c-0: delete_device: Can't find device in list [ 89.450477][ T6601] __nla_validate_parse: 24 callbacks suppressed [ 89.450491][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 90.271718][ T6607] 9p: Bad value for 'wfdno' [ 90.288164][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.203'. [ 90.347486][ T6611] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.362066][ T6611] fuse: Bad value for 'fd' [ 90.397829][ T6611] bridge_slave_0: default FDB implementation only supports local addresses [ 91.072838][ T6614] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 91.075206][ T6614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.078111][ T6614] vhci_hcd vhci_hcd.0: Device attached [ 91.278491][ T6627] vhci_hcd: connection closed [ 91.282433][ T12] vhci_hcd vhci_hcd.0: stop threads [ 91.298738][ T12] vhci_hcd vhci_hcd.0: release socket [ 91.306469][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 91.349049][ T50] usb 38-1: enqueue for inactive port 0 [ 91.861534][ T50] usb usb38-port1: attempt power cycle [ 92.048043][ T6649] netlink: 'syz.1.213': attribute type 18 has an invalid length. [ 92.051487][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 92.066931][ T6651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.308987][ T1041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.430074][ T50] usb usb38-port1: unable to enumerate USB device [ 92.460547][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.463995][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.467020][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 92.470949][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 92.479654][ T1041] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.482549][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.485144][ T1041] usb 5-1: Product: syz [ 92.486518][ T1041] usb 5-1: Manufacturer: syz [ 92.488057][ T1041] usb 5-1: SerialNumber: syz [ 92.491028][ T1041] usb 5-1: config 0 descriptor?? [ 92.703918][ T1041] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 92.822658][ T6666] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 93.092621][ T6683] input: syz0 as /devices/virtual/input/input20 [ 93.104952][ T1041] usb 5-1: USB disconnect, device number 3 [ 93.213928][ T6683] netlink: 'syz.2.223': attribute type 3 has an invalid length. [ 93.217492][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 93.312155][ T6688] netlink: 'syz.2.224': attribute type 3 has an invalid length. [ 93.316378][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 93.416043][ T6690] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 93.449211][ T6690] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 93.454807][ T6690] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 93.458261][ T6690] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 93.462948][ T6690] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 93.466416][ T6690] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 93.469846][ T6690] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 93.475196][ T6690] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 93.480590][ T6690] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 93.556247][ T845] kernel read not supported for file /dlm-control (pid: 845 comm: kworker/0:2) [ 93.709558][ T6697] input: syz0 as /devices/virtual/input/input21 [ 93.741148][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.793458][ T6701] input: syz0 as /devices/virtual/input/input22 [ 93.800378][ T6697] netlink: 'syz.2.227': attribute type 3 has an invalid length. [ 93.804250][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 93.867020][ T6703] netlink: 71 bytes leftover after parsing attributes in process `syz.2.230'. [ 93.916027][ T6707] blktrace: Concurrent blktraces are not allowed on sg0 [ 93.936334][ T6701] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 93.939697][ T5752] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 94.017498][ T6711] netlink: 'syz.2.234': attribute type 3 has an invalid length. [ 94.020956][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 94.259052][ T1041] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.409628][ T1041] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 94.412702][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.415296][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.418331][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.421883][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.424610][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.427663][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.430622][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.433488][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.436957][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.441748][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.447293][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.450729][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.453395][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.455993][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.459438][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.462072][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.464762][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.467885][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.470960][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.473968][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.477119][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.480431][ T1041] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.483109][ T1041] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.486247][ T1041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.490270][ T1041] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.492991][ T1041] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.495458][ T1041] usb 5-1: Product: syz [ 94.496706][ T1041] usb 5-1: Manufacturer: syz [ 94.498048][ T1041] usb 5-1: SerialNumber: syz [ 94.505347][ T1041] usb 5-1: config 0 descriptor?? [ 94.511670][ T1041] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.794903][ T6726] input: syz0 as /devices/virtual/input/input23 [ 94.896352][ T6726] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 94.901477][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 95.005677][ T6737] netlink: 71 bytes leftover after parsing attributes in process `syz.3.240'. [ 95.086624][ T65] block nbd3: Receive control failed (result -32) [ 95.088336][ T6732] block nbd3: Receive control failed (result -32) [ 95.107724][ T1041] usb 5-1: USB disconnect, device number 4 [ 95.129402][ T1041] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 95.473516][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.750708][ C0] select_fallback_rq: 12 callbacks suppressed [ 95.750741][ C0] process 6736 (syz.2.241) no longer affine to cpu1 [ 95.801604][ T6755] smpboot: CPU 1 is now offline [ 95.858984][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.864750][ T6755] smpboot: CPU 3 is now offline [ 96.000656][ T6762] FAULT_INJECTION: forcing a failure. [ 96.000656][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 96.008483][ T6762] CPU: 2 UID: 0 PID: 6762 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 96.008502][ T6762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.008508][ T6762] Call Trace: [ 96.008513][ T6762] [ 96.008517][ T6762] dump_stack_lvl+0x100/0x190 [ 96.008534][ T6762] should_fail_ex.cold+0x5/0xa [ 96.008545][ T6762] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 96.008559][ T6762] should_failslab+0xc2/0x120 [ 96.008576][ T6762] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.008591][ T6762] ? skb_clone+0x190/0x400 [ 96.008610][ T6762] skb_clone+0x190/0x400 [ 96.008626][ T6762] netlink_deliver_tap+0xaed/0xcc0 [ 96.008641][ T6762] netlink_unicast+0x62b/0x850 [ 96.008668][ T6762] ? __pfx_netlink_unicast+0x10/0x10 [ 96.008686][ T6762] netlink_sendmsg+0x8b0/0xda0 [ 96.008700][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.008714][ T6762] ? apparmor_socket_sendmsg+0x15b/0x270 [ 96.008729][ T6762] ____sys_sendmsg+0xa4d/0xbe0 [ 96.008740][ T6762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.008753][ T6762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.008770][ T6762] ___sys_sendmsg+0x190/0x1e0 [ 96.008783][ T6762] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.008801][ T6762] ? find_held_lock+0x2b/0x80 [ 96.008823][ T6762] __sys_sendmsg+0x160/0x210 [ 96.008839][ T6762] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.008858][ T6762] ? __pfx_ksys_write+0x10/0x10 [ 96.008872][ T6762] __do_fast_syscall_32+0xe7/0x970 [ 96.008900][ T6762] ? lockdep_hardirqs_on+0x78/0x100 [ 96.008915][ T6762] do_fast_syscall_32+0x32/0x70 [ 96.008930][ T6762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.008944][ T6762] RIP: 0023:0xf7f28fec [ 96.008957][ T6762] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 96.008962][ T6762] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 96.008973][ T6762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 96.008979][ T6762] RDX: 0000000020000890 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.008986][ T6762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.008992][ T6762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.008998][ T6762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.009012][ T6762] [ 96.086522][ T6763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.099026][ T24] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 96.102431][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 96.110896][ T24] usb 8-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 96.113802][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.116205][ T24] usb 8-1: Product: syz [ 96.117740][ T24] usb 8-1: Manufacturer: syz [ 96.119276][ T24] usb 8-1: SerialNumber: syz [ 96.206389][ T6769] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 96.218543][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 96.338829][ T24] usbhid 8-1:1.0: can't add hid device: -71 [ 96.343001][ T24] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 96.350413][ T24] usb 8-1: USB disconnect, device number 5 [ 97.202105][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.260618][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.958705][ T6796] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 97.980828][ T6796] team0: Port device dummy0 added [ 97.996191][ T6798] FAULT_INJECTION: forcing a failure. [ 97.996191][ T6798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.007480][ T6798] CPU: 2 UID: 0 PID: 6798 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(full) [ 98.007503][ T6798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.007512][ T6798] Call Trace: [ 98.007519][ T6798] [ 98.007526][ T6798] dump_stack_lvl+0x100/0x190 [ 98.007550][ T6798] should_fail_ex.cold+0x5/0xa [ 98.007571][ T6798] _copy_from_iter+0x1f4/0x1690 [ 98.007602][ T6798] ? __asan_memset+0x23/0x50 [ 98.007622][ T6798] ? __pfx__copy_from_iter+0x10/0x10 [ 98.007647][ T6798] ? __pfx___alloc_skb+0x10/0x10 [ 98.007679][ T6798] netlink_sendmsg+0x808/0xda0 [ 98.007703][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.007725][ T6798] ? apparmor_socket_sendmsg+0x15b/0x270 [ 98.007747][ T6798] ____sys_sendmsg+0xa4d/0xbe0 [ 98.007763][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.007783][ T6798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.007826][ T6798] ___sys_sendmsg+0x190/0x1e0 [ 98.007846][ T6798] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.007876][ T6798] ? find_held_lock+0x2b/0x80 [ 98.007920][ T6798] __sys_sendmsg+0x160/0x210 [ 98.007958][ T6798] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.007990][ T6798] ? __pfx_ksys_write+0x10/0x10 [ 98.008010][ T6798] __do_fast_syscall_32+0xe7/0x970 [ 98.008034][ T6798] ? lockdep_hardirqs_on+0x78/0x100 [ 98.008056][ T6798] do_fast_syscall_32+0x32/0x70 [ 98.008079][ T6798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.008100][ T6798] RIP: 0023:0xf701efec [ 98.008122][ T6798] Code: Unable to access opcode bytes at 0xf701efc2. [ 98.008130][ T6798] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 98.008146][ T6798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 98.008157][ T6798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.008167][ T6798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.008176][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.008186][ T6798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.008207][ T6798] [ 98.253436][ T6803] overlayfs: failed to resolve './file1': -2 [ 98.342327][ T6807] dvmrp0: entered allmulticast mode [ 98.360697][ T6807] serio: Serial port ptm0 [ 98.388706][ T6810] overlayfs: failed to resolve './file1': -2 [ 98.942155][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 99.232006][ T6842] overlayfs: failed to resolve './file1': -2 [ 99.309663][ T6847] FAULT_INJECTION: forcing a failure. [ 99.309663][ T6847] name failslab, interval 1, probability 0, space 0, times 0 [ 99.321039][ T6847] CPU: 2 UID: 0 PID: 6847 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 99.321058][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.321065][ T6847] Call Trace: [ 99.321069][ T6847] [ 99.321075][ T6847] dump_stack_lvl+0x100/0x190 [ 99.321094][ T6847] should_fail_ex.cold+0x5/0xa [ 99.321106][ T6847] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.321120][ T6847] should_failslab+0xc2/0x120 [ 99.321152][ T6847] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.321168][ T6847] ? skb_clone+0x190/0x400 [ 99.321187][ T6847] skb_clone+0x190/0x400 [ 99.321204][ T6847] netlink_deliver_tap+0xaed/0xcc0 [ 99.321220][ T6847] netlink_unicast+0x62b/0x850 [ 99.321234][ T6847] ? __pfx_netlink_unicast+0x10/0x10 [ 99.321251][ T6847] netlink_sendmsg+0x8b0/0xda0 [ 99.321266][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.321280][ T6847] ? apparmor_socket_sendmsg+0x15b/0x270 [ 99.321296][ T6847] ____sys_sendmsg+0xa4d/0xbe0 [ 99.321307][ T6847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.321321][ T6847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.321339][ T6847] ___sys_sendmsg+0x190/0x1e0 [ 99.321352][ T6847] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.321371][ T6847] ? find_held_lock+0x2b/0x80 [ 99.321396][ T6847] __sys_sendmsg+0x160/0x210 [ 99.321412][ T6847] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.321432][ T6847] ? __pfx_ksys_write+0x10/0x10 [ 99.321451][ T6847] __do_fast_syscall_32+0xe7/0x970 [ 99.321468][ T6847] ? lockdep_hardirqs_on+0x78/0x100 [ 99.321484][ T6847] do_fast_syscall_32+0x32/0x70 [ 99.321499][ T6847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.321515][ T6847] RIP: 0023:0xf705efec [ 99.321529][ T6847] Code: Unable to access opcode bytes at 0xf705efc2. [ 99.321535][ T6847] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 99.321547][ T6847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 99.321554][ T6847] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.321561][ T6847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.321567][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.321573][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.321588][ T6847] [ 99.323516][ T6846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.452749][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.500328][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.751340][ T6854] input: syz0 as /devices/virtual/input/input24 [ 99.869448][ T6854] netlink: 'syz.1.276': attribute type 3 has an invalid length. [ 100.173040][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.234013][ T845] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 100.242518][ T845] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 100.265291][ T102] wlan1: authenticated [ 100.267621][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.275342][ T102] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 100.334237][ T6864] binder: 6863:6864 ioctl c00c6211 0 returned -14 [ 100.798598][ T6881] warning: `syz.0.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.824480][ T6881] FAULT_INJECTION: forcing a failure. [ 100.824480][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.832716][ T6883] input: syz0 as /devices/virtual/input/input26 [ 100.835874][ T6881] CPU: 2 UID: 0 PID: 6881 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT(full) [ 100.835896][ T6881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.835905][ T6881] Call Trace: [ 100.835911][ T6881] [ 100.835918][ T6881] dump_stack_lvl+0x100/0x190 [ 100.835942][ T6881] should_fail_ex.cold+0x5/0xa [ 100.835961][ T6881] _copy_to_user+0x32/0xd0 [ 100.835988][ T6881] simple_read_from_buffer+0xcb/0x170 [ 100.836015][ T6881] proc_fail_nth_read+0x1af/0x230 [ 100.836037][ T6881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.836059][ T6881] ? rw_verify_area+0xce/0x6d0 [ 100.836082][ T6881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.836103][ T6881] vfs_read+0x1e4/0xb40 [ 100.836136][ T6881] ? __pfx_vfs_read+0x10/0x10 [ 100.836150][ T6881] ? find_held_lock+0x2b/0x80 [ 100.836168][ T6881] ? __fget_files+0x215/0x3d0 [ 100.836187][ T6881] ? __fget_files+0x21f/0x3d0 [ 100.836207][ T6881] ksys_read+0x12a/0x250 [ 100.836222][ T6881] ? __pfx_ksys_read+0x10/0x10 [ 100.836241][ T6881] do_int80_emulation+0x14b/0x720 [ 100.836265][ T6881] asm_int80_emulation+0x1a/0x20 [ 100.836282][ T6881] RIP: 0023:0xf71273eb [ 100.836295][ T6881] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.836310][ T6881] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 100.836325][ T6881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0 [ 100.836335][ T6881] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 100.836344][ T6881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.836352][ T6881] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.836362][ T6881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.836388][ T6881] [ 101.011826][ T6883] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 101.016564][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 101.329313][ T102] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 101.439150][ T37] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 101.549972][ T102] wlan1: association with 08:02:11:00:00:00 timed out [ 102.141341][ T6890] syz.0.289 (6890): drop_caches: 2 [ 104.044615][ T6925] FAULT_INJECTION: forcing a failure. [ 104.044615][ T6925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.072558][ T6925] CPU: 0 UID: 0 PID: 6925 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(full) [ 104.072576][ T6925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.072582][ T6925] Call Trace: [ 104.072587][ T6925] [ 104.072592][ T6925] dump_stack_lvl+0x100/0x190 [ 104.072609][ T6925] should_fail_ex.cold+0x5/0xa [ 104.072623][ T6925] _copy_from_iter+0x1f4/0x1690 [ 104.072643][ T6925] ? __asan_memset+0x23/0x50 [ 104.072656][ T6925] ? __pfx__copy_from_iter+0x10/0x10 [ 104.072673][ T6925] ? __pfx___alloc_skb+0x10/0x10 [ 104.072694][ T6925] netlink_sendmsg+0x808/0xda0 [ 104.072709][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.072723][ T6925] ? apparmor_socket_sendmsg+0x15b/0x270 [ 104.072738][ T6925] ____sys_sendmsg+0xa4d/0xbe0 [ 104.072749][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.072761][ T6925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.072778][ T6925] ___sys_sendmsg+0x190/0x1e0 [ 104.072791][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.072808][ T6925] ? find_held_lock+0x2b/0x80 [ 104.072832][ T6925] __sys_sendmsg+0x160/0x210 [ 104.072848][ T6925] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.072882][ T6925] ? __pfx_ksys_write+0x10/0x10 [ 104.072896][ T6925] __do_fast_syscall_32+0xe7/0x970 [ 104.072911][ T6925] ? lockdep_hardirqs_on+0x78/0x100 [ 104.072926][ T6925] do_fast_syscall_32+0x32/0x70 [ 104.072941][ T6925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.072956][ T6925] RIP: 0023:0xf7fc4fec [ 104.072969][ T6925] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 104.072974][ T6925] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 104.072985][ T6925] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 104.072992][ T6925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.072999][ T6925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.073005][ T6925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.073011][ T6925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.073023][ T6925] [ 104.080745][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 104.188610][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 104.310302][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 104.553825][ T6934] FAULT_INJECTION: forcing a failure. [ 104.553825][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 104.569531][ T6934] CPU: 2 UID: 0 PID: 6934 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 104.569548][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.569555][ T6934] Call Trace: [ 104.569560][ T6934] [ 104.569565][ T6934] dump_stack_lvl+0x100/0x190 [ 104.569584][ T6934] should_fail_ex.cold+0x5/0xa [ 104.569597][ T6934] should_failslab+0xc2/0x120 [ 104.569614][ T6934] __kmalloc_cache_noprof+0x91/0x6c0 [ 104.569625][ T6934] ? irqentry_exit+0x24d/0xa00 [ 104.569639][ T6934] ? lockdep_hardirqs_on+0x78/0x100 [ 104.569653][ T6934] ? simple_xattrs_lazy_alloc.part.0+0x41/0x100 [ 104.569668][ T6934] simple_xattrs_lazy_alloc.part.0+0x41/0x100 [ 104.569680][ T6934] simple_xattr_set+0x1a23/0x3ca0 [ 104.569697][ T6934] ? evm_protected_xattr_common+0xfc/0x1f0 [ 104.569713][ T6934] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 104.569730][ T6934] ? shmem_xattr_handler_set+0xe2/0x3c0 [ 104.569743][ T6934] shmem_xattr_handler_set+0xe2/0x3c0 [ 104.569760][ T6934] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 104.569774][ T6934] __vfs_setxattr+0x175/0x1e0 [ 104.569787][ T6934] ? __pfx___vfs_setxattr+0x10/0x10 [ 104.569797][ T6934] ? apparmor_capable+0x1d7/0x4d0 [ 104.569814][ T6934] __vfs_setxattr_noperm+0x127/0x660 [ 104.569837][ T6934] __vfs_setxattr_locked+0x127/0x2b0 [ 104.569856][ T6934] vfs_setxattr+0x14a/0x390 [ 104.569875][ T6934] ? __pfx_vfs_setxattr+0x10/0x10 [ 104.569890][ T6934] ? mnt_get_write_access+0x52/0x2f0 [ 104.569915][ T6934] ? mnt_get_write_access+0x52/0x2f0 [ 104.569939][ T6934] do_setxattr+0x145/0x180 [ 104.569960][ T6934] file_setxattr+0x139/0x1b0 [ 104.569977][ T6934] ? fdget+0x17a/0x210 [ 104.569993][ T6934] path_setxattrat+0x335/0x3b0 [ 104.570012][ T6934] ? __pfx_path_setxattrat+0x10/0x10 [ 104.570028][ T6934] ? rcu_read_lock_any_held+0x6a/0xa0 [ 104.570044][ T6934] ? find_held_lock+0x2b/0x80 [ 104.570069][ T6934] ? fput+0x79/0x100 [ 104.570083][ T6934] ? ksys_write+0x1ac/0x250 [ 104.570094][ T6934] __ia32_sys_fsetxattr+0xc4/0x140 [ 104.570107][ T6934] ? __do_fast_syscall_32+0x98/0x970 [ 104.570122][ T6934] ? lockdep_hardirqs_on+0x78/0x100 [ 104.570135][ T6934] __do_fast_syscall_32+0xe7/0x970 [ 104.570149][ T6934] ? lockdep_hardirqs_on+0x78/0x100 [ 104.570163][ T6934] do_fast_syscall_32+0x32/0x70 [ 104.570178][ T6934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.570194][ T6934] RIP: 0023:0xf7f28fec [ 104.570208][ T6934] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 104.570213][ T6934] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 00000000000000e4 [ 104.570224][ T6934] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 104.570231][ T6934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.570237][ T6934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.570243][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.570249][ T6934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.570262][ T6934] [ 105.133216][ T5740] ffs_data_put(): freeing [ 106.632636][ T6964] FAULT_INJECTION: forcing a failure. [ 106.632636][ T6964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.649531][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(full) [ 106.649555][ T6964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.649565][ T6964] Call Trace: [ 106.649571][ T6964] [ 106.649578][ T6964] dump_stack_lvl+0x100/0x190 [ 106.649602][ T6964] should_fail_ex.cold+0x5/0xa [ 106.649621][ T6964] _copy_from_iter+0x1f4/0x1690 [ 106.649649][ T6964] ? __asan_memset+0x23/0x50 [ 106.649670][ T6964] ? __pfx__copy_from_iter+0x10/0x10 [ 106.649691][ T6964] ? __pfx___alloc_skb+0x10/0x10 [ 106.649720][ T6964] netlink_sendmsg+0x808/0xda0 [ 106.649759][ T6964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.649783][ T6964] ? apparmor_socket_sendmsg+0x15b/0x270 [ 106.649807][ T6964] ____sys_sendmsg+0xa4d/0xbe0 [ 106.649825][ T6964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.649848][ T6964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.649875][ T6964] ___sys_sendmsg+0x190/0x1e0 [ 106.649896][ T6964] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.649925][ T6964] ? find_held_lock+0x2b/0x80 [ 106.649962][ T6964] __sys_sendmsg+0x160/0x210 [ 106.649985][ T6964] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.650016][ T6964] ? __pfx_ksys_write+0x10/0x10 [ 106.650037][ T6964] __do_fast_syscall_32+0xe7/0x970 [ 106.650055][ T6964] ? lockdep_hardirqs_on+0x78/0x100 [ 106.650071][ T6964] do_fast_syscall_32+0x32/0x70 [ 106.650086][ T6964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.650101][ T6964] RIP: 0023:0xf705efec [ 106.650115][ T6964] Code: Unable to access opcode bytes at 0xf705efc2. [ 106.650120][ T6964] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 106.650131][ T6964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 106.650138][ T6964] RDX: 0000000020004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.650144][ T6964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.650150][ T6964] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.650157][ T6964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.650170][ T6964] [ 107.600380][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.319'. [ 107.648791][ T6982] overlayfs: failed to resolve './file1': -2 [ 107.913915][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 108.111017][ T6996] bridge_slave_0: default FDB implementation only supports local addresses [ 108.221669][ T6998] netlink: 'syz.2.328': attribute type 3 has an invalid length. [ 108.225485][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 108.269151][ T5844] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 108.329369][ T845] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.419199][ T5844] usb 8-1: Using ep0 maxpacket: 8 [ 108.428808][ T5844] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.434247][ T5844] usb 8-1: config 179 has no interface number 0 [ 108.440186][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.451013][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.460872][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.474578][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 108.482103][ T845] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 108.486202][ T5844] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.493248][ T5844] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.493385][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.501443][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.506229][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.512676][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.516207][ T6992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.521086][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.525312][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.533619][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.540530][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.549033][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.557621][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.562702][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.567109][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.572033][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.577560][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.581623][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.586181][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.591380][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.595478][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.600613][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.605573][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.610326][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.615366][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.621384][ T845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.625788][ T845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.630798][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.639176][ T845] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.643410][ T845] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.647348][ T845] usb 5-1: Product: syz [ 108.649419][ T845] usb 5-1: Manufacturer: syz [ 108.651567][ T845] usb 5-1: SerialNumber: syz [ 108.660759][ T845] usb 5-1: config 0 descriptor?? [ 108.676758][ T845] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 108.963684][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.969914][ T6995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.983043][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.116636][ T7005] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 109.161772][ T7007] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 109.180847][ T43] audit: type=1326 audit(1785557593.768:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.206782][ T43] audit: type=1326 audit(1785557593.768:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.217881][ T7005] FAULT_INJECTION: forcing a failure. [ 109.217881][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 109.221995][ T43] audit: type=1326 audit(1785557593.768:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.229156][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT(full) [ 109.229172][ T7005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.229179][ T7005] Call Trace: [ 109.229183][ T7005] [ 109.229188][ T7005] dump_stack_lvl+0x100/0x190 [ 109.229204][ T7005] should_fail_ex.cold+0x5/0xa [ 109.229218][ T7005] should_failslab+0xc2/0x120 [ 109.229260][ T7005] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 109.229276][ T7005] ? __alloc_skb+0x5b7/0x710 [ 109.229291][ T7005] ? __alloc_skb+0x140/0x710 [ 109.229307][ T7005] __alloc_skb+0x140/0x710 [ 109.229320][ T7005] ? __alloc_skb+0x5b7/0x710 [ 109.229333][ T7005] ? __pfx___alloc_skb+0x10/0x10 [ 109.229348][ T7005] ? lockdep_init_map_type+0x5c/0x250 [ 109.229362][ T7005] audit_log_start+0x350/0x930 [ 109.229377][ T7005] ? __pfx_audit_log_start+0x10/0x10 [ 109.229394][ T7005] ? rcu_read_lock_any_held+0x6a/0xa0 [ 109.229410][ T7005] ? find_held_lock+0x2b/0x80 [ 109.229430][ T7005] audit_seccomp+0x60/0x190 [ 109.229444][ T7005] __seccomp_filter+0x896/0x1140 [ 109.229459][ T7005] ? __pfx___seccomp_filter+0x10/0x10 [ 109.229473][ T7005] ? xfd_validate_state+0x129/0x190 [ 109.229490][ T7005] __secure_computing+0x204/0x2c0 [ 109.229504][ T7005] __do_fast_syscall_32+0x460/0x970 [ 109.229520][ T7005] ? lockdep_hardirqs_on+0x78/0x100 [ 109.229534][ T7005] do_fast_syscall_32+0x32/0x70 [ 109.229549][ T7005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.229563][ T7005] RIP: 0023:0xf701efec [ 109.229578][ T7005] Code: Unable to access opcode bytes at 0xf701efc2. [ 109.229583][ T7005] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 109.229594][ T7005] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 000000000000ae80 [ 109.229601][ T7005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.229607][ T7005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.229613][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.229619][ T7005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.229632][ T7005] [ 109.229745][ T7005] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 109.289119][ T43] audit: type=1326 audit(1785557593.768:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.307416][ T7005] audit: out of memory in audit_log_start [ 109.323861][ T43] audit: type=1326 audit(1785557593.778:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.339822][ T43] audit: type=1326 audit(1785557593.778:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.346789][ T43] audit: type=1326 audit(1785557593.778:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.354765][ T43] audit: type=1326 audit(1785557593.778:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.1.331" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4fec code=0x7ffc0000 [ 109.375383][ T6995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.492092][ T6995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.525920][ T41] usb 8-1: USB disconnect, device number 6 [ 109.526057][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 109.531339][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 109.607483][ T7015] FAULT_INJECTION: forcing a failure. [ 109.607483][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 109.615664][ T7015] CPU: 2 UID: 0 PID: 7015 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 109.615687][ T7015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.615696][ T7015] Call Trace: [ 109.615702][ T7015] [ 109.615708][ T7015] dump_stack_lvl+0x100/0x190 [ 109.615731][ T7015] should_fail_ex.cold+0x5/0xa [ 109.615745][ T7015] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 109.615779][ T7015] should_failslab+0xc2/0x120 [ 109.615801][ T7015] kmem_cache_alloc_noprof+0x91/0x6a0 [ 109.615821][ T7015] ? skb_clone+0x190/0x400 [ 109.615845][ T7015] skb_clone+0x190/0x400 [ 109.615866][ T7015] netlink_deliver_tap+0xaed/0xcc0 [ 109.615886][ T7015] netlink_unicast+0x62b/0x850 [ 109.615904][ T7015] ? __pfx_netlink_unicast+0x10/0x10 [ 109.615925][ T7015] netlink_sendmsg+0x8b0/0xda0 [ 109.615944][ T7015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.615962][ T7015] ? apparmor_socket_sendmsg+0x15b/0x270 [ 109.615983][ T7015] ____sys_sendmsg+0xa4d/0xbe0 [ 109.615996][ T7015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.616014][ T7015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.616038][ T7015] ___sys_sendmsg+0x190/0x1e0 [ 109.616055][ T7015] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.616080][ T7015] ? find_held_lock+0x2b/0x80 [ 109.616111][ T7015] __sys_sendmsg+0x160/0x210 [ 109.616131][ T7015] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.616155][ T7015] ? __pfx_ksys_write+0x10/0x10 [ 109.616172][ T7015] __do_fast_syscall_32+0xe7/0x970 [ 109.616191][ T7015] ? lockdep_hardirqs_on+0x78/0x100 [ 109.616210][ T7015] do_fast_syscall_32+0x32/0x70 [ 109.616229][ T7015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.616247][ T7015] RIP: 0023:0xf701efec [ 109.616265][ T7015] Code: Unable to access opcode bytes at 0xf701efc2. [ 109.616272][ T7015] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 109.616285][ T7015] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 109.616294][ T7015] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.616301][ T7015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.616310][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.616317][ T7015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.616340][ T7015] [ 109.627469][ T6995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.753308][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'. [ 109.904631][ T7017] FAULT_INJECTION: forcing a failure. [ 109.904631][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.919270][ T7017] CPU: 2 UID: 0 PID: 7017 Comm: syz.2.334 Not tainted syzkaller #0 PREEMPT(full) [ 109.919296][ T7017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.919307][ T7017] Call Trace: [ 109.919313][ T7017] [ 109.919321][ T7017] dump_stack_lvl+0x100/0x190 [ 109.919347][ T7017] should_fail_ex.cold+0x5/0xa [ 109.919368][ T7017] _copy_from_iter+0x1f4/0x1690 [ 109.919399][ T7017] ? __asan_memset+0x23/0x50 [ 109.919419][ T7017] ? __pfx__copy_from_iter+0x10/0x10 [ 109.919444][ T7017] ? __pfx___alloc_skb+0x10/0x10 [ 109.919477][ T7017] netlink_sendmsg+0x808/0xda0 [ 109.919508][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.919531][ T7017] ? apparmor_socket_sendmsg+0x15b/0x270 [ 109.919555][ T7017] ____sys_sendmsg+0xa4d/0xbe0 [ 109.919571][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.919591][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.919620][ T7017] ___sys_sendmsg+0x190/0x1e0 [ 109.919641][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.919671][ T7017] ? find_held_lock+0x2b/0x80 [ 109.919709][ T7017] __sys_sendmsg+0x160/0x210 [ 109.919733][ T7017] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.919764][ T7017] ? __pfx_ksys_write+0x10/0x10 [ 109.919786][ T7017] __do_fast_syscall_32+0xe7/0x970 [ 109.919810][ T7017] ? lockdep_hardirqs_on+0x78/0x100 [ 109.919833][ T7017] do_fast_syscall_32+0x32/0x70 [ 109.919855][ T7017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.919877][ T7017] RIP: 0023:0xf701efec [ 109.919899][ T7017] Code: Unable to access opcode bytes at 0xf701efc2. [ 109.919906][ T7017] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 109.919923][ T7017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 109.919934][ T7017] RDX: 000000002000c810 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.919943][ T7017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.919953][ T7017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.919963][ T7017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.919985][ T7017] [ 109.949219][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.021978][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.025551][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.029809][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.058270][ T41] usb 5-1: USB disconnect, device number 6 [ 110.064994][ T41] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 110.461164][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.631201][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 110.642406][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.646091][ T24] usb 8-1: config 179 has no interface number 0 [ 110.655754][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.670933][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.679329][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.686576][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.695289][ T24] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.707727][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.716235][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.736578][ T7024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.222588][ T7024] syzkaller1: entered promiscuous mode [ 111.231400][ T7024] syzkaller1: entered allmulticast mode [ 111.950446][ T5893] usb 8-1: USB disconnect, device number 7 [ 111.950489][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.955924][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 113.037181][ T7047] input: syz0 as /devices/virtual/input/input27 [ 113.205700][ T7049] netlink: 'syz.3.343': attribute type 3 has an invalid length. [ 113.242156][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 113.656734][ T7055] bridge_slave_0: left allmulticast mode [ 113.680038][ T7055] bridge_slave_0: left promiscuous mode [ 113.685486][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.721890][ T7055] bridge_slave_1: left allmulticast mode [ 113.739148][ T7055] bridge_slave_1: left promiscuous mode [ 113.747517][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.800729][ T7055] bond0: (slave bond_slave_0): Releasing backup interface [ 113.827688][ T7055] bond0: (slave bond_slave_1): Releasing backup interface [ 113.867746][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.872511][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.877646][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.885086][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.887649][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.890680][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.893187][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.895556][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.897770][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.901404][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.903858][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.907009][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.910470][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.913199][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.914515][ T7055] team0: Port device team_slave_0 removed [ 113.916088][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.926429][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.933046][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.942598][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.947826][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.952663][ T7055] team0: Port device team_slave_1 removed [ 113.953974][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.961184][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.962908][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.966544][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.974483][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.980611][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.983857][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.988306][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.995204][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 113.999403][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.003615][ T7055] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.003989][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.012182][ T7060] syz.1.347 (7060): drop_caches: 2 [ 114.019490][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.030087][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.040368][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.053506][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.064528][ T7062] 9pnet_fd: Insufficient options for proto=fd [ 114.272247][ T7067] netlink: 'syz.1.350': attribute type 3 has an invalid length. [ 114.450310][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 115.559421][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 115.571085][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.103483][ T24] usb 8-1: config 179 has no interface number 0 [ 116.106809][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.117401][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 116.130592][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.134578][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 116.138829][ T24] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.138846][ T7082] FAULT_INJECTION: forcing a failure. [ 116.138846][ T7082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.144090][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.153133][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.160865][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.0.355 Not tainted syzkaller #0 PREEMPT(full) [ 116.160887][ T7082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.160898][ T7082] Call Trace: [ 116.160906][ T7082] [ 116.160914][ T7082] dump_stack_lvl+0x100/0x190 [ 116.160941][ T7082] should_fail_ex.cold+0x5/0xa [ 116.160963][ T7082] _copy_from_iter+0x1f4/0x1690 [ 116.160994][ T7082] ? __asan_memset+0x23/0x50 [ 116.161018][ T7082] ? __pfx__copy_from_iter+0x10/0x10 [ 116.161044][ T7082] ? __pfx___alloc_skb+0x10/0x10 [ 116.161080][ T7082] netlink_sendmsg+0x808/0xda0 [ 116.161104][ T7082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.161131][ T7082] ? apparmor_socket_sendmsg+0x15b/0x270 [ 116.161155][ T7082] ____sys_sendmsg+0xa4d/0xbe0 [ 116.161174][ T7082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.161196][ T7082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.161226][ T7082] ___sys_sendmsg+0x190/0x1e0 [ 116.161249][ T7082] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.161281][ T7082] ? find_held_lock+0x2b/0x80 [ 116.161318][ T7082] __sys_sendmsg+0x160/0x210 [ 116.161345][ T7082] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.161376][ T7082] ? __pfx_ksys_write+0x10/0x10 [ 116.161399][ T7082] __do_fast_syscall_32+0xe7/0x970 [ 116.161422][ T7082] ? lockdep_hardirqs_on+0x78/0x100 [ 116.161447][ T7082] do_fast_syscall_32+0x32/0x70 [ 116.161462][ T7082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.161478][ T7082] RIP: 0023:0xf7f28fec [ 116.161498][ T7082] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 116.161506][ T7082] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 116.161522][ T7082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 116.161534][ T7082] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.161544][ T7082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.161554][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.161565][ T7082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.161587][ T7082] [ 116.186421][ T7065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.518821][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.311059][ T7094] syzkaller1: entered promiscuous mode [ 117.320642][ T7094] syzkaller1: entered allmulticast mode [ 117.470696][ T5746] ffs_data_put(): freeing [ 117.603605][ T24] usb 8-1: USB disconnect, device number 8 [ 117.605772][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.605806][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 118.698779][ T7115] overlayfs: failed to resolve './file1': -2 [ 119.895894][ T7134] netlink: 'syz.3.371': attribute type 3 has an invalid length. [ 119.899907][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 120.032262][ T7136] syz.3.372 (7136): drop_caches: 2 [ 120.179902][ T7138] input: syz0 as /devices/virtual/input/input28 [ 120.185980][ T7141] overlayfs: failed to resolve './file1': -2 [ 120.415348][ T7138] netlink: 'syz.2.373': attribute type 3 has an invalid length. [ 120.418861][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 120.527093][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.626879][ T7170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.641374][ T7170] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 121.750025][ T7175] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 121.754971][ T5752] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 122.195937][ T7191] input: syz0 as /devices/virtual/input/input29 [ 122.366711][ T7191] netlink: 'syz.0.392': attribute type 3 has an invalid length. [ 122.371294][ T5752] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 123.580152][ T7232] process 'syz.1.406' launched './file0' with NULL argv: empty string added [ 123.587869][ T7232] Invalid argument reading file caps for ./file0 [ 123.595310][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 123.617816][ T7232] netlink: 80 bytes leftover after parsing attributes in process `syz.1.406'. [ 123.621722][ T7232] netlink: 80 bytes leftover after parsing attributes in process `syz.1.406'. [ 123.677945][ T7234] x_tables: duplicate underflow at hook 3 [ 123.863398][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 123.866800][ T7242] FAULT_INJECTION: forcing a failure. [ 123.866800][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 123.873217][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 123.873234][ T7242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.873242][ T7242] Call Trace: [ 123.873246][ T7242] [ 123.873251][ T7242] dump_stack_lvl+0x100/0x190 [ 123.873269][ T7242] should_fail_ex.cold+0x5/0xa [ 123.873299][ T7242] should_failslab+0xc2/0x120 [ 123.873317][ T7242] kmem_cache_alloc_noprof+0x91/0x6a0 [ 123.873331][ T7242] ? net_generic+0xea/0x2a0 [ 123.873345][ T7242] ? __nf_conntrack_alloc+0xb7/0x5e0 [ 123.873362][ T7242] __nf_conntrack_alloc+0xb7/0x5e0 [ 123.873385][ T7242] init_conntrack.isra.0+0xf51/0x1380 [ 123.873401][ T7242] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 123.873416][ T7242] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 123.873431][ T7242] ? ipv4_get_l4proto+0x232/0x3a0 [ 123.873447][ T7242] ? ipt_do_table+0xd4f/0x1b00 [ 123.873462][ T7242] ? __local_bh_enable_ip+0x9e/0x120 [ 123.873478][ T7242] nf_conntrack_in+0xe70/0x1690 [ 123.873498][ T7242] ? __pfx_nf_conntrack_in+0x10/0x10 [ 123.873512][ T7242] ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530 [ 123.873531][ T7242] ? lock_acquire+0x1b9/0x370 [ 123.873551][ T7242] nf_hook_slow+0xbf/0x220 [ 123.873565][ T7242] nf_hook.constprop.0+0x2a6/0x750 [ 123.873585][ T7242] ? __pfx_ip_rcv_finish+0x10/0x10 [ 123.873596][ T7242] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 123.873614][ T7242] ? sock_wfree+0x12e/0x7f0 [ 123.873629][ T7242] ? __pfx_ip_rcv_finish+0x10/0x10 [ 123.873639][ T7242] ? ip_rcv_core+0x93c/0xe80 [ 123.873658][ T7242] ? __pfx_ip_rcv+0x10/0x10 [ 123.873668][ T7242] ip_rcv+0x7d/0x3c0 [ 123.873678][ T7242] ? __pfx_ip_rcv+0x10/0x10 [ 123.873687][ T7242] __netif_receive_skb_one_core+0x197/0x1e0 [ 123.873701][ T7242] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 123.873715][ T7242] ? lock_acquire+0x1b9/0x370 [ 123.873735][ T7242] __netif_receive_skb+0x1f/0x120 [ 123.873749][ T7242] netif_receive_skb+0x139/0x7d0 [ 123.873762][ T7242] ? __pfx_netif_receive_skb+0x10/0x10 [ 123.873779][ T7242] tun_rx_batched.isra.0+0x3f6/0x750 [ 123.873794][ T7242] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 123.873808][ T7242] ? tun_get_user+0x1cc8/0x3c20 [ 123.873824][ T7242] tun_get_user+0x1e31/0x3c20 [ 123.873842][ T7242] ? __pfx_tun_get_user+0x10/0x10 [ 123.873855][ T7242] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 123.873871][ T7242] ? find_held_lock+0x2b/0x80 [ 123.873884][ T7242] ? tun_get+0x191/0x370 [ 123.873894][ T7242] ? tun_get+0x191/0x370 [ 123.873909][ T7242] tun_chr_write_iter+0xdc/0x200 [ 123.873923][ T7242] vfs_write+0x6ac/0x1050 [ 123.873934][ T7242] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 123.873949][ T7242] ? __pfx_vfs_write+0x10/0x10 [ 123.873958][ T7242] ? find_held_lock+0x2b/0x80 [ 123.873979][ T7242] ksys_write+0x12a/0x250 [ 123.873989][ T7242] ? __pfx_ksys_write+0x10/0x10 [ 123.874004][ T7242] do_int80_emulation+0x14b/0x720 [ 123.874022][ T7242] asm_int80_emulation+0x1a/0x20 [ 123.874034][ T7242] RIP: 0023:0xf71973eb [ 123.874044][ T7242] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 123.874068][ T7242] RSP: 002b:00000000f544d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 123.874079][ T7242] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800001c0 [ 123.874087][ T7242] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.874093][ T7242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.874100][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.874106][ T7242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.874120][ T7242] [ 125.535705][ T7258] syz.1.416 (7258): drop_caches: 2 [ 125.545651][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.629692][ T7273] input: syz0 as /devices/virtual/input/input30 [ 125.739628][ T7273] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 125.743188][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 126.428534][ T7282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.424'. [ 126.563732][ T7284] input: syz0 as /devices/virtual/input/input31 [ 126.637272][ T7286] syz.1.426 (7286): drop_caches: 2 [ 126.747437][ T7287] netlink: 'syz.3.425': attribute type 3 has an invalid length. [ 126.760311][ T5752] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 126.773846][ T7289] FAULT_INJECTION: forcing a failure. [ 126.773846][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.786665][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.1.427 Not tainted syzkaller #0 PREEMPT(full) [ 126.786682][ T7289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.786689][ T7289] Call Trace: [ 126.786693][ T7289] [ 126.786698][ T7289] dump_stack_lvl+0x100/0x190 [ 126.786716][ T7289] should_fail_ex.cold+0x5/0xa [ 126.786729][ T7289] _copy_from_iter+0x1f4/0x1690 [ 126.786749][ T7289] ? __asan_memset+0x23/0x50 [ 126.786762][ T7289] ? __pfx__copy_from_iter+0x10/0x10 [ 126.786779][ T7289] ? __pfx___alloc_skb+0x10/0x10 [ 126.786800][ T7289] netlink_sendmsg+0x808/0xda0 [ 126.786815][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.786829][ T7289] ? apparmor_socket_sendmsg+0x15b/0x270 [ 126.786844][ T7289] ____sys_sendmsg+0xa4d/0xbe0 [ 126.786855][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.786868][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.786885][ T7289] ___sys_sendmsg+0x190/0x1e0 [ 126.786897][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.786915][ T7289] ? find_held_lock+0x2b/0x80 [ 126.786939][ T7289] __sys_sendmsg+0x160/0x210 [ 126.786954][ T7289] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.786973][ T7289] ? __pfx_ksys_write+0x10/0x10 [ 126.786987][ T7289] __do_fast_syscall_32+0xe7/0x970 [ 126.787002][ T7289] ? lockdep_hardirqs_on+0x78/0x100 [ 126.787018][ T7289] do_fast_syscall_32+0x32/0x70 [ 126.787032][ T7289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.787047][ T7289] RIP: 0023:0xf7fc4fec [ 126.787061][ T7289] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 126.787066][ T7289] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 126.787100][ T7289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 126.787107][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.787113][ T7289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.787120][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.787126][ T7289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.787140][ T7289] [ 126.988544][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 127.549721][ T7308] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.582441][ T7308] CIFS: Attempting to mount //127.0.0.1/share [ 127.702946][ T7311] syzkaller0: entered promiscuous mode [ 127.706869][ T7311] syzkaller0: entered allmulticast mode [ 127.950108][ T7313] syz.2.435 (7313): drop_caches: 2 [ 127.998774][ T7315] overlayfs: failed to resolve './file1': -2 [ 128.396186][ T7308] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.403580][ T7308] CIFS: VFS: cifs_mount failed w/return code = -4 [ 128.569147][ T7329] syz.3.441 (7329): drop_caches: 2 [ 128.816792][ T7331] syz.3.442 (7331): drop_caches: 2 [ 129.447521][ T7340] syz.1.445 (7340): drop_caches: 2 [ 129.524903][ T7342] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.542184][ T7344] FAULT_INJECTION: forcing a failure. [ 129.542184][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.562523][ T7344] CPU: 0 UID: 0 PID: 7344 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 129.562545][ T7344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.562555][ T7344] Call Trace: [ 129.562562][ T7344] [ 129.562569][ T7344] dump_stack_lvl+0x100/0x190 [ 129.562594][ T7344] should_fail_ex.cold+0x5/0xa [ 129.562614][ T7344] _copy_to_user+0x32/0xd0 [ 129.562637][ T7344] bpf_test_finish.isra.0+0x4aa/0x650 [ 129.562666][ T7344] ? __might_fault+0xc5/0x140 [ 129.562684][ T7344] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 129.562714][ T7344] ? _copy_from_user+0x59/0xd0 [ 129.562741][ T7344] bpf_prog_test_run_xdp+0xa70/0x1670 [ 129.562764][ T7344] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.562788][ T7344] ? fput+0x79/0x100 [ 129.562808][ T7344] ? __bpf_prog_get+0x97/0x2a0 [ 129.562832][ T7344] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.562846][ T7344] __sys_bpf+0x2a12/0x4e80 [ 129.562870][ T7344] ? __pfx___sys_bpf+0x10/0x10 [ 129.562888][ T7344] ? find_held_lock+0x2b/0x80 [ 129.562908][ T7344] ? get_pid_task+0xfc/0x250 [ 129.562928][ T7344] ? get_pid_task+0xfc/0x250 [ 129.562949][ T7344] ? proc_fail_nth_write+0x9f/0x220 [ 129.562972][ T7344] ? find_held_lock+0x2b/0x80 [ 129.562996][ T7344] ? rcu_read_lock_any_held+0x6a/0xa0 [ 129.563018][ T7344] ? find_held_lock+0x2b/0x80 [ 129.563033][ T7344] ? ksys_write+0x190/0x250 [ 129.563048][ T7344] ? ksys_write+0x190/0x250 [ 129.563106][ T7344] ? fput+0x79/0x100 [ 129.563127][ T7344] ? __ia32_sys_bpf+0xcc/0x170 [ 129.563140][ T7344] __ia32_sys_bpf+0xcc/0x170 [ 129.563159][ T7344] ? __do_fast_syscall_32+0x98/0x970 [ 129.563183][ T7344] __do_fast_syscall_32+0xe7/0x970 [ 129.563203][ T7344] ? lockdep_hardirqs_on+0x78/0x100 [ 129.563226][ T7344] do_fast_syscall_32+0x32/0x70 [ 129.563243][ T7344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.563264][ T7344] RIP: 0023:0xf701efec [ 129.563284][ T7344] Code: Unable to access opcode bytes at 0xf701efc2. [ 129.563292][ T7344] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 129.563308][ T7344] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 129.563319][ T7344] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 129.563327][ T7344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.563334][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.563358][ T7344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.563381][ T7344] [ 129.761947][ T7350] FAULT_INJECTION: forcing a failure. [ 129.761947][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 129.770604][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.0.450 Not tainted syzkaller #0 PREEMPT(full) [ 129.770623][ T7350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.770629][ T7350] Call Trace: [ 129.770634][ T7350] [ 129.770639][ T7350] dump_stack_lvl+0x100/0x190 [ 129.770663][ T7350] should_fail_ex.cold+0x5/0xa [ 129.770677][ T7350] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.770695][ T7350] should_failslab+0xc2/0x120 [ 129.770715][ T7350] kmem_cache_alloc_noprof+0x91/0x6a0 [ 129.770731][ T7350] ? skb_clone+0x190/0x400 [ 129.770749][ T7350] skb_clone+0x190/0x400 [ 129.770765][ T7350] netlink_deliver_tap+0xaed/0xcc0 [ 129.770780][ T7350] netlink_unicast+0x62b/0x850 [ 129.770794][ T7350] ? __pfx_netlink_unicast+0x10/0x10 [ 129.770810][ T7350] netlink_sendmsg+0x8b0/0xda0 [ 129.770825][ T7350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.770839][ T7350] ? apparmor_socket_sendmsg+0x15b/0x270 [ 129.770854][ T7350] ____sys_sendmsg+0xa4d/0xbe0 [ 129.770864][ T7350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.770877][ T7350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.770894][ T7350] ___sys_sendmsg+0x190/0x1e0 [ 129.770907][ T7350] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.770925][ T7350] ? find_held_lock+0x2b/0x80 [ 129.770956][ T7350] __sys_sendmsg+0x160/0x210 [ 129.770978][ T7350] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.771003][ T7350] __do_fast_syscall_32+0xe7/0x970 [ 129.771019][ T7350] ? lockdep_hardirqs_on+0x78/0x100 [ 129.771034][ T7350] do_fast_syscall_32+0x32/0x70 [ 129.771049][ T7350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.771087][ T7350] RIP: 0023:0xf7f28fec [ 129.771102][ T7350] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 129.771107][ T7350] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 129.771118][ T7350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 129.771125][ T7350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.771131][ T7350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.771138][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.771144][ T7350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.771158][ T7350] [ 130.133317][ T7366] syz.0.455 (7366): drop_caches: 2 [ 130.206536][ T7370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.298174][ T7374] Bluetooth: hci0: unsupported parameter 35 [ 130.307764][ T7374] Bluetooth: hci0: unsupported parameter 35 [ 131.227197][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 131.227211][ T43] audit: type=1804 audit(1785557615.818:48): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.463" name="/newroot/100/file0" dev="tmpfs" ino=562 res=1 errno=0 [ 131.254110][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.266447][ T7395] netlink: 'syz.1.463': attribute type 8 has an invalid length. [ 131.281530][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.371425][ T7387] bond2: entered allmulticast mode [ 131.699866][ T7403] FAULT_INJECTION: forcing a failure. [ 131.699866][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 131.708433][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.3.467 Not tainted syzkaller #0 PREEMPT(full) [ 131.708451][ T7403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.708458][ T7403] Call Trace: [ 131.708464][ T7403] [ 131.708470][ T7403] dump_stack_lvl+0x100/0x190 [ 131.708488][ T7403] should_fail_ex.cold+0x5/0xa [ 131.708501][ T7403] should_failslab+0xc2/0x120 [ 131.708519][ T7403] __kmalloc_cache_noprof+0x91/0x6c0 [ 131.708532][ T7403] ? bcm_sendmsg+0x2677/0x4af0 [ 131.708553][ T7403] bcm_sendmsg+0x2677/0x4af0 [ 131.708573][ T7403] ? __pfx_bcm_sendmsg+0x10/0x10 [ 131.708593][ T7403] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 131.708607][ T7403] ? apparmor_socket_sendmsg+0x15b/0x270 [ 131.708621][ T7403] ____sys_sendmsg+0xa4d/0xbe0 [ 131.708632][ T7403] ? __pfx_bcm_sendmsg+0x10/0x10 [ 131.708650][ T7403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.708668][ T7403] ___sys_sendmsg+0x190/0x1e0 [ 131.708680][ T7403] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.708699][ T7403] ? find_held_lock+0x2b/0x80 [ 131.708722][ T7403] __sys_sendmsg+0x160/0x210 [ 131.708739][ T7403] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.708758][ T7403] ? __pfx_ksys_write+0x10/0x10 [ 131.708772][ T7403] __do_fast_syscall_32+0xe7/0x970 [ 131.708788][ T7403] ? lockdep_hardirqs_on+0x78/0x100 [ 131.708803][ T7403] do_fast_syscall_32+0x32/0x70 [ 131.708818][ T7403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.708834][ T7403] RIP: 0023:0xf705efec [ 131.708848][ T7403] Code: Unable to access opcode bytes at 0xf705efc2. [ 131.708853][ T7403] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 131.708865][ T7403] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 131.708872][ T7403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.708889][ T7403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.708897][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.708903][ T7403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.708918][ T7403] [ 132.012132][ T43] audit: type=1800 audit(1785557616.608:49): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.469" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 132.244386][ T7420] pvfs2: Unknown parameter 'fsmagic' [ 132.373376][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.375640][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.457694][ T7431] netlink: 96 bytes leftover after parsing attributes in process `syz.1.477'. [ 132.460714][ T7431] netlink: 96 bytes leftover after parsing attributes in process `syz.1.477'. [ 132.644101][ T7434] syz.1.478 (7434) used greatest stack depth: 19256 bytes left [ 133.086557][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 133.898444][ T7473] binder: 7472:7473 ioctl c00c620f 800003c0 returned -22 [ 133.902632][ T7473] syzkaller0: entered promiscuous mode [ 133.904609][ T7473] syzkaller0: entered allmulticast mode [ 134.734238][ T7492] netlink: 68 bytes leftover after parsing attributes in process `syz.3.494'. [ 135.254732][ T7496] gadgetfs: bound to dummy_udc driver [ 135.376399][ T7500] syzkaller0: entered promiscuous mode [ 135.378871][ T7500] syzkaller0: entered allmulticast mode [ 135.385652][ T7500] FAULT_INJECTION: forcing a failure. [ 135.385652][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 135.389933][ T7500] CPU: 2 UID: 0 PID: 7500 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) [ 135.389948][ T7500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.389955][ T7500] Call Trace: [ 135.389960][ T7500] [ 135.389964][ T7500] dump_stack_lvl+0x100/0x190 [ 135.389981][ T7500] should_fail_ex.cold+0x5/0xa [ 135.389994][ T7500] should_failslab+0xc2/0x120 [ 135.390011][ T7500] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 135.390026][ T7500] ? __alloc_skb+0x5b7/0x710 [ 135.390041][ T7500] ? __alloc_skb+0x140/0x710 [ 135.390057][ T7500] __alloc_skb+0x140/0x710 [ 135.390070][ T7500] ? __alloc_skb+0x5b7/0x710 [ 135.390084][ T7500] ? __pfx___alloc_skb+0x10/0x10 [ 135.390102][ T7500] alloc_skb_with_frags+0xdd/0x760 [ 135.390118][ T7500] ? __might_fault+0xc5/0x140 [ 135.390130][ T7500] ? __might_fault+0xc5/0x140 [ 135.390144][ T7500] sock_alloc_send_pskb+0x801/0x980 [ 135.390158][ T7500] ? _copy_from_iter+0x270/0x1690 [ 135.390180][ T7500] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 135.390193][ T7500] ? find_held_lock+0x2b/0x80 [ 135.390208][ T7500] ? dev_get_by_index+0x180/0x380 [ 135.390224][ T7500] ? dev_get_by_index+0x180/0x380 [ 135.390242][ T7500] packet_sendmsg+0x1eda/0x5100 [ 135.390261][ T7500] ? __pfx___might_resched+0x10/0x10 [ 135.390282][ T7500] ? aa_sk_perm+0x309/0xaa0 [ 135.390304][ T7500] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.390319][ T7500] ? __pfx_packet_sendmsg+0x10/0x10 [ 135.390336][ T7500] ? apparmor_socket_sendmsg+0x15b/0x270 [ 135.390351][ T7500] ____sys_sendmsg+0xa4d/0xbe0 [ 135.390362][ T7500] ? __pfx_packet_sendmsg+0x10/0x10 [ 135.390377][ T7500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.390394][ T7500] ___sys_sendmsg+0x190/0x1e0 [ 135.390406][ T7500] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.390424][ T7500] ? find_held_lock+0x2b/0x80 [ 135.390446][ T7500] __sys_sendmsg+0x160/0x210 [ 135.390462][ T7500] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.390481][ T7500] ? __pfx_ksys_write+0x10/0x10 [ 135.390494][ T7500] __do_fast_syscall_32+0xe7/0x970 [ 135.390510][ T7500] ? lockdep_hardirqs_on+0x78/0x100 [ 135.390524][ T7500] do_fast_syscall_32+0x32/0x70 [ 135.390539][ T7500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.390554][ T7500] RIP: 0023:0xf701efec [ 135.390568][ T7500] Code: Unable to access opcode bytes at 0xf701efc2. [ 135.390574][ T7500] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 135.390586][ T7500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 135.390595][ T7500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.390604][ T7500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.390612][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.390621][ T7500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.390642][ T7500] [ 135.488983][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 135.520489][ C0] gadgetfs: connected [ 135.530428][ T10] gadgetfs: disconnected [ 135.642514][ T7495] gadgetfs: suspended from state 2 [ 135.838096][ T7506] syz.2.497 (7506): drop_caches: 2 [ 135.868962][ T10] usb 5-1: device not accepting address 7, error -71 [ 135.944448][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 136.210717][ T7521] binder_alloc: 7520: binder_alloc_buf, no vma [ 136.239988][ T7521] syz.2.503 (7521): drop_caches: 2 [ 136.374036][ T7527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.414282][ T7530] input: syz0 as /devices/virtual/input/input32 [ 136.448485][ T7527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.452794][ T5752] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 136.455834][ T7527] netlink: 'syz.0.504': attribute type 2 has an invalid length. [ 136.458733][ T7527] netlink: 'syz.0.504': attribute type 2 has an invalid length. [ 136.617225][ T7540] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 136.629196][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 136.950349][ T7546] netlink: 'syz.2.506': attribute type 3 has an invalid length. [ 136.959488][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 137.152275][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 137.160031][ T7548] FAULT_INJECTION: forcing a failure. [ 137.160031][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 137.208157][ T7548] CPU: 2 UID: 0 PID: 7548 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(full) [ 137.208184][ T7548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.208195][ T7548] Call Trace: [ 137.208201][ T7548] [ 137.208210][ T7548] dump_stack_lvl+0x100/0x190 [ 137.208240][ T7548] should_fail_ex.cold+0x5/0xa [ 137.208262][ T7548] should_failslab+0xc2/0x120 [ 137.208289][ T7548] __kmalloc_cache_noprof+0x91/0x6c0 [ 137.208312][ T7548] ? sctp_auth_shkey_create+0x9e/0x210 [ 137.208342][ T7548] sctp_auth_shkey_create+0x9e/0x210 [ 137.208370][ T7548] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 137.208406][ T7548] sctp_association_new+0x19ab/0x2990 [ 137.208436][ T7548] sctp_connect_new_asoc+0x1a8/0x770 [ 137.208461][ T7548] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.208480][ T7548] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 137.208511][ T7548] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 137.208548][ T7548] __sctp_connect+0x3e7/0xc70 [ 137.208574][ T7548] ? __pfx___sctp_connect+0x10/0x10 [ 137.208596][ T7548] ? __pfx_sctp_inet_connect+0x10/0x10 [ 137.208616][ T7548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.208648][ T7548] ? __pfx_sctp_inet_connect+0x10/0x10 [ 137.208668][ T7548] sctp_inet_connect+0x15f/0x220 [ 137.208690][ T7548] __sys_connect_file+0x141/0x1a0 [ 137.208717][ T7548] __sys_connect+0x141/0x170 [ 137.208740][ T7548] ? __pfx___sys_connect+0x10/0x10 [ 137.208760][ T7548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.208797][ T7548] ? ksys_write+0x1ac/0x250 [ 137.208815][ T7548] ? __pfx_ksys_write+0x10/0x10 [ 137.208836][ T7548] __ia32_sys_connect+0x71/0xb0 [ 137.208858][ T7548] ? lockdep_hardirqs_on+0x78/0x100 [ 137.208903][ T7548] __do_fast_syscall_32+0xe7/0x970 [ 137.208928][ T7548] ? lockdep_hardirqs_on+0x78/0x100 [ 137.208954][ T7548] do_fast_syscall_32+0x32/0x70 [ 137.208979][ T7548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.209003][ T7548] RIP: 0023:0xf701efec [ 137.209026][ T7548] Code: Unable to access opcode bytes at 0xf701efc2. [ 137.209035][ T7548] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 137.209053][ T7548] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 137.209066][ T7548] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 137.209078][ T7548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.209088][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.209099][ T7548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.209124][ T7548] [ 137.350684][ T7552] FAULT_INJECTION: forcing a failure. [ 137.350684][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 137.354925][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 137.354942][ T7552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.354948][ T7552] Call Trace: [ 137.354953][ T7552] [ 137.354958][ T7552] dump_stack_lvl+0x100/0x190 [ 137.354976][ T7552] should_fail_ex.cold+0x5/0xa [ 137.354987][ T7552] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.355000][ T7552] should_failslab+0xc2/0x120 [ 137.355017][ T7552] kmem_cache_alloc_noprof+0x91/0x6a0 [ 137.355053][ T7552] ? skb_clone+0x190/0x400 [ 137.355071][ T7552] skb_clone+0x190/0x400 [ 137.355087][ T7552] netlink_deliver_tap+0xaed/0xcc0 [ 137.355102][ T7552] netlink_unicast+0x62b/0x850 [ 137.355116][ T7552] ? __pfx_netlink_unicast+0x10/0x10 [ 137.355127][ T7552] ? __build_skb_around+0x278/0x390 [ 137.355140][ T7552] ? is_vmalloc_addr+0x86/0xa0 [ 137.355155][ T7552] netlink_sendmsg+0x8b0/0xda0 [ 137.355169][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.355183][ T7552] ? apparmor_socket_sendmsg+0x15b/0x270 [ 137.355197][ T7552] __sys_sendto+0x48b/0x4e0 [ 137.355211][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.355223][ T7552] ? __pfx___sys_sendto+0x10/0x10 [ 137.355247][ T7552] ? fput+0x79/0x100 [ 137.355260][ T7552] ? ksys_write+0x1ac/0x250 [ 137.355272][ T7552] __ia32_sys_sendto+0xdd/0x1b0 [ 137.355290][ T7552] ? __do_fast_syscall_32+0x98/0x970 [ 137.355312][ T7552] ? lockdep_hardirqs_on+0x78/0x100 [ 137.355336][ T7552] __do_fast_syscall_32+0xe7/0x970 [ 137.355350][ T7552] ? lockdep_hardirqs_on+0x78/0x100 [ 137.355365][ T7552] do_fast_syscall_32+0x32/0x70 [ 137.355380][ T7552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.355395][ T7552] RIP: 0023:0xf7f28fec [ 137.355409][ T7552] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 137.355415][ T7552] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 137.355426][ T7552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 137.355433][ T7552] RDX: 0000000000010a73 RSI: 0000000000000800 RDI: 0000000000000000 [ 137.355440][ T7552] RBP: 000000005a5de35b R08: 0000000000000000 R09: 0000000000000000 [ 137.355447][ T7552] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.355453][ T7552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.355466][ T7552] [ 137.355485][ T7552] netlink: 87 bytes leftover after parsing attributes in process `syz.0.509'. [ 137.621765][ T7560] syz.2.513 (7560): drop_caches: 2 [ 139.169748][ T7575] ntfs3(nullb0): Primary boot signature is not NTFS. [ 139.192068][ T7575] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 139.224120][ T7581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.869050][ T7587] syz.0.520 (7587): drop_caches: 2 [ 141.020035][ T7593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.023240][ T7593] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 141.056580][ T7597] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.094608][ T7594] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 141.228041][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 141.233520][ T7601] syz.0.524 (7601): drop_caches: 2 [ 141.262710][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 141.606244][ T7621] syz.0.530 (7621): drop_caches: 2 [ 142.007822][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.120815][ T7635] FAULT_INJECTION: forcing a failure. [ 142.120815][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.125111][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.3.536 Not tainted syzkaller #0 PREEMPT(full) [ 142.125134][ T7635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.125144][ T7635] Call Trace: [ 142.125151][ T7635] [ 142.125160][ T7635] dump_stack_lvl+0x100/0x190 [ 142.125191][ T7635] should_fail_ex.cold+0x5/0xa [ 142.125213][ T7635] _copy_from_iter+0x1f4/0x1690 [ 142.125234][ T7635] ? __asan_memset+0x23/0x50 [ 142.125247][ T7635] ? __pfx__copy_from_iter+0x10/0x10 [ 142.125264][ T7635] ? __pfx___alloc_skb+0x10/0x10 [ 142.125284][ T7635] netlink_sendmsg+0x808/0xda0 [ 142.125300][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.125313][ T7635] ? apparmor_socket_sendmsg+0x15b/0x270 [ 142.125329][ T7635] ____sys_sendmsg+0xa4d/0xbe0 [ 142.125339][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.125352][ T7635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.125369][ T7635] ___sys_sendmsg+0x190/0x1e0 [ 142.125382][ T7635] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.125400][ T7635] ? find_held_lock+0x2b/0x80 [ 142.125423][ T7635] __sys_sendmsg+0x160/0x210 [ 142.125439][ T7635] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.125458][ T7635] ? __pfx_ksys_write+0x10/0x10 [ 142.125471][ T7635] __do_fast_syscall_32+0xe7/0x970 [ 142.125487][ T7635] ? lockdep_hardirqs_on+0x78/0x100 [ 142.125503][ T7635] do_fast_syscall_32+0x32/0x70 [ 142.125518][ T7635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.125533][ T7635] RIP: 0023:0xf705efec [ 142.125547][ T7635] Code: Unable to access opcode bytes at 0xf705efc2. [ 142.125552][ T7635] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 142.125564][ T7635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 142.125571][ T7635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.125577][ T7635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.125584][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.125590][ T7635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.125604][ T7635] [ 142.349044][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 142.499513][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 142.506398][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 142.511756][ T10] usb 7-1: config 179 has no interface number 0 [ 142.515477][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 142.517111][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.525152][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 142.534799][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.543452][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 142.551510][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 142.601663][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 142.606680][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.620832][ T7631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.674285][ T7649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.682743][ T7650] syzkaller0: entered promiscuous mode [ 142.686081][ T7650] syzkaller0: entered allmulticast mode [ 142.695983][ T7650] FAULT_INJECTION: forcing a failure. [ 142.695983][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 142.700907][ T7650] CPU: 2 UID: 0 PID: 7650 Comm: syz.0.540 Not tainted syzkaller #0 PREEMPT(full) [ 142.700923][ T7650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.700930][ T7650] Call Trace: [ 142.700935][ T7650] [ 142.700939][ T7650] dump_stack_lvl+0x100/0x190 [ 142.700957][ T7650] should_fail_ex.cold+0x5/0xa [ 142.700970][ T7650] should_failslab+0xc2/0x120 [ 142.700986][ T7650] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 142.701002][ T7650] ? __alloc_skb+0x5b7/0x710 [ 142.701016][ T7650] ? __alloc_skb+0x140/0x710 [ 142.701032][ T7650] __alloc_skb+0x140/0x710 [ 142.701045][ T7650] ? __alloc_skb+0x5b7/0x710 [ 142.701059][ T7650] ? __pfx___alloc_skb+0x10/0x10 [ 142.701077][ T7650] alloc_skb_with_frags+0xdd/0x760 [ 142.701093][ T7650] ? __might_fault+0xc5/0x140 [ 142.701105][ T7650] ? __might_fault+0xc5/0x140 [ 142.701119][ T7650] sock_alloc_send_pskb+0x801/0x980 [ 142.701134][ T7650] ? _copy_from_iter+0x270/0x1690 [ 142.701161][ T7650] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 142.701175][ T7650] ? find_held_lock+0x2b/0x80 [ 142.701189][ T7650] ? dev_get_by_index+0x180/0x380 [ 142.701204][ T7650] ? dev_get_by_index+0x180/0x380 [ 142.701222][ T7650] packet_sendmsg+0x1eda/0x5100 [ 142.701241][ T7650] ? __pfx___might_resched+0x10/0x10 [ 142.701261][ T7650] ? aa_sk_perm+0x309/0xaa0 [ 142.701278][ T7650] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.701292][ T7650] ? __pfx_packet_sendmsg+0x10/0x10 [ 142.701310][ T7650] ? apparmor_socket_sendmsg+0x15b/0x270 [ 142.701325][ T7650] ____sys_sendmsg+0xa4d/0xbe0 [ 142.701335][ T7650] ? __pfx_packet_sendmsg+0x10/0x10 [ 142.701350][ T7650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.701368][ T7650] ___sys_sendmsg+0x190/0x1e0 [ 142.701381][ T7650] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.701410][ T7650] ? find_held_lock+0x2b/0x80 [ 142.701435][ T7650] __sys_sendmsg+0x160/0x210 [ 142.701451][ T7650] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.701470][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 142.701484][ T7650] __do_fast_syscall_32+0xe7/0x970 [ 142.701500][ T7650] ? lockdep_hardirqs_on+0x78/0x100 [ 142.701514][ T7650] do_fast_syscall_32+0x32/0x70 [ 142.701530][ T7650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.701545][ T7650] RIP: 0023:0xf7f28fec [ 142.701558][ T7650] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 142.701564][ T7650] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 142.701574][ T7650] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 142.701581][ T7650] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.701588][ T7650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.701595][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.701601][ T7650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.701614][ T7650] [ 143.065971][ T7631] syzkaller1: entered promiscuous mode [ 143.069244][ T7631] syzkaller1: entered allmulticast mode [ 143.433988][ T24] usb 7-1: USB disconnect, device number 2 [ 143.434108][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 143.439216][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 144.293598][ T7667] tipc: Started in network mode [ 144.306030][ T7667] tipc: Node identity 8ed355fde0e6, cluster identity 4711 [ 144.323719][ T7667] tipc: Enabled bearer , priority 0 [ 144.333982][ T7667] syzkaller0: entered promiscuous mode [ 144.353759][ T7667] syzkaller0: entered allmulticast mode [ 144.446329][ T7666] tipc: Resetting bearer [ 144.485955][ T7666] tipc: Disabling bearer [ 144.793532][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 146.536331][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 146.632065][ T7695] FAULT_INJECTION: forcing a failure. [ 146.632065][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 146.661418][ T7695] CPU: 2 UID: 0 PID: 7695 Comm: syz.0.555 Not tainted syzkaller #0 PREEMPT(full) [ 146.661445][ T7695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.661456][ T7695] Call Trace: [ 146.661463][ T7695] [ 146.661470][ T7695] dump_stack_lvl+0x100/0x190 [ 146.661497][ T7695] should_fail_ex.cold+0x5/0xa [ 146.661518][ T7695] should_failslab+0xc2/0x120 [ 146.661543][ T7695] __kmalloc_cache_noprof+0x91/0x6c0 [ 146.661563][ T7695] ? find_held_lock+0x2b/0x80 [ 146.661586][ T7695] ? snd_seq_port_connect+0x61/0x540 [ 146.661615][ T7695] snd_seq_port_connect+0x61/0x540 [ 146.661638][ T7695] ? _raw_read_unlock+0x28/0x50 [ 146.661655][ T7695] ? check_subscription_permission.isra.0+0x146/0x240 [ 146.661682][ T7695] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 146.661708][ T7695] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 146.661740][ T7695] call_seq_client_ctl+0xa3/0x130 [ 146.661763][ T7695] snd_seq_kernel_client_ctl+0x77/0xd0 [ 146.661794][ T7695] snd_seq_oss_midi_open+0x587/0x680 [ 146.661813][ T7695] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 146.661844][ T7695] snd_seq_oss_process_event+0x48b/0x25d0 [ 146.661862][ T7695] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 146.661885][ T7695] snd_seq_oss_write+0x247/0x8b0 [ 146.661906][ T7695] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 146.661928][ T7695] ? apparmor_file_permission+0x13f/0x1c0 [ 146.661950][ T7695] ? bpf_lsm_file_permission+0x9/0x10 [ 146.661968][ T7695] odev_write+0x51/0xa0 [ 146.661994][ T7695] vfs_write+0x2aa/0x1050 [ 146.662012][ T7695] ? __pfx_odev_write+0x10/0x10 [ 146.662040][ T7695] ? __pfx_vfs_write+0x10/0x10 [ 146.662054][ T7695] ? find_held_lock+0x2b/0x80 [ 146.662073][ T7695] ? __fget_files+0x215/0x3d0 [ 146.662088][ T7695] ? __fget_files+0x215/0x3d0 [ 146.662107][ T7695] ? __fget_files+0x21f/0x3d0 [ 146.662129][ T7695] ksys_write+0x12a/0x250 [ 146.662144][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 146.662159][ T7695] ? ksys_write+0x1ac/0x250 [ 146.662174][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 146.662194][ T7695] __do_fast_syscall_32+0xe7/0x970 [ 146.662217][ T7695] ? lockdep_hardirqs_on+0x78/0x100 [ 146.662240][ T7695] do_fast_syscall_32+0x32/0x70 [ 146.662263][ T7695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.662285][ T7695] RIP: 0023:0xf7f28fec [ 146.662307][ T7695] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 146.662316][ T7695] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 146.662333][ T7695] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800004c0 [ 146.662345][ T7695] RDX: 0000000000000232 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.662355][ T7695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.662364][ T7695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.662373][ T7695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.662418][ T7695] [ 146.991001][ T7698] syzkaller0: entered promiscuous mode [ 146.996950][ T7698] syzkaller0: entered allmulticast mode [ 147.154513][ T7701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.372685][ T7705] 9p: Bad value for 'rfdno' [ 147.882438][ T7707] FAULT_INJECTION: forcing a failure. [ 147.882438][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 147.919639][ T7707] CPU: 2 UID: 0 PID: 7707 Comm: syz.3.559 Not tainted syzkaller #0 PREEMPT(full) [ 147.919666][ T7707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.919675][ T7707] Call Trace: [ 147.919681][ T7707] [ 147.919688][ T7707] dump_stack_lvl+0x100/0x190 [ 147.919712][ T7707] should_fail_ex.cold+0x5/0xa [ 147.919732][ T7707] should_failslab+0xc2/0x120 [ 147.919755][ T7707] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 147.919778][ T7707] ? __d_alloc+0x35/0xa50 [ 147.919801][ T7707] __d_alloc+0x35/0xa50 [ 147.919822][ T7707] d_alloc_parallel+0x105/0x14b0 [ 147.919849][ T7707] ? find_held_lock+0x2b/0x80 [ 147.919870][ T7707] ? __d_lookup+0x25c/0x4a0 [ 147.919892][ T7707] ? __pfx_d_alloc_parallel+0x10/0x10 [ 147.919918][ T7707] ? __d_lookup+0x266/0x4a0 [ 147.919942][ T7707] ? d_lookup+0xe7/0x190 [ 147.919966][ T7707] proc_fill_cache+0x225/0x3a0 [ 147.919992][ T7707] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 147.920018][ T7707] ? __pfx_proc_fill_cache+0x10/0x10 [ 147.920043][ T7707] ? proc_pid_readdir+0x395/0xa50 [ 147.920063][ T7707] proc_pid_readdir+0x581/0xa50 [ 147.920082][ T7707] ? __pfx_proc_pid_readdir+0x10/0x10 [ 147.920100][ T7707] ? __pfx_down_read_killable+0x10/0x10 [ 147.920127][ T7707] proc_root_readdir+0xa1/0xd0 [ 147.920145][ T7707] iterate_dir+0x296/0xae0 [ 147.920172][ T7707] __ia32_compat_sys_getdents+0x13a/0x2b0 [ 147.920198][ T7707] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 147.920223][ T7707] ? __pfx_compat_filldir+0x10/0x10 [ 147.920245][ T7707] ? ksys_write+0x1ac/0x250 [ 147.920267][ T7707] ? __pfx_ksys_write+0x10/0x10 [ 147.920287][ T7707] __do_fast_syscall_32+0xe7/0x970 [ 147.920307][ T7707] ? lockdep_hardirqs_on+0x78/0x100 [ 147.920347][ T7707] do_fast_syscall_32+0x32/0x70 [ 147.920369][ T7707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.920390][ T7707] RIP: 0023:0xf705efec [ 147.920410][ T7707] Code: Unable to access opcode bytes at 0xf705efc2. [ 147.920417][ T7707] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000008d [ 147.920434][ T7707] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680 [ 147.920444][ T7707] RDX: 0000000000000097 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.920454][ T7707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.920463][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.920472][ T7707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.920495][ T7707] [ 148.799053][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 148.958988][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 148.964043][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 148.970188][ T24] usb 7-1: string descriptor 0 read error: -22 [ 148.972547][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 148.975544][ T24] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 148.985962][ T24] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 148.988723][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 148.991388][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 149.017888][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.042722][ T24] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 149.049928][ T24] usb 7-1: media controller created [ 149.054773][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.058659][ T24] dw2102: i2c transfer failed. [ 149.063090][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.065167][ T24] dw2102: i2c transfer failed. [ 149.066827][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.068803][ T24] dw2102: i2c transfer failed. [ 149.071455][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.073593][ T24] dw2102: i2c transfer failed. [ 149.077049][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.079068][ T24] dw2102: i2c transfer failed. [ 149.080667][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 149.082481][ T24] dw2102: i2c transfer failed. [ 149.084185][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 149.092069][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.113740][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 149.118743][ T24] dw2102: command 0x0e transfer failed. [ 149.121039][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 149.122888][ T24] dw2102: command 0x0e transfer failed. [ 149.432849][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 149.435229][ T24] dw2102: command 0x0e transfer failed. [ 149.438387][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 149.441134][ T24] dw2102: command 0x0e transfer failed. [ 149.443450][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 149.445800][ T24] dw2102: command 0x51 transfer failed. [ 149.451526][ T7716] dvb-usb: bulk message failed: -22 (3/0) [ 149.456397][ T7716] dw2102: i2c transfer failed. [ 149.491256][ T24] DVB: Unable to find symbol ds3000_attach() [ 149.499910][ T24] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 149.560027][ T24] rc_core: IR keymap rc-su3000 not found [ 149.561859][ T24] Registered IR keymap rc-empty [ 149.564262][ T24] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 149.568202][ T24] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input33 [ 149.597065][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 149.605513][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 149.609571][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 149.615511][ T24] usb 7-1: USB disconnect, device number 3 [ 149.669533][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 151.830022][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.979770][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 151.990723][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.998551][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.010299][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.016851][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.021682][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.031443][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.040895][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.047920][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.069078][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.073951][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.077670][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.089015][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.092976][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.097580][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.109506][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.112968][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.119298][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.128971][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.132136][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.136165][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.149135][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.152679][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.155766][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.168978][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.172718][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 152.179174][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 152.188967][ T24] usb 5-1: Product: syz [ 152.190682][ T24] usb 5-1: Manufacturer: syz [ 152.192466][ T24] usb 5-1: SerialNumber: syz [ 152.197604][ T24] usb 5-1: config 0 descriptor?? [ 152.231382][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 152.436161][ T7757] FAULT_INJECTION: forcing a failure. [ 152.436161][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.449406][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.1.574 Not tainted syzkaller #0 PREEMPT(full) [ 152.449423][ T7757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.449431][ T7757] Call Trace: [ 152.449435][ T7757] [ 152.449440][ T7757] dump_stack_lvl+0x100/0x190 [ 152.449457][ T7757] should_fail_ex.cold+0x5/0xa [ 152.449471][ T7757] _copy_from_iter+0x1f4/0x1690 [ 152.449491][ T7757] ? __asan_memset+0x23/0x50 [ 152.449504][ T7757] ? __pfx__copy_from_iter+0x10/0x10 [ 152.449521][ T7757] ? __pfx___alloc_skb+0x10/0x10 [ 152.449542][ T7757] netlink_sendmsg+0x808/0xda0 [ 152.449558][ T7757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.449586][ T7757] ? apparmor_socket_sendmsg+0x15b/0x270 [ 152.449603][ T7757] ____sys_sendmsg+0xa4d/0xbe0 [ 152.449614][ T7757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.449627][ T7757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.449645][ T7757] ___sys_sendmsg+0x190/0x1e0 [ 152.449658][ T7757] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.449676][ T7757] ? find_held_lock+0x2b/0x80 [ 152.449699][ T7757] __sys_sendmsg+0x160/0x210 [ 152.449715][ T7757] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.449736][ T7757] ? __pfx_ksys_write+0x10/0x10 [ 152.449750][ T7757] __do_fast_syscall_32+0xe7/0x970 [ 152.449766][ T7757] ? lockdep_hardirqs_on+0x78/0x100 [ 152.449782][ T7757] do_fast_syscall_32+0x32/0x70 [ 152.449797][ T7757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.449812][ T7757] RIP: 0023:0xf7fc4fec [ 152.449825][ T7757] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 152.449830][ T7757] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 152.449844][ T7757] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 152.449851][ T7757] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.449857][ T7757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.449864][ T7757] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.449870][ T7757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.449884][ T7757] [ 152.848144][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 154.976793][ T5893] usb 5-1: USB disconnect, device number 9 [ 155.015285][ T5893] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 155.908016][ T7826] overlayfs: failed to resolve './file1': -2 [ 156.852992][ T7841] syz.3.589 (7841): drop_caches: 2 [ 156.876228][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 157.072410][ T7854] FAULT_INJECTION: forcing a failure. [ 157.072410][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.079847][ T7854] CPU: 2 UID: 0 PID: 7854 Comm: syz.2.593 Not tainted syzkaller #0 PREEMPT(full) [ 157.079865][ T7854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.079872][ T7854] Call Trace: [ 157.079876][ T7854] [ 157.079882][ T7854] dump_stack_lvl+0x100/0x190 [ 157.079899][ T7854] should_fail_ex.cold+0x5/0xa [ 157.079913][ T7854] _copy_from_iter+0x1f4/0x1690 [ 157.079935][ T7854] ? __pfx__copy_from_iter+0x10/0x10 [ 157.079964][ T7854] ? trace_kmalloc+0xeb/0x110 [ 157.079982][ T7854] ? __kasan_kmalloc+0xaa/0xb0 [ 157.079999][ T7854] ? __kmalloc_noprof+0x343/0x820 [ 157.080013][ T7854] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 157.080030][ T7854] kernfs_fop_write_iter+0x186/0x5f0 [ 157.080046][ T7854] vfs_write+0x6ac/0x1050 [ 157.080058][ T7854] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 157.080073][ T7854] ? __pfx_vfs_write+0x10/0x10 [ 157.080082][ T7854] ? find_held_lock+0x2b/0x80 [ 157.080105][ T7854] ksys_write+0x12a/0x250 [ 157.080116][ T7854] ? __pfx_ksys_write+0x10/0x10 [ 157.080125][ T7854] ? ksys_write+0x1ac/0x250 [ 157.080135][ T7854] ? __pfx_ksys_write+0x10/0x10 [ 157.080148][ T7854] __do_fast_syscall_32+0xe7/0x970 [ 157.080176][ T7854] ? lockdep_hardirqs_on+0x78/0x100 [ 157.080191][ T7854] do_fast_syscall_32+0x32/0x70 [ 157.080206][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.080221][ T7854] RIP: 0023:0xf701efec [ 157.080234][ T7854] Code: Unable to access opcode bytes at 0xf701efc2. [ 157.080240][ T7854] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 157.080251][ T7854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 157.080259][ T7854] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.080266][ T7854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.080272][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.080278][ T7854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.080292][ T7854] [ 157.390455][ T7862] overlayfs: failed to resolve './file1': -2 [ 157.636589][ T7870] UDC core: g1: couldn't find an available UDC or it's busy [ 157.863686][ T7882] ipt_rpfilter: unknown options [ 158.663119][ T7906] overlayfs: failed to resolve './file1': -2 [ 158.821012][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 159.325170][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 159.591411][ T7938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.673305][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.276357][ T7951] overlayfs: failed to resolve './file1': -2 [ 160.938187][ T7963] FAULT_INJECTION: forcing a failure. [ 160.938187][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.951712][ T7963] CPU: 2 UID: 0 PID: 7963 Comm: syz.2.618 Not tainted syzkaller #0 PREEMPT(full) [ 160.951731][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.951738][ T7963] Call Trace: [ 160.951742][ T7963] [ 160.951747][ T7963] dump_stack_lvl+0x100/0x190 [ 160.951765][ T7963] should_fail_ex.cold+0x5/0xa [ 160.951778][ T7963] strncpy_from_user+0x3b/0x2d0 [ 160.951798][ T7963] do_getname+0x78/0x390 [ 160.951816][ T7963] __ia32_sys_mknodat+0xa0/0xf0 [ 160.951829][ T7963] __do_fast_syscall_32+0xe7/0x970 [ 160.951845][ T7963] ? lockdep_hardirqs_on+0x78/0x100 [ 160.951860][ T7963] do_fast_syscall_32+0x32/0x70 [ 160.951875][ T7963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.951890][ T7963] RIP: 0023:0xf701efec [ 160.951904][ T7963] Code: Unable to access opcode bytes at 0xf701efc2. [ 160.951909][ T7963] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 160.951920][ T7963] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 160.951927][ T7963] RDX: 0000000000006004 RSI: 0000000000000705 RDI: 0000000000000000 [ 160.951934][ T7963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.951941][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.951947][ T7963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.951960][ T7963] [ 161.389113][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.549060][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 161.555281][ T41] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 161.555498][ T7965] infiniband syz0: set active [ 161.560512][ T7965] infiniband syz0: added veth0 [ 161.560674][ T41] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.577457][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.583504][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.587217][ T41] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.587249][ T7965] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 161.593114][ T41] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.603926][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.624087][ T7965] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 161.639011][ T7965] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 161.743429][ T7965] RDS/IB: syz0: added [ 161.748199][ T7965] smc: adding ib device syz0 with port count 1 [ 161.756880][ T7965] smc: ib device syz0 port 1 has no pnetid [ 161.829895][ T41] usb 6-1: usb_control_msg returned -32 [ 161.833989][ T41] usbtmc 6-1:16.0: can't read capabilities [ 162.033506][ T41] usb 6-1: USB disconnect, device number 7 [ 163.022477][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 163.162980][ T5752] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 163.191373][ T8043] FAULT_INJECTION: forcing a failure. [ 163.191373][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.199444][ T8043] CPU: 2 UID: 0 PID: 8043 Comm: syz.2.628 Not tainted syzkaller #0 PREEMPT(full) [ 163.199472][ T8043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.199482][ T8043] Call Trace: [ 163.199489][ T8043] [ 163.199496][ T8043] dump_stack_lvl+0x100/0x190 [ 163.199523][ T8043] should_fail_ex.cold+0x5/0xa [ 163.199544][ T8043] _copy_from_iter+0x1f4/0x1690 [ 163.199578][ T8043] ? __pfx__copy_from_iter+0x10/0x10 [ 163.199603][ T8043] ? trace_kmalloc+0xeb/0x110 [ 163.199628][ T8043] ? __kasan_kmalloc+0xaa/0xb0 [ 163.199658][ T8043] ? __kmalloc_noprof+0x343/0x820 [ 163.199680][ T8043] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 163.199724][ T8043] kernfs_fop_write_iter+0x186/0x5f0 [ 163.199751][ T8043] vfs_write+0x6ac/0x1050 [ 163.199768][ T8043] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 163.199791][ T8043] ? __pfx_vfs_write+0x10/0x10 [ 163.199806][ T8043] ? find_held_lock+0x2b/0x80 [ 163.199844][ T8043] ksys_write+0x12a/0x250 [ 163.199861][ T8043] ? __pfx_ksys_write+0x10/0x10 [ 163.199876][ T8043] ? ksys_write+0x1ac/0x250 [ 163.199893][ T8043] ? __pfx_ksys_write+0x10/0x10 [ 163.199915][ T8043] __do_fast_syscall_32+0xe7/0x970 [ 163.199939][ T8043] ? lockdep_hardirqs_on+0x78/0x100 [ 163.199963][ T8043] do_fast_syscall_32+0x32/0x70 [ 163.199986][ T8043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.200009][ T8043] RIP: 0023:0xf701efec [ 163.200034][ T8043] Code: Unable to access opcode bytes at 0xf701efc2. [ 163.200042][ T8043] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 163.200059][ T8043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 163.200070][ T8043] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.200080][ T8043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.200089][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.200099][ T8043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.200122][ T8043] [ 163.334439][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 163.347832][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 163.739029][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.891322][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 163.899591][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.912952][ T24] usb 7-1: config 179 has no interface number 0 [ 163.930969][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.943622][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.955035][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.960609][ T24] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.965412][ T24] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.971870][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.975629][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.987165][ T8051] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.148553][ T8062] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 164.425212][ T8051] syzkaller1: entered promiscuous mode [ 164.429952][ T8051] syzkaller1: entered allmulticast mode [ 164.841489][ T8081] sctp: [Deprecated]: syz.0.636 (pid 8081) Use of int in max_burst socket option. [ 164.841489][ T8081] Use struct sctp_assoc_value instead [ 165.446993][ T8111] netlink: 3 bytes leftover after parsing attributes in process `syz.0.639'. [ 165.632365][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 165.756043][ T8129] syz.3.641 (8129): drop_caches: 2 [ 166.256667][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 166.276297][ T8145] bond1: entered promiscuous mode [ 166.450654][ T43] audit: type=1326 audit(1785557651.038:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.3.643" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x0 [ 166.649429][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.670201][ T24] usb 7-1: USB disconnect, device number 4 [ 166.672814][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 166.672853][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.811014][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 166.829243][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.836343][ T10] usb 5-1: config 179 has no interface number 0 [ 166.842220][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.849951][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.855388][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.866389][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.878238][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.891042][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.897173][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.938813][ T8217] syz.2.645 (8217): drop_caches: 2 [ 166.944225][ T8193] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.171883][ T5752] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 167.176182][ T5752] Bluetooth: hci3: Injecting HCI hardware error event [ 167.180776][ T5752] Bluetooth: hci3: hardware error 0x00 [ 167.192670][ T5752] ================================================================== [ 167.195110][ T5752] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock_bh+0x33/0x40 [ 167.197347][ T5752] Read of size 1 at addr ffff888024b255a0 by task kworker/u34:4/5752 [ 167.200494][ T5752] [ 167.201924][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) [ 167.201947][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.201959][ T5752] Workqueue: hci3 hci_error_reset [ 167.201984][ T5752] Call Trace: [ 167.201991][ T5752] [ 167.201998][ T5752] dump_stack_lvl+0x100/0x190 [ 167.202017][ T5752] print_report+0x13d/0x4b0 [ 167.202041][ T5752] ? __virt_addr_valid+0x239/0x430 [ 167.202060][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.202076][ T5752] kasan_report+0xdf/0x1c0 [ 167.202098][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.202115][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.202131][ T5752] __kasan_check_byte+0x36/0x50 [ 167.202151][ T5752] lock_acquire+0x132/0x370 [ 167.202175][ T5752] ? do_raw_spin_lock+0x128/0x260 [ 167.202192][ T5752] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.202211][ T5752] _raw_spin_lock_bh+0x33/0x40 [ 167.202226][ T5752] ? bt_accept_unlink+0x64/0x370 [ 167.202243][ T5752] bt_accept_unlink+0x64/0x370 [ 167.202258][ T5752] ? __local_bh_enable_ip+0x9e/0x120 [ 167.202273][ T5752] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 167.202291][ T5752] l2cap_chan_del+0xa6/0x920 [ 167.202303][ T5752] l2cap_conn_del+0x34f/0x6b0 [ 167.202316][ T5752] ? hci_inquiry_cache_flush+0xe0/0x2f0 [ 167.202337][ T5752] ? kfree+0x22b/0x6c0 [ 167.202352][ T5752] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 167.202368][ T5752] l2cap_disconn_cfm+0x9f/0x100 [ 167.202387][ T5752] hci_conn_hash_flush+0x10e/0x280 [ 167.202414][ T5752] hci_dev_close_sync+0x5cf/0x13c0 [ 167.202444][ T5752] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 167.202473][ T5752] hci_dev_do_close+0x2e/0xb0 [ 167.202495][ T5752] hci_error_reset+0xbf/0x380 [ 167.202519][ T5752] process_one_work+0xa23/0x1940 [ 167.202550][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 167.202578][ T5752] ? __pfx_hci_error_reset+0x10/0x10 [ 167.202602][ T5752] worker_thread+0x5ef/0xe50 [ 167.202630][ T5752] ? kthread+0x13a/0x450 [ 167.202652][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 167.202675][ T5752] kthread+0x370/0x450 [ 167.202705][ T5752] ? __pfx_kthread+0x10/0x10 [ 167.202727][ T5752] ret_from_fork+0x72b/0xd50 [ 167.202750][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 167.202772][ T5752] ? __switch_to+0x800/0x10f0 [ 167.202800][ T5752] ? __pfx_kthread+0x10/0x10 [ 167.202823][ T5752] ret_from_fork_asm+0x1a/0x30 [ 167.202852][ T5752] [ 167.202858][ T5752] [ 167.305899][ T5752] Allocated by task 6468: [ 167.307386][ T5752] kasan_save_stack+0x30/0x50 [ 167.308883][ T5752] kasan_save_track+0x14/0x30 [ 167.310341][ T5752] __kasan_kmalloc+0xaa/0xb0 [ 167.311803][ T5752] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 167.313520][ T5752] br_vlan_add+0x112/0xa00 [ 167.314927][ T5752] __vlan_add+0xfc9/0x2e40 [ 167.316370][ T5752] nbp_vlan_add+0x258/0x3e0 [ 167.317792][ T5752] br_vlan_info+0x159/0x3d0 [ 167.319248][ T5752] br_process_vlan_info+0x404/0x8f0 [ 167.320867][ T5752] br_afspec+0x432/0x670 [ 167.322167][ T5752] br_setlink+0x36f/0x5d0 [ 167.323526][ T5752] rtnl_bridge_setlink+0x56d/0x740 [ 167.325069][ T5752] rtnetlink_rcv_msg+0x3c9/0xe90 [ 167.326608][ T5752] netlink_rcv_skb+0x159/0x420 [ 167.328087][ T5752] netlink_unicast+0x585/0x850 [ 167.329609][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 167.331139][ T5752] ____sys_sendmsg+0xa4d/0xbe0 [ 167.332659][ T5752] ___sys_sendmsg+0x190/0x1e0 [ 167.334189][ T5752] __sys_sendmmsg+0x309/0x440 [ 167.335699][ T5752] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 167.337618][ T5752] __do_fast_syscall_32+0xe7/0x970 [ 167.339274][ T5752] do_fast_syscall_32+0x32/0x70 [ 167.340798][ T5752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.342786][ T5752] [ 167.343573][ T5752] The buggy address belongs to the object at ffff888024b25000 [ 167.343573][ T5752] which belongs to the cache kmalloc-2k of size 2048 [ 167.347807][ T5752] The buggy address is located 392 bytes to the right of [ 167.347807][ T5752] allocated 1048-byte region [ffff888024b25000, ffff888024b25418) [ 167.352208][ T5752] [ 167.353015][ T5752] The buggy address belongs to the physical page: [ 167.355062][ T5752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24b20 [ 167.357896][ T5752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 167.360609][ T5752] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 167.363020][ T5752] page_type: f5(slab) [ 167.364295][ T5752] raw: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 167.367072][ T5752] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 167.369786][ T5752] head: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 167.372535][ T5752] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 167.375261][ T5752] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 167.378139][ T5752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 167.380840][ T5752] page dumped because: kasan: bad access detected [ 167.382871][ T5752] page_owner tracks the page as allocated [ 167.384655][ T5752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5740, tgid 5740 (syz-executor), ts 49099038840, free_ts 18393371274 [ 167.391043][ T5752] post_alloc_hook+0xfd/0x120 [ 167.392519][ T5752] get_page_from_freelist+0xf48/0x3530 [ 167.394301][ T5752] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 167.396175][ T5752] new_slab+0xa2/0x640 [ 167.397486][ T5752] refill_objects+0xe3/0x410 [ 167.398941][ T5752] __pcs_replace_empty_main+0x376/0x680 [ 167.400680][ T5752] __kmalloc_cache_noprof+0x479/0x6c0 [ 167.402352][ T5752] batadv_hard_if_event+0x14bf/0x3870 [ 167.404082][ T5752] notifier_call_chain+0x99/0x3f0 [ 167.405673][ T5752] call_netdevice_notifiers_info+0xbe/0x110 [ 167.407541][ T5752] register_netdevice+0x1998/0x25a0 [ 167.409171][ T5752] veth_newlink+0x44a/0xa00 [ 167.410619][ T5752] rtnl_newlink+0x1499/0x2380 [ 167.412103][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 167.413672][ T5752] netlink_rcv_skb+0x159/0x420 [ 167.415182][ T5752] netlink_unicast+0x585/0x850 [ 167.416690][ T5752] page last free pid 24 tgid 24 stack trace: [ 167.418542][ T5752] free_pages_prepare+0x586/0xd80 [ 167.420143][ T5752] __free_contig_range_common+0x14f/0x250 [ 167.421884][ T5752] free_pages_bulk+0x12a/0x200 [ 167.423434][ T5752] vm_area_free_pages+0xad/0x2b0 [ 167.424991][ T5752] vfree+0x107/0x750 [ 167.426242][ T5752] delayed_vfree_work+0x56/0x80 [ 167.427771][ T5752] process_one_work+0xa23/0x1940 [ 167.429357][ T5752] worker_thread+0x5ef/0xe50 [ 167.430825][ T5752] kthread+0x370/0x450 [ 167.432156][ T5752] ret_from_fork+0x72b/0xd50 [ 167.433736][ T5752] ret_from_fork_asm+0x1a/0x30 [ 167.435276][ T5752] [ 167.436041][ T5752] Memory state around the buggy address: [ 167.437820][ T5752] ffff888024b25480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.440317][ T5752] ffff888024b25500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.442801][ T5752] >ffff888024b25580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.445289][ T5752] ^ [ 167.446905][ T5752] ffff888024b25600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.449392][ T5752] ffff888024b25680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.451905][ T5752] ================================================================== [ 167.454541][ T5752] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.456855][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) [ 167.459822][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.462981][ T5752] Workqueue: hci3 hci_error_reset [ 167.464572][ T5752] Call Trace: [ 167.465640][ T5752] [ 167.466591][ T5752] dump_stack_lvl+0x100/0x190 [ 167.468080][ T5752] vpanic+0x552/0x970 [ 167.469340][ T5752] ? __pfx_vpanic+0x10/0x10 [ 167.470787][ T5752] ? mark_held_locks+0x40/0x70 [ 167.472310][ T5752] ? irqentry_exit+0x24d/0xa00 [ 167.473839][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.475404][ T5752] panic+0xd1/0xe0 [ 167.476601][ T5752] ? __pfx_panic+0x10/0x10 [ 167.478001][ T5752] ? check_panic_on_warn+0x1f/0x90 [ 167.479633][ T5752] check_panic_on_warn.cold+0x19/0x34 [ 167.481313][ T5752] end_report.part.0+0x3a/0x90 [ 167.482845][ T5752] kasan_report.cold+0xe/0x18 [ 167.484350][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.485917][ T5752] ? _raw_spin_lock_bh+0x33/0x40 [ 167.487458][ T5752] __kasan_check_byte+0x36/0x50 [ 167.488927][ T5752] lock_acquire+0x132/0x370 [ 167.490331][ T5752] ? do_raw_spin_lock+0x128/0x260 [ 167.491888][ T5752] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.493487][ T5752] _raw_spin_lock_bh+0x33/0x40 [ 167.494931][ T5752] ? bt_accept_unlink+0x64/0x370 [ 167.496440][ T5752] bt_accept_unlink+0x64/0x370 [ 167.497878][ T5752] ? __local_bh_enable_ip+0x9e/0x120 [ 167.499471][ T5752] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 167.501091][ T5752] l2cap_chan_del+0xa6/0x920 [ 167.502506][ T5752] l2cap_conn_del+0x34f/0x6b0 [ 167.503950][ T5752] ? hci_inquiry_cache_flush+0xe0/0x2f0 [ 167.505634][ T5752] ? kfree+0x22b/0x6c0 [ 167.506903][ T5752] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 167.508587][ T5752] l2cap_disconn_cfm+0x9f/0x100 [ 167.510132][ T5752] hci_conn_hash_flush+0x10e/0x280 [ 167.511746][ T5752] hci_dev_close_sync+0x5cf/0x13c0 [ 167.513354][ T5752] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 167.515103][ T5752] hci_dev_do_close+0x2e/0xb0 [ 167.516599][ T5752] hci_error_reset+0xbf/0x380 [ 167.518084][ T5752] process_one_work+0xa23/0x1940 [ 167.519670][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 167.521356][ T5752] ? __pfx_hci_error_reset+0x10/0x10 [ 167.523039][ T5752] worker_thread+0x5ef/0xe50 [ 167.524504][ T5752] ? kthread+0x13a/0x450 [ 167.525841][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 167.527463][ T5752] kthread+0x370/0x450 [ 167.528749][ T5752] ? __pfx_kthread+0x10/0x10 [ 167.530226][ T5752] ret_from_fork+0x72b/0xd50 [ 167.531690][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 167.533308][ T5752] ? __switch_to+0x800/0x10f0 [ 167.534788][ T5752] ? __pfx_kthread+0x10/0x10 [ 167.536199][ T5752] ret_from_fork_asm+0x1a/0x30 [ 167.537640][ T5752] [ 167.539155][ T5752] Kernel Offset: disabled [ 167.540495][ T5752] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:14:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a13375 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc900047f7318 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6234323038386552 R12=0000000000000000 R13=000000000000002f R14=ffffffff9b6f5234 R15=ffffffff85a13310 RIP=ffffffff85a1339f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c40e049 CR3=0000000065bfa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c73a540 RSI=ffffffff81b51ece RDI=ffff88801c73a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080032000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000040000 Opmask02=00000000bfdfdfdf Opmask03=0000000004000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2a96a5e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b9feaa20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b9fff8e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeb7f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeb752c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b9ff21d0 000055b9b9ff0f60 000055b9b9fd8320 000055b9b9feaa40 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9ba003530 000055b9b9fe88a0 000055b9b9feb8d0 000055b9b9fee540 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b9fe13d0 000055b9b9fdf860 000055b9b9fe8aa0 000055b9b9fe1a10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b9fe9150 000055b9b9fe6e40 000055b9b9fff8e0 000055b9ba03d5c0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001c1d30 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000001c1d30 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802b43b660 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8e183485 RDI=ffffffff8c400a80 RBP=ffff888024a28000 RSP=ffffc9000ca0f8c8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffff888024a28bf0 R15=0000000000000002 RIP=ffffffff8bb901c7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=00000000746ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7f2540 RSI=ffffffff81b51ece RDI=ffff88801c7f2540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000301c CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000