last executing test programs: 44.447915098s ago: executing program 0 (id=24): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac3000085000000360000008500000005000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) 44.370326192s ago: executing program 0 (id=25): syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x500000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r7 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r7, 0x88, 0x7, &(0x7f0000000000)="03000000eaeaca") setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 43.148540452s ago: executing program 0 (id=39): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) 41.570076317s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 41.569869698s ago: executing program 0 (id=63): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setregid(0xffffffffffffffff, 0x0) 41.308851355s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x16382, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="01", 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) write(r0, &(0x7f0000000070)="06", 0x1) 41.203760534s ago: executing program 32 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x16382, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="01", 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) write(r0, &(0x7f0000000070)="06", 0x1) 20.169883143s ago: executing program 4 (id=525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 20.087742427s ago: executing program 4 (id=528): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x26, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) fsopen(&(0x7f0000000140)='autofs\x00', 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={{0x77359400}, {r1, r2/1000+10000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ffffff7f0000000009000000180100002020782500000000002020207b1af8ff00000000bfa102000000000007010000f8ffffffb702000008000000b70300000500000085000000cb0000009500000000000000f71eff0bef4c5bb4ec6f2fb76067d9afd341fdd2e5c6251311fa35cfbfc8bc9a5c3dd57cdb395ed5c7e3289d909e290f607160e4abcd3d2c09e76fccb5df156fbd1cb54c31f1b778bd828b79a2e9dfb23cb83e196bd85a800d5a4eb21253e4e613999022da1c72ab327398f6155b1a913b6a69d50192c4489e07f5e86a3c232122eff67d3d64a11bab327c9f9f106662a24953787094a9ff5233148b21ff6404f13636b7af1437947a8b62d71d3d9f5e5cd2861f4fc8695061b1d27c197de474a67f0b8b07"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11}, 0x94) socket(0x15, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000640)={0x0, 0x0, 0x7a, 0x5a, ""/90}, &(0x7f0000000200)=0x7a, 0x1) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100000000000000040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x3ff, 0x8864000000000000) 19.248921852s ago: executing program 4 (id=555): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) mlockall(0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, 0x0, 0x0) 19.179055187s ago: executing program 4 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 19.118252738s ago: executing program 4 (id=559): openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 18.820216213s ago: executing program 4 (id=561): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000075c0)={&(0x7f0000007400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0x9}, {0x10000, 0x1}, {0x7, 0xe}, {0x1c96, 0x5}, {0x6, 0x5761}, {0xf, 0xb684}, {0x0, 0x645e}, {0x3, 0x1}, {0x80, 0xfffffffffffffffa}, {0x6, 0x2}, {0x3, 0x6}, {0x4, 0x81}, {0x69, 0x6}, {0x3, 0x8000008}, {0x4, 0xffe}, {0x5, 0x5}, {0xfffffffffffffff0, 0x10000}, {0x401, 0x802}, {0x2, 0x7}, {0x70000000000000}, {0x9, 0x200000000000003}, {0x6, 0x100000001}, {0x5, 0xffffffff00000001}, {0x9, 0x40}, {0x2, 0x6}, {0x0, 0xabd0122}, {0x39, 0x10}, {0x3, 0x40}, {0x7, 0xc}, {0x7, 0x7f}, {0x8, 0x8}, {0x2, 0x1000a00}, {0xc7ee, 0x9}, {0x100000000, 0x2}, {0x6, 0x4}, {0x5, 0xffffffffffffffff}, {0x5, 0x6}, {0x3f07, 0xffffffff}, {0x2, 0x6}, {0xff, 0xac2}, {0xd, 0x3663e5e9}, {0x6, 0x1ff}, {0xffffffffffffffd4, 0x8000000000000000}, {0x9, 0x8000}, {0x84, 0x1}, {0x2b7c, 0xcb6}, {0x9}, {0x8, 0x3}, {0x2, 0xfffffffffffffff7}, {0x3ff, 0x9}, {0x1, 0x3d}, {0x1, 0x7}, {0x3, 0x7ff}, {0x4, 0x20000000000008}, {0xfffffffffffffffe, 0x800}, {0x2, 0x23}, {0x9, 0x6}, {0x200, 0xd}, {0x80c, 0xde}, {0x1, 0x129}, {0x80000001, 0x3}, {0x1000, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x9, 0x4}, {0x8, 0x8}, {0xffffffffffffffff, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0xfffffffffffffffc, 0x3}, {0x4, 0xffffffffffffffff}, {0x9, 0x6}, {0x7, 0x2}, {0x70ac, 0x20000000000000}, {0x0, 0x8000000000000000}, {0xffffffffffffffff, 0x8}, {0x2}, {0xffffffffffffff00, 0x80000000000009}, {0x7f, 0x1}, {0x1000000, 0x6}, {0xf, 0x4}, {0x7bea, 0x9}, {0xc4, 0xbe}, {0x9, 0x900}, {0x564, 0x10001}, {0x4, 0x7}, {0x7fffffff, 0x8a}, {0x3, 0x3}, {0xffffffff00000001, 0x3}, {0x0, 0x9}, {0x100000000, 0x6}, {0x10000, 0x9}, {0x9, 0x4000400000000}, {0x8000000000000000, 0x8}, {0x4, 0x6}, {0xffffffffffffffff, 0x5}, {0x7, 0xffffffffffffffff}, {0xe3}, {0x3, 0x7fff}, {0x6, 0x6}, {0xfffffffffffffcc8, 0x99}, {0x0, 0x1}, {0x6}, {0x6, 0x1}, {0x7ff, 0x2c}, {0x79e, 0x100000001}, {0x4, 0x7}, {0xfe, 0x7}, {0x2424, 0x7}, {0x3, 0xffffffffffffffff}, {0x4, 0x3}, {0x3}, {0x4, 0x8000000000000001}, {0x3, 0x3}, {0x587, 0x8fa}, {0xad2, 0x3}, {0x4, 0x2}, {0xffffffffffffc426, 0x80f}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x40, 0x7ff}, {0xffffffffffffffff, 0x10000}, {0x2, 0x401}, {0x100000001, 0xfff}, {0x6, 0x4}, {0x8000000000000001, 0x9}, {0x1, 0x80}, {0xbe6, 0x8}, {0xac7b, 0x2}, {0x100000000, 0xff}, {0x898, 0x8}, {0x5, 0x7}, {0x0, 0x81}, {0x6000000000, 0x6}, {0x2, 0x400}, {0xfffffffffffffc01, 0x80000001}, {0x3, 0x8}, {0x5, 0x20}, {0xfffffffffffffffc}, {0x3e6, 0x7}, {0xb6, 0xc}, {0x8, 0xe}, {0x0, 0x19d}, {0x2, 0x81}, {0x6, 0x5}, {0x8, 0x10000}, {0xf, 0x2}, {0x1, 0x3}, {0x6, 0x4008}, {0xdc, 0x8}, {0x1ff, 0xb}, {0x8, 0x6}, {0xfffffffffffffff8, 0x46ef}, {0x8, 0x2}, {0xc41, 0x5}, {0x7, 0x4}, {0x9, 0x2}, {0xecb6, 0x4}, {0x7, 0x8}, {0x100000001, 0x5}, {0x4, 0x1}, {0xab, 0x2}, {0xf, 0x8}, {0x3ff, 0xca44}, {0xc, 0xc958}, {0x5, 0x8}, {0x10, 0x9}, {0x6, 0x1}, {0x0, 0x400}, {0x5, 0x5}, {0x3, 0x35d1}, {0xfffffffffffffffb, 0x7f}, {0x3, 0x2}, {0xc859, 0x80000000}, {0xced5, 0x80000000}, {0x5, 0xd}, {0xe6, 0xfffffffffffffff7}, {0x6, 0x200}, {0x5, 0x8}, {0xff45, 0x6}, {0x2d81, 0x8}, {0x4}, {0x3, 0x9}, {0x4000000000000000, 0x7ff}, {0x7fffffffffffffff, 0x8}, {0x9, 0x7c4}, {0xb91, 0x6}, {0xaacc, 0x3}, {0x5b71}, {0xfffffffffffffffb, 0xfffffffffffffff8}, {0x6, 0x3}, {0x6c0f87dd, 0x100}, {0xfffffffffffffff9, 0x8d}, {0x3, 0x80}, {0x100, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x400, 0x9}, {0x5, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x2, 0xcf}, {0x401}, {0x3, 0x8}, {0x63fc0cb, 0x7f}, {0xfffffffffffffff9, 0x2b}, {0x10002, 0x3}, {0xbcc, 0x8}, {0x4}, {0x4, 0x1000000000000001}, {0xfffffffffffff965, 0xa2c}, {0xaf3, 0xff5}, {0x9, 0x3}, {0x6, 0x5}, {0x80000001, 0x1}, {0x4, 0x9}, {0x606, 0xe}, {0x2, 0x5}, {0xe, 0x69}, {0x3, 0x10}, {0x6}, {0xb, 0x56}, {0x8c}, {0xfffffffffffffff7, 0x5}, {0x4, 0x5}, {0x5, 0xf}, {0x1, 0x2}, {0x9, 0x800000000000000}, {0x34, 0x2}, {0x80c8, 0xffffff0000000000}, {0x7, 0x58}, {0xed, 0x5}, {0x9, 0xfff}, {0x800, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0xf03, 0x5}, {0x80000002, 0x400}, {0x9}, {0xb9}, {0x4}, {0xffffffff, 0x18ca}, {0x1a8, 0x8}, {0x38, 0x6}, {0x10001, 0x989}, {0x80000002, 0x4}, {0x1, 0x7}, {0xffffffffffff679a, 0x4}, {0x6}, {0x8, 0x7ff}, {0x9, 0xfffffffffffffffa}, {0x3, 0x5d22}, {0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socket(0xa, 0x80805, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000340)="00015ded58ced60d5414e6f9000000000000000000000080504db7fb71") 18.789491689s ago: executing program 33 (id=561): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000075c0)={&(0x7f0000007400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0x9}, {0x10000, 0x1}, {0x7, 0xe}, {0x1c96, 0x5}, {0x6, 0x5761}, {0xf, 0xb684}, {0x0, 0x645e}, {0x3, 0x1}, {0x80, 0xfffffffffffffffa}, {0x6, 0x2}, {0x3, 0x6}, {0x4, 0x81}, {0x69, 0x6}, {0x3, 0x8000008}, {0x4, 0xffe}, {0x5, 0x5}, {0xfffffffffffffff0, 0x10000}, {0x401, 0x802}, {0x2, 0x7}, {0x70000000000000}, {0x9, 0x200000000000003}, {0x6, 0x100000001}, {0x5, 0xffffffff00000001}, {0x9, 0x40}, {0x2, 0x6}, {0x0, 0xabd0122}, {0x39, 0x10}, {0x3, 0x40}, {0x7, 0xc}, {0x7, 0x7f}, {0x8, 0x8}, {0x2, 0x1000a00}, {0xc7ee, 0x9}, {0x100000000, 0x2}, {0x6, 0x4}, {0x5, 0xffffffffffffffff}, {0x5, 0x6}, {0x3f07, 0xffffffff}, {0x2, 0x6}, {0xff, 0xac2}, {0xd, 0x3663e5e9}, {0x6, 0x1ff}, {0xffffffffffffffd4, 0x8000000000000000}, {0x9, 0x8000}, {0x84, 0x1}, {0x2b7c, 0xcb6}, {0x9}, {0x8, 0x3}, {0x2, 0xfffffffffffffff7}, {0x3ff, 0x9}, {0x1, 0x3d}, {0x1, 0x7}, {0x3, 0x7ff}, {0x4, 0x20000000000008}, {0xfffffffffffffffe, 0x800}, {0x2, 0x23}, {0x9, 0x6}, {0x200, 0xd}, {0x80c, 0xde}, {0x1, 0x129}, {0x80000001, 0x3}, {0x1000, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x9, 0x4}, {0x8, 0x8}, {0xffffffffffffffff, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0xfffffffffffffffc, 0x3}, {0x4, 0xffffffffffffffff}, {0x9, 0x6}, {0x7, 0x2}, {0x70ac, 0x20000000000000}, {0x0, 0x8000000000000000}, {0xffffffffffffffff, 0x8}, {0x2}, {0xffffffffffffff00, 0x80000000000009}, {0x7f, 0x1}, {0x1000000, 0x6}, {0xf, 0x4}, {0x7bea, 0x9}, {0xc4, 0xbe}, {0x9, 0x900}, {0x564, 0x10001}, {0x4, 0x7}, {0x7fffffff, 0x8a}, {0x3, 0x3}, {0xffffffff00000001, 0x3}, {0x0, 0x9}, {0x100000000, 0x6}, {0x10000, 0x9}, {0x9, 0x4000400000000}, {0x8000000000000000, 0x8}, {0x4, 0x6}, {0xffffffffffffffff, 0x5}, {0x7, 0xffffffffffffffff}, {0xe3}, {0x3, 0x7fff}, {0x6, 0x6}, {0xfffffffffffffcc8, 0x99}, {0x0, 0x1}, {0x6}, {0x6, 0x1}, {0x7ff, 0x2c}, {0x79e, 0x100000001}, {0x4, 0x7}, {0xfe, 0x7}, {0x2424, 0x7}, {0x3, 0xffffffffffffffff}, {0x4, 0x3}, {0x3}, {0x4, 0x8000000000000001}, {0x3, 0x3}, {0x587, 0x8fa}, {0xad2, 0x3}, {0x4, 0x2}, {0xffffffffffffc426, 0x80f}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x40, 0x7ff}, {0xffffffffffffffff, 0x10000}, {0x2, 0x401}, {0x100000001, 0xfff}, {0x6, 0x4}, {0x8000000000000001, 0x9}, {0x1, 0x80}, {0xbe6, 0x8}, {0xac7b, 0x2}, {0x100000000, 0xff}, {0x898, 0x8}, {0x5, 0x7}, {0x0, 0x81}, {0x6000000000, 0x6}, {0x2, 0x400}, {0xfffffffffffffc01, 0x80000001}, {0x3, 0x8}, {0x5, 0x20}, {0xfffffffffffffffc}, {0x3e6, 0x7}, {0xb6, 0xc}, {0x8, 0xe}, {0x0, 0x19d}, {0x2, 0x81}, {0x6, 0x5}, {0x8, 0x10000}, {0xf, 0x2}, {0x1, 0x3}, {0x6, 0x4008}, {0xdc, 0x8}, {0x1ff, 0xb}, {0x8, 0x6}, {0xfffffffffffffff8, 0x46ef}, {0x8, 0x2}, {0xc41, 0x5}, {0x7, 0x4}, {0x9, 0x2}, {0xecb6, 0x4}, {0x7, 0x8}, {0x100000001, 0x5}, {0x4, 0x1}, {0xab, 0x2}, {0xf, 0x8}, {0x3ff, 0xca44}, {0xc, 0xc958}, {0x5, 0x8}, {0x10, 0x9}, {0x6, 0x1}, {0x0, 0x400}, {0x5, 0x5}, {0x3, 0x35d1}, {0xfffffffffffffffb, 0x7f}, {0x3, 0x2}, {0xc859, 0x80000000}, {0xced5, 0x80000000}, {0x5, 0xd}, {0xe6, 0xfffffffffffffff7}, {0x6, 0x200}, {0x5, 0x8}, {0xff45, 0x6}, {0x2d81, 0x8}, {0x4}, {0x3, 0x9}, {0x4000000000000000, 0x7ff}, {0x7fffffffffffffff, 0x8}, {0x9, 0x7c4}, {0xb91, 0x6}, {0xaacc, 0x3}, {0x5b71}, {0xfffffffffffffffb, 0xfffffffffffffff8}, {0x6, 0x3}, {0x6c0f87dd, 0x100}, {0xfffffffffffffff9, 0x8d}, {0x3, 0x80}, {0x100, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x400, 0x9}, {0x5, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x2, 0xcf}, {0x401}, {0x3, 0x8}, {0x63fc0cb, 0x7f}, {0xfffffffffffffff9, 0x2b}, {0x10002, 0x3}, {0xbcc, 0x8}, {0x4}, {0x4, 0x1000000000000001}, {0xfffffffffffff965, 0xa2c}, {0xaf3, 0xff5}, {0x9, 0x3}, {0x6, 0x5}, {0x80000001, 0x1}, {0x4, 0x9}, {0x606, 0xe}, {0x2, 0x5}, {0xe, 0x69}, {0x3, 0x10}, {0x6}, {0xb, 0x56}, {0x8c}, {0xfffffffffffffff7, 0x5}, {0x4, 0x5}, {0x5, 0xf}, {0x1, 0x2}, {0x9, 0x800000000000000}, {0x34, 0x2}, {0x80c8, 0xffffff0000000000}, {0x7, 0x58}, {0xed, 0x5}, {0x9, 0xfff}, {0x800, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0xf03, 0x5}, {0x80000002, 0x400}, {0x9}, {0xb9}, {0x4}, {0xffffffff, 0x18ca}, {0x1a8, 0x8}, {0x38, 0x6}, {0x10001, 0x989}, {0x80000002, 0x4}, {0x1, 0x7}, {0xffffffffffff679a, 0x4}, {0x6}, {0x8, 0x7ff}, {0x9, 0xfffffffffffffffa}, {0x3, 0x5d22}, {0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socket(0xa, 0x80805, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000340)="00015ded58ced60d5414e6f9000000000000000000000080504db7fb71") 18.54955099s ago: executing program 2 (id=565): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) shutdown(0xffffffffffffffff, 0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 18.479408671s ago: executing program 2 (id=566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40) 18.479044241s ago: executing program 2 (id=567): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0xa, 0x3, 0x0, 0x9, 0x6, 0x21, 0x81, 0x4, 0x81, 0x4c, 0x2, 0x61}, 0xe) shutdown(r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 18.398539483s ago: executing program 2 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 18.39824137s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24040004) 18.089608684s ago: executing program 2 (id=574): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 17.998551642s ago: executing program 34 (id=574): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.954606356s ago: executing program 6 (id=871): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x20018], [0xfffffffd, 0x100, 0xd, 0x0, 0x5, 0x0, 0x0, 0x3], [0x3, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x80000001, 0xe5e]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x200}, {0x5}, {0x4}, {0x10000, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {}, {0xa}]}) 2.950798978s ago: executing program 6 (id=873): openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x311001, 0x143) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00001cb000/0x3000)=nil, &(0x7f0000359000/0xa000)=nil, 0x3000, 0x1, 0x2}) 2.869964036s ago: executing program 6 (id=874): sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r1 = dup2(0xffffffffffffffff, r0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.008607938s ago: executing program 6 (id=887): r0 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x1, "c3925a235015121c042da29ae68ccabb8b9e74e399db02e35acc47b95750f3759a8bfc59859eac135c5ed95a457e2503ed6d02c741cd3bbcf9e1af16cf6cf9a4", {0x7af, 0xab40}}) 2.00820818s ago: executing program 3 (id=888): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058a"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 2.007987745s ago: executing program 6 (id=889): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) mount$fuse(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0), 0x900000, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8001}}]}}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 1.940199694s ago: executing program 6 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 879.847841ms ago: executing program 5 (id=904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 879.078969ms ago: executing program 1 (id=906): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0xb, 0x3, 0x40, 0xad2, 'syz1\x00'}) 878.530767ms ago: executing program 5 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004000) 780.166003ms ago: executing program 1 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x44854) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004810) 779.703526ms ago: executing program 5 (id=909): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x112}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000f600000000000000001d711833000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x7c0c, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0xef}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000140)={0xce, 0x0, r5}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000001c0)={0xdf, 0x0, 0x1000}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = dup(r7) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b00)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20084890}, 0x4000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fbdbc83e29b0000018000180140002006d6163766c616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8008100) 544.555134ms ago: executing program 5 (id=910): close(0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x16133668) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 420.123909ms ago: executing program 3 (id=911): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 320.16827ms ago: executing program 3 (id=912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="b9232500b16600540f973fb86a0cd7e3e0c38c75ea1b8449c2fef98c1193af888087e6ec3117c8ccb3ca2efeee29fe135c83ee06826ea57be325ca4ef06c05dde45cade10f72e8bee6236ae686472073"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000980)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 319.639346ms ago: executing program 5 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8040400) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40) 287.107157ms ago: executing program 5 (id=914): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x33, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 283.019997ms ago: executing program 1 (id=915): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0xfffd, @local}}]}, 0x10c) pread64(r0, &(0x7f0000000080)=""/39, 0x27, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_subbuf_size_kb\x00', &(0x7f0000000080)={0x1, 0x24, 0x4}, 0x18) faccessat2(r2, &(0x7f0000000140)='./tracefs_dir/file0\x00', 0x101, 0x1200) r3 = io_uring_setup(0x6641, &(0x7f0000000300)={0x0, 0x6153, 0x1, 0x3, 0x1dc, 0x0, r0}) io_uring_enter(r3, 0x2d0, 0xb382, 0x1, &(0x7f0000000380)={[0x8]}, 0x8) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='!', 0x1) write(r5, &(0x7f00000003c0)='16', 0x2) 282.826096ms ago: executing program 3 (id=916): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 187.441902ms ago: executing program 3 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004000) 187.130069ms ago: executing program 1 (id=918): r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x0, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 129.10794ms ago: executing program 3 (id=919): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058a"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 128.934964ms ago: executing program 1 (id=920): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040801}, 0x4000000) kernel console output (not intermixed with test programs): ck_slowpath+0x10/0x10 [ 57.941130][ T6260] __ia32_sys_close_range+0x405/0x5d0 [ 57.941145][ T6260] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 57.941163][ T6260] __do_fast_syscall_32+0x13a/0x8b0 [ 57.941191][ T6260] do_fast_syscall_32+0x32/0x70 [ 57.941217][ T6260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.941238][ T6260] RIP: 0023:0xf7f57fec [ 57.941257][ T6260] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 57.941265][ T6260] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 57.941283][ T6260] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffffffff [ 57.941295][ T6260] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.941304][ T6260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.941313][ T6260] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.941324][ T6260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.941344][ T6260] [ 58.068084][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.068328][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.069458][ T5726] usb 8-1: USB disconnect, device number 2 [ 58.676353][ T5753] Bluetooth: hci2: command tx timeout [ 58.706034][ T5726] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.860188][ T5726] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 58.861087][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 58.861102][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.861113][ T5726] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 58.862660][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.862672][ T5726] usb 8-1: Product: syz [ 58.862679][ T5726] usb 8-1: Manufacturer: syz [ 58.862686][ T5726] usb 8-1: SerialNumber: syz [ 58.864010][ T5726] usb 8-1: config 0 descriptor?? [ 59.079041][ T5726] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 59.245971][ T6332] FAULT_INJECTION: forcing a failure. [ 59.245971][ T6332] name fail_futex, interval 1, probability 0, space 0, times 1 [ 59.251329][ T6332] CPU: 2 UID: 0 PID: 6332 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 59.251359][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.251368][ T6332] Call Trace: [ 59.251373][ T6332] [ 59.251379][ T6332] dump_stack_lvl+0x100/0x190 [ 59.251401][ T6332] should_fail_ex.cold+0x5/0xa [ 59.251418][ T6332] get_futex_key+0x1d0/0x14f0 [ 59.251440][ T6332] ? __pfx_get_futex_key+0x10/0x10 [ 59.251460][ T6332] ? rcu_is_watching+0x13/0xc0 [ 59.251472][ T6332] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.251487][ T6332] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.251504][ T6332] futex_wake+0xf4/0x5e0 [ 59.251518][ T6332] ? __free_pages_ok+0x48e/0x1050 [ 59.251535][ T6332] ? __pfx_futex_wake+0x10/0x10 [ 59.251552][ T6332] ? sctp_setsockopt+0x168/0xb370 [ 59.251574][ T6332] ? ksys_write+0x190/0x250 [ 59.251588][ T6332] do_futex+0x2b2/0x440 [ 59.251601][ T6332] ? __pfx_do_futex+0x10/0x10 [ 59.251614][ T6332] ? rcu_is_watching+0x13/0xc0 [ 59.251627][ T6332] ? do_sock_setsockopt+0x101/0x1d0 [ 59.251645][ T6332] ? kfree+0x1e5/0x6d0 [ 59.251664][ T6332] __ia32_sys_futex_time32+0x2f4/0x470 [ 59.251680][ T6332] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 59.251694][ T6332] ? __sys_setsockopt+0x139/0x190 [ 59.251711][ T6332] __do_fast_syscall_32+0x13a/0x8b0 [ 59.251730][ T6332] do_fast_syscall_32+0x32/0x70 [ 59.251748][ T6332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.251765][ T6332] RIP: 0023:0xf7f57fec [ 59.251779][ T6332] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 59.251785][ T6332] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 59.251797][ T6332] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 59.251805][ T6332] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 59.251813][ T6332] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 59.251819][ T6332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.251825][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.251838][ T6332] [ 59.476694][ T5726] usb 8-1: USB disconnect, device number 3 [ 60.240839][ T6361] FAULT_INJECTION: forcing a failure. [ 60.240839][ T6361] name fail_futex, interval 1, probability 0, space 0, times 0 [ 60.240928][ T6361] CPU: 2 UID: 0 PID: 6361 Comm: syz.3.154 Not tainted syzkaller #0 PREEMPT(full) [ 60.240962][ T6361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.240973][ T6361] Call Trace: [ 60.240980][ T6361] [ 60.240987][ T6361] dump_stack_lvl+0x100/0x190 [ 60.241015][ T6361] should_fail_ex.cold+0x5/0xa [ 60.241038][ T6361] get_futex_key+0x1d0/0x14f0 [ 60.241068][ T6361] ? __pfx_get_futex_key+0x10/0x10 [ 60.241096][ T6361] ? rcu_is_watching+0x13/0xc0 [ 60.241115][ T6361] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 60.241135][ T6361] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.241166][ T6361] futex_wake+0xf4/0x5e0 [ 60.241187][ T6361] ? __free_pages_ok+0x48e/0x1050 [ 60.241212][ T6361] ? __pfx_futex_wake+0x10/0x10 [ 60.241236][ T6361] ? sctp_setsockopt+0x168/0xb370 [ 60.241255][ T6361] ? ksys_write+0x190/0x250 [ 60.241274][ T6361] do_futex+0x2b2/0x440 [ 60.241291][ T6361] ? __pfx_do_futex+0x10/0x10 [ 60.241308][ T6361] ? rcu_is_watching+0x13/0xc0 [ 60.241324][ T6361] ? do_sock_setsockopt+0x101/0x1d0 [ 60.241346][ T6361] ? kfree+0x1e5/0x6d0 [ 60.241372][ T6361] __ia32_sys_futex_time32+0x2f4/0x470 [ 60.241392][ T6361] ? xfd_validate_state+0x129/0x190 [ 60.241417][ T6361] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 60.241470][ T6361] __do_fast_syscall_32+0x13a/0x8b0 [ 60.241499][ T6361] do_fast_syscall_32+0x32/0x70 [ 60.241525][ T6361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.241547][ T6361] RIP: 0023:0xf708efec [ 60.241567][ T6361] Code: Unable to access opcode bytes at 0xf708efc2. [ 60.241574][ T6361] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 60.241592][ T6361] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 60.241605][ T6361] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 60.241616][ T6361] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 60.241628][ T6361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.241639][ T6361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.241661][ T6361] [ 60.554475][ T6378] MTRR 1 not used [ 60.577528][ T6378] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 60.755168][ T5753] Bluetooth: hci2: command tx timeout [ 60.782362][ T6399] FAULT_INJECTION: forcing a failure. [ 60.782362][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.782419][ T6399] CPU: 2 UID: 0 PID: 6399 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT(full) [ 60.782443][ T6399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.782451][ T6399] Call Trace: [ 60.782467][ T6399] [ 60.782472][ T6399] dump_stack_lvl+0x100/0x190 [ 60.782492][ T6399] should_fail_ex.cold+0x5/0xa [ 60.782508][ T6399] _copy_from_user+0x2e/0xd0 [ 60.782526][ T6399] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 60.782549][ T6399] bpf_vlog_finalize+0x271/0x360 [ 60.782568][ T6399] bpf_log_attr_finalize+0x86/0x1a0 [ 60.782586][ T6399] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 60.782610][ T6399] btf_new_fd+0x9c7/0x5bc0 [ 60.782626][ T6399] ? __lock_acquire+0x4c5/0x1ec0 [ 60.782648][ T6399] ? __pfx_btf_new_fd+0x10/0x10 [ 60.782665][ T6399] ? lock_acquire+0x1d1/0x380 [ 60.782681][ T6399] ? rcu_is_watching+0x13/0xc0 [ 60.782692][ T6399] ? apparmor_capable+0x1d7/0x4d0 [ 60.782707][ T6399] ? security_capable+0x80/0x260 [ 60.782719][ T6399] ? ns_capable+0xd2/0xf0 [ 60.782737][ T6399] __sys_bpf+0x13ef/0x4a30 [ 60.782751][ T6399] ? __pfx___sys_bpf+0x10/0x10 [ 60.782761][ T6399] ? find_held_lock+0x2b/0x80 [ 60.782772][ T6399] ? futex_wake+0x4ea/0x5e0 [ 60.782794][ T6399] ? rcu_read_lock_any_held+0x6a/0x90 [ 60.782809][ T6399] ? find_held_lock+0x2b/0x80 [ 60.782820][ T6399] ? ksys_write+0x190/0x250 [ 60.782830][ T6399] ? ksys_write+0x190/0x250 [ 60.782853][ T6399] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 60.782873][ T6399] ? xfd_validate_state+0x129/0x190 [ 60.782903][ T6399] ? __ia32_sys_bpf+0xcc/0x170 [ 60.782920][ T6399] __ia32_sys_bpf+0xcc/0x170 [ 60.782938][ T6399] ? __do_fast_syscall_32+0xb3/0x8b0 [ 60.782966][ T6399] __do_fast_syscall_32+0x13a/0x8b0 [ 60.782992][ T6399] do_fast_syscall_32+0x32/0x70 [ 60.783014][ T6399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.783035][ T6399] RIP: 0023:0xf7f57fec [ 60.783055][ T6399] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 60.783063][ T6399] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 60.783080][ T6399] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000180 [ 60.783094][ T6399] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.783104][ T6399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.783114][ T6399] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.783125][ T6399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.783159][ T6399] [ 60.966780][ T6412] FAULT_INJECTION: forcing a failure. [ 60.966780][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 60.966827][ T6412] CPU: 2 UID: 0 PID: 6412 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT(full) [ 60.966854][ T6412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.966862][ T6412] Call Trace: [ 60.966867][ T6412] [ 60.966872][ T6412] dump_stack_lvl+0x100/0x190 [ 60.966893][ T6412] should_fail_ex.cold+0x5/0xa [ 60.966911][ T6412] should_failslab+0xc2/0x120 [ 60.966929][ T6412] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.966951][ T6412] ? newseg+0x26b/0xed0 [ 60.966972][ T6412] newseg+0x26b/0xed0 [ 60.966991][ T6412] ? __pfx_newseg+0x10/0x10 [ 60.967010][ T6412] ? down_write+0x146/0x1f0 [ 60.967028][ T6412] ? ksys_write+0x190/0x250 [ 60.967050][ T6412] ipcget+0xee/0xf50 [ 60.967073][ T6412] ? __pfx_do_futex+0x10/0x10 [ 60.967089][ T6412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 60.967111][ T6412] ? __pfx_ipcget+0x10/0x10 [ 60.967134][ T6412] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 60.967154][ T6412] __ia32_sys_shmget+0x13b/0x1b0 [ 60.967177][ T6412] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 60.967205][ T6412] __do_fast_syscall_32+0x13a/0x8b0 [ 60.967228][ T6412] do_fast_syscall_32+0x32/0x70 [ 60.967245][ T6412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.967262][ T6412] RIP: 0023:0xf6ffefec [ 60.967277][ T6412] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 60.967282][ T6412] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000018b [ 60.967295][ T6412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000004000 [ 60.967302][ T6412] RDX: 0000000000000400 RSI: 0000000080002000 RDI: 0000000000000000 [ 60.967309][ T6412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.967316][ T6412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.967323][ T6412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.967338][ T6412] [ 61.610948][ T6458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.611566][ T6458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.809840][ T43] audit: type=1800 audit(1788364160.195:2): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="bus" dev="tmpfs" ino=362 res=0 errno=0 [ 62.847091][ T5753] Bluetooth: hci2: command tx timeout [ 63.769691][ T6599] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 64.388982][ T6645] FAULT_INJECTION: forcing a failure. [ 64.388982][ T6645] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.389042][ T6645] CPU: 2 UID: 0 PID: 6645 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 64.389067][ T6645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.389075][ T6645] Call Trace: [ 64.389079][ T6645] [ 64.389098][ T6645] dump_stack_lvl+0x100/0x190 [ 64.389120][ T6645] should_fail_ex.cold+0x5/0xa [ 64.389135][ T6645] get_futex_key+0x1d0/0x14f0 [ 64.389154][ T6645] ? __pfx_get_futex_key+0x10/0x10 [ 64.389171][ T6645] ? find_held_lock+0x2b/0x80 [ 64.389183][ T6645] ? futex_wake+0x4ea/0x5e0 [ 64.389198][ T6645] futex_wake+0xf4/0x5e0 [ 64.389210][ T6645] ? futex_wait+0x11e/0x370 [ 64.389224][ T6645] ? __pfx_futex_wake+0x10/0x10 [ 64.389238][ T6645] ? find_held_lock+0x2b/0x80 [ 64.389249][ T6645] ? __fget_files+0x215/0x3d0 [ 64.389264][ T6645] do_futex+0x2b2/0x440 [ 64.389276][ T6645] ? __pfx_do_futex+0x10/0x10 [ 64.389285][ T6645] ? __fget_files+0x215/0x3d0 [ 64.389311][ T6645] __ia32_sys_futex_time32+0x2f4/0x470 [ 64.389328][ T6645] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 64.389341][ T6645] ? __sys_setsockopt+0x139/0x190 [ 64.389359][ T6645] __do_fast_syscall_32+0x13a/0x8b0 [ 64.389376][ T6645] do_fast_syscall_32+0x32/0x70 [ 64.389391][ T6645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.389406][ T6645] RIP: 0023:0xf6ffefec [ 64.389445][ T6645] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 64.389452][ T6645] RSP: 002b:00000000f53ed5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 64.389468][ T6645] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 64.389478][ T6645] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 64.389489][ T6645] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 64.389499][ T6645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.389509][ T6645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.389524][ T6645] [ 64.462819][ T6647] process 'syz.2.270' launched './file0' with NULL argv: empty string added [ 64.610326][ T43] audit: type=1326 audit(1788364162.995:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.610492][ T43] audit: type=1326 audit(1788364162.995:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.610947][ T43] audit: type=1326 audit(1788364162.995:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.611435][ T43] audit: type=1326 audit(1788364162.995:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.611473][ T43] audit: type=1326 audit(1788364162.995:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.611559][ T43] audit: type=1326 audit(1788364162.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.611634][ T43] audit: type=1326 audit(1788364162.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.611912][ T43] audit: type=1326 audit(1788364162.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.612096][ T43] audit: type=1326 audit(1788364162.995:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.275" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 64.825653][ T6670] FAULT_INJECTION: forcing a failure. [ 64.825653][ T6670] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.825707][ T6670] CPU: 2 UID: 0 PID: 6670 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(full) [ 64.825731][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.825740][ T6670] Call Trace: [ 64.825744][ T6670] [ 64.825749][ T6670] dump_stack_lvl+0x100/0x190 [ 64.825768][ T6670] should_fail_ex.cold+0x5/0xa [ 64.825786][ T6670] get_futex_key+0x1d0/0x14f0 [ 64.825805][ T6670] ? __pfx_get_futex_key+0x10/0x10 [ 64.825821][ T6670] ? find_held_lock+0x2b/0x80 [ 64.825833][ T6670] ? futex_wake+0x4ea/0x5e0 [ 64.825852][ T6670] futex_wake+0xf4/0x5e0 [ 64.825864][ T6670] ? futex_wait+0x11e/0x370 [ 64.825880][ T6670] ? __pfx_futex_wake+0x10/0x10 [ 64.825895][ T6670] ? find_held_lock+0x2b/0x80 [ 64.825908][ T6670] ? __fget_files+0x215/0x3d0 [ 64.825922][ T6670] do_futex+0x2b2/0x440 [ 64.825933][ T6670] ? __pfx_do_futex+0x10/0x10 [ 64.825943][ T6670] ? __fget_files+0x215/0x3d0 [ 64.825958][ T6670] __ia32_sys_futex_time32+0x2f4/0x470 [ 64.825979][ T6670] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 64.825992][ T6670] ? __sys_setsockopt+0x139/0x190 [ 64.826012][ T6670] __do_fast_syscall_32+0x13a/0x8b0 [ 64.826031][ T6670] do_fast_syscall_32+0x32/0x70 [ 64.826046][ T6670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.826062][ T6670] RIP: 0023:0xf6ffefec [ 64.826091][ T6670] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 64.826097][ T6670] RSP: 002b:00000000f53ed5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 64.826109][ T6670] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 64.826117][ T6670] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 64.826124][ T6670] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 64.826131][ T6670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.826138][ T6670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.826152][ T6670] [ 65.052898][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 65.061460][ T6689] ipvlan2: entered allmulticast mode [ 65.061520][ T6689] macvlan1: entered allmulticast mode [ 65.061567][ T6689] veth1_vlan: entered allmulticast mode [ 65.065820][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 65.070390][ T6689] ipvlan3: entered allmulticast mode [ 65.109258][ T6696] FAULT_INJECTION: forcing a failure. [ 65.109258][ T6696] name fail_futex, interval 1, probability 0, space 0, times 0 [ 65.109300][ T6696] CPU: 2 UID: 0 PID: 6696 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) [ 65.109324][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.109332][ T6696] Call Trace: [ 65.109336][ T6696] [ 65.109341][ T6696] dump_stack_lvl+0x100/0x190 [ 65.109360][ T6696] should_fail_ex.cold+0x5/0xa [ 65.109374][ T6696] get_futex_key+0x1d0/0x14f0 [ 65.109394][ T6696] ? __pfx_get_futex_key+0x10/0x10 [ 65.109433][ T6696] ? find_held_lock+0x2b/0x80 [ 65.109451][ T6696] ? futex_wake+0x4ea/0x5e0 [ 65.109473][ T6696] futex_wake+0xf4/0x5e0 [ 65.109489][ T6696] ? futex_wait+0x11e/0x370 [ 65.109507][ T6696] ? __pfx_futex_wake+0x10/0x10 [ 65.109522][ T6696] ? find_held_lock+0x2b/0x80 [ 65.109533][ T6696] ? __fget_files+0x215/0x3d0 [ 65.109548][ T6696] do_futex+0x2b2/0x440 [ 65.109559][ T6696] ? __pfx_do_futex+0x10/0x10 [ 65.109568][ T6696] ? __fget_files+0x215/0x3d0 [ 65.109583][ T6696] __ia32_sys_futex_time32+0x2f4/0x470 [ 65.109598][ T6696] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 65.109610][ T6696] ? __sys_setsockopt+0x139/0x190 [ 65.109629][ T6696] __do_fast_syscall_32+0x13a/0x8b0 [ 65.109647][ T6696] do_fast_syscall_32+0x32/0x70 [ 65.109662][ T6696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.109678][ T6696] RIP: 0023:0xf6ffefec [ 65.109692][ T6696] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 65.109697][ T6696] RSP: 002b:00000000f53ed5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 65.109708][ T6696] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 65.109716][ T6696] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 65.109723][ T6696] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 65.109729][ T6696] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.109737][ T6696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.109751][ T6696] [ 66.425143][ T5887] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.607898][ T5887] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.608006][ T5887] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 66.610791][ T5887] usb 7-1: config 0 has no interfaces? [ 66.613103][ T5887] usb 7-1: config 0 has no interfaces? [ 66.615978][ T5887] usb 7-1: config 0 has no interfaces? [ 66.616635][ T5887] usb 7-1: config 0 has no interfaces? [ 66.617743][ T5887] usb 7-1: config 0 has no interfaces? [ 66.618269][ T5887] usb 7-1: config 0 has no interfaces? [ 66.618852][ T5887] usb 7-1: config 0 has no interfaces? [ 66.619315][ T5887] usb 7-1: config 0 has no interfaces? [ 66.623732][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.623757][ T5887] usb 7-1: Product: syz [ 66.623773][ T5887] usb 7-1: Manufacturer: syz [ 66.623787][ T5887] usb 7-1: SerialNumber: syz [ 66.643153][ T5887] usb 7-1: config 0 descriptor?? [ 66.849584][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.851287][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.860193][ T5745] usb 7-1: USB disconnect, device number 3 [ 67.228213][ T6811] bond1: Unable to set down delay as MII monitoring is disabled [ 67.233355][ T6811] bond1 (unregistering): Released all slaves [ 67.505447][ T5823] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.666084][ T5823] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 67.666964][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 67.666985][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.667001][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.669570][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.669590][ T5823] usb 7-1: Product: syz [ 67.669602][ T5823] usb 7-1: Manufacturer: syz [ 67.669614][ T5823] usb 7-1: SerialNumber: syz [ 67.672976][ T5823] usb 7-1: config 0 descriptor?? [ 68.083600][ T5823] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 68.093600][ T5823] usb 7-1: USB disconnect, device number 4 [ 68.215454][ T6875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.215595][ T6875] block device autoloading is deprecated and will be removed. [ 68.944509][ T6912] FAULT_INJECTION: forcing a failure. [ 68.944509][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 68.944600][ T6912] CPU: 3 UID: 0 PID: 6912 Comm: syz.4.369 Not tainted syzkaller #0 PREEMPT(full) [ 68.944625][ T6912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.944634][ T6912] Call Trace: [ 68.944639][ T6912] [ 68.944644][ T6912] dump_stack_lvl+0x100/0x190 [ 68.944663][ T6912] should_fail_ex.cold+0x5/0xa [ 68.944678][ T6912] should_failslab+0xc2/0x120 [ 68.944694][ T6912] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 68.944709][ T6912] ? __alloc_skb+0x140/0x710 [ 68.944724][ T6912] __alloc_skb+0x140/0x710 [ 68.944735][ T6912] ? __alloc_skb+0x5b7/0x710 [ 68.944746][ T6912] ? __pfx___alloc_skb+0x10/0x10 [ 68.944759][ T6912] ? raw6_getfrag+0x23c/0x2a0 [ 68.944778][ T6912] __ip6_append_data+0x34f0/0x4bd0 [ 68.944794][ T6912] ? __pfx_raw6_getfrag+0x10/0x10 [ 68.944816][ T6912] ? __pfx___ip6_append_data+0x10/0x10 [ 68.944829][ T6912] ? __pfx_ip6_mtu+0x10/0x10 [ 68.944838][ T6912] ? ip6_setup_cork+0x5be/0x14c0 [ 68.944853][ T6912] ip6_append_data+0x10b/0x410 [ 68.944867][ T6912] ? __pfx_raw6_getfrag+0x10/0x10 [ 68.944886][ T6912] rawv6_sendmsg+0x169c/0x4450 [ 68.944909][ T6912] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 68.944931][ T6912] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 68.944969][ T6912] ? aa_sock_msg_perm+0x11e/0x200 [ 68.944983][ T6912] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 68.945002][ T6912] ? inet_sendmsg+0x11c/0x140 [ 68.945019][ T6912] inet_sendmsg+0x11c/0x140 [ 68.945049][ T6912] __sys_sendto+0x453/0x4e0 [ 68.945067][ T6912] ? __pfx_inet_sendmsg+0x10/0x10 [ 68.945090][ T6912] ? __pfx___sys_sendto+0x10/0x10 [ 68.945113][ T6912] ? fd_install+0x223/0x580 [ 68.945142][ T6912] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 68.945163][ T6912] ? __pfx___do_sys_prctl+0x10/0x10 [ 68.945186][ T6912] __ia32_sys_sendto+0xdd/0x1b0 [ 68.945203][ T6912] ? __do_fast_syscall_32+0xb3/0x8b0 [ 68.945226][ T6912] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.945250][ T6912] __do_fast_syscall_32+0x13a/0x8b0 [ 68.945276][ T6912] do_fast_syscall_32+0x32/0x70 [ 68.945297][ T6912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.945321][ T6912] RIP: 0023:0xf7f57fec [ 68.945341][ T6912] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 68.945348][ T6912] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 68.945366][ T6912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 68.945377][ T6912] RDX: 000000000000fdef RSI: 0000000000000800 RDI: 0000000080000600 [ 68.945415][ T6912] RBP: 0000000000000080 R08: 0000000000000000 R09: 0000000000000000 [ 68.945427][ T6912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.945438][ T6912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.945461][ T6912] [ 69.429424][ T6935] syzkaller0: entered promiscuous mode [ 69.429488][ T6935] syzkaller0: entered allmulticast mode [ 71.160672][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160734][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.191950][ T35] cfg80211: failed to load regulatory.db [ 73.692565][ T7160] FAULT_INJECTION: forcing a failure. [ 73.692565][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 73.699282][ T7160] CPU: 2 UID: 0 PID: 7160 Comm: syz.2.471 Not tainted syzkaller #0 PREEMPT(full) [ 73.699330][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.699346][ T7160] Call Trace: [ 73.699355][ T7160] [ 73.699365][ T7160] dump_stack_lvl+0x100/0x190 [ 73.699401][ T7160] should_fail_ex.cold+0x5/0xa [ 73.699431][ T7160] should_failslab+0xc2/0x120 [ 73.699461][ T7160] __kmalloc_noprof+0xfc/0x840 [ 73.699487][ T7160] ? tomoyo_encode2+0xfb/0x3c0 [ 73.699523][ T7160] tomoyo_encode2+0xfb/0x3c0 [ 73.699557][ T7160] tomoyo_encode+0x29/0x50 [ 73.699592][ T7160] tomoyo_realpath_from_path+0x18c/0x690 [ 73.699630][ T7160] tomoyo_path_number_perm+0x23c/0x580 [ 73.699655][ T7160] ? tomoyo_path_number_perm+0x22e/0x580 [ 73.699683][ T7160] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.699713][ T7160] ? futex_wait+0x11e/0x370 [ 73.699745][ T7160] ? __lock_acquire+0x4c5/0x1ec0 [ 73.699789][ T7160] ? __fget_files+0x34/0x3d0 [ 73.699814][ T7160] ? find_held_lock+0x2b/0x80 [ 73.699832][ T7160] ? __fget_files+0x215/0x3d0 [ 73.699850][ T7160] ? hook_file_ioctl_common+0x140/0x440 [ 73.699876][ T7160] ? __fget_files+0x215/0x3d0 [ 73.699900][ T7160] ? __fget_files+0x21f/0x3d0 [ 73.699926][ T7160] security_file_ioctl_compat+0xd3/0x230 [ 73.699955][ T7160] __ia32_compat_sys_ioctl+0xc2/0x360 [ 73.699989][ T7160] __do_fast_syscall_32+0x13a/0x8b0 [ 73.700020][ T7160] do_fast_syscall_32+0x32/0x70 [ 73.700047][ T7160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.700072][ T7160] RIP: 0023:0xf7fc5fec [ 73.700097][ T7160] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 73.700108][ T7160] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 73.700129][ T7160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005452 [ 73.700144][ T7160] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.700157][ T7160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.700168][ T7160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.700179][ T7160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.700205][ T7160] [ 73.710037][ T7160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.867431][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 73.869952][ T43] audit: type=1800 audit(1788364428.257:42): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.479" name="size" dev="configfs" ino=16312 res=0 errno=0 [ 73.870001][ T43] audit: type=1800 audit(1788364428.257:43): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.479" name="zoned" dev="configfs" ino=16313 res=0 errno=0 [ 73.870036][ T43] audit: type=1800 audit(1788364428.257:44): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.479" name="power" dev="configfs" ino=16314 res=0 errno=0 [ 73.870566][ T7175] null_blk: nullb1: using native zone append [ 73.902322][ T7175] null_blk: disk nullb1 created [ 74.087064][ T5745] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.155190][ T5823] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.239416][ T5745] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.240393][ T5745] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.240413][ T5745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.240429][ T5745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.240462][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.241937][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.241957][ T5745] usb 6-1: Product: syz [ 74.241968][ T5745] usb 6-1: Manufacturer: syz [ 74.254353][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 74.254373][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 74.266363][ T5745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 74.266378][ T5745] cdc_wdm 6-1:1.0: Unknown control protocol [ 74.306090][ T5823] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.310022][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 74.310070][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.317388][ T5823] usb 7-1: config 0 descriptor?? [ 74.327168][ T43] audit: type=1800 audit(1788364428.717:45): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.493" name="size" dev="configfs" ino=17080 res=0 errno=0 [ 74.327763][ T5823] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 74.330871][ T43] audit: type=1800 audit(1788364428.717:46): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.493" name="zoned" dev="configfs" ino=18002 res=0 errno=0 [ 74.332209][ T43] audit: type=1800 audit(1788364428.717:47): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.493" name="power" dev="configfs" ino=18003 res=0 errno=0 [ 74.425222][ T7220] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.469800][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.477327][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.484197][ T10] usb 6-1: USB disconnect, device number 5 [ 74.597732][ T7235] fuse: Bad value for 'fd' [ 74.936933][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.942189][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.944911][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.948278][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.951388][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.954051][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.956844][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.959549][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.962484][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.965899][ T62] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.978182][ T62] hid-generic 00A0:0006:0003.0002: hidraw1: HID v0.05 Device [syz1] on syz0 [ 75.010654][ T7262] fido_id[7262]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.182566][ T43] audit: type=1800 audit(1788364429.567:48): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.517" name="size" dev="configfs" ino=19541 res=0 errno=0 [ 75.183849][ T43] audit: type=1800 audit(1788364429.567:49): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.517" name="zoned" dev="configfs" ino=19542 res=0 errno=0 [ 75.185024][ T43] audit: type=1800 audit(1788364429.567:50): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.517" name="power" dev="configfs" ino=19543 res=0 errno=0 [ 75.542491][ T43] audit: type=1800 audit(1788364429.927:51): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.526" name="size" dev="configfs" ino=19556 res=0 errno=0 [ 75.700405][ T7305] FAULT_INJECTION: forcing a failure. [ 75.700405][ T7305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.702762][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 75.702814][ T7305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.702829][ T7305] Call Trace: [ 75.702840][ T7305] [ 75.702848][ T7305] dump_stack_lvl+0x100/0x190 [ 75.702877][ T7305] should_fail_ex.cold+0x5/0xa [ 75.702903][ T7305] get_futex_key+0x1d0/0x14f0 [ 75.702936][ T7305] ? __pfx_get_futex_key+0x10/0x10 [ 75.702963][ T7305] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 75.702995][ T7305] futex_wait_setup+0x91/0x540 [ 75.703031][ T7305] __futex_wait+0x19f/0x300 [ 75.703057][ T7305] ? __pfx___futex_wait+0x10/0x10 [ 75.703078][ T7305] ? __pfx_try_to_wake_up+0x10/0x10 [ 75.703104][ T7305] ? futex_hash+0x311/0x400 [ 75.703134][ T7305] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.703161][ T7305] ? find_held_lock+0x2b/0x80 [ 75.703182][ T7305] ? futex_wake+0x4ea/0x5e0 [ 75.703209][ T7305] futex_wait+0xe6/0x370 [ 75.703228][ T7305] ? __pfx_futex_wait+0x10/0x10 [ 75.703257][ T7305] ? putname+0xb1/0x110 [ 75.703278][ T7305] ? kmem_cache_free+0x127/0x6c0 [ 75.703310][ T7305] do_futex+0x265/0x440 [ 75.703328][ T7305] ? __pfx_do_futex+0x10/0x10 [ 75.703341][ T7305] ? do_sys_openat2+0x159/0x1e0 [ 75.703365][ T7305] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.703393][ T7305] __ia32_sys_futex_time32+0x2f4/0x470 [ 75.703418][ T7305] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 75.703438][ T7305] ? xfd_validate_state+0x129/0x190 [ 75.703469][ T7305] __do_fast_syscall_32+0x13a/0x8b0 [ 75.703495][ T7305] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.703519][ T7305] do_fast_syscall_32+0x32/0x70 [ 75.703545][ T7305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.703569][ T7305] RIP: 0023:0xf708efec [ 75.703588][ T7305] Code: Unable to access opcode bytes at 0xf708efc2. [ 75.703596][ T7305] RSP: 002b:00000000f547d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 75.703616][ T7305] RAX: ffffffffffffffda RBX: 00000000f7484f88 RCX: 0000000000000080 [ 75.703628][ T7305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7484f8c [ 75.703644][ T7305] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 75.703654][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.703667][ T7305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.703696][ T7305] [ 75.937376][ T7318] FAULT_INJECTION: forcing a failure. [ 75.937376][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 75.937432][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.1.539 Not tainted syzkaller #0 PREEMPT(full) [ 75.937458][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.937467][ T7318] Call Trace: [ 75.937481][ T7318] [ 75.937488][ T7318] dump_stack_lvl+0x100/0x190 [ 75.937512][ T7318] should_fail_ex.cold+0x5/0xa [ 75.937528][ T7318] should_failslab+0xc2/0x120 [ 75.937546][ T7318] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 75.937560][ T7318] ? __d_alloc+0x35/0xa50 [ 75.937576][ T7318] __d_alloc+0x35/0xa50 [ 75.937589][ T7318] ? get_random_u64+0xe8/0x7c0 [ 75.937608][ T7318] d_alloc_pseudo+0x1c/0xc0 [ 75.937624][ T7318] alloc_file_pseudo+0x118/0x290 [ 75.937640][ T7318] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 75.937658][ T7318] __anon_inode_getfile+0xe8/0x280 [ 75.937677][ T7318] do_seccomp+0xcff/0x2730 [ 75.937693][ T7318] ? __pfx_do_seccomp+0x10/0x10 [ 75.937706][ T7318] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 75.937724][ T7318] __do_fast_syscall_32+0x13a/0x8b0 [ 75.937742][ T7318] do_fast_syscall_32+0x32/0x70 [ 75.937757][ T7318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.937772][ T7318] RIP: 0023:0xf6ffefec [ 75.937786][ T7318] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 75.937791][ T7318] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 75.937804][ T7318] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000001d [ 75.937812][ T7318] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.937820][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.937827][ T7318] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.937834][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.937849][ T7318] [ 76.357686][ T5831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.505340][ T5831] usb 8-1: Using ep0 maxpacket: 8 [ 76.505877][ T5831] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.506690][ T5831] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.506703][ T5831] usb 8-1: config 0 has no interface number 0 [ 76.506720][ T5831] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.506731][ T5831] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.506743][ T5831] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.506755][ T5831] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.506775][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.508049][ T5831] usb 8-1: config 0 descriptor?? [ 76.512161][ T5831] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.836492][ T5816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.865407][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 76.940593][ T5831] usb 7-1: USB disconnect, device number 5 [ 76.941391][ T5816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.971272][ T5823] usb 8-1: USB disconnect, device number 4 [ 76.988835][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.990707][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.991403][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.992504][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.995710][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.006692][ T5823] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 77.015848][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.015889][ T30] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 77.021824][ T30] usb 6-1: config 0 has no interfaces? [ 77.024503][ T30] usb 6-1: config 0 has no interfaces? [ 77.028428][ T30] usb 6-1: config 0 has no interfaces? [ 77.030814][ T30] usb 6-1: config 0 has no interfaces? [ 77.033241][ T30] usb 6-1: config 0 has no interfaces? [ 77.035747][ T30] usb 6-1: config 0 has no interfaces? [ 77.037295][ T5816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.041203][ T30] usb 6-1: config 0 has no interfaces? [ 77.043943][ T30] usb 6-1: config 0 has no interfaces? [ 77.047966][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.050545][ T30] usb 6-1: Product: syz [ 77.050556][ T30] usb 6-1: Manufacturer: syz [ 77.050563][ T30] usb 6-1: SerialNumber: syz [ 77.058888][ T30] usb 6-1: config 0 descriptor?? [ 77.115785][ T5816] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.253738][ T5816] bridge_slave_1: left allmulticast mode [ 77.253796][ T5816] bridge_slave_1: left promiscuous mode [ 77.254148][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.258664][ T5816] bridge_slave_0: left allmulticast mode [ 77.258680][ T5816] bridge_slave_0: left promiscuous mode [ 77.259952][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.268230][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.268491][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.269521][ T5886] usb 6-1: USB disconnect, device number 6 [ 77.378683][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.383404][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.390254][ T5816] bond0 (unregistering): Released all slaves [ 77.639657][ T5816] hsr_slave_0: left promiscuous mode [ 77.640099][ T5816] hsr_slave_1: left promiscuous mode [ 77.641466][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.641479][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.643693][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.643709][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.653344][ T5816] veth1_macvtap: left promiscuous mode [ 77.653404][ T5816] veth0_macvtap: left promiscuous mode [ 77.653447][ T5816] veth1_vlan: left promiscuous mode [ 77.653549][ T5816] veth0_vlan: left promiscuous mode [ 77.716854][ T7410] fuse: Bad value for 'fd' [ 77.797435][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.798178][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.799433][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.800143][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.800579][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.846921][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 77.852313][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 77.943362][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 77.943663][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.943772][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.943860][ T7364] bridge_slave_0: entered allmulticast mode [ 77.950086][ T7364] bridge_slave_0: entered promiscuous mode [ 77.956670][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.956715][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.956777][ T7364] bridge_slave_1: entered allmulticast mode [ 77.958219][ T7364] bridge_slave_1: entered promiscuous mode [ 77.988877][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.003921][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.022852][ T7364] team0: Port device team_slave_0 added [ 78.027001][ T7364] team0: Port device team_slave_1 added [ 78.041238][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.041283][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.041535][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.042434][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.042442][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.042455][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.076657][ T7364] hsr_slave_0: entered promiscuous mode [ 78.077168][ T7364] hsr_slave_1: entered promiscuous mode [ 78.081840][ T7364] debugfs: 'hsr0' already exists in 'hsr' [ 78.081936][ T7364] Cannot create hsr debugfs directory [ 78.216209][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 78.301190][ T7364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.307403][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.311860][ T7364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.318742][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.332405][ T7364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.343271][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.344098][ T7364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.350004][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.377712][ T5816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.411196][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.411301][ T7364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.411528][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.411617][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.448139][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.470943][ T5816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.547614][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.547692][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.547748][ T7416] bridge_slave_0: entered allmulticast mode [ 78.548492][ T7416] bridge_slave_0: entered promiscuous mode [ 78.550471][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.550530][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.550592][ T7416] bridge_slave_1: entered allmulticast mode [ 78.551704][ T7416] bridge_slave_1: entered promiscuous mode [ 78.571348][ T5816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.593959][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.596902][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.598882][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.621292][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.624407][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.634829][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.636760][ T7416] team0: Port device team_slave_0 added [ 78.639255][ T7416] team0: Port device team_slave_1 added [ 78.656279][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.656372][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.672619][ T5816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.682611][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.682721][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.691678][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.691727][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.691778][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.696307][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.696321][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.696335][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.731684][ T7416] hsr_slave_0: entered promiscuous mode [ 78.732370][ T7416] hsr_slave_1: entered promiscuous mode [ 78.732689][ T7416] debugfs: 'hsr0' already exists in 'hsr' [ 78.732702][ T7416] Cannot create hsr debugfs directory [ 78.786089][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.872092][ T5816] bridge_slave_1: left allmulticast mode [ 78.872142][ T5816] bridge_slave_1: left promiscuous mode [ 78.872304][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.876575][ T5816] bridge_slave_0: left allmulticast mode [ 78.876590][ T5816] bridge_slave_0: left promiscuous mode [ 78.876684][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.998406][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.003071][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.007562][ T5816] bond0 (unregistering): Released all slaves [ 79.088172][ T5753] Bluetooth: hci2: command tx timeout [ 79.130065][ T7416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.139657][ T7416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.151029][ T7416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.160597][ T7416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.180774][ T7416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.185365][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 79.190106][ T7416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.191023][ T7416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.200613][ T7416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.227243][ T5816] hsr_slave_0: left promiscuous mode [ 79.232003][ T5816] hsr_slave_1: left promiscuous mode [ 79.233366][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.233381][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.237006][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.237020][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.244103][ T5816] veth1_macvtap: left promiscuous mode [ 79.244140][ T5816] veth0_macvtap: left promiscuous mode [ 79.244206][ T5816] veth1_vlan: left promiscuous mode [ 79.244256][ T5816] veth0_vlan: left promiscuous mode [ 79.337987][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 79.341091][ T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 79.345900][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.345975][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.348182][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.348200][ T10] usb 8-1: Product: syz [ 79.348211][ T10] usb 8-1: Manufacturer: syz [ 79.348222][ T10] usb 8-1: SerialNumber: syz [ 79.354360][ T10] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 79.355875][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 79.355936][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 79.365419][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 79.370376][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 79.375371][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 79.378038][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 79.383979][ T10] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 79.533889][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 79.543180][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 79.557716][ T10] usb 8-1: USB disconnect, device number 5 [ 79.586926][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 79.589324][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 79.600102][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 79.616572][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 79.617962][ T10] keyspan 8-1:1.0: device disconnected [ 79.682536][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.741466][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.757900][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.767977][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.771722][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.771825][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.783875][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.783979][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.890513][ T5753] Bluetooth: hci1: command tx timeout [ 79.972827][ T7364] veth0_vlan: entered promiscuous mode [ 79.978521][ T7364] veth1_vlan: entered promiscuous mode [ 80.001486][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.031094][ T7364] veth0_macvtap: entered promiscuous mode [ 80.036711][ T7364] veth1_macvtap: entered promiscuous mode [ 80.062135][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.068033][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.085931][ T5816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.086182][ T5816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.086302][ T5816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.086377][ T5816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176543][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.176605][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.209049][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.209094][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.259720][ T7543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 80.260192][ T7543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'. [ 80.287936][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.292926][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 80.499348][ T7416] veth0_vlan: entered promiscuous mode [ 80.506902][ T7416] veth1_vlan: entered promiscuous mode [ 80.532375][ T7416] veth0_macvtap: entered promiscuous mode [ 80.536610][ T7416] veth1_macvtap: entered promiscuous mode [ 80.539991][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 80.548409][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.553943][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.577732][ T5816] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627083][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.627131][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.635255][ T5816] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.645687][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.649244][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713766][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.713839][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.902349][ T7598] netlink: 72 bytes leftover after parsing attributes in process `syz.6.605'. [ 80.902749][ T7598] netlink: 72 bytes leftover after parsing attributes in process `syz.6.605'. [ 81.155779][ T5753] Bluetooth: hci2: command tx timeout [ 81.163514][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 81.163581][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 81.164281][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 81.164293][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 81.426327][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.623'. [ 81.642013][ T7667] FAULT_INJECTION: forcing a failure. [ 81.642013][ T7667] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.642095][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.1.630 Not tainted syzkaller #0 PREEMPT(full) [ 81.642132][ T7667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.642146][ T7667] Call Trace: [ 81.642154][ T7667] [ 81.642163][ T7667] dump_stack_lvl+0x100/0x190 [ 81.642212][ T7667] should_fail_ex.cold+0x5/0xa [ 81.642242][ T7667] get_futex_key+0x1d0/0x14f0 [ 81.642281][ T7667] ? __pfx_get_futex_key+0x10/0x10 [ 81.642323][ T7667] futex_wake+0xf4/0x5e0 [ 81.642346][ T7667] ? kasan_quarantine_put+0x104/0x240 [ 81.642381][ T7667] ? __pfx_futex_wake+0x10/0x10 [ 81.642401][ T7667] ? sctp_setsockopt+0x962/0xb370 [ 81.642439][ T7667] ? sctp_setsockopt+0x168/0xb370 [ 81.642467][ T7667] do_futex+0x2b2/0x440 [ 81.642491][ T7667] ? __pfx_do_futex+0x10/0x10 [ 81.642512][ T7667] ? rcu_is_watching+0x13/0xc0 [ 81.642532][ T7667] ? do_sock_setsockopt+0x101/0x1d0 [ 81.642559][ T7667] ? kfree+0x1e5/0x6d0 [ 81.642604][ T7667] __ia32_sys_futex_time32+0x2f4/0x470 [ 81.642633][ T7667] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 81.642656][ T7667] ? __sys_setsockopt+0x139/0x190 [ 81.642688][ T7667] __do_fast_syscall_32+0x13a/0x8b0 [ 81.642728][ T7667] do_fast_syscall_32+0x32/0x70 [ 81.642758][ T7667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.642785][ T7667] RIP: 0023:0xf6ffefec [ 81.642809][ T7667] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 81.642818][ T7667] RSP: 002b:00000000f53ed5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 81.642840][ T7667] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 81.642853][ T7667] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 81.642865][ T7667] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 81.642878][ T7667] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.642890][ T7667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.642915][ T7667] [ 81.721981][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'. [ 81.957676][ T5753] Bluetooth: hci1: command tx timeout [ 82.010294][ T7698] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 82.011084][ T7698] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 82.090020][ T7705] For dev_enable ops, only valid value is "1" [ 82.255320][ T5831] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 82.416214][ T5831] usb 8-1: not running at top speed; connect to a high speed hub [ 82.416286][ T5831] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 82.417150][ T5831] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.417172][ T5831] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.419078][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.419092][ T5831] usb 8-1: Product: syz [ 82.419099][ T5831] usb 8-1: Manufacturer: syz [ 82.419107][ T5831] usb 8-1: SerialNumber: syz [ 82.427190][ T5831] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 82.427513][ T5831] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 82.427548][ T5831] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 82.431528][ T5831] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 82.433563][ T5831] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 82.436615][ T5831] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 82.437815][ T5831] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 82.438696][ T5831] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 82.630464][ T5834] usb 8-1: USB disconnect, device number 6 [ 82.651750][ T5834] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 82.663060][ T5834] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 82.666054][ T5834] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 82.667296][ T5834] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 82.667707][ T5834] keyspan 8-1:1.0: device disconnected [ 82.762058][ T7741] netlink: 'syz.5.659': attribute type 1 has an invalid length. [ 82.762869][ T7741] netlink: 'syz.5.659': attribute type 1 has an invalid length. [ 82.978062][ T7756] binder: BC_ATTEMPT_ACQUIRE not supported [ 82.978103][ T7756] binder: 7755:7756 ioctl c0306201 800008c0 returned -22 [ 83.194222][ T7763] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 83.195406][ T7763] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 83.245444][ T5746] Bluetooth: hci2: command tx timeout [ 83.391642][ T7778] FAULT_INJECTION: forcing a failure. [ 83.391642][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.391806][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) [ 83.391830][ T7778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.391839][ T7778] Call Trace: [ 83.391843][ T7778] [ 83.391848][ T7778] dump_stack_lvl+0x100/0x190 [ 83.391867][ T7778] should_fail_ex.cold+0x5/0xa [ 83.391883][ T7778] _copy_from_user+0x2e/0xd0 [ 83.391897][ T7778] __sys_bpf+0x2f5/0x4a30 [ 83.391914][ T7778] ? __pfx___sys_bpf+0x10/0x10 [ 83.391938][ T7778] ? find_held_lock+0x2b/0x80 [ 83.391951][ T7778] ? futex_wake+0x4ea/0x5e0 [ 83.391975][ T7778] ? rcu_read_lock_any_held+0x6a/0x90 [ 83.391987][ T7778] ? find_held_lock+0x2b/0x80 [ 83.391998][ T7778] ? ksys_write+0x190/0x250 [ 83.392010][ T7778] ? ksys_write+0x190/0x250 [ 83.392030][ T7778] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 83.392045][ T7778] ? xfd_validate_state+0x129/0x190 [ 83.392065][ T7778] ? __ia32_sys_bpf+0xcc/0x170 [ 83.392163][ T7778] __ia32_sys_bpf+0xcc/0x170 [ 83.392183][ T7778] ? __do_fast_syscall_32+0xb3/0x8b0 [ 83.392202][ T7778] __do_fast_syscall_32+0x13a/0x8b0 [ 83.392221][ T7778] do_fast_syscall_32+0x32/0x70 [ 83.392237][ T7778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.392253][ T7778] RIP: 0023:0xf6ffefec [ 83.392269][ T7778] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 83.392274][ T7778] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 83.392286][ T7778] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 83.392293][ T7778] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.392299][ T7778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.392306][ T7778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.392312][ T7778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.392325][ T7778] [ 83.483517][ T7782] tipc: Started in network mode [ 83.483564][ T7782] tipc: Node identity 4, cluster identity 4711 [ 83.483607][ T7782] tipc: Node number set to 4 [ 83.737387][ T5823] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 83.916049][ T5823] usb 6-1: not running at top speed; connect to a high speed hub [ 83.916117][ T5823] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 83.917639][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.917665][ T5823] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 83.919832][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.919851][ T5823] usb 6-1: Product: syz [ 83.919860][ T5823] usb 6-1: Manufacturer: syz [ 83.919869][ T5823] usb 6-1: SerialNumber: syz [ 83.973862][ T5823] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 83.976517][ T5823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 83.976580][ T5823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 83.984061][ T5823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 83.992238][ T5823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 84.002557][ T5823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 84.005186][ T5823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 84.006854][ T5823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 84.035389][ T5746] Bluetooth: hci1: command tx timeout [ 84.174566][ T10] usb 6-1: USB disconnect, device number 7 [ 84.189023][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 84.197123][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 84.229577][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 84.231802][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 84.232213][ T10] keyspan 6-1:1.0: device disconnected [ 84.632087][ T7814] FAULT_INJECTION: forcing a failure. [ 84.632087][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.636952][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.3.689 Not tainted syzkaller #0 PREEMPT(full) [ 84.636977][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.636986][ T7814] Call Trace: [ 84.636992][ T7814] [ 84.636999][ T7814] dump_stack_lvl+0x100/0x190 [ 84.637027][ T7814] should_fail_ex.cold+0x5/0xa [ 84.637047][ T7814] _copy_from_user+0x2e/0xd0 [ 84.637073][ T7814] __sys_bpf+0x2f5/0x4a30 [ 84.637096][ T7814] ? __pfx___sys_bpf+0x10/0x10 [ 84.637111][ T7814] ? __pfx_futex_hash+0x10/0x10 [ 84.637136][ T7814] ? get_pid_task+0xfc/0x250 [ 84.637152][ T7814] ? get_pid_task+0xfc/0x250 [ 84.637175][ T7814] ? find_held_lock+0x2b/0x80 [ 84.637197][ T7814] ? rcu_read_lock_any_held+0x6a/0x90 [ 84.637215][ T7814] ? find_held_lock+0x2b/0x80 [ 84.637231][ T7814] ? ksys_write+0x190/0x250 [ 84.637248][ T7814] ? ksys_write+0x190/0x250 [ 84.637275][ T7814] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 84.637291][ T7814] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 84.637309][ T7814] ? fput+0x7c/0x100 [ 84.637360][ T7814] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 84.637379][ T7814] ? ksys_write+0x1ac/0x250 [ 84.637398][ T7814] ? __ia32_sys_bpf+0xcc/0x170 [ 84.637416][ T7814] __ia32_sys_bpf+0xcc/0x170 [ 84.637434][ T7814] ? __do_fast_syscall_32+0xb3/0x8b0 [ 84.637457][ T7814] __do_fast_syscall_32+0x13a/0x8b0 [ 84.637481][ T7814] do_fast_syscall_32+0x32/0x70 [ 84.637502][ T7814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.637523][ T7814] RIP: 0023:0xf708efec [ 84.637542][ T7814] Code: Unable to access opcode bytes at 0xf708efc2. [ 84.637550][ T7814] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 84.637567][ T7814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 84.637579][ T7814] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.637588][ T7814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.637597][ T7814] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.637606][ T7814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.637624][ T7814] [ 84.665170][ T5745] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 84.750826][ T7820] FAULT_INJECTION: forcing a failure. [ 84.750826][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 84.750905][ T7820] CPU: 2 UID: 0 PID: 7820 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(full) [ 84.750930][ T7820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.750949][ T7820] Call Trace: [ 84.750953][ T7820] [ 84.750957][ T7820] dump_stack_lvl+0x100/0x190 [ 84.750978][ T7820] should_fail_ex.cold+0x5/0xa [ 84.750993][ T7820] should_failslab+0xc2/0x120 [ 84.751015][ T7820] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 84.751029][ T7820] ? find_held_lock+0x2b/0x80 [ 84.751041][ T7820] ? sock_alloc_inode+0x26/0x2c0 [ 84.751061][ T7820] ? __pfx_sock_alloc_inode+0x10/0x10 [ 84.751077][ T7820] sock_alloc_inode+0x26/0x2c0 [ 84.751093][ T7820] ? __pfx_sock_alloc_inode+0x10/0x10 [ 84.751109][ T7820] alloc_inode+0x68/0x250 [ 84.751127][ T7820] sock_alloc+0x44/0x280 [ 84.751142][ T7820] ? security_socket_create+0x7f/0x250 [ 84.751159][ T7820] __sock_create+0xc2/0x860 [ 84.751178][ T7820] __sys_socket+0x14d/0x260 [ 84.751194][ T7820] ? xfd_validate_state+0x129/0x190 [ 84.751211][ T7820] ? __pfx___sys_socket+0x10/0x10 [ 84.751232][ T7820] __ia32_sys_socket+0x72/0xb0 [ 84.751248][ T7820] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.751263][ T7820] __do_fast_syscall_32+0x13a/0x8b0 [ 84.751280][ T7820] do_fast_syscall_32+0x32/0x70 [ 84.751295][ T7820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.751309][ T7820] RIP: 0023:0xf6ffefec [ 84.751323][ T7820] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 84.751328][ T7820] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 84.751340][ T7820] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 84.751348][ T7820] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.751355][ T7820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.751361][ T7820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.751368][ T7820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.751381][ T7820] [ 84.752300][ T7820] socket: no more sockets [ 84.817180][ T5745] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.818457][ T5745] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.818475][ T5745] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.818498][ T5745] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.819771][ T5745] usb 10-1: config 0 descriptor?? [ 84.828805][ T5745] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 85.054169][ T7839] netlink: 'syz.6.695': attribute type 1 has an invalid length. [ 85.054849][ T7839] netlink: 'syz.6.695': attribute type 1 has an invalid length. [ 85.133859][ T7847] FAULT_INJECTION: forcing a failure. [ 85.133859][ T7847] name failslab, interval 1, probability 0, space 0, times 0 [ 85.133926][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.6.702 Not tainted syzkaller #0 PREEMPT(full) [ 85.133960][ T7847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.133969][ T7847] Call Trace: [ 85.133973][ T7847] [ 85.133978][ T7847] dump_stack_lvl+0x100/0x190 [ 85.133998][ T7847] should_fail_ex.cold+0x5/0xa [ 85.134014][ T7847] should_failslab+0xc2/0x120 [ 85.134031][ T7847] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 85.134044][ T7847] ? find_held_lock+0x2b/0x80 [ 85.134056][ T7847] ? sock_alloc_inode+0x26/0x2c0 [ 85.134073][ T7847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 85.134088][ T7847] sock_alloc_inode+0x26/0x2c0 [ 85.134103][ T7847] ? __pfx_sock_alloc_inode+0x10/0x10 [ 85.134118][ T7847] alloc_inode+0x68/0x250 [ 85.134135][ T7847] sock_alloc+0x44/0x280 [ 85.134148][ T7847] ? security_socket_create+0x7f/0x250 [ 85.134162][ T7847] __sock_create+0xc2/0x860 [ 85.134186][ T7847] __sys_socket+0x14d/0x260 [ 85.134203][ T7847] ? xfd_validate_state+0x129/0x190 [ 85.134220][ T7847] ? __pfx___sys_socket+0x10/0x10 [ 85.134242][ T7847] __ia32_sys_socket+0x72/0xb0 [ 85.134259][ T7847] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.134275][ T7847] __do_fast_syscall_32+0x13a/0x8b0 [ 85.134292][ T7847] do_fast_syscall_32+0x32/0x70 [ 85.134307][ T7847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.134321][ T7847] RIP: 0023:0xf7f13fec [ 85.134336][ T7847] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 85.134341][ T7847] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 85.134353][ T7847] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 85.134361][ T7847] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.134368][ T7847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.134375][ T7847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.134384][ T7847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.134399][ T7847] [ 85.135341][ T7847] socket: no more sockets [ 85.315693][ T5753] Bluetooth: hci2: command tx timeout [ 85.337597][ T7863] fuse: Bad value for 'group_id' [ 85.337646][ T7863] fuse: Bad value for 'group_id' [ 85.529580][ T7875] FAULT_INJECTION: forcing a failure. [ 85.529580][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.529635][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT(full) [ 85.529669][ T7875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.529681][ T7875] Call Trace: [ 85.529689][ T7875] [ 85.529696][ T7875] dump_stack_lvl+0x100/0x190 [ 85.529725][ T7875] should_fail_ex.cold+0x5/0xa [ 85.529742][ T7875] _copy_from_user+0x2e/0xd0 [ 85.529757][ T7875] __sys_bpf+0x2f5/0x4a30 [ 85.529773][ T7875] ? __pfx___sys_bpf+0x10/0x10 [ 85.529782][ T7875] ? find_held_lock+0x2b/0x80 [ 85.529795][ T7875] ? futex_wake+0x4ea/0x5e0 [ 85.529819][ T7875] ? rcu_read_lock_any_held+0x6a/0x90 [ 85.529832][ T7875] ? find_held_lock+0x2b/0x80 [ 85.529843][ T7875] ? ksys_write+0x190/0x250 [ 85.529854][ T7875] ? ksys_write+0x190/0x250 [ 85.529874][ T7875] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 85.529892][ T7875] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 85.529913][ T7875] ? fput+0x7c/0x100 [ 85.529933][ T7875] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 85.529950][ T7875] ? ksys_write+0x1ac/0x250 [ 85.529962][ T7875] ? __ia32_sys_bpf+0xcc/0x170 [ 85.529972][ T7875] __ia32_sys_bpf+0xcc/0x170 [ 85.529986][ T7875] ? __do_fast_syscall_32+0xb3/0x8b0 [ 85.530003][ T7875] __do_fast_syscall_32+0x13a/0x8b0 [ 85.530020][ T7875] do_fast_syscall_32+0x32/0x70 [ 85.530036][ T7875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.530050][ T7875] RIP: 0023:0xf6ffefec [ 85.530064][ T7875] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 85.530070][ T7875] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 85.530082][ T7875] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 85.530089][ T7875] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.530096][ T7875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.530102][ T7875] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.530108][ T7875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.530122][ T7875] [ 85.567713][ T7877] netlink: 'syz.1.715': attribute type 4 has an invalid length. [ 85.667336][ T7883] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 85.878693][ T7897] FAULT_INJECTION: forcing a failure. [ 85.878693][ T7897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.878749][ T7897] CPU: 3 UID: 0 PID: 7897 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(full) [ 85.878773][ T7897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.878782][ T7897] Call Trace: [ 85.878786][ T7897] [ 85.878791][ T7897] dump_stack_lvl+0x100/0x190 [ 85.878810][ T7897] should_fail_ex.cold+0x5/0xa [ 85.878826][ T7897] _copy_from_user+0x2e/0xd0 [ 85.878841][ T7897] __sys_bpf+0x2f5/0x4a30 [ 85.878857][ T7897] ? __pfx___sys_bpf+0x10/0x10 [ 85.878867][ T7897] ? find_held_lock+0x2b/0x80 [ 85.878880][ T7897] ? futex_wake+0x4ea/0x5e0 [ 85.878903][ T7897] ? rcu_read_lock_any_held+0x6a/0x90 [ 85.878915][ T7897] ? find_held_lock+0x2b/0x80 [ 85.878926][ T7897] ? ksys_write+0x190/0x250 [ 85.878937][ T7897] ? ksys_write+0x190/0x250 [ 85.878959][ T7897] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 85.878972][ T7897] ? xfd_validate_state+0x129/0x190 [ 85.878992][ T7897] ? __ia32_sys_bpf+0xcc/0x170 [ 85.879002][ T7897] __ia32_sys_bpf+0xcc/0x170 [ 85.879015][ T7897] ? __do_fast_syscall_32+0xb3/0x8b0 [ 85.879031][ T7897] __do_fast_syscall_32+0x13a/0x8b0 [ 85.879048][ T7897] do_fast_syscall_32+0x32/0x70 [ 85.879063][ T7897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.879077][ T7897] RIP: 0023:0xf6ffefec [ 85.879090][ T7897] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 85.879096][ T7897] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 85.879108][ T7897] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 85.879115][ T7897] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.879122][ T7897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.879128][ T7897] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.879135][ T7897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.879148][ T7897] [ 85.954933][ T7901] FAULT_INJECTION: forcing a failure. [ 85.954933][ T7901] name failslab, interval 1, probability 0, space 0, times 0 [ 85.954955][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.1.726 Not tainted syzkaller #0 PREEMPT(full) [ 85.954969][ T7901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.954977][ T7901] Call Trace: [ 85.954982][ T7901] [ 85.954986][ T7901] dump_stack_lvl+0x100/0x190 [ 85.955006][ T7901] should_fail_ex.cold+0x5/0xa [ 85.955023][ T7901] should_failslab+0xc2/0x120 [ 85.955056][ T7901] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.955078][ T7901] ? fuse_request_alloc+0x22/0x200 [ 85.955096][ T7901] fuse_request_alloc+0x22/0x200 [ 85.955109][ T7901] fuse_get_req+0x20a/0x400 [ 85.955122][ T7901] ? __pfx_fuse_get_req+0x10/0x10 [ 85.955136][ T7901] ? from_kgid+0x8f/0xd0 [ 85.955152][ T7901] ? __pfx_from_kgid+0x10/0x10 [ 85.955169][ T7901] ? pid_nr_ns+0xe6/0x150 [ 85.955183][ T7901] fuse_chan_send_bg+0x3ab/0x800 [ 85.955201][ T7901] fuse_simple_background+0x273/0x2e0 [ 85.955218][ T7901] cuse_channel_open+0x5e6/0x8f0 [ 85.955231][ T7901] ? __pfx_cuse_channel_open+0x10/0x10 [ 85.955243][ T7901] misc_open+0x26d/0x450 [ 85.955255][ T7901] ? __pfx_misc_open+0x10/0x10 [ 85.955265][ T7901] chrdev_open+0x234/0x6a0 [ 85.955278][ T7901] ? __pfx_apparmor_file_open+0x10/0x10 [ 85.955294][ T7901] ? __pfx_chrdev_open+0x10/0x10 [ 85.955308][ T7901] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 85.955325][ T7901] do_dentry_open+0x6ab/0x14d0 [ 85.955337][ T7901] ? __pfx_chrdev_open+0x10/0x10 [ 85.955354][ T7901] vfs_open+0x82/0x3f0 [ 85.955371][ T7901] path_openat+0x19fa/0x2440 [ 85.955386][ T7901] ? __pfx_path_openat+0x10/0x10 [ 85.955402][ T7901] do_file_open+0x20e/0x430 [ 85.955416][ T7901] ? __pfx_do_file_open+0x10/0x10 [ 85.955438][ T7901] ? _raw_spin_unlock+0x28/0x50 [ 85.955451][ T7901] ? alloc_fd+0x471/0x7a0 [ 85.955467][ T7901] do_sys_openat2+0x10f/0x1e0 [ 85.955482][ T7901] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.955503][ T7901] __ia32_compat_sys_openat+0x12d/0x210 [ 85.955520][ T7901] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 85.955535][ T7901] ? ksys_write+0x1ac/0x250 [ 85.955551][ T7901] __do_fast_syscall_32+0x13a/0x8b0 [ 85.955569][ T7901] do_fast_syscall_32+0x32/0x70 [ 85.955586][ T7901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.955601][ T7901] RIP: 0023:0xf6ffefec [ 85.955615][ T7901] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 85.955620][ T7901] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 85.955631][ T7901] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 85.955638][ T7901] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.955645][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.955651][ T7901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.955658][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.955671][ T7901] [ 86.125641][ T5753] Bluetooth: hci1: command 0x0419 tx timeout [ 86.173706][ T7917] FAULT_INJECTION: forcing a failure. [ 86.173706][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 86.173811][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.3.733 Not tainted syzkaller #0 PREEMPT(full) [ 86.173849][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.173861][ T7917] Call Trace: [ 86.173868][ T7917] [ 86.173875][ T7917] dump_stack_lvl+0x100/0x190 [ 86.173905][ T7917] should_fail_ex.cold+0x5/0xa [ 86.173930][ T7917] should_failslab+0xc2/0x120 [ 86.173973][ T7917] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 86.173996][ T7917] ? find_held_lock+0x2b/0x80 [ 86.174013][ T7917] ? sock_alloc_inode+0x26/0x2c0 [ 86.174039][ T7917] ? __pfx_sock_alloc_inode+0x10/0x10 [ 86.174065][ T7917] sock_alloc_inode+0x26/0x2c0 [ 86.174088][ T7917] ? __pfx_sock_alloc_inode+0x10/0x10 [ 86.174111][ T7917] alloc_inode+0x68/0x250 [ 86.174137][ T7917] sock_alloc+0x44/0x280 [ 86.174157][ T7917] ? security_socket_create+0x7f/0x250 [ 86.174181][ T7917] __sock_create+0xc2/0x860 [ 86.174211][ T7917] __sys_socket+0x14d/0x260 [ 86.174237][ T7917] ? xfd_validate_state+0x129/0x190 [ 86.174262][ T7917] ? __pfx___sys_socket+0x10/0x10 [ 86.174295][ T7917] __ia32_sys_socket+0x72/0xb0 [ 86.174322][ T7917] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.174345][ T7917] __do_fast_syscall_32+0x13a/0x8b0 [ 86.174373][ T7917] do_fast_syscall_32+0x32/0x70 [ 86.174400][ T7917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.174422][ T7917] RIP: 0023:0xf708efec [ 86.174444][ T7917] Code: Unable to access opcode bytes at 0xf708efc2. [ 86.174452][ T7917] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 86.174472][ T7917] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 86.174483][ T7917] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.174495][ T7917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.174506][ T7917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.174524][ T7917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.174549][ T7917] [ 86.174701][ T7917] socket: no more sockets [ 86.281003][ T7926] FAULT_INJECTION: forcing a failure. [ 86.281003][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 86.281065][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.3.737 Not tainted syzkaller #0 PREEMPT(full) [ 86.281098][ T7926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.281110][ T7926] Call Trace: [ 86.281117][ T7926] [ 86.281125][ T7926] dump_stack_lvl+0x100/0x190 [ 86.281154][ T7926] should_fail_ex.cold+0x5/0xa [ 86.281174][ T7926] ? __netlink_lookup+0x652/0x900 [ 86.281205][ T7926] should_failslab+0xc2/0x120 [ 86.281228][ T7926] kmem_cache_alloc_noprof+0x92/0x6a0 [ 86.281249][ T7926] ? skb_clone+0x190/0x400 [ 86.281273][ T7926] skb_clone+0x190/0x400 [ 86.281294][ T7926] netlink_deliver_tap+0xaed/0xcc0 [ 86.281349][ T7926] netlink_unicast+0x62b/0x850 [ 86.281372][ T7926] ? __pfx_netlink_unicast+0x10/0x10 [ 86.281400][ T7926] netlink_sendmsg+0x8b0/0xda0 [ 86.281426][ T7926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.281448][ T7926] ? apparmor_socket_sendmsg+0x165/0x280 [ 86.281475][ T7926] sock_write_iter+0x53a/0x5b0 [ 86.281501][ T7926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.281528][ T7926] ? __pfx_sock_write_iter+0x10/0x10 [ 86.281565][ T7926] ? copy_compat_iovec_from_user+0x13a/0x180 [ 86.281588][ T7926] do_iter_readv_writev+0x6f7/0x930 [ 86.281618][ T7926] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 86.281644][ T7926] ? common_file_perm+0x266/0x500 [ 86.281671][ T7926] ? bpf_lsm_file_permission+0x9/0x10 [ 86.281694][ T7926] ? security_file_permission+0x76/0x210 [ 86.281720][ T7926] ? rw_verify_area+0xce/0x6d0 [ 86.281749][ T7926] vfs_writev+0x360/0xdd0 [ 86.281781][ T7926] ? __lock_acquire+0x4c5/0x1ec0 [ 86.281814][ T7926] ? __pfx_vfs_writev+0x10/0x10 [ 86.281850][ T7926] ? lock_acquire+0x1d1/0x380 [ 86.281876][ T7926] ? __fget_files+0x34/0x3d0 [ 86.281906][ T7926] ? __fget_files+0x21f/0x3d0 [ 86.281929][ T7926] ? do_writev+0x28a/0x340 [ 86.281954][ T7926] do_writev+0x28a/0x340 [ 86.281981][ T7926] ? __pfx_do_writev+0x10/0x10 [ 86.282014][ T7926] __do_fast_syscall_32+0x13a/0x8b0 [ 86.282038][ T7926] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.282063][ T7926] do_fast_syscall_32+0x32/0x70 [ 86.282087][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.282113][ T7926] RIP: 0023:0xf708efec [ 86.282138][ T7926] Code: Unable to access opcode bytes at 0xf708efc2. [ 86.282147][ T7926] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 86.282166][ T7926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009ac0 [ 86.282184][ T7926] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.282195][ T7926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.282207][ T7926] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.282219][ T7926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.282244][ T7926] [ 86.282943][ T7927] FAULT_INJECTION: forcing a failure. [ 86.282943][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.282966][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.1.736 Not tainted syzkaller #0 PREEMPT(full) [ 86.282980][ T7927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.282987][ T7927] Call Trace: [ 86.282991][ T7927] [ 86.282996][ T7927] dump_stack_lvl+0x100/0x190 [ 86.283015][ T7927] should_fail_ex.cold+0x5/0xa [ 86.283033][ T7927] _copy_from_user+0x2e/0xd0 [ 86.283049][ T7927] __sys_bpf+0x2f5/0x4a30 [ 86.283065][ T7927] ? __pfx___sys_bpf+0x10/0x10 [ 86.283075][ T7927] ? find_held_lock+0x2b/0x80 [ 86.283088][ T7927] ? futex_wake+0x4ea/0x5e0 [ 86.283114][ T7927] ? rcu_read_lock_any_held+0x6a/0x90 [ 86.283129][ T7927] ? find_held_lock+0x2b/0x80 [ 86.283141][ T7927] ? ksys_write+0x190/0x250 [ 86.283152][ T7927] ? ksys_write+0x190/0x250 [ 86.283171][ T7927] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 86.283185][ T7927] ? xfd_validate_state+0x129/0x190 [ 86.283205][ T7927] ? __ia32_sys_bpf+0xcc/0x170 [ 86.283215][ T7927] __ia32_sys_bpf+0xcc/0x170 [ 86.283227][ T7927] ? __do_fast_syscall_32+0xb3/0x8b0 [ 86.283245][ T7927] __do_fast_syscall_32+0x13a/0x8b0 [ 86.283283][ T7927] do_fast_syscall_32+0x32/0x70 [ 86.283300][ T7927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.283316][ T7927] RIP: 0023:0xf6ffefec [ 86.283332][ T7927] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 86.283338][ T7927] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 86.283351][ T7927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 86.283359][ T7927] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.283366][ T7927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.283373][ T7927] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.283380][ T7927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.283393][ T7927] [ 86.344496][ T7930] FAULT_INJECTION: forcing a failure. [ 86.344496][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 86.344531][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.1.738 Not tainted syzkaller #0 PREEMPT(full) [ 86.344554][ T7930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.344565][ T7930] Call Trace: [ 86.344571][ T7930] [ 86.344582][ T7930] dump_stack_lvl+0x100/0x190 [ 86.344613][ T7930] should_fail_ex.cold+0x5/0xa [ 86.344638][ T7930] should_failslab+0xc2/0x120 [ 86.344662][ T7930] kmem_cache_alloc_noprof+0x92/0x6a0 [ 86.344683][ T7930] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 86.344712][ T7930] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 86.344738][ T7930] idr_get_free+0x52e/0xa00 [ 86.344769][ T7930] idr_alloc_u32+0x1ac/0x320 [ 86.344794][ T7930] ? __pfx_idr_alloc_u32+0x10/0x10 [ 86.344842][ T7930] ? __pfx___debug_object_init+0x10/0x10 [ 86.344878][ T7930] idr_alloc+0xc0/0x130 [ 86.344906][ T7930] ? __pfx_idr_alloc+0x10/0x10 [ 86.344933][ T7930] ? lockdep_init_map_type+0x5c/0x250 [ 86.344969][ T7930] loop_add+0x1fe/0xb60 [ 86.345004][ T7930] ? __pfx_loop_add+0x10/0x10 [ 86.345050][ T7930] ? __fget_files+0x34/0x3d0 [ 86.345074][ T7930] ? find_held_lock+0x2b/0x80 [ 86.345095][ T7930] ? __fget_files+0x215/0x3d0 [ 86.345118][ T7930] loop_control_ioctl+0xae/0x620 [ 86.345143][ T7930] ? __pfx_loop_control_ioctl+0x10/0x10 [ 86.345169][ T7930] ? __pfx_loop_control_ioctl+0x10/0x10 [ 86.345190][ T7930] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 86.345225][ T7930] __do_fast_syscall_32+0x13a/0x8b0 [ 86.345257][ T7930] do_fast_syscall_32+0x32/0x70 [ 86.345285][ T7930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.345336][ T7930] RIP: 0023:0xf6ffefec [ 86.345359][ T7930] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 86.345369][ T7930] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 86.345392][ T7930] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 86.345406][ T7930] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.345422][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.345434][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.345447][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.345476][ T7930] [ 86.621882][ T7944] FAULT_INJECTION: forcing a failure. [ 86.621882][ T7944] name failslab, interval 1, probability 0, space 0, times 0 [ 86.621961][ T7944] CPU: 1 UID: 0 PID: 7944 Comm: syz.1.744 Not tainted syzkaller #0 PREEMPT(full) [ 86.621986][ T7944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.622006][ T7944] Call Trace: [ 86.622015][ T7944] [ 86.622020][ T7944] dump_stack_lvl+0x100/0x190 [ 86.622040][ T7944] should_fail_ex.cold+0x5/0xa [ 86.622056][ T7944] should_failslab+0xc2/0x120 [ 86.622074][ T7944] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 86.622087][ T7944] ? find_held_lock+0x2b/0x80 [ 86.622099][ T7944] ? sock_alloc_inode+0x26/0x2c0 [ 86.622116][ T7944] ? __pfx_sock_alloc_inode+0x10/0x10 [ 86.622132][ T7944] sock_alloc_inode+0x26/0x2c0 [ 86.622147][ T7944] ? __pfx_sock_alloc_inode+0x10/0x10 [ 86.622162][ T7944] alloc_inode+0x68/0x250 [ 86.622178][ T7944] sock_alloc+0x44/0x280 [ 86.622192][ T7944] ? security_socket_create+0x7f/0x250 [ 86.622206][ T7944] __sock_create+0xc2/0x860 [ 86.622225][ T7944] __sys_socket+0x14d/0x260 [ 86.622241][ T7944] ? fput+0x7c/0x100 [ 86.622254][ T7944] ? __pfx___sys_socket+0x10/0x10 [ 86.622270][ T7944] ? ksys_write+0x1ac/0x250 [ 86.622281][ T7944] ? __pfx_ksys_write+0x10/0x10 [ 86.622294][ T7944] __ia32_sys_socket+0x72/0xb0 [ 86.622311][ T7944] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.622325][ T7944] __do_fast_syscall_32+0x13a/0x8b0 [ 86.622342][ T7944] do_fast_syscall_32+0x32/0x70 [ 86.622358][ T7944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.622372][ T7944] RIP: 0023:0xf6ffefec [ 86.622386][ T7944] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 86.622392][ T7944] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 86.622404][ T7944] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 86.622411][ T7944] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.622418][ T7944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.622424][ T7944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.622430][ T7944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.622444][ T7944] [ 86.622513][ T7944] socket: no more sockets [ 86.693465][ T7948] FAULT_INJECTION: forcing a failure. [ 86.693465][ T7948] name failslab, interval 1, probability 0, space 0, times 0 [ 86.693501][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.3.748 Not tainted syzkaller #0 PREEMPT(full) [ 86.693534][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.693547][ T7948] Call Trace: [ 86.693554][ T7948] [ 86.693563][ T7948] dump_stack_lvl+0x100/0x190 [ 86.693600][ T7948] should_fail_ex.cold+0x5/0xa [ 86.693628][ T7948] should_failslab+0xc2/0x120 [ 86.693658][ T7948] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 86.693687][ T7948] ? __d_alloc+0x35/0xa50 [ 86.693718][ T7948] __d_alloc+0x35/0xa50 [ 86.693765][ T7948] d_alloc_pseudo+0x1c/0xc0 [ 86.693799][ T7948] alloc_file_pseudo+0x118/0x290 [ 86.693830][ T7948] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 86.693860][ T7948] ? alloc_fd+0x471/0x7a0 [ 86.693890][ T7948] sock_alloc_file+0x50/0x210 [ 86.693919][ T7948] __sys_socket+0x1c0/0x260 [ 86.693950][ T7948] ? xfd_validate_state+0x129/0x190 [ 86.693982][ T7948] ? __pfx___sys_socket+0x10/0x10 [ 86.694022][ T7948] __ia32_sys_socket+0x72/0xb0 [ 86.694055][ T7948] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.694083][ T7948] __do_fast_syscall_32+0x13a/0x8b0 [ 86.694116][ T7948] do_fast_syscall_32+0x32/0x70 [ 86.694147][ T7948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.694174][ T7948] RIP: 0023:0xf708efec [ 86.694199][ T7948] Code: Unable to access opcode bytes at 0xf708efc2. [ 86.694210][ T7948] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 86.694232][ T7948] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000000000001 [ 86.694246][ T7948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.694259][ T7948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.694271][ T7948] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.694284][ T7948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.694312][ T7948] [ 86.741175][ T7952] FAULT_INJECTION: forcing a failure. [ 86.741175][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.741215][ T7952] CPU: 2 UID: 0 PID: 7952 Comm: syz.6.747 Not tainted syzkaller #0 PREEMPT(full) [ 86.741238][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.741251][ T7952] Call Trace: [ 86.741259][ T7952] [ 86.741267][ T7952] dump_stack_lvl+0x100/0x190 [ 86.741299][ T7952] should_fail_ex.cold+0x5/0xa [ 86.741356][ T7952] _copy_from_user+0x2e/0xd0 [ 86.741383][ T7952] __sys_bpf+0x2f5/0x4a30 [ 86.741411][ T7952] ? __pfx___sys_bpf+0x10/0x10 [ 86.741427][ T7952] ? find_held_lock+0x2b/0x80 [ 86.741448][ T7952] ? futex_wake+0x4ea/0x5e0 [ 86.741490][ T7952] ? rcu_read_lock_any_held+0x6a/0x90 [ 86.741516][ T7952] ? find_held_lock+0x2b/0x80 [ 86.741533][ T7952] ? ksys_write+0x190/0x250 [ 86.741551][ T7952] ? ksys_write+0x190/0x250 [ 86.741582][ T7952] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 86.741603][ T7952] ? xfd_validate_state+0x129/0x190 [ 86.741635][ T7952] ? __ia32_sys_bpf+0xcc/0x170 [ 86.741654][ T7952] __ia32_sys_bpf+0xcc/0x170 [ 86.741674][ T7952] ? __do_fast_syscall_32+0xb3/0x8b0 [ 86.741701][ T7952] __do_fast_syscall_32+0x13a/0x8b0 [ 86.741742][ T7952] do_fast_syscall_32+0x32/0x70 [ 86.741770][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.741797][ T7952] RIP: 0023:0xf7f13fec [ 86.741823][ T7952] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 86.741833][ T7952] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 86.741854][ T7952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 86.741866][ T7952] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.741879][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.741887][ T7952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.741898][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.741923][ T7952] [ 87.079319][ T7974] FAULT_INJECTION: forcing a failure. [ 87.079319][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 87.079409][ T7974] CPU: 2 UID: 0 PID: 7974 Comm: syz.3.755 Not tainted syzkaller #0 PREEMPT(full) [ 87.079446][ T7974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.079455][ T7974] Call Trace: [ 87.079460][ T7974] [ 87.079467][ T7974] dump_stack_lvl+0x100/0x190 [ 87.079487][ T7974] should_fail_ex.cold+0x5/0xa [ 87.079510][ T7974] should_failslab+0xc2/0x120 [ 87.079527][ T7974] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 87.079541][ T7974] ? find_held_lock+0x2b/0x80 [ 87.079554][ T7974] ? sock_alloc_inode+0x26/0x2c0 [ 87.079571][ T7974] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.079587][ T7974] sock_alloc_inode+0x26/0x2c0 [ 87.079601][ T7974] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.079616][ T7974] alloc_inode+0x68/0x250 [ 87.079633][ T7974] sock_alloc+0x44/0x280 [ 87.079647][ T7974] ? security_socket_create+0x7f/0x250 [ 87.079661][ T7974] __sock_create+0xc2/0x860 [ 87.079680][ T7974] __sys_socket+0x14d/0x260 [ 87.079696][ T7974] ? fput+0x7c/0x100 [ 87.079709][ T7974] ? __pfx___sys_socket+0x10/0x10 [ 87.079725][ T7974] ? ksys_write+0x1ac/0x250 [ 87.079736][ T7974] ? __pfx_ksys_write+0x10/0x10 [ 87.079749][ T7974] __ia32_sys_socket+0x72/0xb0 [ 87.079765][ T7974] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.079794][ T7974] __do_fast_syscall_32+0x13a/0x8b0 [ 87.079812][ T7974] do_fast_syscall_32+0x32/0x70 [ 87.079827][ T7974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.079843][ T7974] RIP: 0023:0xf708efec [ 87.079858][ T7974] Code: Unable to access opcode bytes at 0xf708efc2. [ 87.079863][ T7974] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 87.079875][ T7974] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 87.079882][ T7974] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.079889][ T7974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.079895][ T7974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.079901][ T7974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.079915][ T7974] [ 87.080005][ T7974] socket: no more sockets [ 87.361432][ T7992] socket: no more sockets [ 87.445615][ T62] usb 10-1: USB disconnect, device number 2 [ 87.498349][ T7997] FAULT_INJECTION: forcing a failure. [ 87.498349][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 87.498413][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.3.764 Not tainted syzkaller #0 PREEMPT(full) [ 87.498446][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.498459][ T7997] Call Trace: [ 87.498466][ T7997] [ 87.498474][ T7997] dump_stack_lvl+0x100/0x190 [ 87.498502][ T7997] should_fail_ex.cold+0x5/0xa [ 87.498528][ T7997] should_failslab+0xc2/0x120 [ 87.498552][ T7997] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 87.498573][ T7997] ? find_held_lock+0x2b/0x80 [ 87.498590][ T7997] ? sock_alloc_inode+0x26/0x2c0 [ 87.498617][ T7997] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.498642][ T7997] sock_alloc_inode+0x26/0x2c0 [ 87.498664][ T7997] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.498687][ T7997] alloc_inode+0x68/0x250 [ 87.498713][ T7997] sock_alloc+0x44/0x280 [ 87.498733][ T7997] ? security_socket_create+0x7f/0x250 [ 87.498755][ T7997] __sock_create+0xc2/0x860 [ 87.498785][ T7997] __sys_socket+0x14d/0x260 [ 87.498811][ T7997] ? xfd_validate_state+0x129/0x190 [ 87.498841][ T7997] ? __pfx___sys_socket+0x10/0x10 [ 87.498877][ T7997] __ia32_sys_socket+0x72/0xb0 [ 87.498904][ T7997] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.498928][ T7997] __do_fast_syscall_32+0x13a/0x8b0 [ 87.498972][ T7997] do_fast_syscall_32+0x32/0x70 [ 87.499000][ T7997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.499025][ T7997] RIP: 0023:0xf708efec [ 87.499047][ T7997] Code: Unable to access opcode bytes at 0xf708efc2. [ 87.499055][ T7997] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 87.499074][ T7997] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000003 [ 87.499085][ T7997] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.499097][ T7997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.499108][ T7997] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.499118][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.499142][ T7997] [ 87.500830][ T7997] socket: no more sockets [ 87.959575][ T8022] validate_nla: 3 callbacks suppressed [ 87.959679][ T8022] netlink: 'syz.6.774': attribute type 1 has an invalid length. [ 87.960571][ T8022] netlink: 'syz.6.774': attribute type 1 has an invalid length. [ 88.030401][ T8026] gadgetfs: bound to dummy_udc driver [ 88.038353][ T8028] tipc: Started in network mode [ 88.038412][ T8028] tipc: Node identity 4, cluster identity 4711 [ 88.038570][ T8028] tipc: Node number set to 4 [ 88.159702][ T8026] Could not create tracefs 'available_tracers' entry [ 88.165753][ T8026] Could not create tracefs 'current_tracer' entry [ 88.170979][ T8026] Could not create tracefs 'tracing_cpumask' entry [ 88.177688][ T8026] Could not create tracefs 'trace_options' entry [ 88.183230][ T8026] Could not create tracefs 'trace' entry [ 88.189528][ T8026] Could not create tracefs 'trace_pipe' entry [ 88.192451][ T8026] Could not create tracefs 'buffer_size_kb' entry [ 88.200845][ T8026] Could not create tracefs 'buffer_total_size_kb' entry [ 88.205197][ T5753] Bluetooth: hci1: command 0x0419 tx timeout [ 88.206877][ T8026] Could not create tracefs 'trace_clock' entry [ 88.211439][ T8026] Could not create tracefs 'timestamp_mode' entry [ 88.220025][ T8026] Could not create tracefs 'buffer_subbuf_size_kb' entry [ 88.232470][ T8026] Could not create tracefs directory 'options' [ 88.242844][ T8026] ERROR: Could not create tracefs directory 'per_cpu/0' [ 88.265407][ T5745] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 88.265915][ C0] gadgetfs: connected [ 88.266327][ T5745] gadgetfs: disconnected [ 88.296324][ T8026] Could not create tracefs 'free_buffer' entry [ 88.303335][ T8026] Could not create tracefs 'trace_marker' entry [ 88.305241][ T5823] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 88.311232][ T8026] Could not create tracefs 'trace_marker_raw' entry [ 88.322542][ T8026] Could not create tracefs 'buffer_percent' entry [ 88.329142][ T8026] Could not create tracefs 'syscall_user_buf_size' entry [ 88.338439][ T8026] Could not create tracefs 'tracing_on' entry [ 88.346123][ T8026] Could not create tracefs 'error_log' entry [ 88.354322][ T8026] Could not create tracefs directory 'options' [ 88.354377][ T8026] ERROR: Failed to create trace option: test_nop_accept [ 88.362795][ T8026] Could not create tracefs directory 'options' [ 88.378699][ T8026] gadgetfs: suspended from state 2 [ 88.457373][ T5823] usb 11-1: not running at top speed; connect to a high speed hub [ 88.457450][ T5823] usb 11-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 88.458342][ T5823] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.458377][ T5823] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 88.460132][ T5823] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.460151][ T5823] usb 11-1: Product: syz [ 88.460162][ T5823] usb 11-1: Manufacturer: syz [ 88.460174][ T5823] usb 11-1: SerialNumber: syz [ 88.468586][ T5823] keyspan 11-1:1.0: Keyspan 4 port adapter converter detected [ 88.469101][ T5823] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 88.469156][ T5823] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 88.473278][ T5823] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 88.476174][ T5823] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 88.479170][ T5823] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 88.480341][ T5823] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 88.482822][ T5823] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 88.605194][ T5745] usb 5-1: device not accepting address 4, error -71 [ 88.645146][ T5834] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 88.686597][ T25] usb 11-1: USB disconnect, device number 2 [ 88.694931][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 88.699900][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 88.709065][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 88.710492][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 88.710918][ T25] keyspan 11-1:1.0: device disconnected [ 88.797057][ T5834] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.799999][ T5834] usb 10-1: too many configurations: 13, using maximum allowed: 8 [ 88.802945][ T5834] usb 10-1: config 0 has no interfaces? [ 88.804098][ T5834] usb 10-1: config 0 has no interfaces? [ 88.804667][ T5834] usb 10-1: config 0 has no interfaces? [ 88.805335][ T5834] usb 10-1: config 0 has no interfaces? [ 88.805726][ T5834] usb 10-1: config 0 has no interfaces? [ 88.806102][ T5834] usb 10-1: config 0 has no interfaces? [ 88.806724][ T5834] usb 10-1: config 0 has no interfaces? [ 88.809277][ T5834] usb 10-1: config 0 has no interfaces? [ 88.810920][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.810935][ T5834] usb 10-1: Product: syz [ 88.810943][ T5834] usb 10-1: Manufacturer: syz [ 88.810951][ T5834] usb 10-1: SerialNumber: syz [ 88.812925][ T5834] usb 10-1: config 0 descriptor?? [ 88.966341][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.969853][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.017071][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.017329][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.023559][ T5834] usb 10-1: USB disconnect, device number 3 [ 89.265462][ T25] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 89.425992][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 89.426063][ T25] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 89.427101][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 89.429050][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.429063][ T25] usb 8-1: Product: syz [ 89.429071][ T25] usb 8-1: Manufacturer: syz [ 89.429079][ T25] usb 8-1: SerialNumber: syz [ 89.435016][ T25] oti6858 8-1:1.0: oti6858 converter detected [ 89.438340][ T25] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 89.475534][ T2316] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 89.646454][ T2316] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.646512][ T2316] usb 10-1: too many configurations: 13, using maximum allowed: 8 [ 89.647009][ T2316] usb 10-1: config 0 has no interfaces? [ 89.647403][ T2316] usb 10-1: config 0 has no interfaces? [ 89.648606][ T2316] usb 10-1: config 0 has no interfaces? [ 89.649090][ T2316] usb 10-1: config 0 has no interfaces? [ 89.649560][ T2316] usb 10-1: config 0 has no interfaces? [ 89.650015][ T2316] usb 10-1: config 0 has no interfaces? [ 89.650454][ T2316] usb 10-1: config 0 has no interfaces? [ 89.650943][ T2316] usb 10-1: config 0 has no interfaces? [ 89.651192][ T8070] FAULT_INJECTION: forcing a failure. [ 89.651192][ T8070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.651212][ T8070] CPU: 3 UID: 0 PID: 8070 Comm: syz.6.793 Not tainted syzkaller #0 PREEMPT(full) [ 89.651226][ T8070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.651232][ T8070] Call Trace: [ 89.651237][ T8070] [ 89.651242][ T8070] dump_stack_lvl+0x100/0x190 [ 89.651261][ T8070] should_fail_ex.cold+0x5/0xa [ 89.651277][ T8070] _copy_from_user+0x2e/0xd0 [ 89.651294][ T8070] __sys_bpf+0x2f5/0x4a30 [ 89.651311][ T8070] ? __pfx___sys_bpf+0x10/0x10 [ 89.651321][ T8070] ? find_held_lock+0x2b/0x80 [ 89.651334][ T8070] ? futex_wake+0x4ea/0x5e0 [ 89.651360][ T8070] ? rcu_read_lock_any_held+0x6a/0x90 [ 89.651373][ T8070] ? find_held_lock+0x2b/0x80 [ 89.651384][ T8070] ? ksys_write+0x190/0x250 [ 89.651397][ T8070] ? ksys_write+0x190/0x250 [ 89.651416][ T8070] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 89.651431][ T8070] ? xfd_validate_state+0x129/0x190 [ 89.651451][ T8070] ? __ia32_sys_bpf+0xcc/0x170 [ 89.651462][ T8070] __ia32_sys_bpf+0xcc/0x170 [ 89.651474][ T8070] ? __do_fast_syscall_32+0xb3/0x8b0 [ 89.651491][ T8070] __do_fast_syscall_32+0x13a/0x8b0 [ 89.651508][ T8070] do_fast_syscall_32+0x32/0x70 [ 89.651523][ T8070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.651538][ T8070] RIP: 0023:0xf7f13fec [ 89.651551][ T8070] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 89.651563][ T8070] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 89.651576][ T8070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800007c0 [ 89.651584][ T8070] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.651591][ T8070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.651598][ T8070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.651606][ T8070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.651621][ T8070] [ 89.652833][ T2316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.652852][ T2316] usb 10-1: Product: syz [ 89.652864][ T2316] usb 10-1: Manufacturer: syz [ 89.652876][ T2316] usb 10-1: SerialNumber: syz [ 89.655302][ T2316] usb 10-1: config 0 descriptor?? [ 89.807238][ T62] usb 8-1: USB disconnect, device number 7 [ 89.816344][ T62] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 89.820335][ T62] oti6858 8-1:1.0: device disconnected [ 90.275148][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 90.423038][ T8120] fuse: Unknown parameter 'grou00000000000000000000' [ 90.589328][ T8142] fuse: Unknown parameter 'grou00000000000000000000' [ 90.913000][ T8165] fuse: Unknown parameter 'grou00000000000000000000' [ 91.365279][ T62] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 91.421398][ T5745] usb 10-1: USB disconnect, device number 4 [ 91.526395][ T62] usb 11-1: not running at top speed; connect to a high speed hub [ 91.526474][ T62] usb 11-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 91.527589][ T62] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.527617][ T62] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 91.529499][ T62] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.529515][ T62] usb 11-1: Product: syz [ 91.529523][ T62] usb 11-1: Manufacturer: syz [ 91.529531][ T62] usb 11-1: SerialNumber: syz [ 91.536792][ T62] keyspan 11-1:1.0: Keyspan 4 port adapter converter detected [ 91.537069][ T62] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 91.537098][ T62] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 91.544906][ T62] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 91.547135][ T62] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 91.552191][ T62] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 91.553042][ T62] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 91.556756][ T62] usb 11-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 91.742700][ T25] usb 11-1: USB disconnect, device number 3 [ 91.753827][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 91.762099][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 91.764542][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 91.771456][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 91.771996][ T25] keyspan 11-1:1.0: device disconnected [ 91.934714][ T8237] fuse: Unknown parameter 'group_i00000000000000000000' [ 92.007196][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 92.175731][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.178873][ T10] usb 10-1: too many configurations: 13, using maximum allowed: 8 [ 92.182093][ T10] usb 10-1: config 0 has no interfaces? [ 92.184744][ T10] usb 10-1: config 0 has no interfaces? [ 92.187549][ T10] usb 10-1: config 0 has no interfaces? [ 92.190297][ T10] usb 10-1: config 0 has no interfaces? [ 92.192978][ T10] usb 10-1: config 0 has no interfaces? [ 92.195386][ T10] usb 10-1: config 0 has no interfaces? [ 92.195822][ T10] usb 10-1: config 0 has no interfaces? [ 92.196254][ T10] usb 10-1: config 0 has no interfaces? [ 92.198038][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.198050][ T10] usb 10-1: Product: syz [ 92.198057][ T10] usb 10-1: Manufacturer: syz [ 92.198065][ T10] usb 10-1: SerialNumber: syz [ 92.199288][ T10] usb 10-1: config 0 descriptor?? [ 92.404117][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.404481][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.606886][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.607130][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.607981][ T10] usb 10-1: USB disconnect, device number 5 [ 93.005254][ T5886] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 93.156036][ T5886] usb 6-1: not running at top speed; connect to a high speed hub [ 93.159224][ T5886] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 93.164342][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.167935][ T5886] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 93.169867][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.169895][ T5886] usb 6-1: Product: syz [ 93.169908][ T5886] usb 6-1: Manufacturer: syz [ 93.169922][ T5886] usb 6-1: SerialNumber: syz [ 93.176526][ T5886] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 93.177143][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 93.177206][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 93.179784][ T5886] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 93.182326][ T5886] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 93.184722][ T5886] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 93.188946][ T5886] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 93.191356][ T5886] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 93.383499][ T8305] mmap: syz.3.878 (8305) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.384552][ T62] usb 6-1: USB disconnect, device number 8 [ 93.398134][ T62] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 93.409778][ T62] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 93.409855][ T8310] __nla_validate_parse: 15 callbacks suppressed [ 93.409974][ T8310] netlink: 72 bytes leftover after parsing attributes in process `syz.5.880'. [ 93.410565][ T8310] netlink: 72 bytes leftover after parsing attributes in process `syz.5.880'. [ 93.415935][ T62] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 93.423095][ T62] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 93.423577][ T62] keyspan 6-1:1.0: device disconnected [ 93.683473][ T8333] FAULT_INJECTION: forcing a failure. [ 93.683473][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.683571][ T8333] CPU: 2 UID: 0 PID: 8333 Comm: syz.6.889 Not tainted syzkaller #0 PREEMPT(full) [ 93.683599][ T8333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.683609][ T8333] Call Trace: [ 93.683615][ T8333] [ 93.683622][ T8333] dump_stack_lvl+0x100/0x190 [ 93.683645][ T8333] should_fail_ex.cold+0x5/0xa [ 93.683664][ T8333] _copy_from_user+0x2e/0xd0 [ 93.683683][ T8333] vcs_write+0x2fa/0xdc0 [ 93.683713][ T8333] ? __pfx_vcs_write+0x10/0x10 [ 93.683734][ T8333] ? bpf_lsm_file_permission+0x9/0x10 [ 93.683753][ T8333] ? security_file_permission+0x76/0x210 [ 93.683787][ T8333] ? iov_iter_advance+0xac/0x6d0 [ 93.683800][ T8333] ? rw_verify_area+0xce/0x6d0 [ 93.683818][ T8333] ? __pfx_vcs_write+0x10/0x10 [ 93.683835][ T8333] vfs_writev+0x5ed/0xdd0 [ 93.683858][ T8333] ? __pfx_vfs_writev+0x10/0x10 [ 93.683882][ T8333] ? lock_acquire+0x1d1/0x380 [ 93.683899][ T8333] ? __fget_files+0x34/0x3d0 [ 93.683916][ T8333] ? __fget_files+0x21f/0x3d0 [ 93.683931][ T8333] ? do_writev+0x13e/0x340 [ 93.683947][ T8333] do_writev+0x13e/0x340 [ 93.683964][ T8333] ? __pfx_do_writev+0x10/0x10 [ 93.683985][ T8333] __do_fast_syscall_32+0x13a/0x8b0 [ 93.684002][ T8333] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.684017][ T8333] do_fast_syscall_32+0x32/0x70 [ 93.684033][ T8333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.684048][ T8333] RIP: 0023:0xf7f13fec [ 93.684064][ T8333] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 93.684070][ T8333] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 93.684082][ T8333] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c40 [ 93.684089][ T8333] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 93.684096][ T8333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.684102][ T8333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.684109][ T8333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.684123][ T8333] [ 93.732975][ T8337] fuse: Unknown parameter 'group_id00000000000000000000' [ 93.925232][ T62] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 94.085662][ T62] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.085725][ T62] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 94.086211][ T62] usb 8-1: config 0 has no interfaces? [ 94.086603][ T62] usb 8-1: config 0 has no interfaces? [ 94.086982][ T62] usb 8-1: config 0 has no interfaces? [ 94.087340][ T62] usb 8-1: config 0 has no interfaces? [ 94.087696][ T62] usb 8-1: config 0 has no interfaces? [ 94.088056][ T62] usb 8-1: config 0 has no interfaces? [ 94.088435][ T62] usb 8-1: config 0 has no interfaces? [ 94.088790][ T62] usb 8-1: config 0 has no interfaces? [ 94.090235][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.090247][ T62] usb 8-1: Product: syz [ 94.090254][ T62] usb 8-1: Manufacturer: syz [ 94.090301][ T62] usb 8-1: SerialNumber: syz [ 94.096585][ T62] usb 8-1: config 0 descriptor?? [ 94.302811][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.304404][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.507247][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.507529][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.515360][ T62] usb 8-1: USB disconnect, device number 8 [ 94.702962][ T8362] fuse: Bad value for 'user_id' [ 94.703040][ T8362] fuse: Bad value for 'user_id' [ 95.456413][ T8396] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.537462][ T8396] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.632035][ T8396] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.711279][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.711719][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.774211][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.778039][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.807988][ T8412] veth1_vlan: left allmulticast mode [ 95.836075][ T5834] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.865987][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.866130][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.866611][ T8413] bridge0: port 3(syz_tun) entered blocking state [ 95.866692][ T8413] bridge0: port 3(syz_tun) entered disabled state [ 95.866777][ T8413] syz_tun: entered allmulticast mode [ 95.867828][ T8413] syz_tun: entered promiscuous mode [ 95.883521][ T8414] bridge0: port 3(syz_tun) entered blocking state [ 95.883573][ T8414] bridge0: port 3(syz_tun) entered forwarding state [ 95.887990][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.888775][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.891553][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.907209][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.907305][ T8414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.910119][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.910178][ T8414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.917546][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.918825][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.925001][ T8414] veth1_vlan: left promiscuous mode [ 95.927759][ T8414] veth0_vlan: left promiscuous mode [ 95.929055][ T8414] veth0_vlan: entered promiscuous mode [ 95.931631][ T8414] veth1_vlan: entered promiscuous mode [ 95.932199][ T8414] veth1_vlan: entered allmulticast mode [ 95.934380][ T8414] veth1_macvtap: left promiscuous mode [ 95.934837][ T8414] veth0_macvtap: left promiscuous mode [ 95.937061][ T8414] veth0_macvtap: entered promiscuous mode [ 95.938606][ T8414] veth1_macvtap: entered promiscuous mode [ 95.942265][ T8414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.942955][ T8414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.943448][ T8414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.943944][ T8414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.947753][ T13] IPv6: BUG: Address fc00:: on device lo is missing its host route. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.998636][ T5834] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.998706][ T5834] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 95.999334][ T5834] usb 8-1: config 0 has no interfaces? [ 96.000480][ T5834] usb 8-1: config 0 has no interfaces? [ 96.003175][ T5834] usb 8-1: config 0 has no interfaces? [ 96.021967][ T8396] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.047230][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.075218][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182487][ T7323] bridge0: port 3(syz_tun) entered disabled state [ 96.201287][ T7323] syz_tun (unregistering): left allmulticast mode [ 96.201334][ T7323] syz_tun (unregistering): left promiscuous mode [ 96.201426][ T7323] bridge0: port 3(syz_tun) entered disabled state [ 96.235264][ T5816] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245843][ T5816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245909][ T5816] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245930][ T5816] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.358672][ T5834] usb 8-1: unable to read config index 3 descriptor/start: -71 [ 96.358714][ T5834] usb 8-1: can't read configurations, error -71 [ 96.360381][ T5816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.443541][ T5816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.563882][ T5816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.639680][ T5816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.793251][ T5816] bridge_slave_1: left allmulticast mode [ 96.793327][ T5816] bridge_slave_1: left promiscuous mode [ 96.793461][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.798738][ T5816] bridge_slave_0: left allmulticast mode [ 96.798753][ T5816] bridge_slave_0: left promiscuous mode [ 96.798868][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.896665][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.902162][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.908342][ T5816] bond0 (unregistering): Released all slaves [ 96.972933][ T5816] tipc: Left network mode [ 97.044116][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 97.225708][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 97.237468][ T5816] hsr_slave_0: left promiscuous mode [ 97.239377][ T5816] hsr_slave_1: left promiscuous mode [ 97.239876][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.239887][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.241670][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.241681][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.253068][ T5816] veth1_macvtap: left promiscuous mode [ 97.253178][ T5816] veth0_macvtap: left promiscuous mode [ 97.253866][ T5816] veth1_vlan: left promiscuous mode [ 97.253947][ T5816] veth0_vlan: left promiscuous mode [ 97.387905][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 97.392668][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 97.604399][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 97.759474][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 98.437921][ T5816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.521721][ T5816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.595432][ T5816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.655982][ T5816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.777721][ T5816] bridge_slave_1: left allmulticast mode [ 98.777777][ T5816] bridge_slave_1: left promiscuous mode [ 98.777925][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.782449][ T5816] bridge_slave_0: left allmulticast mode [ 98.782466][ T5816] bridge_slave_0: left promiscuous mode [ 98.782575][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.859217][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.865007][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.870186][ T5816] bond0 (unregistering): Released all slaves [ 98.933239][ T5816] tipc: Left network mode [ 99.039199][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 99.099429][ T5816] hsr_slave_0: left promiscuous mode [ 99.101352][ T5816] hsr_slave_1: left promiscuous mode [ 99.101870][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.101881][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.103503][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.103513][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.109983][ T5816] veth1_macvtap: left promiscuous mode [ 99.110018][ T5816] veth0_macvtap: left promiscuous mode [ 99.110125][ T5816] veth1_vlan: left allmulticast mode [ 99.110159][ T5816] veth1_vlan: left promiscuous mode [ 99.110208][ T5816] veth0_vlan: left promiscuous mode [ 99.277558][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 99.282913][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 99.350161][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 99.498194][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 99.632850][ T5816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.648535][ T5449] 8021q: adding VLAN 0 to HW filter on device eth21 [ 99.739713][ T5816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.784069][ T5816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.847364][ T5816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.952735][ T5816] bridge_slave_1: left allmulticast mode [ 99.952815][ T5816] bridge_slave_1: left promiscuous mode [ 99.952976][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.962903][ T5816] bridge_slave_0: left allmulticast mode [ 99.962964][ T5816] bridge_slave_0: left promiscuous mode [ 99.963605][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.071927][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.078127][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.082213][ T5816] bond0 (unregistering): Released all slaves [ 100.229623][ T5449] 8021q: adding VLAN 0 to HW filter on device eth22 [ 100.261092][ T5816] hsr_slave_0: left promiscuous mode [ 100.263115][ T5816] hsr_slave_1: left promiscuous mode [ 100.263826][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.263843][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.265595][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.265606][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.270993][ T5816] veth1_macvtap: left promiscuous mode [ 100.271025][ T5816] veth0_macvtap: left promiscuous mode [ 100.271088][ T5816] veth1_vlan: left promiscuous mode [ 100.271138][ T5816] veth0_vlan: left promiscuous mode [ 100.412578][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 100.428332][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 100.489776][ T5449] 8021q: adding VLAN 0 to HW filter on device eth23 [ 100.627611][ T5449] 8021q: adding VLAN 0 to HW filter on device eth24 [ 100.757841][ T5449] 8021q: adding VLAN 0 to HW filter on device eth25 [ 100.864299][ T5816] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.930723][ T5816] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.000152][ T5816] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.060403][ T5816] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.156972][ T5816] bridge_slave_1: left allmulticast mode [ 101.159020][ T5816] bridge_slave_1: left promiscuous mode [ 101.160994][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.165975][ T5816] bridge_slave_0: left allmulticast mode [ 101.166023][ T5816] bridge_slave_0: left promiscuous mode [ 101.166650][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.260142][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.264284][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.268075][ T5816] bond0 (unregistering): Released all slaves [ 101.423546][ T5449] 8021q: adding VLAN 0 to HW filter on device eth26 [ 101.555884][ T5449] 8021q: adding VLAN 0 to HW filter on device eth27 [ 101.580105][ T5816] hsr_slave_0: left promiscuous mode [ 101.582007][ T5816] hsr_slave_1: left promiscuous mode [ 101.582593][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.582610][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.586967][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.586985][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.593777][ T5816] veth1_macvtap: left promiscuous mode [ 101.593818][ T5816] veth0_macvtap: left promiscuous mode [ 101.593866][ T5816] veth1_vlan: left promiscuous mode [ 101.593909][ T5816] veth0_vlan: left promiscuous mode [ 101.761915][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 101.771270][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 101.967835][ T5449] 8021q: adding VLAN 0 to HW filter on device eth28 [ 102.122965][ T5449] 8021q: adding VLAN 0 to HW filter on device eth29 VM DIAGNOSIS: 15:49:54 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f97ad RBX=ffffffff8ea91500 RCX=ffffffff8bcd5115 RDX=0000000000000001 RSI=ffffffff8e3efa73 RDI=ffffffff8c622380 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bcd36bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096967000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3b8ab5 CR3=0000000071d32000 CR4=00352ef0 DR0=000000000000000b DR1=00000000000000a2 DR2=0000000000000009 DR3=00000040000008ce DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=000000007fffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3077bdab 00007ffe3077bdab ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3077c2b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3077c2b0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f756373696d6f72 702064657265746e 65203a7061747663 616d5f3168746500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6575637363676572 7020646572657464 6520307061747663 6167553162746500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69766564206e6f20 3a3a303063662073 736572646441203a 475542203a367650 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7473722e736567 61705f656c69665f 70616d65722f6d6d 2f6e6f697461746e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d75636f442065 6553202e6c6c6163 7379732029287365 6761705f656c6966 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f70616d65722064 6574616365727065 6420736573752029 3530333828203837 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382e332e7a797320 3a70616d6d205d35 30333854205b5d39 39343338332e3339 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888023ac2000 RCX=ffffffff8999cc8d RDX=1ffff11004758415 RSI=0000000000000008 RDI=0000000000000000 RBP=00000000000010c3 RSP=ffffc90000bd7960 R8 =0000000000000000 R9 =ffffed1004758415 R10=ffff888023ac20af R11=0000000000000000 R12=ffff888023ac20a8 R13=0000000000000000 R14=ffff88804d7a8000 R15=ffff888023ac2108 RIP=ffffffff8999ccb9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ccda4 CR3=0000000060b6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000892cf RBX=0000000000000001 RCX=00000000001a6a08 RDX=00000000000892d0 RSI=00000000000ad177 RDI=ffffffff92c9ef20 RBP=ffffc900031c7508 RSP=ffffc900031c7450 R8 =0000000000000000 R9 =0000000000000007 R10=0000000000000200 R11=00000000000892cf R12=ffffc900031c7510 R13=ffffc900031c74c0 R14=ffffc900031c74f5 R15=ffffffff8992cf57 RIP=ffffffff81b933fd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f30f9a1d300 ffffffff 00c00000 GS =0000 ffff888096b67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36ec0 CR3=0000000051452000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=2e89635eb746922b fd001b31f51a4b1a 2e89635eb746922b fd001b31f51a4b1a 2e89635eb746922b fd001b31f51a4b1a 2e89635eb746922b fd001b31f51a4b1a ZMM18=b415e6ab1149656f 5f90fddaf4dc3c9d b415e6ab1149656f 5f90fddaf4dc3c9d b415e6ab1149656f 5f90fddaf4dc3c9d b415e6ab1149656f 5f90fddaf4dc3c9d ZMM19=0908000000000000 0000000000000005 0908000000000000 0000000000000004 0908000000000000 0000000000000003 0908000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642f01ffffffff ffffffffed080280 0301000002080601 0000000806040404 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca10800200080002 080006025bba0fff fffffa08000e8803 0002000e86030002 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e84030c04000e 80030e8002108803 0204001080030008 0002080014080006 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301000002080601 0000000806040404 ca10800200080002 080006025bba0fff ZMM25=5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda 5f90fdda5f90fdda ZMM26=1149656f1149656f 1149656f1149656f 1149656f1149656f 1149656f1149656f 1149656f1149656f 1149656f1149656f 1149656f1149656f 1149656f1149656f ZMM27=b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab b415e6abb415e6ab ZMM28=000000900000008f 0000008e0000008d 0000008c0000008b 0000008a00000089 0000008800000087 0000008600000085 0000008400000083 0000008200000081 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 0708000007080000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801cf08bd8 RCX=0000000000000000 RDX=0000000000000001 RSI=ffff88802b53c0a0 RDI=ffff88801cf08bd8 RBP=0000000000000001 RSP=ffffc900005f8cf0 R8 =0000000000000001 R9 =fffffbfff228a58b R10=ffffffff91452c5f R11=0000000000000003 R12=ffff88802b53c0a0 R13=ffff88801cf08000 R14=0000000000002ae0 R15=0000000000000046 RIP=ffffffff8bcd3ecc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c389e84 CR3=00000000711eb000 CR4=00352ef0 DR0=000000000000000b DR1=00000000000000a2 DR2=0000000000000009 DR3=00000040000008ce DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000