last executing test programs: 3.621621705s ago: executing program 3 (id=709): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 3.522022769s ago: executing program 3 (id=710): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = socket(0xa, 0x2, 0x0) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r6}, 0xc) 3.308001279s ago: executing program 1 (id=712): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x589043, 0xc0) write(r0, &(0x7f0000000180)='_', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@delqdisc={0x80, 0x26, 0x309, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0x0, 0x1}, {0x3, 0x4}}, [@TCA_RATE={0xc, 0x5, {0x1, 0x3}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000005c00004bff817273f2619e950000000000000008580ec2bfd71ad25eea73a9d0ca8a7096187a0ce49343f9c7b1d21a"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[]}, 0x50) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x1002000ff) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 3.303707269s ago: executing program 3 (id=714): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) 3.100962433s ago: executing program 3 (id=716): syz_ublk_setup_io_uring(0x2589, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x40, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x2, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002300090425bd7f00ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r7, &(0x7f0000004900)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000002540)=[{&(0x7f00000001c0)="4c85f375ffdda361d525f89fbdcf55098629ffbd276238b4f7b6e17cf2a85e3ad23a4629bf64d269de9c84db10f3c815b820d1197de33eb02a5c5b1db1b0178ca5064135bf319ef9c0c82c27071d10a871b477c63acdf9dd7a771ff556a0ea0d838422", 0x63}, {&(0x7f0000000240)="fd59a4cfdd5d7b0f4cfb4d6a546a170ee1fc4db513e3b9ee7801fb2e97dca90444b0a642aa7ef21002efb4e5c29a60ac695be768dd44eb81aa516b3858", 0x3d}, {&(0x7f0000000280)="72c485c9335921d6cfc3a8cebda38407941a", 0x12}, {&(0x7f0000004940)="583409928556ee28797feeca0e0fef586932c1b81294a1dd7cdab3ffdd51034c742d255132824f50872d82ed54d12e8cb9545877a78d610fabb922f5d75df5ec44cc6f2301d8b7c5aaa4e7b3dbee6927cfc31ccb64c6d2a17c252404dff35f371dc36343b495e25d2944ae51c75d059a4b330e", 0x73}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="b7c218985299964083fbe868845c2e5eb41b6776c1206d7e92103dcc016645ee63525ea77642bb4eda6583461fffe3eb73d0239572e5", 0x36}, {&(0x7f0000001440)="1c1fab0793969bc74d28b962a72b86ebc31ba7f4a16d8ca146c98d8c10ff1d2ec2172010b1b62b386e4d43da99d6", 0x2e}, {&(0x7f0000001480)="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", 0xe78}], 0x8}}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="eadea5df887cebe5c78bee52b8e1ec8d4609094a2256d83d79e61b79aba9cb8b87841334a503266a2394ec0bff239bd53264a20b34f028debda916241a30aff482dcd24fb1d68af7f931fef22202e4e89d550c9778dd281b01d3626ecbee313cbc4b424a5448d5270c0bf6c4137008473d2dd623d94453bdcb0612a98440772933ee53ecd457a32f9caf2b9e890a733d664946a26ae07c13a1522a26fc0fb5131d902977f267dfa12eb8a0a4305f54e67af3069ece0bfd1280aff22eb3f0803a583db9a5ef75cd21935102983a6a896bc2f57dd7f611f5c53126ba146327889f06e73d14b5aec784dc05a514464b6a5417a273578bf82e32dcdc3c2e9a786a6caf9d96e3d7ed00e0e50b11dcca34989e9293f6e581cfead535a4461e02aa2cffa886d66f16bdd365e6658347146dbbe54a739fdb269dcee5f264b6401a5d8fec0b2f34119ecd300ab03ddfac18bf64b97d99e652f9c61412cfeba29b570a4f4d7a08af03bc6f8deb1aaa85397f577644640fa157a371b7565a0ef7715ab56670c950af7441fa75c4148c29dc93e5b8bc0e01ed2bafbc0b649482bb1feb016d2353da857c68fc4041237cb03b633bdbc8185f8a00ad8acb3c248b1d17e54d18eb3a597bc46bbe7a19aa201a324088ef4ee66e8aabeb9ad4324e43d42be830118599cc55c901675f2f67cf7bd257aa3c08248e952a59ddf62c1dca2b4f7667c7d3d798df85a60c79ec9cc0fb6af9904bfe0f0b4a05cbe18410613541c491fc37d31f03fbade4565ead9acf3919477f26fb4fd6f0429b3b427adb87536a07d743a366decdc4d52e16e15e960d3948e8f0234be73417fe6c7331d643e3103dc2eb4f9822786ecee5abdb9dbd3e5b7d439795568353d25a95ac07d2352431e24be2fdc87844465ac9dbdbeb4719f795f68a99d46c5ce4646ad9326d2ab1440c43d93a99e0519e0239b304959374dd21cfea0a795f71fd599118421586eb7c29957797135aa9df4982b2d8471a4f3088ee955518107d5408bf7b4620bdc99e72b8b1223d395b5e028fca71e279e15e355b6d77cedf6fc0aa7d7b018291f577e20dbd59984d058892397e24e5be6e5cafcb4d41c7de36ad90a41ef99b8eefaf5a79cba43cc8b13a7b9803176263cd7c2e1a67fac99cdbf2bed91b90d454e39d41cf1f2de38ceba6f062bf1e80819c99b6712b5b46d93558bc0360f2bd9bc4a8b1b254a0c1e2cb0b05ff4d583ce71fae45d5617ee28f07fa3eb8bbe17fe3dc4105aa423f1c2df2698f2dfa926d557c399f9e302d7168546ae429afce3fa288345524e295c8097efab19575896f4cd7ca0471fc57d37f334b64164c82f0382fcbe7711d641329632e6ce77c32ed9abf6bd39fd9dca7b4b14c5101d90ce73f8caae6ef5e5fa6c884bf4f7e838fd34a995c842b74c0242a650a1a0ef45ff39d98cd60a37fc051535cd7bceabf9e7e33cc59b3bdd5d6b8234eb2135e75a3af02d654a9c8b6889b42a3a26c0bbec919b6c12f3749c7b112c6749cd550cb515a378eb6ac3fa001c71f65dc591e0983604f263b477dd843bb79b74583e68fdde9abd012017d4503f3255edc6536effdb3b905bd39fdb163ac0ce896ed8910ae8d7eabb0aa7da98081dd3cec519d6555b0b9fd23c12ba692160c6f8da4d1a8d51ac0c08410e241970b3e2c2999fa0a0e644ddbd01d46482e7dfc217c6724c64bcd535d158defc1957a4cee013010f1e9402f93ad0f7f0773e866fbbec419ee4f6711cca2b6b69da254ebfb0c162ddcc454013621a0708833cb02ade92929b0f1ba858ea69f5e650da175c86744ce128af2687aba9c4aadf820c351b568d42dd42469aff5ef2b54e83162039835c537bdbdff335e433f1ecf981997ab62e752df86e35534e8e96c05ea6d25772b9fc1adca3c95c41219b76ee136df0f5ad41f8b15c7094905d77091c1014a7e020b749b580780de4fbf0ce22ad3ef81832f8b8ba268603704a1ed2b5d46632e", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x880) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r9 = fanotify_init(0xf00, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, r10, 0x2) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r9, 0x401, 0x18, r11, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) 2.919134206s ago: executing program 0 (id=718): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 2.857737757s ago: executing program 0 (id=719): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x40c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18b022bd5e70c6d1a39664000000050000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f00000009c0), 0x0}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5460, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x10005, 0xff, {}, 0x0, 0x0, 0x4b}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000394000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) 2.186654589s ago: executing program 3 (id=722): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) r2 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc5, &(0x7f0000000500)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6}, 0x94) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x402) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000880)=""/145) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r5, 0x0, 0xfd85) 1.957362495s ago: executing program 2 (id=723): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = socket(0xa, 0x2, 0x0) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r6}, 0xc) 1.800028932s ago: executing program 1 (id=724): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) setrlimit(0x7, &(0x7f0000000400)) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 1.799585516s ago: executing program 1 (id=725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0xc60a, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x840) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000400)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.594512384s ago: executing program 1 (id=726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000840000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffa}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x1, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_test={0x12, 0x8001, 0xd}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7, 0x9e1}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf60, 0x9, 0x1}, 0x10) 1.593484951s ago: executing program 2 (id=727): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x0, 0x0, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 1.593131235s ago: executing program 1 (id=728): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160000012bbd7000fedbdf25ffffffff000000000000000000000000ac14144e2300004e240000020000201d1e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000ac1414380000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x8, 0x400, 0x0, 0x9, 0x3, 0x5, 0x8, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24040004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000804) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x8002) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80044121, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1) 1.428789533s ago: executing program 0 (id=729): syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(r0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRESDEC=r0], 0xa0}, 0x1, 0x0, 0x0, 0x48855}, 0x20000000) open(&(0x7f0000000280)='.\x00', 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0xfffffffffffffdff, &(0x7f0000000240)=0x2) syz_open_procfs(r5, &(0x7f00000003c0)='net/tcp\x00') sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x9) getrlimit(0xc, &(0x7f0000000040)) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x5, 0x206f00) writev(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) truncate(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2) 1.307662875s ago: executing program 2 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x500, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.157190985s ago: executing program 2 (id=731): syz_ublk_setup_io_uring(0x2589, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x40, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x2, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002300090425bd7f00ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r7, &(0x7f0000004900)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000002540)=[{&(0x7f00000001c0)="4c85f375ffdda361d525f89fbdcf55098629ffbd276238b4f7b6e17cf2a85e3ad23a4629bf64d269de9c84db10f3c815b820d1197de33eb02a5c5b1db1b0178ca5064135bf319ef9c0c82c27071d10a871b477c63acdf9dd7a771ff556a0ea0d838422", 0x63}, {&(0x7f0000000240)="fd59a4cfdd5d7b0f4cfb4d6a546a170ee1fc4db513e3b9ee7801fb2e97dca90444b0a642aa7ef21002efb4e5c29a60ac695be768dd44eb81aa516b3858", 0x3d}, {&(0x7f0000000280)="72c485c9335921d6cfc3a8cebda38407941a", 0x12}, {&(0x7f0000004940)="583409928556ee28797feeca0e0fef586932c1b81294a1dd7cdab3ffdd51034c742d255132824f50872d82ed54d12e8cb9545877a78d610fabb922f5d75df5ec44cc6f2301d8b7c5aaa4e7b3dbee6927cfc31ccb64c6d2a17c252404dff35f371dc36343b495e25d2944ae51c75d059a4b330e", 0x73}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="b7c218985299964083fbe868845c2e5eb41b6776c1206d7e92103dcc016645ee63525ea77642bb4eda6583461fffe3eb73d0239572e5", 0x36}, {&(0x7f0000001440)="1c1fab0793969bc74d28b962a72b86ebc31ba7f4a16d8ca146c98d8c10ff1d2ec2172010b1b62b386e4d43da99d6", 0x2e}, {&(0x7f0000001480)="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", 0xe78}], 0x8}}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x880) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r9 = fanotify_init(0xf00, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, r10, 0x2) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r9, 0x401, 0x18, r11, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) 897.050138ms ago: executing program 0 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 706.727584ms ago: executing program 1 (id=733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='vegas', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000000)=0x8) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x100440d6}, 0x90) 618.093064ms ago: executing program 0 (id=734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0xc60a, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x840) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000400)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 540.720795ms ago: executing program 0 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x400011) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r4, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0xc) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000200)=""/10, 0xfffffffffffffffa, 0x720, 0x0, 0x0) r7 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r7, 0x5317, &(0x7f0000000000)={0x5, 0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x60}}, 0x4880) 166.684564ms ago: executing program 2 (id=736): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = socket(0xa, 0x2, 0x0) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r6}, 0xc) 71.772903ms ago: executing program 2 (id=737): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63075a80648c25943b1f3eae25", 0x14}], 0x1}, 0x20000000) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000040)="47ad3d32240000006bdb4974ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85090084665ea5ffffffff1667e52d97", 0x35}], 0x1) 0s ago: executing program 3 (id=738): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x40c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18b022bd5e70c6d1a39664000000050000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f00000009c0), 0x0}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5460, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x10005, 0xff, {}, 0x0, 0x0, 0x4b}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000394000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): (7) [ 75.803323][ T6332] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.809589][ T6332] vhci_hcd vhci_hcd.0: Device attached [ 75.935907][ T42] audit: type=1326 audit(1785737517.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.943293][ T42] audit: type=1326 audit(1785737517.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.950120][ T42] audit: type=1326 audit(1785737517.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.956611][ T42] audit: type=1326 audit(1785737517.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.964596][ T42] audit: type=1326 audit(1785737517.093:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.971984][ T42] audit: type=1326 audit(1785737517.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.979831][ T42] audit: type=1326 audit(1785737517.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.986419][ T42] audit: type=1326 audit(1785737517.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.995866][ T42] audit: type=1326 audit(1785737517.093:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 75.995914][ T5838] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 76.004573][ T42] audit: type=1326 audit(1785737517.103:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 76.092372][ T5838] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 76.099727][ T60] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 76.252210][ T60] usb 7-1: config 0 has no interfaces? [ 76.256050][ T60] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.263663][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.282121][ T60] usb 7-1: config 0 descriptor?? [ 76.283968][ T6339] CUSE: DEVNAME unspecified [ 76.524246][ T6330] Bluetooth: MGMT ver 1.23 [ 76.536204][ T6333] usbip_core: unknown command [ 76.538717][ T6333] vhci_hcd: unknown pdu 2070564237 [ 76.540443][ T5530] usb 7-1: USB disconnect, device number 4 [ 76.545966][ T6333] usbip_core: unknown command [ 76.568003][ T5792] vhci_hcd vhci_hcd.2: stop threads [ 76.573134][ T5792] vhci_hcd vhci_hcd.2: release socket [ 76.575963][ T5792] vhci_hcd vhci_hcd.2: disconnect device [ 77.254371][ T6356] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 77.257357][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 77.257373][ T6356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.257380][ T6356] Call Trace: [ 77.257386][ T6356] [ 77.257391][ T6356] dump_stack_lvl+0x100/0x190 [ 77.257413][ T6356] sysfs_warn_dup.cold+0x1c/0x28 [ 77.257433][ T6356] sysfs_create_dir_ns+0x24b/0x2b0 [ 77.257452][ T6356] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 77.257467][ T6356] ? find_held_lock+0x2b/0x80 [ 77.257482][ T6356] ? kobject_add_internal+0x25f/0x930 [ 77.257494][ T6356] ? kobject_add_internal+0x25f/0x930 [ 77.257506][ T6356] ? class_dir_child_ns_type+0xd/0x60 [ 77.257524][ T6356] kobject_add_internal+0x2c8/0x930 [ 77.257537][ T6356] kobject_add+0x16a/0x1e0 [ 77.257548][ T6356] ? __pfx_kobject_add+0x10/0x10 [ 77.257560][ T6356] ? get_device_parent+0x1b3/0x4c0 [ 77.257578][ T6356] ? kobject_put+0xb9/0x640 [ 77.257599][ T6356] device_add+0x294/0x1970 [ 77.257611][ T6356] ? lockdep_init_map_type+0x5c/0x250 [ 77.257622][ T6356] ? __pfx_device_add+0x10/0x10 [ 77.257633][ T6356] ? lockdep_init_map_type+0x5c/0x250 [ 77.257644][ T6356] ? __init_waitqueue_head+0xca/0x150 [ 77.257661][ T6356] tty_register_device_attr+0x388/0x7f0 [ 77.257678][ T6356] ? lockdep_init_map_type+0x5c/0x250 [ 77.257688][ T6356] ? __pfx_tty_register_device_attr+0x10/0x10 [ 77.257707][ T6356] ? tty_port_init+0x156/0x1c0 [ 77.257724][ T6356] gsm_activate_mux+0x155/0x2a0 [ 77.257742][ T6356] gsmld_ioctl+0xbbc/0x15c0 [ 77.257755][ T6356] ? __pfx_gsmld_ioctl+0x10/0x10 [ 77.257775][ T6356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.257797][ T6356] ? __pfx_gsmld_ioctl+0x10/0x10 [ 77.257807][ T6356] tty_compat_ioctl+0x396/0x420 [ 77.257823][ T6356] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 77.257839][ T6356] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 77.257857][ T6356] __do_fast_syscall_32+0xe7/0x970 [ 77.257874][ T6356] do_fast_syscall_32+0x32/0x70 [ 77.257893][ T6356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.257913][ T6356] RIP: 0023:0xf7f56fec [ 77.257932][ T6356] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 77.257940][ T6356] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 77.257960][ T6356] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 77.257973][ T6356] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.257982][ T6356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.257993][ T6356] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.258003][ T6356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.258025][ T6356] [ 77.258048][ T6356] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.293776][ T6357] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 77.353906][ T6357] CPU: 3 UID: 0 PID: 6357 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 77.353932][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.353941][ T6357] Call Trace: [ 77.353947][ T6357] [ 77.353954][ T6357] dump_stack_lvl+0x100/0x190 [ 77.353986][ T6357] sysfs_warn_dup.cold+0x1c/0x28 [ 77.354015][ T6357] sysfs_create_dir_ns+0x24b/0x2b0 [ 77.354041][ T6357] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 77.354058][ T6357] ? find_held_lock+0x2b/0x80 [ 77.354072][ T6357] ? kobject_add_internal+0x25f/0x930 [ 77.354084][ T6357] ? kobject_add_internal+0x25f/0x930 [ 77.354095][ T6357] ? class_dir_child_ns_type+0xd/0x60 [ 77.354108][ T6357] kobject_add_internal+0x2c8/0x930 [ 77.354122][ T6357] kobject_add+0x16a/0x1e0 [ 77.354133][ T6357] ? __pfx_kobject_add+0x10/0x10 [ 77.354145][ T6357] ? get_device_parent+0x1b3/0x4c0 [ 77.354161][ T6357] ? kobject_put+0xb9/0x640 [ 77.354180][ T6357] device_add+0x294/0x1970 [ 77.354191][ T6357] ? lockdep_init_map_type+0x5c/0x250 [ 77.354202][ T6357] ? __pfx_device_add+0x10/0x10 [ 77.354212][ T6357] ? lockdep_init_map_type+0x5c/0x250 [ 77.354223][ T6357] ? __init_waitqueue_head+0xca/0x150 [ 77.354239][ T6357] tty_register_device_attr+0x388/0x7f0 [ 77.354256][ T6357] ? lockdep_init_map_type+0x5c/0x250 [ 77.354266][ T6357] ? __pfx_tty_register_device_attr+0x10/0x10 [ 77.354285][ T6357] ? tty_port_init+0x156/0x1c0 [ 77.354302][ T6357] gsm_activate_mux+0x155/0x2a0 [ 77.354319][ T6357] gsmld_ioctl+0xbbc/0x15c0 [ 77.354333][ T6357] ? __pfx_gsmld_ioctl+0x10/0x10 [ 77.354353][ T6357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.354372][ T6357] ? __pfx_gsmld_ioctl+0x10/0x10 [ 77.354381][ T6357] tty_compat_ioctl+0x396/0x420 [ 77.354397][ T6357] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 77.354412][ T6357] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 77.354431][ T6357] __do_fast_syscall_32+0xe7/0x970 [ 77.354448][ T6357] do_fast_syscall_32+0x32/0x70 [ 77.354464][ T6357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.354478][ T6357] RIP: 0023:0xf709efec [ 77.354492][ T6357] Code: Unable to access opcode bytes at 0xf709efc2. [ 77.354496][ T6357] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 77.354507][ T6357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 77.354514][ T6357] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.354520][ T6357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.354526][ T6357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.354532][ T6357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.354546][ T6357] [ 77.354559][ T6357] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.366792][ T6359] random: crng reseeded on system resumption [ 79.299236][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 79.931369][ T6398] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 79.938131][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(full) [ 79.938149][ T6398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.938156][ T6398] Call Trace: [ 79.938161][ T6398] [ 79.938166][ T6398] dump_stack_lvl+0x100/0x190 [ 79.938186][ T6398] sysfs_warn_dup.cold+0x1c/0x28 [ 79.938207][ T6398] sysfs_create_dir_ns+0x24b/0x2b0 [ 79.938227][ T6398] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 79.938243][ T6398] ? find_held_lock+0x2b/0x80 [ 79.938258][ T6398] ? kobject_add_internal+0x25f/0x930 [ 79.938270][ T6398] ? kobject_add_internal+0x25f/0x930 [ 79.938282][ T6398] ? class_dir_child_ns_type+0xd/0x60 [ 79.938295][ T6398] kobject_add_internal+0x2c8/0x930 [ 79.938309][ T6398] kobject_add+0x16a/0x1e0 [ 79.938320][ T6398] ? __pfx_kobject_add+0x10/0x10 [ 79.938331][ T6398] ? get_device_parent+0x1b3/0x4c0 [ 79.938348][ T6398] ? kobject_put+0xb9/0x640 [ 79.938368][ T6398] device_add+0x294/0x1970 [ 79.938379][ T6398] ? lockdep_init_map_type+0x5c/0x250 [ 79.938390][ T6398] ? __pfx_device_add+0x10/0x10 [ 79.938400][ T6398] ? lockdep_init_map_type+0x5c/0x250 [ 79.938412][ T6398] ? __init_waitqueue_head+0xca/0x150 [ 79.938427][ T6398] tty_register_device_attr+0x388/0x7f0 [ 79.938444][ T6398] ? lockdep_init_map_type+0x5c/0x250 [ 79.938455][ T6398] ? __pfx_tty_register_device_attr+0x10/0x10 [ 79.938482][ T6398] ? tty_port_init+0x156/0x1c0 [ 79.938509][ T6398] gsm_activate_mux+0x155/0x2a0 [ 79.938537][ T6398] gsmld_ioctl+0xbbc/0x15c0 [ 79.938560][ T6398] ? __pfx_gsmld_ioctl+0x10/0x10 [ 79.938595][ T6398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.938627][ T6398] ? __pfx_gsmld_ioctl+0x10/0x10 [ 79.938641][ T6398] tty_compat_ioctl+0x396/0x420 [ 79.938656][ T6398] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 79.938672][ T6398] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 79.938691][ T6398] __do_fast_syscall_32+0xe7/0x970 [ 79.938710][ T6398] do_fast_syscall_32+0x32/0x70 [ 79.938725][ T6398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.938740][ T6398] RIP: 0023:0xf7f62fec [ 79.938755][ T6398] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 79.938759][ T6398] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 79.938770][ T6398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 79.938777][ T6398] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.938783][ T6398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.938789][ T6398] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.938795][ T6398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.938808][ T6398] [ 79.938822][ T6398] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.066376][ T6398] random: crng reseeded on system resumption [ 80.247180][ T6403] lo speed is unknown, defaulting to 1000 [ 80.250314][ T6403] lo speed is unknown, defaulting to 1000 [ 80.257493][ T6403] lo speed is unknown, defaulting to 1000 [ 80.261588][ T6403] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 80.268666][ T6403] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 80.273846][ T6403] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 80.284289][ T6403] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.294747][ T6403] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 80.323336][ T6407] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 80.325282][ T6403] lo speed is unknown, defaulting to 1000 [ 80.327967][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 80.327993][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.328011][ T6407] Call Trace: [ 80.328018][ T6407] [ 80.328024][ T6407] dump_stack_lvl+0x100/0x190 [ 80.328058][ T6407] sysfs_warn_dup.cold+0x1c/0x28 [ 80.328089][ T6407] sysfs_create_dir_ns+0x24b/0x2b0 [ 80.328117][ T6407] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 80.328143][ T6407] ? find_held_lock+0x2b/0x80 [ 80.328166][ T6407] ? kobject_add_internal+0x25f/0x930 [ 80.328186][ T6407] ? kobject_add_internal+0x25f/0x930 [ 80.328207][ T6407] ? class_dir_child_ns_type+0xd/0x60 [ 80.328227][ T6407] kobject_add_internal+0x2c8/0x930 [ 80.328249][ T6407] kobject_add+0x16a/0x1e0 [ 80.328267][ T6407] ? __pfx_kobject_add+0x10/0x10 [ 80.328286][ T6407] ? get_device_parent+0x1b3/0x4c0 [ 80.328312][ T6407] ? kobject_put+0xb9/0x640 [ 80.328344][ T6407] device_add+0x294/0x1970 [ 80.328363][ T6407] ? lockdep_init_map_type+0x5c/0x250 [ 80.328381][ T6407] ? __pfx_device_add+0x10/0x10 [ 80.328397][ T6407] ? lockdep_init_map_type+0x5c/0x250 [ 80.328415][ T6407] ? __init_waitqueue_head+0xca/0x150 [ 80.328441][ T6407] tty_register_device_attr+0x388/0x7f0 [ 80.328469][ T6407] ? lockdep_init_map_type+0x5c/0x250 [ 80.328487][ T6407] ? __pfx_tty_register_device_attr+0x10/0x10 [ 80.328516][ T6407] ? tty_port_init+0x156/0x1c0 [ 80.328547][ T6407] gsm_activate_mux+0x155/0x2a0 [ 80.328574][ T6407] gsmld_ioctl+0xbbc/0x15c0 [ 80.328598][ T6407] ? __pfx_gsmld_ioctl+0x10/0x10 [ 80.328633][ T6407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.328666][ T6407] ? __pfx_gsmld_ioctl+0x10/0x10 [ 80.328683][ T6407] tty_compat_ioctl+0x396/0x420 [ 80.328708][ T6407] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 80.328734][ T6407] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.328765][ T6407] __do_fast_syscall_32+0xe7/0x970 [ 80.328795][ T6407] do_fast_syscall_32+0x32/0x70 [ 80.328821][ T6407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.328847][ T6407] RIP: 0023:0xf7f56fec [ 80.328869][ T6407] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 80.328877][ T6407] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.328894][ T6407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 80.328906][ T6407] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.328916][ T6407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.328926][ T6407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.328937][ T6407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.328962][ T6407] [ 80.328983][ T6407] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.342892][ T6403] lo speed is unknown, defaulting to 1000 [ 80.425348][ T6407] random: crng reseeded on system resumption [ 80.435273][ T6403] lo speed is unknown, defaulting to 1000 [ 80.441558][ T6403] lo speed is unknown, defaulting to 1000 [ 80.559656][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.709531][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 80.713035][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 80.723654][ T6415] Unsupported ieee802154 address type: 0 [ 80.725636][ T9] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 80.729293][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.733791][ T9] usb 8-1: Product: syz [ 80.735682][ T9] usb 8-1: Manufacturer: syz [ 80.737356][ T9] usb 8-1: SerialNumber: syz [ 80.753160][ T9] usb 8-1: config 0 descriptor?? [ 80.766566][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 80.768735][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 80.785295][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.824278][ T6420] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 80.827067][ T6420] CPU: 2 UID: 0 PID: 6420 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT(full) [ 80.827084][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.827091][ T6420] Call Trace: [ 80.827096][ T6420] [ 80.827101][ T6420] dump_stack_lvl+0x100/0x190 [ 80.827120][ T6420] sysfs_warn_dup.cold+0x1c/0x28 [ 80.827139][ T6420] sysfs_create_dir_ns+0x24b/0x2b0 [ 80.827179][ T6420] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 80.827195][ T6420] ? find_held_lock+0x2b/0x80 [ 80.827210][ T6420] ? kobject_add_internal+0x25f/0x930 [ 80.827223][ T6420] ? kobject_add_internal+0x25f/0x930 [ 80.827235][ T6420] ? class_dir_child_ns_type+0xd/0x60 [ 80.827248][ T6420] kobject_add_internal+0x2c8/0x930 [ 80.827261][ T6420] kobject_add+0x16a/0x1e0 [ 80.827272][ T6420] ? __pfx_kobject_add+0x10/0x10 [ 80.827283][ T6420] ? get_device_parent+0x1b3/0x4c0 [ 80.827299][ T6420] ? kobject_put+0xb9/0x640 [ 80.827321][ T6420] device_add+0x294/0x1970 [ 80.827332][ T6420] ? lockdep_init_map_type+0x5c/0x250 [ 80.827343][ T6420] ? __pfx_device_add+0x10/0x10 [ 80.827352][ T6420] ? lockdep_init_map_type+0x5c/0x250 [ 80.827363][ T6420] ? __init_waitqueue_head+0xca/0x150 [ 80.827381][ T6420] tty_register_device_attr+0x388/0x7f0 [ 80.827398][ T6420] ? lockdep_init_map_type+0x5c/0x250 [ 80.827408][ T6420] ? __pfx_tty_register_device_attr+0x10/0x10 [ 80.827427][ T6420] ? tty_port_init+0x156/0x1c0 [ 80.827444][ T6420] gsm_activate_mux+0x155/0x2a0 [ 80.827461][ T6420] gsmld_ioctl+0xbbc/0x15c0 [ 80.827475][ T6420] ? __pfx_gsmld_ioctl+0x10/0x10 [ 80.827495][ T6420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.827516][ T6420] ? __pfx_gsmld_ioctl+0x10/0x10 [ 80.827526][ T6420] tty_compat_ioctl+0x396/0x420 [ 80.827542][ T6420] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 80.827557][ T6420] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.827576][ T6420] __do_fast_syscall_32+0xe7/0x970 [ 80.827594][ T6420] do_fast_syscall_32+0x32/0x70 [ 80.827610][ T6420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.827624][ T6420] RIP: 0023:0xf7f56fec [ 80.827638][ T6420] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 80.827643][ T6420] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.827654][ T6420] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 80.827661][ T6420] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.827667][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.827673][ T6420] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.827679][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.827692][ T6420] [ 80.827705][ T6420] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.918483][ T6421] random: crng reseeded on system resumption [ 81.189342][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 81.189359][ T42] audit: type=1326 audit(1785737522.343:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.2.100" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56fec code=0x0 [ 81.260990][ T24] cfg80211: failed to load regulatory.db [ 81.263538][ T5838] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 81.556644][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 81.960204][ T6431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 81.963018][ T6431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.968244][ T6431] vhci_hcd vhci_hcd.0: Device attached [ 82.279587][ T59] usb 38-1: SetAddress Request (2) to port 0 [ 82.282523][ T59] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.451624][ T6432] vhci_hcd: connection reset by peer [ 82.455295][ T13] vhci_hcd vhci_hcd.0: stop threads [ 82.457105][ T13] vhci_hcd vhci_hcd.0: release socket [ 82.464566][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 82.465853][ T6439] qnx6: unable to read the first superblock [ 82.471084][ T6439] qnx6: unable to read the first superblock [ 82.474004][ T6439] qnx6: unable to read the first superblock [ 82.498664][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 82.546512][ T42] audit: type=1326 audit(1785737523.703:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.2.105" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56fec code=0x0 [ 83.244833][ T60] usb 8-1: USB disconnect, device number 3 [ 83.491843][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 83.555460][ T6460] binder: 6459:6460 ioctl c00c6211 0 returned -14 [ 84.271116][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 84.376312][ T6498] ip6gre1: entered allmulticast mode [ 84.379199][ T5792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.384595][ T6498] fuse: fd is not a fuse device [ 84.705116][ T6512] siw: device registration error -23 [ 84.864799][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 84.939636][ T5838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.109611][ T5838] usb 7-1: Using ep0 maxpacket: 16 [ 85.115968][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 85.127005][ T5838] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 85.134190][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.139550][ T5838] usb 7-1: Product: syz [ 85.140774][ T5838] usb 7-1: Manufacturer: syz [ 85.142211][ T5838] usb 7-1: SerialNumber: syz [ 85.144966][ T5838] usb 7-1: config 0 descriptor?? [ 85.149215][ T5838] hub 7-1:0.0: bad descriptor, ignoring hub [ 85.151408][ T5838] hub 7-1:0.0: probe with driver hub failed with error -5 [ 85.154772][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.166856][ T6519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 85.168944][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 85.172251][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 85.449758][ T845] usb 40-1: SetAddress Request (2) to port 0 [ 85.457436][ T845] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.757537][ T6520] vhci_hcd: connection reset by peer [ 85.762146][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 85.763872][ T5792] vhci_hcd vhci_hcd.1: release socket [ 85.766489][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 86.350517][ T6534] binder: 6533:6534 ioctl c00c6211 0 returned -14 [ 87.371862][ T59] usb 38-1: device descriptor read/8, error -110 [ 87.878646][ T5848] usb 7-1: USB disconnect, device number 5 [ 88.289832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.404851][ T59] usb usb38-port1: attempt power cycle [ 88.434392][ T6557] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 88.437311][ T6557] netlink: 'syz.2.128': attribute type 3 has an invalid length. [ 88.439981][ T6557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.128'. [ 89.067622][ T6562] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 89.069737][ T6562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.075960][ T6562] vhci_hcd vhci_hcd.0: Device attached [ 89.196011][ T6566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.199940][ T6563] vhci_hcd: connection closed [ 89.200374][ T5792] vhci_hcd vhci_hcd.3: stop threads [ 89.204645][ T5792] vhci_hcd vhci_hcd.3: release socket [ 89.206879][ T5792] vhci_hcd vhci_hcd.3: disconnect device [ 89.302542][ T6573] lo speed is unknown, defaulting to 1000 [ 89.410120][ T59] usb usb38-port1: unable to enumerate USB device [ 89.523258][ T6580] lo speed is unknown, defaulting to 1000 [ 89.922508][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 90.530509][ T845] usb 40-1: device descriptor read/8, error -110 [ 90.922790][ T845] usb usb40-port1: attempt power cycle [ 91.206624][ T6620] sd 0:0:0:0: PR command failed: 1026 [ 91.208462][ T6620] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 91.210636][ T6620] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 91.289935][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 91.338601][ T6638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.357872][ T6639] lo speed is unknown, defaulting to 1000 [ 91.500108][ T845] usb usb40-port1: unable to enumerate USB device [ 91.799774][ T5838] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 91.857411][ T6659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.974243][ T6659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.979626][ T5838] usb 5-1: device descriptor read/64, error -71 [ 92.044228][ T6665] binder: 6664:6665 ioctl c0306201 0 returned -14 [ 92.087531][ T6659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.103374][ T5743] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 92.168047][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 92.218067][ T6659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.250514][ T5838] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 92.271672][ T6671] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 92.274360][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.2.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.274379][ T6671] Tainted: [L]=SOFTLOCKUP [ 92.274382][ T6671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.274389][ T6671] Call Trace: [ 92.274394][ T6671] [ 92.274399][ T6671] dump_stack_lvl+0x100/0x190 [ 92.274418][ T6671] sysfs_warn_dup.cold+0x1c/0x28 [ 92.274437][ T6671] sysfs_create_dir_ns+0x24b/0x2b0 [ 92.274456][ T6671] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.274471][ T6671] ? find_held_lock+0x2b/0x80 [ 92.274485][ T6671] ? kobject_add_internal+0x25f/0x930 [ 92.274498][ T6671] ? kobject_add_internal+0x25f/0x930 [ 92.274510][ T6671] ? class_dir_child_ns_type+0xd/0x60 [ 92.274524][ T6671] kobject_add_internal+0x2c8/0x930 [ 92.274537][ T6671] kobject_add+0x16a/0x1e0 [ 92.274547][ T6671] ? __pfx_kobject_add+0x10/0x10 [ 92.274559][ T6671] ? get_device_parent+0x1b3/0x4c0 [ 92.274575][ T6671] ? kobject_put+0xb9/0x640 [ 92.274596][ T6671] device_add+0x294/0x1970 [ 92.274607][ T6671] ? lockdep_init_map_type+0x5c/0x250 [ 92.274617][ T6671] ? __pfx_device_add+0x10/0x10 [ 92.274630][ T6671] ? lockdep_init_map_type+0x5c/0x250 [ 92.274641][ T6671] ? __init_waitqueue_head+0xca/0x150 [ 92.274657][ T6671] tty_register_device_attr+0x388/0x7f0 [ 92.274673][ T6671] ? lockdep_init_map_type+0x5c/0x250 [ 92.274683][ T6671] ? __pfx_tty_register_device_attr+0x10/0x10 [ 92.274702][ T6671] ? tty_port_init+0x156/0x1c0 [ 92.274719][ T6671] gsm_activate_mux+0x155/0x2a0 [ 92.274737][ T6671] gsmld_ioctl+0xbbc/0x15c0 [ 92.274752][ T6671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 92.274772][ T6671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.274798][ T6671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 92.274808][ T6671] tty_compat_ioctl+0x396/0x420 [ 92.274823][ T6671] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 92.274839][ T6671] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 92.274857][ T6671] __do_fast_syscall_32+0xe7/0x970 [ 92.274875][ T6671] do_fast_syscall_32+0x32/0x70 [ 92.274890][ T6671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.274904][ T6671] RIP: 0023:0xf7f56fec [ 92.274918][ T6671] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 92.274923][ T6671] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 92.274933][ T6671] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 92.274940][ T6671] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.274947][ T6671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.274953][ T6671] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.274959][ T6671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.274972][ T6671] [ 92.274985][ T6671] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.365030][ T6671] random: crng reseeded on system resumption [ 92.391295][ T5838] usb 5-1: device descriptor read/64, error -71 [ 92.450481][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.453368][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456011][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459688][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509769][ T5838] usb usb5-port1: attempt power cycle [ 92.598766][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.600672][ T6681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.164'. [ 92.603745][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.668766][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 92.672994][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 92.674799][ T6682] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 92.695945][ T6682] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 92.698391][ T6682] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 92.701907][ T6682] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 92.705156][ T6682] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 92.720609][ T6682] pci 0000:00:01.0: Adding to iommu group 1 [ 92.728440][ T6682] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 92.730626][ T6682] pci 0000:00:01.0: vgaarb: bridge control possible [ 92.732750][ T6682] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 92.741787][ T6682] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 92.750940][ T6682] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 92.757793][ T6682] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 92.769950][ T6682] [drm] Found bochs VGA, ID 0xb0c5. [ 92.771712][ T6682] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 92.777833][ T6682] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 92.860573][ T5838] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 92.880570][ T5838] usb 5-1: device descriptor read/8, error -71 [ 93.044087][ T6704] capability: warning: `syz.3.171' uses 32-bit capabilities (legacy support in use) [ 93.107588][ T6704] autofs4:pid:6704:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 93.129721][ T5838] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 93.153092][ T5838] usb 5-1: device descriptor read/8, error -71 [ 93.271281][ T5838] usb usb5-port1: unable to enumerate USB device [ 95.328462][ T6744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 95.330627][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.337677][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 95.498795][ T6761] FAULT_INJECTION: forcing a failure. [ 95.498795][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.503261][ T6761] CPU: 2 UID: 0 PID: 6761 Comm: syz.3.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.503279][ T6761] Tainted: [L]=SOFTLOCKUP [ 95.503283][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.503289][ T6761] Call Trace: [ 95.503300][ T6761] [ 95.503304][ T6761] dump_stack_lvl+0x100/0x190 [ 95.503445][ T6761] should_fail_ex.cold+0x5/0xa [ 95.503472][ T6761] _copy_from_user+0x2e/0xd0 [ 95.503532][ T6761] kstrtouint_from_user+0xd6/0x1d0 [ 95.503546][ T6761] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 95.503559][ T6761] ? __lock_acquire+0x49f/0x1a40 [ 95.503604][ T6761] proc_fail_nth_write+0x83/0x220 [ 95.503631][ T6761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.503651][ T6761] vfs_write+0x2aa/0x1050 [ 95.503671][ T6761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.503688][ T6761] ? __pfx_vfs_write+0x10/0x10 [ 95.503698][ T6761] ? find_held_lock+0x2b/0x80 [ 95.503712][ T6761] ? __fget_files+0x215/0x3d0 [ 95.503726][ T6761] ? __fget_files+0x21f/0x3d0 [ 95.503740][ T6761] ksys_write+0x12a/0x250 [ 95.503751][ T6761] ? __pfx_ksys_write+0x10/0x10 [ 95.503765][ T6761] do_int80_emulation+0x14b/0x720 [ 95.503829][ T6761] asm_int80_emulation+0x1a/0x20 [ 95.503841][ T6761] RIP: 0023:0xf71d73eb [ 95.503851][ T6761] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 95.503861][ T6761] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 95.503885][ T6761] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 95.503894][ T6761] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.503903][ T6761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.503911][ T6761] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.503920][ T6761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.503940][ T6761] [ 95.598914][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 95.608401][ T6763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.192'. [ 95.640563][ T24] usb 40-1: SetAddress Request (6) to port 0 [ 95.642572][ T24] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 95.979673][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.010900][ T6749] vhci_hcd: connection reset by peer [ 96.013090][ T13] vhci_hcd vhci_hcd.1: stop threads [ 96.014795][ T13] vhci_hcd vhci_hcd.1: release socket [ 96.018265][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 96.061774][ T5848] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 96.229332][ T6792] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 96.229558][ T5848] usb 7-1: Using ep0 maxpacket: 16 [ 96.241147][ T5848] usb 7-1: config 0 has no interfaces? [ 96.247613][ T5848] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.252858][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 96.260759][ T5848] usb 7-1: Product: syz [ 96.262475][ T5848] usb 7-1: Manufacturer: syz [ 96.269253][ T5848] usb 7-1: SerialNumber: syz [ 96.288771][ T5848] usb 7-1: config 0 descriptor?? [ 96.307831][ T6792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.503250][ T5848] usb 7-1: USB disconnect, device number 6 [ 96.599614][ T5889] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.762846][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 96.769610][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 96.774307][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 33, changing to 9 [ 96.778684][ T5889] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 57701, setting to 1024 [ 96.783235][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.784481][ T6801] xt_limit: Overflow, try lower: 324382443/0 [ 96.791183][ T5889] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 96.799552][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.804607][ T5889] usb 5-1: Product: syz [ 96.806003][ T5889] usb 5-1: Manufacturer: syz [ 96.809804][ T5889] usb 5-1: SerialNumber: syz [ 96.818765][ T5889] usb 5-1: config 0 descriptor?? [ 96.993936][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 97.097926][ T5889] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 97.161247][ T6813] netlink: 'syz.3.209': attribute type 33 has an invalid length. [ 97.161265][ T6813] netlink: 152 bytes leftover after parsing attributes in process `syz.3.209'. [ 97.161340][ T6813] `: renamed from team0 (while UP) [ 97.420720][ T5848] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 97.581140][ T6820] 9pnet_fd: Insufficient options for proto=fd [ 97.609928][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 97.613040][ T5848] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.619242][ T5848] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.623005][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.625556][ T5848] usb 8-1: Product: syz [ 97.626912][ T5848] usb 8-1: Manufacturer: syz [ 97.628394][ T5848] usb 8-1: SerialNumber: syz [ 97.632231][ T5848] usb 8-1: config 0 descriptor?? [ 97.638005][ T5848] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.646865][ T5848] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 97.752205][ T6821] hugetlbfs: syz.1.212 (6821): Using mlock ulimits for SHM_HUGETLB is obsolete [ 98.261665][ T5848] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 98.479691][ T6834] process 'syz.2.215' launched './file0' with NULL argv: empty string added [ 98.714324][ T5848] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 98.727356][ T5848] em28xx 8-1:0.0: board has no eeprom [ 98.759541][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 98.889654][ T10] usb 7-1: device descriptor read/64, error -71 [ 99.026264][ T5530] usb 5-1: USB disconnect, device number 6 [ 99.150379][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 99.289575][ T10] usb 7-1: device descriptor read/64, error -71 [ 99.401020][ T10] usb usb7-port1: attempt power cycle [ 99.582259][ T6846] lo speed is unknown, defaulting to 1000 [ 99.731486][ T6813] em28xx 8-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 99.739527][ T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 99.771165][ T10] usb 7-1: device descriptor read/8, error -71 [ 99.800311][ T5848] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.803483][ T5848] em28xx 8-1:0.0: dvb set to bulk mode. [ 99.807711][ T1825] em28xx 8-1:0.0: Binding DVB extension [ 99.822827][ T5848] usb 8-1: USB disconnect, device number 4 [ 99.833005][ T5848] em28xx 8-1:0.0: Disconnecting em28xx [ 99.860245][ T6852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.863327][ T1825] em28xx 8-1:0.0: Registering input extension [ 99.869344][ T5848] em28xx 8-1:0.0: Closing input extension [ 99.896012][ T5848] em28xx 8-1:0.0: Freeing device [ 100.019624][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 100.040337][ T10] usb 7-1: device descriptor read/8, error -71 [ 100.080942][ T6856] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 100.140185][ T6855] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 100.150160][ T10] usb usb7-port1: unable to enumerate USB device [ 100.719614][ T24] usb 40-1: device descriptor read/8, error -110 [ 100.890424][ T3263] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.067521][ T3263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 101.072512][ T3263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 101.077804][ T3263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.083830][ T3263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.086992][ T3263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.119800][ T3263] usb 5-1: config 0 descriptor?? [ 101.126317][ T6872] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.553276][ T6872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.606889][ T24] usb usb40-port1: attempt power cycle [ 101.723450][ T3263] usbhid 5-1:0.0: can't add hid device: -71 [ 101.725433][ T3263] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.216159][ T24] usb usb40-port1: unable to enumerate USB device [ 103.245592][ T3263] usb 5-1: USB disconnect, device number 7 [ 103.540689][ T5889] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 103.689738][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 103.705440][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.717386][ T5889] usb 7-1: config 0 has no interfaces? [ 103.741693][ T5889] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.748368][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.759029][ T5889] usb 7-1: Product: syz [ 103.767809][ T5889] usb 7-1: Manufacturer: syz [ 103.776305][ T5889] usb 7-1: SerialNumber: syz [ 103.866738][ T5889] usb 7-1: config 0 descriptor?? [ 104.237759][ T6881] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 104.248549][ T6881] qnx6: wrong signature (magic) in superblock #1. [ 104.262623][ T6881] qnx6: unable to read the first superblock [ 104.291254][ T5889] usb 7-1: USB disconnect, device number 11 [ 104.490647][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 104.498025][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 104.829657][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.916535][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.921370][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.924474][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.927520][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.930532][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.933621][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.936961][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.940110][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.991271][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 104.994795][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 104.998235][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.003819][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.006830][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.013119][ T34] usb 8-1: config 0 descriptor?? [ 105.016420][ T6909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.450150][ T6909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.493778][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 105.657925][ T5838] usb 8-1: USB disconnect, device number 5 [ 106.201054][ T6942] FAULT_INJECTION: forcing a failure. [ 106.201054][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.206712][ T6942] CPU: 2 UID: 0 PID: 6942 Comm: syz.1.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.206731][ T6942] Tainted: [L]=SOFTLOCKUP [ 106.206735][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.206741][ T6942] Call Trace: [ 106.206746][ T6942] [ 106.206764][ T6942] dump_stack_lvl+0x100/0x190 [ 106.206786][ T6942] should_fail_ex.cold+0x5/0xa [ 106.206801][ T6942] _copy_to_user+0x32/0xd0 [ 106.206821][ T6942] simple_read_from_buffer+0xcb/0x170 [ 106.206843][ T6942] proc_fail_nth_read+0x1af/0x230 [ 106.206866][ T6942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.206883][ T6942] ? rw_verify_area+0xce/0x6d0 [ 106.206902][ T6942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.206917][ T6942] vfs_read+0x1e4/0xb40 [ 106.206930][ T6942] ? __pfx_vfs_read+0x10/0x10 [ 106.206939][ T6942] ? find_held_lock+0x2b/0x80 [ 106.206955][ T6942] ? __fget_files+0x215/0x3d0 [ 106.206968][ T6942] ? __fget_files+0x21f/0x3d0 [ 106.206983][ T6942] ksys_read+0x12a/0x250 [ 106.206993][ T6942] ? __pfx_ksys_read+0x10/0x10 [ 106.207008][ T6942] do_int80_emulation+0x14b/0x720 [ 106.207027][ T6942] asm_int80_emulation+0x1a/0x20 [ 106.207061][ T6942] RIP: 0023:0xf71d73eb [ 106.207071][ T6942] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 106.207081][ T6942] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.207093][ T6942] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 106.207100][ T6942] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 106.207107][ T6942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.207113][ T6942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.207120][ T6942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.207134][ T6942] [ 106.393657][ T6953] FAULT_INJECTION: forcing a failure. [ 106.393657][ T6953] name failslab, interval 1, probability 0, space 0, times 1 [ 106.398997][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.1.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.399050][ T6953] Tainted: [L]=SOFTLOCKUP [ 106.399057][ T6953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.399068][ T6953] Call Trace: [ 106.399076][ T6953] [ 106.399085][ T6953] dump_stack_lvl+0x100/0x190 [ 106.399109][ T6953] should_fail_ex.cold+0x5/0xa [ 106.399123][ T6953] should_failslab+0xc2/0x120 [ 106.399151][ T6953] __kmalloc_noprof+0xfc/0x820 [ 106.399172][ T6953] ? trace_kmem_cache_alloc+0xdd/0x100 [ 106.399189][ T6953] ? lsm_blob_alloc+0x68/0x90 [ 106.399222][ T6953] lsm_blob_alloc+0x68/0x90 [ 106.399233][ T6953] security_sk_alloc+0x2d/0x290 [ 106.399247][ T6953] sk_prot_alloc+0x1d1/0x2a0 [ 106.399277][ T6953] sk_alloc+0x36/0xe80 [ 106.399292][ T6953] inet6_create+0x385/0x12b0 [ 106.399320][ T6953] ? inet6_create+0x7f/0x12b0 [ 106.399334][ T6953] __sock_create+0x339/0x860 [ 106.399355][ T6953] mptcp_subflow_create_socket+0xec/0xa30 [ 106.399370][ T6953] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 106.399387][ T6953] __mptcp_nmpc_sk+0x17f/0x880 [ 106.399412][ T6953] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 106.399427][ T6953] ? __local_bh_enable_ip+0x9e/0x120 [ 106.399462][ T6953] mptcp_listen+0x135/0x4c0 [ 106.399477][ T6953] ? __pfx_mptcp_listen+0x10/0x10 [ 106.399492][ T6953] ? apparmor_socket_listen+0xf2/0x1a0 [ 106.399508][ T6953] __sys_listen_socket+0x108/0x150 [ 106.399522][ T6953] __sys_listen+0xa7/0x130 [ 106.399536][ T6953] __ia32_sys_listen+0x53/0x80 [ 106.399549][ T6953] __do_fast_syscall_32+0xe7/0x970 [ 106.399566][ T6953] ? lockdep_hardirqs_on+0x78/0x100 [ 106.399582][ T6953] do_fast_syscall_32+0x32/0x70 [ 106.399598][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.399613][ T6953] RIP: 0023:0xf709efec [ 106.399626][ T6953] Code: Unable to access opcode bytes at 0xf709efc2. [ 106.399631][ T6953] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016b [ 106.399642][ T6953] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000fffffffc [ 106.399649][ T6953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.399655][ T6953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.399661][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.399668][ T6953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.399681][ T6953] [ 106.420097][ T5838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.571852][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 106.588082][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 106.592919][ T5838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.602841][ T5838] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.608608][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.617391][ T5838] usb 7-1: config 0 descriptor?? [ 106.621682][ T6938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.054765][ T6938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.083843][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 107.085740][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 107.103912][ T5838] usb 7-1: USB disconnect, device number 12 [ 107.908589][ T6993] FAULT_INJECTION: forcing a failure. [ 107.908589][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 107.914630][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.2.264 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.914649][ T6993] Tainted: [L]=SOFTLOCKUP [ 107.914653][ T6993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.914659][ T6993] Call Trace: [ 107.914663][ T6993] [ 107.914670][ T6993] dump_stack_lvl+0x100/0x190 [ 107.914690][ T6993] should_fail_ex.cold+0x5/0xa [ 107.914704][ T6993] should_failslab+0xc2/0x120 [ 107.914721][ T6993] __kmalloc_noprof+0xfc/0x820 [ 107.914735][ T6993] ? rcu_is_watching+0x12/0xc0 [ 107.914772][ T6993] ? tomoyo_realpath_from_path+0xb6/0x690 [ 107.914793][ T6993] tomoyo_realpath_from_path+0xb6/0x690 [ 107.914814][ T6993] tomoyo_path_perm+0x276/0x460 [ 107.914828][ T6993] ? tomoyo_path_perm+0x262/0x460 [ 107.914844][ T6993] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 107.914863][ T6993] ? do_raw_spin_lock+0x128/0x260 [ 107.914876][ T6993] ? d_splice_alias_ops+0x626/0x15c0 [ 107.914898][ T6993] ? _raw_spin_unlock+0x28/0x50 [ 107.914912][ T6993] ? d_splice_alias_ops+0x62b/0x15c0 [ 107.914935][ T6993] ? kernfs_iop_lookup+0x247/0x2d0 [ 107.914955][ T6993] ? lookup_one_qstr_excl+0xaf/0x250 [ 107.914973][ T6993] tomoyo_path_symlink+0x97/0xe0 [ 107.914984][ T6993] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 107.914999][ T6993] security_path_symlink+0x152/0x2d0 [ 107.915014][ T6993] filename_symlinkat+0x122/0x560 [ 107.915047][ T6993] ? __pfx_filename_symlinkat+0x10/0x10 [ 107.915061][ T6993] ? strncpy_from_user+0x19d/0x2d0 [ 107.915081][ T6993] ? do_getname+0x191/0x390 [ 107.915096][ T6993] __ia32_sys_symlinkat+0x9b/0xe0 [ 107.915110][ T6993] __do_fast_syscall_32+0xe7/0x970 [ 107.915127][ T6993] ? lockdep_hardirqs_on+0x78/0x100 [ 107.915143][ T6993] do_fast_syscall_32+0x32/0x70 [ 107.915170][ T6993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.915187][ T6993] RIP: 0023:0xf7f56fec [ 107.915201][ T6993] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 107.915206][ T6993] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 107.915217][ T6993] RAX: ffffffffffffffda RBX: 0000000080003200 RCX: 00000000ffffff9c [ 107.915224][ T6993] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.915230][ T6993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.915236][ T6993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.915242][ T6993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.915256][ T6993] [ 107.915855][ T6993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.979606][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.013638][ T42] audit: type=1800 audit(1785737549.903:45): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.268" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 109.130275][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 109.139800][ T5848] usb 6-1: config 0 has no interfaces? [ 109.893810][ T5848] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.897515][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.900352][ T5848] usb 6-1: Product: syz [ 109.902264][ T5848] usb 6-1: Manufacturer: syz [ 109.905202][ T5848] usb 6-1: SerialNumber: syz [ 109.929839][ T5848] usb 6-1: config 0 descriptor?? [ 110.978835][ T24] usb 6-1: USB disconnect, device number 3 [ 111.585664][ T7047] lo speed is unknown, defaulting to 1000 [ 111.730960][ T7048] lo speed is unknown, defaulting to 1000 [ 111.970665][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.067653][ T7063] __nla_validate_parse: 3 callbacks suppressed [ 112.067665][ T7063] netlink: 64 bytes leftover after parsing attributes in process `syz.1.276'. [ 112.438940][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 112.543604][ T7075] netlink: 60 bytes leftover after parsing attributes in process `syz.3.281'. [ 112.613176][ T7076] netlink: 'syz.3.281': attribute type 11 has an invalid length. [ 112.634659][ T5530] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 112.663870][ T5530] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 113.411499][ T7076] lo speed is unknown, defaulting to 1000 [ 113.776031][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 113.838922][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 113.949773][ T5889] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 114.115111][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 114.123272][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 114.135680][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.152079][ T5889] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.163504][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.170072][ T5889] usb 7-1: config 0 descriptor?? [ 114.203563][ T7089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.846944][ T5889] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.020718][ T5889] usb 7-1: USB disconnect, device number 13 [ 115.174893][ T7121] IPv6: addrconf: prefix option has invalid lifetime [ 115.200240][ T5530] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 115.349606][ T5530] usb 8-1: Using ep0 maxpacket: 8 [ 115.353948][ T5530] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 115.357654][ T5530] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.358852][ T7126] FAULT_INJECTION: forcing a failure. [ 115.358852][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.362737][ T5530] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.368200][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.368218][ T7126] Tainted: [L]=SOFTLOCKUP [ 115.368222][ T7126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.368228][ T7126] Call Trace: [ 115.368232][ T7126] [ 115.368237][ T7126] dump_stack_lvl+0x100/0x190 [ 115.368257][ T7126] should_fail_ex.cold+0x5/0xa [ 115.368273][ T7126] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 115.368297][ T7126] ? filemap_add_folio+0x114/0x630 [ 115.368322][ T7126] ? __pfx_filemap_add_folio+0x10/0x10 [ 115.368334][ T7126] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 115.368352][ T7126] ? fault_in_readable+0x14c/0x190 [ 115.368377][ T7126] ? __filemap_get_folio_mpol+0x369/0x1320 [ 115.368390][ T7126] ? zero_user_segments.constprop.0+0x286/0x360 [ 115.368408][ T7126] netfs_perform_write+0xb4d/0x25a0 [ 115.368430][ T7126] ? __pfx_netfs_perform_write+0x10/0x10 [ 115.368463][ T7126] ? file_update_time_flags+0x373/0x500 [ 115.368480][ T7126] netfs_buffered_write_iter_locked+0x224/0x2c0 [ 115.368497][ T7126] netfs_file_write_iter+0x1da/0x4a0 [ 115.368513][ T7126] v9fs_file_write_iter+0x9b/0x100 [ 115.368555][ T7126] vfs_write+0x6ac/0x1050 [ 115.368566][ T7126] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 115.368585][ T7126] ? __pfx_vfs_write+0x10/0x10 [ 115.368594][ T7126] ? find_held_lock+0x2b/0x80 [ 115.368618][ T7126] ksys_write+0x12a/0x250 [ 115.368628][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 115.368638][ T7126] ? ksys_write+0x1ac/0x250 [ 115.368648][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 115.368661][ T7126] __do_fast_syscall_32+0xe7/0x970 [ 115.368678][ T7126] ? lockdep_hardirqs_on+0x78/0x100 [ 115.368705][ T7126] do_fast_syscall_32+0x32/0x70 [ 115.368721][ T7126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.368736][ T7126] RIP: 0023:0xf7f62fec [ 115.368750][ T7126] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 115.368755][ T7126] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 115.368766][ T7126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 115.368773][ T7126] RDX: 0000000000000074 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.368780][ T7126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.368786][ T7126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.368793][ T7126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.368806][ T7126] [ 115.467884][ T5530] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.471102][ T5530] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.477190][ T5530] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.480230][ T5530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.693781][ T7113] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 115.778920][ T7144] bond1: (slave geneve2): making interface the new active one [ 115.789838][ T7144] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.819866][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.822606][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.827680][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.832758][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.846487][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.857944][ T5530] usb 8-1: usb_control_msg returned -32 [ 115.867740][ T5530] usbtmc 8-1:16.0: can't read capabilities [ 115.932353][ T42] audit: type=1326 audit(1785737557.093:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.2.307" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56fec code=0x0 [ 116.061086][ T5889] usb 8-1: USB disconnect, device number 6 [ 116.078484][ T42] audit: type=1326 audit(1785737557.233:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.0.308" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62fec code=0x0 [ 118.035203][ T59] IPVS: starting estimator thread 0... [ 118.142363][ T7185] IPVS: using max 43 ests per chain, 103200 per kthread [ 118.564946][ T7192] Illegal XDP return value 4294967294 on prog (id 36) dev syz_tun, expect packet loss! [ 119.829894][ T6449] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 119.879711][ T7208] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 119.908578][ T3263] IPVS: starting estimator thread 0... [ 119.997981][ T6449] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.002827][ T7209] IPVS: using max 43 ests per chain, 103200 per kthread [ 120.005571][ T6449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.013363][ T6449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.016553][ T6449] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.022504][ T6449] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.025662][ T6449] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.052562][ T6449] usb 7-1: config 0 descriptor?? [ 120.768674][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.770645][ T42] audit: type=1326 audit(1785737561.923:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.0.322" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62fec code=0x0 [ 120.779202][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.056570][ T7221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.063156][ T7223] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.437005][ T6449] usbhid 7-1:0.0: can't add hid device: -71 [ 121.438839][ T6449] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 121.452150][ T6449] usb 7-1: USB disconnect, device number 14 [ 121.634059][ T5743] Bluetooth: hci3: link tx timeout [ 121.638420][ T5743] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 121.654752][ T5743] Bluetooth: hci3: link tx timeout [ 121.657141][ T5743] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.010241][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 123.010808][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.333'. [ 123.039693][ T7249] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 123.051431][ T7249] bond1: entered promiscuous mode [ 123.052795][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 123.053034][ T7249] bond1: entered allmulticast mode [ 123.056809][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 123.058576][ T7249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.078046][ T7253] dummy0: entered promiscuous mode [ 123.087483][ T7253] ifb1: entered promiscuous mode [ 123.090338][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 123.093125][ T7253] Cannot create hsr debugfs directory [ 123.114665][ T7249] erspan1: entered allmulticast mode [ 123.309862][ T7264] lo speed is unknown, defaulting to 1000 [ 123.496842][ T7273] lo: entered promiscuous mode [ 123.504354][ T7273] bond0: entered promiscuous mode [ 123.511178][ T7273] eql: entered promiscuous mode [ 123.521753][ T7273] ifb0: entered promiscuous mode [ 123.529549][ T7273] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 123.549256][ T7273] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 123.554524][ T7273] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 123.556780][ T7273] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 123.739678][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 123.859556][ T3263] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.867665][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 124.011710][ T3263] usb 6-1: Using ep0 maxpacket: 32 [ 124.021468][ T3263] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.025952][ T3263] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.035817][ T3263] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.041165][ T3263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.044643][ T3263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.047736][ T3263] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.052507][ T3263] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.055514][ T3263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.062523][ T3263] usb 6-1: config 0 descriptor?? [ 124.154835][ T7294] FAULT_INJECTION: forcing a failure. [ 124.154835][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 124.160019][ T7294] CPU: 3 UID: 0 PID: 7294 Comm: syz.2.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.160051][ T7294] Tainted: [L]=SOFTLOCKUP [ 124.160056][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.160063][ T7294] Call Trace: [ 124.160068][ T7294] [ 124.160072][ T7294] dump_stack_lvl+0x100/0x190 [ 124.160092][ T7294] should_fail_ex.cold+0x5/0xa [ 124.160106][ T7294] should_failslab+0xc2/0x120 [ 124.160124][ T7294] __kmalloc_noprof+0xfc/0x820 [ 124.160138][ T7294] ? trace_kmalloc+0xeb/0x110 [ 124.160154][ T7294] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 124.160172][ T7294] kernfs_fop_write_iter+0x26a/0x5f0 [ 124.160187][ T7294] iter_file_splice_write+0x830/0x10b0 [ 124.160208][ T7294] ? __pfx_iter_file_splice_write+0x10/0x10 [ 124.160223][ T7294] ? __pfx_copy_splice_read+0x10/0x10 [ 124.160242][ T7294] ? __pfx_iter_file_splice_write+0x10/0x10 [ 124.160256][ T7294] direct_splice_actor+0x192/0x690 [ 124.160269][ T7294] splice_direct_to_actor+0x345/0xa30 [ 124.160282][ T7294] ? __pfx_direct_splice_actor+0x10/0x10 [ 124.160297][ T7294] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 124.160319][ T7294] do_splice_direct+0x174/0x240 [ 124.160331][ T7294] ? __pfx_do_splice_direct+0x10/0x10 [ 124.160344][ T7294] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 124.160357][ T7294] ? rw_verify_area+0xce/0x6d0 [ 124.160376][ T7294] do_sendfile+0xadc/0xe20 [ 124.160396][ T7294] ? __pfx_do_sendfile+0x10/0x10 [ 124.160414][ T7294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.160431][ T7294] ? __fget_files+0x21f/0x3d0 [ 124.160445][ T7294] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 124.160458][ T7294] ? fput+0x79/0x100 [ 124.160470][ T7294] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 124.160483][ T7294] ? ksys_write+0x1ac/0x250 [ 124.160494][ T7294] ? __pfx_ksys_write+0x10/0x10 [ 124.160507][ T7294] __do_fast_syscall_32+0xe7/0x970 [ 124.160523][ T7294] ? lockdep_hardirqs_on+0x78/0x100 [ 124.160539][ T7294] do_fast_syscall_32+0x32/0x70 [ 124.160555][ T7294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.160570][ T7294] RIP: 0023:0xf7f56fec [ 124.160584][ T7294] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 124.160589][ T7294] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 124.160601][ T7294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 124.160607][ T7294] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 124.160613][ T7294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.160619][ T7294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 124.160625][ T7294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.160639][ T7294] [ 124.300280][ T3263] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.305826][ T3263] usb 6-1: USB disconnect, device number 4 [ 124.315735][ T3263] usblp0: removed [ 124.961722][ T5838] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 125.089629][ T3263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 125.119760][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 125.126223][ T5838] usb 7-1: config 0 has no interfaces? [ 125.141873][ T5838] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.148626][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.156741][ T5838] usb 7-1: Product: syz [ 125.158656][ T5838] usb 7-1: Manufacturer: syz [ 125.162591][ T5838] usb 7-1: SerialNumber: syz [ 125.270014][ T5838] usb 7-1: config 0 descriptor?? [ 125.542011][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 125.544826][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 125.809676][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 125.929724][ T3263] usb 6-1: Using ep0 maxpacket: 32 [ 126.271732][ T34] usb 7-1: USB disconnect, device number 15 [ 126.275727][ T3263] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 126.279699][ T3263] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 126.283506][ T3263] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 126.286313][ T3263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.289280][ T3263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.292281][ T3263] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.296085][ T3263] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 126.298841][ T3263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.302624][ T3263] usb 6-1: config 0 descriptor?? [ 126.537023][ T3263] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 126.746246][ T5838] usb 6-1: USB disconnect, device number 5 [ 126.750536][ T5838] usblp0: removed [ 126.856933][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 126.928313][ T7351] warning: `syz.2.356' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.132811][ T7351] syz.2.356 (7351): drop_caches: 2 [ 127.228749][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.284543][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 127.333462][ T7363] mmap: syz.2.361 (7363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.346651][ T7366] FAULT_INJECTION: forcing a failure. [ 127.346651][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 127.353316][ T7366] CPU: 3 UID: 0 PID: 7366 Comm: syz.3.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.353346][ T7366] Tainted: [L]=SOFTLOCKUP [ 127.353353][ T7366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.353364][ T7366] Call Trace: [ 127.353371][ T7366] [ 127.353378][ T7366] dump_stack_lvl+0x100/0x190 [ 127.353407][ T7366] should_fail_ex.cold+0x5/0xa [ 127.353430][ T7366] should_failslab+0xc2/0x120 [ 127.353473][ T7366] kmem_cache_alloc_noprof+0x91/0x6a0 [ 127.353497][ T7366] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.353520][ T7366] ? __inet_hash_connect+0x6da/0x2000 [ 127.353559][ T7366] __inet_hash_connect+0x6da/0x2000 [ 127.353585][ T7366] ? __pfx___inet6_check_established+0x10/0x10 [ 127.353617][ T7366] ? __pfx___inet_hash_connect+0x10/0x10 [ 127.353635][ T7366] ? inet6_ehashfn+0x25/0x3e0 [ 127.353655][ T7366] ? inet6_hash_connect+0xe7/0x180 [ 127.353677][ T7366] tcp_v6_connect+0x166f/0x2660 [ 127.353706][ T7366] ? __pfx_tcp_v6_connect+0x10/0x10 [ 127.353727][ T7366] ? lockdep_hardirqs_on+0x78/0x100 [ 127.353752][ T7366] ? __local_bh_enable_ip+0x9e/0x120 [ 127.353781][ T7366] ? mptcp_token_new_connect+0x1e4/0x620 [ 127.353808][ T7366] mptcp_connect+0x4c6/0xaf0 [ 127.353834][ T7366] __inet_stream_connect+0x208/0xfa0 [ 127.353875][ T7366] ? __pfx___inet_stream_connect+0x10/0x10 [ 127.353898][ T7366] ? kasan_save_track+0x14/0x30 [ 127.353920][ T7366] ? __kasan_kmalloc+0xaa/0xb0 [ 127.353943][ T7366] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 127.353961][ T7366] ? do_raw_spin_lock+0x128/0x260 [ 127.353981][ T7366] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 127.354015][ T7366] tcp_sendmsg_fastopen+0x3ed/0x750 [ 127.354048][ T7366] mptcp_sendmsg+0x1641/0x2210 [ 127.354077][ T7366] ? aa_sk_perm+0x309/0xaa0 [ 127.354104][ T7366] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.354127][ T7366] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 127.354159][ T7366] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 127.354188][ T7366] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 127.354214][ T7366] inet6_sendmsg+0x11c/0x140 [ 127.354236][ T7366] ____sys_sendmsg+0x704/0xbe0 [ 127.354259][ T7366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.354284][ T7366] ? _kstrtoull+0x13c/0x1f0 [ 127.354306][ T7366] ? __pfx__kstrtoull+0x10/0x10 [ 127.354329][ T7366] ___sys_sendmsg+0x190/0x1e0 [ 127.354352][ T7366] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.354370][ T7366] ? __lock_acquire+0x49f/0x1a40 [ 127.354429][ T7366] __sys_sendmmsg+0x309/0x440 [ 127.354458][ T7366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.354483][ T7366] ? find_held_lock+0x2b/0x80 [ 127.354512][ T7366] ? __mutex_unlock_slowpath+0x35d/0x930 [ 127.354551][ T7366] ? fput+0x79/0x100 [ 127.354573][ T7366] ? ksys_write+0x1ac/0x250 [ 127.354593][ T7366] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 127.354623][ T7366] ? lockdep_hardirqs_on+0x78/0x100 [ 127.354646][ T7366] __do_fast_syscall_32+0xe7/0x970 [ 127.354671][ T7366] ? lockdep_hardirqs_on+0x78/0x100 [ 127.354696][ T7366] do_fast_syscall_32+0x32/0x70 [ 127.354722][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.354750][ T7366] RIP: 0023:0xf7fd6fec [ 127.354775][ T7366] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 127.354783][ T7366] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 127.354802][ T7366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019680 [ 127.354813][ T7366] RDX: 0000000000000001 RSI: 0000000020004855 RDI: 0000000000000000 [ 127.354824][ T7366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.354834][ T7366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.354845][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.354869][ T7366] [ 127.431061][ T7370] lo speed is unknown, defaulting to 1000 [ 127.493349][ T42] audit: type=1326 audit(1785737568.653:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.366" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fec code=0x0 [ 127.508086][ T7376] CIFS mount error: No usable UNC path provided in device string! [ 127.508086][ T7376] [ 127.520206][ T7376] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.553745][ T7379] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 127.556507][ T7379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.562515][ T7379] vhci_hcd vhci_hcd.0: Device attached [ 127.829577][ T845] usb 40-1: SetAddress Request (10) to port 0 [ 127.831756][ T845] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 128.132363][ T7380] vhci_hcd: connection reset by peer [ 128.137190][ T5818] vhci_hcd vhci_hcd.1: stop threads [ 128.140093][ T5818] vhci_hcd vhci_hcd.1: release socket [ 128.142497][ T5818] vhci_hcd vhci_hcd.1: disconnect device [ 128.411791][ T42] audit: type=1326 audit(1785737569.573:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.368" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56fec code=0x0 [ 128.434410][ T7395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 128.436610][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.437187][ T7396] syz_tun: entered allmulticast mode [ 128.439309][ T7395] vhci_hcd vhci_hcd.0: Device attached [ 128.452267][ T7395] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 128.454483][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.457025][ T7395] vhci_hcd vhci_hcd.0: Device attached [ 128.473030][ T7399] vhci_hcd: connection closed [ 128.473205][ T7397] vhci_hcd: connection closed [ 128.473707][ T13] vhci_hcd vhci_hcd.0: stop threads [ 128.478688][ T13] vhci_hcd vhci_hcd.0: release socket [ 128.481082][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 128.483697][ T13] vhci_hcd vhci_hcd.0: stop threads [ 128.486000][ T13] vhci_hcd vhci_hcd.0: release socket [ 128.488377][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 128.499765][ T7396] __nla_validate_parse: 1 callbacks suppressed [ 128.499781][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.506340][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.510918][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.514742][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.518559][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.522737][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.526560][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.530600][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.534524][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.538361][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 128.734858][ T7408] fuse: Bad value for 'fd' [ 128.738017][ T42] audit: type=1326 audit(1785737569.893:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7407 comm="syz.1.375" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 129.277935][ T42] audit: type=1326 audit(1785737570.433:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.2.377" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f56fec code=0x0 [ 129.914515][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.919214][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.005854][ T7442] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 130.032038][ T7442] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 130.034537][ T7442] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 130.037109][ T7442] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 130.041117][ T7442] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 130.056193][ T7442] pci 0000:00:01.0: Adding to iommu group 1 [ 130.065131][ T7442] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 130.067320][ T7442] pci 0000:00:01.0: vgaarb: bridge control possible [ 130.069353][ T7442] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 130.077312][ T7442] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 130.080138][ T7442] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 130.085530][ T7442] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 130.095759][ T7442] [drm] Found bochs VGA, ID 0xb0c5. [ 130.097532][ T7442] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 130.137125][ T7442] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 130.215592][ T7442] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 130.309569][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.479659][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 130.483245][ T24] usb 6-1: config 0 has no interfaces? [ 130.488995][ T24] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 130.495331][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.500325][ T24] usb 6-1: Product: syz [ 130.504024][ T24] usb 6-1: Manufacturer: syz [ 130.506841][ T24] usb 6-1: SerialNumber: syz [ 130.514244][ T24] usb 6-1: config 0 descriptor?? [ 130.594194][ T7460] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 130.796070][ T24] usb 6-1: USB disconnect, device number 6 [ 131.587006][ T7495] binder: 7493:7495 ioctl c00c6211 0 returned -14 [ 131.589202][ T7494] binder: 7493:7494 ioctl c00c6211 0 returned -14 [ 132.452273][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.454970][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.796494][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.801142][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.934067][ T845] usb 40-1: device descriptor read/8, error -110 [ 132.991147][ T7520] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 132.997515][ T7525] tun0: tun_chr_ioctl cmd 1074025676 [ 132.999386][ T7525] tun0: owner set to 0 [ 133.042453][ T7520] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 133.045010][ T7520] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 133.047660][ T7520] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 133.052429][ T7520] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 133.059293][ T7529] tipc: Enabling of bearer rejected, failed to enable media [ 133.079157][ T7520] pci 0000:00:01.0: Adding to iommu group 1 [ 133.086684][ T7520] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 133.088896][ T7520] pci 0000:00:01.0: vgaarb: bridge control possible [ 133.090961][ T7520] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 133.102871][ T7520] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 133.105648][ T7520] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 133.109416][ T7520] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 133.117425][ T7520] [drm] Found bochs VGA, ID 0xb0c5. [ 133.119155][ T7520] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 133.134662][ T7520] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 133.186962][ T7520] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 133.189582][ T5889] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 133.321663][ T845] usb usb40-port1: attempt power cycle [ 133.339883][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 133.346310][ T5889] usb 7-1: config 0 has no interfaces? [ 133.350883][ T5889] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 133.353576][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.356016][ T5889] usb 7-1: Product: syz [ 133.357213][ T5889] usb 7-1: Manufacturer: syz [ 133.358635][ T5889] usb 7-1: SerialNumber: syz [ 133.366897][ T5889] usb 7-1: config 0 descriptor?? [ 133.712395][ T5889] usb 7-1: USB disconnect, device number 16 [ 133.884180][ T845] usb usb40-port1: unable to enumerate USB device [ 134.490091][ T7564] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 134.533451][ T7564] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 134.537024][ T7564] overlayfs: failed to look up (tracing) for ino (-66) [ 135.375735][ T7577] lo speed is unknown, defaulting to 1000 [ 135.588059][ T42] audit: type=1400 audit(1785737576.741:53): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="::-" pid=7586 comm="syz.1.427" [ 136.235604][ T42] audit: type=1800 audit(1785737577.391:54): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 136.456927][ T42] audit: type=1800 audit(1785737577.611:55): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="p_volume_present" dev="configfs" ino=23723 res=0 errno=0 [ 137.791433][ T7643] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 139.599697][ T1825] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 139.754136][ T1825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 139.763756][ T1825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 139.773767][ T1825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.783470][ T1825] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.786970][ T1825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.798836][ T1825] usb 7-1: config 0 descriptor?? [ 139.802611][ T7677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.238432][ T1825] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.491699][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.615476][ T7697] __nla_validate_parse: 2 callbacks suppressed [ 140.615497][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 141.829585][ T1825] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.024657][ T1825] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.030179][ T1825] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.034979][ T1825] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.039058][ T1825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.064252][ T7704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.140281][ T1825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.325387][ T24] usb 7-1: USB disconnect, device number 17 [ 142.580617][ T1825] usb 5-1: USB disconnect, device number 8 [ 142.710523][ T7719] input: syz0 as /devices/virtual/input/input11 [ 143.122281][ T7721] lo speed is unknown, defaulting to 1000 [ 143.249413][ T7724] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.254098][ T34] IPVS: starting estimator thread 0... [ 143.336795][ T7733] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 143.349569][ T7727] IPVS: using max 43 ests per chain, 103200 per kthread [ 143.354225][ T7733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.531513][ T42] audit: type=1800 audit(1785737584.691:56): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.472" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 144.103997][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 144.135876][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 144.221724][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 144.316483][ T7733] macvlan2: entered promiscuous mode [ 144.318479][ T7733] macvlan2: entered allmulticast mode [ 144.609614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.835742][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 146.309566][ T5819] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 146.461488][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 146.465885][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.470505][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.476089][ T5819] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.479981][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.485335][ T5819] usb 7-1: config 0 descriptor?? [ 146.487793][ T7759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.912309][ T5819] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.257594][ T7775] input: syz0 as /devices/virtual/input/input12 [ 147.359498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.391592][ T7770] Cannot find set identified by id 0 to match [ 147.607958][ T7779] lo speed is unknown, defaulting to 1000 [ 147.787973][ T7783] lo speed is unknown, defaulting to 1000 [ 147.937768][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 148.017432][ T42] audit: type=1804 audit(1785737589.171:57): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.486" name="/newroot/128/file1" dev="fuse" ino=1 res=1 errno=0 [ 148.028485][ T42] audit: type=1800 audit(1785737589.171:58): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.486" name="/" dev="fuse" ino=1 res=0 errno=0 [ 148.358068][ T7803] usb 1-1: USB disconnect, device number 2 [ 148.959115][ T1825] usb 7-1: USB disconnect, device number 18 [ 149.313661][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 151.594871][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 151.599143][ T7840] bridge_slave_1: left allmulticast mode [ 151.602086][ T7840] bridge_slave_1: left promiscuous mode [ 151.605294][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.621374][ T7840] bridge_slave_0: left allmulticast mode [ 151.630695][ T7840] bridge_slave_0: left promiscuous mode [ 151.638368][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.245406][ T7855] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 152.280671][ T7855] bond2: entered promiscuous mode [ 152.285073][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.660810][ T7855] bond2: (slave bridge1): making interface the new active one [ 152.669524][ T7855] bridge1: entered promiscuous mode [ 152.672304][ T7855] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 152.688484][ T7853] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.702556][ T7853] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.961705][ T7871] tipc: Started in network mode [ 152.963538][ T7871] tipc: Node identity 2007ff, cluster identity 4711 [ 152.970488][ T7871] tipc: Node number set to 2099199 [ 154.433725][ T7889] lo speed is unknown, defaulting to 1000 [ 154.590655][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 154.911665][ T7902] fuse: fd is not a fuse device [ 155.212445][ T7901] JFS: discard option not supported on device [ 155.219345][ T7901] Mount JFS Failure: -5 [ 155.221233][ T7901] jfs_mount failed w/return code = -5 [ 155.229298][ T5751] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 156.218131][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 156.237483][ T7918] 9p: Bad value for 'rfdno' [ 157.494338][ T7945] fuse: Unknown parameter 'fèþ™îo¢ëfd' [ 157.500200][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.527'. [ 157.552241][ T7947] 9pnet_virtio: no channels available for device syz [ 157.604993][ T7949] lo speed is unknown, defaulting to 1000 [ 158.054872][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 158.107179][ T7961] binder: 7960:7961 ioctl c0306201 0 returned -14 [ 158.114060][ T7961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.534'. [ 158.197144][ T7964] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 158.217768][ T7964] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 158.220748][ T7964] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 158.224405][ T7964] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 158.230440][ T7964] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 158.262686][ T7964] pci 0000:00:01.0: Adding to iommu group 1 [ 158.268285][ T7964] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 158.270544][ T7964] pci 0000:00:01.0: vgaarb: bridge control possible [ 158.272788][ T7964] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 158.305592][ T7964] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 158.313019][ T7964] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 158.318987][ T7964] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 158.337426][ T7964] [drm] Found bochs VGA, ID 0xb0c5. [ 158.339148][ T7964] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 158.355369][ T7974] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 158.374501][ T7971] IPVS: stopping master sync thread 7974 ... [ 158.382130][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 158.383275][ T7964] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 3 [ 158.451321][ T7964] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 158.523337][ T7979] tmpfs: Bad value for 'mpol' [ 159.648091][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.128775][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 160.136599][ T8001] overlayfs: missing 'lowerdir' [ 160.206495][ T8003] lo speed is unknown, defaulting to 1000 [ 160.301063][ T8008] FAULT_INJECTION: forcing a failure. [ 160.301063][ T8008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.306344][ T8008] CPU: 3 UID: 0 PID: 8008 Comm: syz.2.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.306379][ T8008] Tainted: [L]=SOFTLOCKUP [ 160.306385][ T8008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.306397][ T8008] Call Trace: [ 160.306414][ T8008] [ 160.306422][ T8008] dump_stack_lvl+0x100/0x190 [ 160.306620][ T8008] should_fail_ex.cold+0x5/0xa [ 160.306658][ T8008] _copy_from_user+0x2e/0xd0 [ 160.306742][ T8008] get_user_ifreq+0x116/0x1c0 [ 160.306833][ T8008] compat_sock_ioctl+0x4c1/0x760 [ 160.306856][ T8008] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 160.306873][ T8008] ? hook_file_ioctl_common+0x140/0x440 [ 160.306911][ T8008] ? __fget_files+0x21f/0x3d0 [ 160.306961][ T8008] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 160.306981][ T8008] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 160.307009][ T8008] __do_fast_syscall_32+0xe7/0x970 [ 160.307074][ T8008] ? lockdep_hardirqs_on+0x78/0x100 [ 160.307097][ T8008] do_fast_syscall_32+0x32/0x70 [ 160.307120][ T8008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.307142][ T8008] RIP: 0023:0xf7f56fec [ 160.307163][ T8008] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 160.307170][ T8008] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 160.307187][ T8008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 160.307198][ T8008] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.307207][ T8008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.307216][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.307225][ T8008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.307245][ T8008] [ 160.420241][ T8009] lo speed is unknown, defaulting to 1000 [ 160.750054][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.551'. [ 161.533694][ T8031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.536429][ T8031] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 161.576714][ T8031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.582840][ T8031] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 161.595617][ T8031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.598622][ T8031] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 161.607643][ T8031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.611649][ T8031] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 162.615500][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 162.970200][ T8061] syzkaller0: entered promiscuous mode [ 162.980270][ T8061] syzkaller0: entered allmulticast mode [ 163.190028][ T8065] 9pnet_fd: Insufficient options for proto=fd [ 163.324137][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 163.340868][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 163.709039][ T8077] IPv6: NLM_F_REPLACE set, but no existing node found! [ 164.514991][ T8092] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 164.590897][ T8096] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 164.791812][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.799884][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.898398][ T42] audit: type=1326 audit(1785737606.048:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.3.573" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6fec code=0x0 [ 165.021528][ T5819] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.409355][ T8181] dlm: no locking on control device [ 170.214467][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 170.218335][ T8197] netlink: 'syz.2.599': attribute type 20 has an invalid length. [ 170.221862][ T8197] netlink: 'syz.2.599': attribute type 21 has an invalid length. [ 170.273811][ T8199] 9pnet_virtio: no channels available for device syz [ 170.509163][ T8206] 9p: Bad value for 'wfdno' [ 170.568260][ T8209] input: syz0 as /devices/virtual/input/input13 [ 170.899589][ T1825] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 171.050991][ T1825] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.056909][ T1825] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.062767][ T1825] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 171.066166][ T1825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.073083][ T1825] usb 6-1: Product: syz [ 171.074510][ T1825] usb 6-1: Manufacturer: syz [ 171.076377][ T1825] usb 6-1: SerialNumber: syz [ 171.093563][ T1825] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 171.109178][ T1825] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 171.115311][ T1825] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 171.671764][ T5838] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 171.816514][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.821539][ T5838] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.824031][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.825166][ T5838] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.832547][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.833479][ T5838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.842159][ T5838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 171.842950][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.846412][ T5838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 171.853284][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.854712][ T5838] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.858844][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.859019][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.861544][ T5838] usb 8-1: Product: syz [ 171.865628][ T5838] usb 8-1: Manufacturer: syz [ 171.865865][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 171.875902][ T5838] cdc_wdm 8-1:1.0: skipping garbage [ 171.877861][ T5838] cdc_wdm 8-1:1.0: skipping garbage [ 171.883508][ T5838] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 171.886046][ T5838] cdc_wdm 8-1:1.0: Unknown control protocol [ 172.529677][ T5838] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 172.660071][ T5530] usb 8-1: USB disconnect, device number 7 [ 172.902339][ T5838] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 173.429812][ T8213] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 173.434827][ T8213] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 173.437687][ T8213] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 173.441861][ T8213] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 173.451244][ T10] usb 6-1: USB disconnect, device number 7 [ 173.478697][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 173.491100][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 173.498760][ T10] ti_usb_3410_5052 6-1:2.0: device disconnected [ 173.544139][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.546545][ T5838] usb 7-1: Product: syz [ 173.547787][ T5838] usb 7-1: Manufacturer: syz [ 173.549131][ T5838] usb 7-1: SerialNumber: syz [ 173.554435][ T5838] usb 7-1: config 0 descriptor?? [ 173.779241][ T3263] usb 7-1: USB disconnect, device number 19 [ 175.047285][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 175.052575][ T10] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 175.055662][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.057891][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.061413][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.064520][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.066822][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.069031][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.071513][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.074332][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.076606][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 175.083345][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 175.241486][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 175.299626][ T1825] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.465104][ T1825] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 175.470746][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.473456][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.482799][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.486053][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.488873][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.492211][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.496394][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.499883][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.504880][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.507695][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.511027][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.516040][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.518936][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.522293][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.525600][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.528819][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.533955][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.537199][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.542022][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.553672][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.556750][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.560049][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.563545][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.566941][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.570212][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.573422][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.577114][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.586413][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.593712][ T1825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.602858][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 175.613985][ T1825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 175.624389][ T1825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.631369][ T1825] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.635520][ T1825] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 175.638177][ T1825] usb 6-1: Product: syz [ 175.639487][ T1825] usb 6-1: Manufacturer: syz [ 175.641086][ T1825] usb 6-1: SerialNumber: syz [ 175.646478][ T1825] usb 6-1: config 0 descriptor?? [ 175.648637][ T8327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.654517][ T1825] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.312350][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 176.326163][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 176.741458][ T8371] netlink: Invalid conntrack helper [ 176.743369][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.901219][ T8378] netlink: Conntrack attr has 12 unknown bytes [ 176.903700][ T8378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.907118][ T8378] FAULT_INJECTION: forcing a failure. [ 176.907118][ T8378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.911356][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.911375][ T8378] Tainted: [L]=SOFTLOCKUP [ 176.911379][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.911386][ T8378] Call Trace: [ 176.911390][ T8378] [ 176.911395][ T8378] dump_stack_lvl+0x100/0x190 [ 176.911414][ T8378] should_fail_ex.cold+0x5/0xa [ 176.911428][ T8378] _copy_to_user+0x32/0xd0 [ 176.911470][ T8378] simple_read_from_buffer+0xcb/0x170 [ 176.911514][ T8378] proc_fail_nth_read+0x1af/0x230 [ 176.911541][ T8378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.911565][ T8378] ? rw_verify_area+0xce/0x6d0 [ 176.911588][ T8378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.911611][ T8378] vfs_read+0x1e4/0xb40 [ 176.911630][ T8378] ? __pfx_vfs_read+0x10/0x10 [ 176.911645][ T8378] ? find_held_lock+0x2b/0x80 [ 176.911694][ T8378] ? __fget_files+0x215/0x3d0 [ 176.911716][ T8378] ? __fget_files+0x21f/0x3d0 [ 176.911740][ T8378] ksys_read+0x12a/0x250 [ 176.911757][ T8378] ? __pfx_ksys_read+0x10/0x10 [ 176.911781][ T8378] do_int80_emulation+0x14b/0x720 [ 176.911810][ T8378] asm_int80_emulation+0x1a/0x20 [ 176.911829][ T8378] RIP: 0023:0xf71573eb [ 176.911844][ T8378] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 176.911860][ T8378] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 176.911879][ T8378] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 176.911890][ T8378] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 176.911900][ T8378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.911910][ T8378] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 176.911927][ T8378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.911951][ T8378] [ 177.079739][ T8384] FAULT_INJECTION: forcing a failure. [ 177.079739][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 177.083543][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.3.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.083562][ T8384] Tainted: [L]=SOFTLOCKUP [ 177.083566][ T8384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.083573][ T8384] Call Trace: [ 177.083578][ T8384] [ 177.083583][ T8384] dump_stack_lvl+0x100/0x190 [ 177.083602][ T8384] should_fail_ex.cold+0x5/0xa [ 177.083617][ T8384] should_failslab+0xc2/0x120 [ 177.083647][ T8384] __kmalloc_noprof+0xfc/0x820 [ 177.083669][ T8384] ? nla_alloc_flow_actions+0x21/0x80 [ 177.083698][ T8384] nla_alloc_flow_actions+0x21/0x80 [ 177.083714][ T8384] reserve_sfa_size.isra.0+0x13e/0x340 [ 177.083732][ T8384] __add_action.isra.0+0x27/0x150 [ 177.083749][ T8384] ovs_nla_add_action+0x2c/0x80 [ 177.083767][ T8384] ovs_ct_copy_action+0x5c8/0x1990 [ 177.083790][ T8384] ? __pfx_ovs_ct_copy_action+0x10/0x10 [ 177.083814][ T8384] ? nla_alloc_flow_actions+0x21/0x80 [ 177.083829][ T8384] ? ovs_nla_copy_actions+0x60/0x330 [ 177.083846][ T8384] ? ovs_flow_cmd_new+0x451/0xd50 [ 177.083858][ T8384] ? genl_family_rcv_msg_doit+0x214/0x300 [ 177.083881][ T8384] ? genl_rcv_msg+0x560/0x800 [ 177.083895][ T8384] ? netlink_rcv_skb+0x159/0x420 [ 177.083907][ T8384] ? genl_rcv+0x28/0x40 [ 177.083919][ T8384] ? netlink_unicast+0x585/0x850 [ 177.083930][ T8384] ? netlink_sendmsg+0x8b0/0xda0 [ 177.083942][ T8384] ? ____sys_sendmsg+0xa4d/0xbe0 [ 177.083954][ T8384] ? ___sys_sendmsg+0x190/0x1e0 [ 177.083967][ T8384] __ovs_nla_copy_actions+0x911/0x2ff0 [ 177.083990][ T8384] ? __pfx___ovs_nla_copy_actions+0x10/0x10 [ 177.084018][ T8384] ? rcu_is_watching+0x12/0xc0 [ 177.084039][ T8384] ? trace_kmalloc+0xeb/0x110 [ 177.084055][ T8384] ? __kasan_kmalloc+0xaa/0xb0 [ 177.084070][ T8384] ? __kmalloc_noprof+0x343/0x820 [ 177.084084][ T8384] ? nla_alloc_flow_actions+0x21/0x80 [ 177.084102][ T8384] ovs_nla_copy_actions+0x1b8/0x330 [ 177.084123][ T8384] ovs_flow_cmd_new+0x451/0xd50 [ 177.084139][ T8384] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 177.084151][ T8384] ? genl_rcv_msg+0x560/0x800 [ 177.084164][ T8384] ? genl_rcv+0x28/0x40 [ 177.084176][ T8384] ? netlink_unicast+0x585/0x850 [ 177.084188][ T8384] ? netlink_sendmsg+0x8b0/0xda0 [ 177.084200][ T8384] ? __do_fast_syscall_32+0xe7/0x970 [ 177.084217][ T8384] ? do_fast_syscall_32+0x32/0x70 [ 177.084232][ T8384] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.084268][ T8384] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 177.084284][ T8384] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 177.084302][ T8384] genl_family_rcv_msg_doit+0x214/0x300 [ 177.084318][ T8384] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.084332][ T8384] ? genl_get_cmd+0x3e7/0x760 [ 177.084349][ T8384] ? bpf_lsm_capable+0x9/0x10 [ 177.084369][ T8384] ? security_capable+0x80/0x260 [ 177.084395][ T8384] ? ns_capable+0xd2/0xf0 [ 177.084415][ T8384] genl_rcv_msg+0x560/0x800 [ 177.084431][ T8384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.084446][ T8384] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 177.084471][ T8384] netlink_rcv_skb+0x159/0x420 [ 177.084491][ T8384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.084511][ T8384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.084529][ T8384] ? netlink_deliver_tap+0x1ae/0xcc0 [ 177.084543][ T8384] genl_rcv+0x28/0x40 [ 177.084555][ T8384] netlink_unicast+0x585/0x850 [ 177.084570][ T8384] ? __pfx_netlink_unicast+0x10/0x10 [ 177.084587][ T8384] netlink_sendmsg+0x8b0/0xda0 [ 177.084601][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.084616][ T8384] ? apparmor_socket_sendmsg+0x15b/0x270 [ 177.084632][ T8384] ____sys_sendmsg+0xa4d/0xbe0 [ 177.084643][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.084657][ T8384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.084675][ T8384] ___sys_sendmsg+0x190/0x1e0 [ 177.084688][ T8384] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.084707][ T8384] ? find_held_lock+0x2b/0x80 [ 177.084729][ T8384] __sys_sendmsg+0x160/0x210 [ 177.084751][ T8384] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.084771][ T8384] ? __pfx_ksys_write+0x10/0x10 [ 177.084786][ T8384] __do_fast_syscall_32+0xe7/0x970 [ 177.084801][ T8384] ? lockdep_hardirqs_on+0x78/0x100 [ 177.084817][ T8384] do_fast_syscall_32+0x32/0x70 [ 177.084833][ T8384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.084847][ T8384] RIP: 0023:0xf7fd6fec [ 177.084861][ T8384] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 177.084867][ T8384] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 177.084878][ T8384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 177.084887][ T8384] RDX: 000000000000c040 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.084894][ T8384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.084900][ T8384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.084907][ T8384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.084920][ T8384] [ 177.084946][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.218057][ T8387] 9p: Bad value for 'rfdno' [ 177.795848][ T8410] fuse: Bad value for 'fd' [ 177.894551][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 177.897455][ C1] usb 6-1: yurex_control_callback - control failed: -32 [ 177.903344][ T6449] usb 6-1: USB disconnect, device number 8 [ 177.908309][ T6449] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 178.357798][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 178.360926][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 178.380610][ T5819] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 178.555437][ T5819] usb 8-1: unable to get BOS descriptor or descriptor too short [ 178.560265][ T5819] usb 8-1: not running at top speed; connect to a high speed hub [ 178.566292][ T5819] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 178.573661][ T5819] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 178.577303][ T5819] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 178.580811][ T5819] usb 8-1: config 14 has no interface number 0 [ 178.582751][ T5819] usb 8-1: config 14 has no interface number 1 [ 178.584718][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 178.587974][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 178.592233][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.595584][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 178.598783][ T5819] usb 8-1: config 14 interface 57 has no altsetting 0 [ 178.601176][ T5819] usb 8-1: config 14 interface 228 has no altsetting 0 [ 178.605089][ T5819] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 178.607801][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.612470][ T5819] usb 8-1: Product: syz [ 178.614319][ T5819] usb 8-1: Manufacturer: syz [ 178.615836][ T5819] usb 8-1: SerialNumber: syz [ 179.073692][ T5819] legousbtower 8-1:14.57: interrupt endpoints not found [ 179.479828][ T5819] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 179.490489][ T5819] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 179.779008][ T42] audit: type=1326 audit(1785737620.918:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.786201][ T42] audit: type=1326 audit(1785737620.918:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.793681][ T42] audit: type=1326 audit(1785737620.928:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.800924][ T42] audit: type=1326 audit(1785737620.928:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.810250][ T42] audit: type=1326 audit(1785737620.928:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.818393][ T42] audit: type=1326 audit(1785737620.928:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.826599][ T42] audit: type=1326 audit(1785737620.928:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.834789][ T42] audit: type=1326 audit(1785737620.928:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.843023][ T42] audit: type=1326 audit(1785737620.928:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 179.843545][ T1825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 179.853285][ T42] audit: type=1326 audit(1785737620.928:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.0.684" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62fec code=0x7ffc0000 [ 180.010242][ T1825] usb 6-1: Using ep0 maxpacket: 8 [ 180.014173][ T1825] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 180.016811][ T1825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 180.021150][ T1825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.024958][ T1825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 180.028612][ T1825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 180.032233][ T1825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.034918][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.037525][ T1825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.040149][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.048179][ T1825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.259505][ T10] usb 8-1: USB disconnect, device number 8 [ 180.272852][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 181.027230][ T8467] netlink: Unknown nat attribute (0) [ 181.028867][ T8467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.126471][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 182.483812][ T1825] usb 6-1: usb_control_msg returned -71 [ 182.489726][ T1825] usbtmc 6-1:16.0: can't read capabilities [ 182.509393][ T1825] usb 6-1: USB disconnect, device number 9 [ 183.645688][ T8516] netlink: 64 bytes leftover after parsing attributes in process `syz.3.708'. [ 185.174299][ T8555] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 185.195371][ T8555] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.211122][ T8560] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.218020][ T83] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.923503][ T8577] tmpfs: Bad value for 'mpol' [ 185.928747][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 186.537139][ T8590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.542149][ T8590] bond0: (slave bond3): Enslaving as an active interface with an up link [ 186.683368][ T8596] vhci_hcd vhci_hcd.0: remove, state 4 [ 186.692663][ T8596] usb usb38: USB disconnect, device number 1 [ 187.159596][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.161397][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.164159][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.166846][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.169207][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.172774][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.175331][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.179424][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.181952][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.184427][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.186656][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.188930][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.193474][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.195749][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.197964][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.200518][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.202895][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.205207][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.208284][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.210654][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.212438][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.215160][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 187.217189][ T5792] vhci_hcd vhci_hcd.0: release socket [ 187.219374][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 187.221854][ T8596] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 187.250493][ T5751] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 187.361975][ T8596] vhci_hcd vhci_hcd.0: remove, state 4 [ 187.363953][ T8596] usb usb37: USB disconnect, device number 1 [ 187.495225][ T7796] vhci_hcd vhci_hcd.0: stop threads [ 187.495349][ T8596] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 187.497143][ T7796] vhci_hcd vhci_hcd.0: release socket [ 187.497162][ T7796] vhci_hcd vhci_hcd.0: disconnect device [ 187.511582][ T7796] vhci_hcd vhci_hcd.0: stop threads [ 187.513879][ T7796] vhci_hcd vhci_hcd.0: release socket [ 187.515897][ T7796] vhci_hcd vhci_hcd.0: disconnect device [ 187.519644][ T7796] ================================================================== [ 187.522294][ T7796] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 187.524743][ T7796] Read of size 1 at addr ffff888021cc46c8 by task kworker/u32:4/7796 [ 187.529166][ T7796] [ 187.530522][ T7796] CPU: 2 UID: 0 PID: 7796 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.530550][ T7796] Tainted: [L]=SOFTLOCKUP [ 187.530557][ T7796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.530570][ T7796] Workqueue: usbip_event event_handler [ 187.530629][ T7796] Call Trace: [ 187.530636][ T7796] [ 187.530643][ T7796] dump_stack_lvl+0x100/0x190 [ 187.530690][ T7796] print_report+0x13d/0x4b0 [ 187.530717][ T7796] ? __virt_addr_valid+0x239/0x430 [ 187.530750][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.530771][ T7796] kasan_report+0xdf/0x1c0 [ 187.530795][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.530815][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.530834][ T7796] __kasan_check_byte+0x36/0x50 [ 187.530862][ T7796] lock_acquire+0x132/0x370 [ 187.530890][ T7796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 187.530909][ T7796] ? _raw_spin_lock_irqsave+0x52/0x60 [ 187.530930][ T7796] _raw_spin_lock_irqsave+0x3a/0x60 [ 187.530949][ T7796] ? event_handler+0x21e/0x570 [ 187.530968][ T7796] event_handler+0x21e/0x570 [ 187.530988][ T7796] process_one_work+0xa23/0x1940 [ 187.531019][ T7796] ? __pfx_process_one_work+0x10/0x10 [ 187.531046][ T7796] ? __pfx_event_handler+0x10/0x10 [ 187.531067][ T7796] worker_thread+0x5ef/0xe50 [ 187.531093][ T7796] ? __pfx_worker_thread+0x10/0x10 [ 187.531118][ T7796] ? kthread+0x13a/0x450 [ 187.531142][ T7796] ? __pfx_worker_thread+0x10/0x10 [ 187.531166][ T7796] kthread+0x370/0x450 [ 187.531188][ T7796] ? __pfx_kthread+0x10/0x10 [ 187.531211][ T7796] ret_from_fork+0x72b/0xd50 [ 187.531252][ T7796] ? __pfx_ret_from_fork+0x10/0x10 [ 187.531274][ T7796] ? __switch_to+0x800/0x10f0 [ 187.531309][ T7796] ? __pfx_kthread+0x10/0x10 [ 187.531333][ T7796] ret_from_fork_asm+0x1a/0x30 [ 187.531364][ T7796] [ 187.531370][ T7796] [ 187.592074][ T7796] Allocated by task 1: [ 187.593294][ T7796] kasan_save_stack+0x30/0x50 [ 187.594777][ T7796] kasan_save_track+0x14/0x30 [ 187.596319][ T7796] __kasan_kmalloc+0xaa/0xb0 [ 187.597773][ T7796] __kmalloc_noprof+0x322/0x820 [ 187.599310][ T7796] __usb_create_hcd+0x5e/0xac0 [ 187.600862][ T7796] vhci_hcd_probe+0xf3/0x4e0 [ 187.602449][ T7796] platform_probe+0x106/0x1d0 [ 187.604056][ T7796] really_probe+0x241/0xa60 [ 187.605892][ T7796] __driver_probe_device+0x20e/0x450 [ 187.608106][ T7796] driver_probe_device+0x4a/0x140 [ 187.610221][ T7796] __device_attach_driver+0x1df/0x320 [ 187.612512][ T7796] bus_for_each_drv+0x159/0x1e0 [ 187.614535][ T7796] __device_attach+0x1e4/0x4d0 [ 187.616496][ T7796] device_initial_probe+0xaf/0xd0 [ 187.618578][ T7796] bus_probe_device+0x64/0x160 [ 187.620257][ T7796] device_add+0x121d/0x1970 [ 187.621736][ T7796] platform_device_add+0x35a/0x800 [ 187.623352][ T7796] platform_device_register_full+0x5cf/0x830 [ 187.625369][ T7796] vhci_hcd_init+0x1a1/0x2f0 [ 187.627325][ T7796] do_one_initcall+0x11d/0x700 [ 187.629314][ T7796] kernel_init_freeable+0x6ea/0x7b0 [ 187.631485][ T7796] kernel_init+0x1f/0x1e0 [ 187.633275][ T7796] ret_from_fork+0x72b/0xd50 [ 187.635201][ T7796] ret_from_fork_asm+0x1a/0x30 [ 187.637180][ T7796] [ 187.638187][ T7796] Freed by task 8596: [ 187.639810][ T7796] kasan_save_stack+0x30/0x50 [ 187.641457][ T7796] kasan_save_track+0x14/0x30 [ 187.642970][ T7796] kasan_save_free_info+0x3b/0x70 [ 187.644539][ T7796] __kasan_slab_free+0x5f/0x80 [ 187.646195][ T7796] kfree+0x22b/0x6c0 [ 187.647461][ T7796] usb_put_hcd+0x149/0x1f0 [ 187.648953][ T7796] vhci_hcd_remove+0x107/0x1b0 [ 187.650519][ T7796] platform_remove+0x5f/0x80 [ 187.652197][ T7796] device_remove+0xcb/0x180 [ 187.653977][ T7796] device_release_driver_internal+0x44e/0x620 [ 187.656446][ T7796] unbind_store+0xf8/0x110 [ 187.658274][ T7796] drv_attr_store+0x74/0xb0 [ 187.660084][ T7796] sysfs_kf_write+0xf2/0x150 [ 187.662042][ T7796] kernfs_fop_write_iter+0x3e0/0x5f0 [ 187.664042][ T7796] vfs_write+0x6ac/0x1050 [ 187.665779][ T7796] ksys_write+0x12a/0x250 [ 187.667577][ T7796] __do_fast_syscall_32+0xe7/0x970 [ 187.669703][ T7796] do_fast_syscall_32+0x32/0x70 [ 187.671787][ T7796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.674450][ T7796] [ 187.675496][ T7796] Last potentially related work creation: [ 187.677829][ T7796] kasan_save_stack+0x30/0x50 [ 187.679806][ T7796] kasan_record_aux_stack+0xa7/0xc0 [ 187.681920][ T7796] insert_work+0x36/0x230 [ 187.683681][ T7796] __queue_work+0x9bc/0x12b0 [ 187.685467][ T7796] queue_work_on+0x1a9/0x1e0 [ 187.687262][ T7796] usb_hcd_giveback_urb+0x330/0x4a0 [ 187.689309][ T7796] unlink1+0x418/0x510 [ 187.691013][ T7796] usb_hcd_unlink_urb+0x131/0x210 [ 187.693101][ T7796] usb_kill_urb+0x121/0x320 [ 187.695017][ T7796] hub_quiesce+0x1e9/0x320 [ 187.696844][ T7796] hub_suspend+0x4ab/0x9e0 [ 187.698743][ T7796] usb_suspend_both+0x288/0x950 [ 187.700834][ T7796] usb_runtime_suspend+0x49/0x120 [ 187.702928][ T7796] __rpm_callback+0xc8/0x620 [ 187.704841][ T7796] rpm_callback+0x16a/0x1b0 [ 187.706713][ T7796] rpm_suspend+0x2f4/0x11a0 [ 187.708552][ T7796] __pm_runtime_suspend+0xba/0x1a0 [ 187.710701][ T7796] usb_runtime_idle+0x7e/0x90 [ 187.712669][ T7796] rpm_idle+0x322/0x790 [ 187.714420][ T7796] pm_runtime_work+0x120/0x150 [ 187.716435][ T7796] process_one_work+0xa23/0x1940 [ 187.718512][ T7796] worker_thread+0x5ef/0xe50 [ 187.720443][ T7796] kthread+0x370/0x450 [ 187.722122][ T7796] ret_from_fork+0x72b/0xd50 [ 187.723882][ T7796] ret_from_fork_asm+0x1a/0x30 [ 187.725639][ T7796] [ 187.726590][ T7796] Second to last potentially related work creation: [ 187.729265][ T7796] kasan_save_stack+0x30/0x50 [ 187.731204][ T7796] kasan_record_aux_stack+0xa7/0xc0 [ 187.732842][ T7796] insert_work+0x36/0x230 [ 187.734213][ T7796] __queue_work+0x9bc/0x12b0 [ 187.735683][ T7796] queue_work_on+0x1a9/0x1e0 [ 187.737150][ T7796] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 187.738818][ T7796] usb_hcd_submit_urb+0xab7/0x2150 [ 187.740461][ T7796] usb_submit_urb+0x827/0x19b0 [ 187.741990][ T7796] usb_start_wait_urb+0x10e/0x580 [ 187.743608][ T7796] usb_control_msg+0x328/0x4b0 [ 187.745124][ T7796] hub_ext_port_status+0x152/0x600 [ 187.746739][ T7796] hub_event+0xc48/0x4a60 [ 187.748108][ T7796] process_one_work+0xa23/0x1940 [ 187.749682][ T7796] worker_thread+0x5ef/0xe50 [ 187.751205][ T7796] kthread+0x370/0x450 [ 187.752493][ T7796] ret_from_fork+0x72b/0xd50 [ 187.753950][ T7796] ret_from_fork_asm+0x1a/0x30 [ 187.755670][ T7796] [ 187.756439][ T7796] The buggy address belongs to the object at ffff888021cc4000 [ 187.756439][ T7796] which belongs to the cache kmalloc-8k of size 8192 [ 187.760778][ T7796] The buggy address is located 1736 bytes inside of [ 187.760778][ T7796] freed 8192-byte region [ffff888021cc4000, ffff888021cc6000) [ 187.765043][ T7796] [ 187.765805][ T7796] The buggy address belongs to the physical page: [ 187.767789][ T7796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21cc0 [ 187.770508][ T7796] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.773110][ T7796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 187.775438][ T7796] page_type: f5(slab) [ 187.776692][ T7796] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 187.779350][ T7796] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 187.782042][ T7796] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 187.784704][ T7796] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 187.787378][ T7796] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 187.790084][ T7796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 187.792779][ T7796] page dumped because: kasan: bad access detected [ 187.794764][ T7796] page_owner tracks the page as allocated [ 187.796527][ T7796] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4328872064, free_ts 0 [ 187.802686][ T7796] post_alloc_hook+0xfd/0x120 [ 187.804173][ T7796] get_page_from_freelist+0xf48/0x3530 [ 187.805872][ T7796] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 187.807719][ T7796] new_slab+0xa2/0x640 [ 187.809025][ T7796] refill_objects+0xe3/0x410 [ 187.810537][ T7796] __pcs_replace_empty_main+0x376/0x680 [ 187.812270][ T7796] __kmalloc_noprof+0x66d/0x820 [ 187.813794][ T7796] acpi_ut_initialize_buffer+0x144/0x220 [ 187.815551][ T7796] acpi_rs_create_pci_routing_table+0x135/0xe00 [ 187.817490][ T7796] acpi_rs_get_prt_method_data+0xc1/0x150 [ 187.819290][ T7796] acpi_get_irq_routing_table+0xb8/0x140 [ 187.821205][ T7796] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 187.823040][ T7796] acpi_pci_irq_lookup+0x8e/0x6b0 [ 187.824616][ T7796] acpi_pci_irq_disable+0x1a8/0x360 [ 187.826249][ T7796] pcibios_disable_device+0x89/0xb0 [ 187.827886][ T7796] do_pci_disable_device+0x9f/0x100 [ 187.829517][ T7796] page_owner free stack trace missing [ 187.831247][ T7796] [ 187.832071][ T7796] Memory state around the buggy address: [ 187.833821][ T7796] ffff888021cc4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.836295][ T7796] ffff888021cc4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.838779][ T7796] >ffff888021cc4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.841332][ T7796] ^ [ 187.843329][ T7796] ffff888021cc4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.845795][ T7796] ffff888021cc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.848259][ T7796] ================================================================== [ 187.850813][ T7796] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.853050][ T7796] CPU: 2 UID: 0 PID: 7796 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.856447][ T7796] Tainted: [L]=SOFTLOCKUP [ 187.857896][ T7796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.861090][ T7796] Workqueue: usbip_event event_handler [ 187.862813][ T7796] Call Trace: [ 187.863882][ T7796] [ 187.864829][ T7796] dump_stack_lvl+0x100/0x190 [ 187.866316][ T7796] vpanic+0x552/0x970 [ 187.867590][ T7796] ? __pfx_vpanic+0x10/0x10 [ 187.869023][ T7796] ? __pfx_vprintk_emit+0x10/0x10 [ 187.870713][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.872616][ T7796] panic+0xd1/0xe0 [ 187.873802][ T7796] ? __pfx_panic+0x10/0x10 [ 187.875221][ T7796] ? end_report.part.0+0x23/0x90 [ 187.876761][ T7796] ? rcu_is_watching+0x12/0xc0 [ 187.878268][ T7796] ? end_report.part.0+0x23/0x90 [ 187.879858][ T7796] ? check_panic_on_warn+0x1f/0x90 [ 187.881876][ T7796] check_panic_on_warn.cold+0x19/0x34 [ 187.883595][ T7796] end_report.part.0+0x3a/0x90 [ 187.885111][ T7796] kasan_report.cold+0xe/0x18 [ 187.886601][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.888302][ T7796] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 187.890036][ T7796] __kasan_check_byte+0x36/0x50 [ 187.891592][ T7796] lock_acquire+0x132/0x370 [ 187.893030][ T7796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 187.894857][ T7796] ? _raw_spin_lock_irqsave+0x52/0x60 [ 187.896540][ T7796] _raw_spin_lock_irqsave+0x3a/0x60 [ 187.898176][ T7796] ? event_handler+0x21e/0x570 [ 187.899738][ T7796] event_handler+0x21e/0x570 [ 187.901275][ T7796] process_one_work+0xa23/0x1940 [ 187.902868][ T7796] ? __pfx_process_one_work+0x10/0x10 [ 187.904624][ T7796] ? __pfx_event_handler+0x10/0x10 [ 187.906252][ T7796] worker_thread+0x5ef/0xe50 [ 187.907743][ T7796] ? __pfx_worker_thread+0x10/0x10 [ 187.909390][ T7796] ? kthread+0x13a/0x450 [ 187.910791][ T7796] ? __pfx_worker_thread+0x10/0x10 [ 187.912393][ T7796] kthread+0x370/0x450 [ 187.913666][ T7796] ? __pfx_kthread+0x10/0x10 [ 187.915161][ T7796] ret_from_fork+0x72b/0xd50 [ 187.916648][ T7796] ? __pfx_ret_from_fork+0x10/0x10 [ 187.918256][ T7796] ? __switch_to+0x800/0x10f0 [ 187.919734][ T7796] ? __pfx_kthread+0x10/0x10 [ 187.921206][ T7796] ret_from_fork_asm+0x1a/0x30 [ 187.922733][ T7796] [ 187.924379][ T7796] Kernel Offset: disabled [ 187.925741][ T7796] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:13:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9002612fb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85516044 RDI=ffffc9002612fb60 RBP=ffffffff85516030 RSP=ffffc90000007f58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9002612fb28 RIP=ffffffff8551606d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c458d08 CR3=0000000048b01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009400000000 0000000200000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=ffff88801c2d8480 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000000 RBP=ffffc9002612fb20 RSP=ffffc9002612f9f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92004c25f43 R13=0000000000000000 R14=1ffff92004c25f01 R15=0000000000000000 RIP=ffffffff81b69c1a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080029000 CR3=000000006037f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000080000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff995099f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be4ca70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be60660 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e91f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 646431ad6f81c784 646431ad6f810784 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 646431ad6f81078c 646431ad6f81078c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e6463685f6963 68762f6d726f6674 616c702f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cc57736a27 0000000000000021 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be5ae10 000055c90be47650 000055c90be55a10 000055c90be48820 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be51ad0 000055c90be571b0 000055c90be4c010 000055c90be494a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be47980 000055c90be52ed0 000055c90be75a70 000055c90be5ddd0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c90be58660 000055c90be44860 000055c90be5ad60 000055c90be50210 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09d75 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900065b7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6331323038386552 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b6f7239 R15=ffffffff85a09d10 RIP=ffffffff85a09d9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c41a6b7 CR3=000000004aa20000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003de857 RBX=ffff88801c7fa540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ec17f CR3=000000006bf41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055df4c4eec50 000055df4c4eec50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4ed64bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2032207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 3631206769666e6f 63203a312d362062 7375205d35323831 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000