last executing test programs: 5m14.721188269s ago: executing program 2 (id=191): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="11000000040000000400000002", @ANYRES8=r0], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0a4586d, &(0x7f00000007c0)={0x0, r1, r1, 0x6, 0x56e9ddbd, '\x00', {0x9, 0xfff0, 0x6, 0x7ff, 0xfffffc30, 0x1, 0x7, 0x2, {0x3ff, 0xff3}, {0x0, 0x7}, {0x5, 0x2}, 0x7, 0x0, 0x9, 0x8, 0x5, 0x3, 0x6, 0x8001, 0x9, 0x3, '\x00', 0xfffffffd, 0x1, 0x2, 0x7f}}) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000140004e2480010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5m14.617325312s ago: executing program 2 (id=192): r0 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r0, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) 5m14.602757467s ago: executing program 2 (id=194): syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x1c000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x59e15f81c625e6c7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x40070480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0xa, 0x7) gettid() timer_create(0x0, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) timer_settime(0x0, 0x1, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f1401002cbd70000000006d615f636d00"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) fsopen(&(0x7f00000002c0)='xfs\x00', 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000040), 0x20, 0x0) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {r6, 0x108d, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @in6={0xa, 0x4e24, 0x15e0000, @private2, 0x7}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000680)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(0xffffffffffffffff, r4, 0x0) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYRES16=r2], 0x3a) 5m13.602761548s ago: executing program 2 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)="566f31e789", 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='27', 0x2) move_mount(r1, &(0x7f0000000080)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x242) 5m13.351072801s ago: executing program 2 (id=203): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x28, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x17, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xffffff7f}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x20, 0x10}, 0x18) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x8) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), 0x4) 5m12.890912305s ago: executing program 2 (id=208): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800001, 0xf3172, 0xffffffffffffffff, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ba2dd71f912932f5059033b97d0000080000000000000004000000181100008c", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009d0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 5m12.729993672s ago: executing program 32 (id=208): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='syzkaller\x00'}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800001, 0xf3172, 0xffffffffffffffff, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ba2dd71f912932f5059033b97d0000080000000000000004000000181100008c", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009d0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3m57.705414152s ago: executing program 0 (id=572): syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x1c000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x59e15f81c625e6c7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x40070480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0xa, 0x7) gettid() timer_create(0x0, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) timer_settime(0x0, 0x1, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) fsopen(&(0x7f00000002c0)='xfs\x00', 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040), 0x20, 0x0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {r5, 0x108d, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @in6={0xa, 0x4e24, 0x15e0000, @private2, 0x7}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000680)={0x7, 0x8, 0xfa00, {r5, 0x2000000a}}, 0x10) syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000700)=ANY=[@ANYRES16=r2], 0x3a) 3m57.051734196s ago: executing program 0 (id=574): r0 = syz_open_procfs(0x0, &(0x7f0000006b80)='clear_refs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) writev(r0, &(0x7f0000006bc0)=[{&(0x7f0000006c00)}], 0x1) 3m56.568759958s ago: executing program 0 (id=577): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) openat$nci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000700)={0x13, 0x1, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x17b}]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000780)={0xa100000000000000, 0xffc, 0x4000000000009, 0xb}) chdir(&(0x7f0000000340)='./mnt\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000640)="1122", 0x2, 0x0, 0x0, 0x0) 3m56.245246101s ago: executing program 0 (id=579): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000240)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) getpid() read$usbfs(0xffffffffffffffff, &(0x7f0000000480)=""/234, 0xea) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)='ping\x00', 0x5, 0x0, &(0x7f0000000940)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r4, &(0x7f0000000980)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x2a010, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x80, 0x0, 0x68, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '1024', 0x20, '2 start_sector 8'}}]}) 3m54.974933908s ago: executing program 0 (id=583): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43a00000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000380), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1000, 0x200, &(0x7f00000004c0)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001540)="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", 0x2000, &(0x7f0000003540)={&(0x7f00000035c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x15000000, 0x2, 0x4, 0x101, 0x0, 0x0, 0x0, 0xc, 0x2}}, &(0x7f0000003640)={0x18, 0xfffffffffffffffe, 0x8000000000000000, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000003680)={0x28, 0x0, 0xfffffffffffffffb, {{0x9, 0x8, 0x1, r7}}}, &(0x7f00000036c0)={0x60, 0xfffffffffffffff5, 0x140000000000000, {{0x1, 0x8000000000000000, 0xb9a8, 0x6, 0x2, 0x6, 0x8, 0x7}}}, &(0x7f0000003740)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, &(0x7f00000037c0)={0x78, 0xe03065c356b5a4ed, 0x1, {0x101, 0x5, 0x0, {0x2, 0x5, 0x9, 0x0, 0x6a5, 0x6, 0x13, 0xfffffffe, 0x1e344bdb, 0x1000, 0x6, 0x0, 0x0, 0x9, 0xb}}}, &(0x7f0000003840)={0x90, 0x0, 0x5, {0x2, 0x0, 0x5, 0x3, 0x3, 0x4, {0x4, 0x6, 0x1000000000000002, 0x5, 0x0, 0x0, 0x164, 0x10000, 0x6, 0x6000, 0x8, 0xee01, 0x0, 0x80}}}, &(0x7f0000003900)=ANY=[@ANYBLOB="300000000000000000000500000005000000442e2f2d5d00"/40], &(0x7f0000003940)=ANY=[], &(0x7f0000003980)={0xa0, 0x0, 0x88d, {{0x2000000, 0x1, 0x7, 0x4, 0x7, 0x3d, {0x0, 0xe16, 0x3, 0x4e, 0x8, 0x7, 0x2, 0x4a, 0x0, 0xa000, 0x7f, 0x0, 0x0, 0x3, 0x100}}, {0x0, 0x5}}}, &(0x7f0000003a40)={0x20, 0xfffffffffffffffe, 0x3, {0xa542, 0x4, 0x4, 0x5}}, &(0x7f0000003a80)={0x130, 0x0, 0x7, {0x7, 0x2, 0x0, '\x00', {0x100, 0x80000000, 0x2, 0xfffffff9, 0x0, 0x0, 0x0, '\x00', 0x7, 0x200000000000c8, 0x1000, 0x1, {0xe8a5, 0x8}, {0x80000000, 0x8}, {0x2, 0x8}, {0x0, 0x7}, 0x4, 0xe5, 0xb, 0x7}}}}) r9 = openat$cgroup_ro(r8, &(0x7f0000003bc0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000003c00)=0x1, 0x12) timer_create(0x0, &(0x7f0000003c40)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000003c80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000003cc0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000003d00)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r11, 0x9) recvfrom$inet(r11, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000003d40)={0x7fffffff, 0xffffffff, 0x7fff, 0x7fff, 0x3}) 3m54.032887109s ago: executing program 0 (id=587): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0xa, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001880)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb4a, 0x7e, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000018c0)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001900), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000001940)={0xfffffffffffffc00, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001980)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f00000019c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x400}}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 3m38.656041831s ago: executing program 33 (id=587): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0xa, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001880)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb4a, 0x7e, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000018c0)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001900), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000001940)={0xfffffffffffffc00, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001980)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f00000019c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x400}}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 11.23440401s ago: executing program 5 (id=2207): delete_module(&(0x7f00000005c0)='veth0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x1000)=nil) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000440)={0x1, 'vlan0\x00'}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x2000000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}]}}) 11.02989345s ago: executing program 5 (id=2208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000540)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x48, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0x1, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0x7, '\x00', 0x4}, {0x7, 0x6, 0x6, '\x00', 0x8}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.919725009s ago: executing program 5 (id=2209): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "5b67b0b1145fe9438c6b00", 0x7, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) 10.919513127s ago: executing program 5 (id=2210): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x6000000d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 10.897213798s ago: executing program 5 (id=2211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000680)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd, 0x2}, {0x2000, 0x1, 0xf, 0xc, 0x2, 0x4, 0x7d, 0xc, 0x58, 0x1, 0x3}, {0x1, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x6, 0x81}, {0x60000, 0xc000, 0x3, 0x5d, 0x5, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe, 0x1}, {0x26000, 0x9000, 0x96df30cda1fd3abf, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0xffff3000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa4, 0x80, 0xf, 0x1, 0xfd}, {0xfec00000, 0x2, 0x4, 0x2, 0x8, 0x2, 0x5, 0x0, 0x11, 0xc2, 0xff}, {0xd000, 0xd000, 0xa, 0x7, 0x7, 0x8, 0x1, 0x18, 0x2, 0x7, 0x7, 0x9}, {0xdddd0000, 0x30}, {0x7000, 0x88}, 0x80000031, 0x0, 0x8000000, 0x42004, 0x200008, 0x0, 0xb000, [0xd, 0xd, 0x5e, 0x102]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0xc000, 0x41000, 0x8, 0xa, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0xd000, 0xe, 0x0, 0x40, 0x25, 0x7d, 0xd, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x40000, 0x8000000, 0x3, 0xa, 0x4, 0x0, 0x1, 0xf7, 0x80, 0x7, 0x4, 0x1}, {0xdddd1000, 0x9000, 0x3, 0x1, 0x3, 0x7, 0xab, 0x91, 0x6f, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0x10, 0x8, 0xfd}, {0xdddd0000, 0x2, 0x8, 0x5, 0x7, 0x1, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x0, 0xf, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x5, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80010031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x8000000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) 10.719468308s ago: executing program 5 (id=2212): bpf$MAP_CREATE(0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000efffffff00"], 0x50) 10.650771285s ago: executing program 34 (id=2212): bpf$MAP_CREATE(0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000efffffff00"], 0x50) 3.538906307s ago: executing program 3 (id=2329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000003500)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000003540)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000001c680)='oom_adj\x00') writev(r2, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x100) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000f00)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 3.535873373s ago: executing program 1 (id=2331): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.482142132s ago: executing program 1 (id=2335): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000280)=0xfffe, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="f7", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40002002, 0x0) 3.475217637s ago: executing program 3 (id=2336): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 2.53808908s ago: executing program 1 (id=2337): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000090400000103000100092101010001220500090581", @ANYBLOB="9b705a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.369172806s ago: executing program 6 (id=2340): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0xffffffffffffffff) 2.366927242s ago: executing program 6 (id=2348): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc4ac2, 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x2c3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.939504243s ago: executing program 4 (id=2341): eventfd2(0xe5c, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005e00)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) sendmsg$nl_route(r3, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000005ec0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1.937620832s ago: executing program 6 (id=2350): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) add_key(0x0, 0x0, &(0x7f0000000400)="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", 0x179, 0xfffffffffffffffc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.829577878s ago: executing program 4 (id=2342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000023c0)={0x0, &(0x7f0000002400)}) 1.779998083s ago: executing program 4 (id=2343): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 1.779824348s ago: executing program 4 (id=2344): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.709943322s ago: executing program 4 (id=2345): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0', 0xb) 1.636452329s ago: executing program 6 (id=2346): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000d40)={0xa, 0x0, 0x0, @empty, 0x1b}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20002040) 1.586174861s ago: executing program 6 (id=2347): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x37, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x8, 0x4d, {0x4d, 0x6, "39e31ed79b013ec24384309fd4e96d8d50db5ebcf4aa9fa8c16b377acc4496e630a8afa2e566b4d6529d09cd955881ead98876c079a358873671eb2a3bb9b6e76d66827cc15ba61b8ac855"}}, 0x0}, 0x0) 1.576361277s ago: executing program 4 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() syz_emit_ethernet(0x86, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) io_setup(0xc, &(0x7f0000000540)=0x0) socket(0x10, 0x803, 0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) fsopen(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000891) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x0, 0x0, &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000a80)=""/237, 0x37, 0xed, 0x1}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x298, 0x130, 0x0, 0x0, 0x130, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x2, 0x3, [0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x4e20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x20, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0xd, 0x8, 0xc, 0xa, 0x5, 0xc81f, 0xd, 0x39, 0x18], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 1.396125984s ago: executing program 3 (id=2351): io_setup(0x7, &(0x7f0000000480)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000001f80)='/sys/kernel/address_bits', 0x82042, 0x102) io_submit(r0, 0x1, &(0x7f0000001fc0)=[&(0x7f0000002000)={0x0, 0x3000000, 0x0, 0x1, 0x0, r1, &(0x7f0000002040)='h', 0x1}]) 1.229551406s ago: executing program 3 (id=2352): bpf$MAP_CREATE(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket(0x1, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="4c00000014009d000000000000008c590288ffffcf3d3474ff00e7e5d3c2c983f9d503753f", 0x25}, {&(0x7f0000000200)="1f96306b16cae5fac7e6ad319202ae4ff29d0749ac3553a8d0ae2d1792fcafa3c1c2169316a07f", 0x27}], 0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000340)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000380)={0x200000000000001, 0xc000000}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc880, &(0x7f00000003c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x9, 0xc0, 0x40, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x60}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x12, 0xf}, [@effect_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x1, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x438, 0x6, 0xff, 0x1, {0x8, 0x25, 0x1, 0x0, 0x30, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x33, 0x10, {0x8, 0x25, 0x1, 0x2, 0x3, 0x9, 0xfc00}}}}}}}}]}}, 0x0) 999.649964ms ago: executing program 1 (id=2353): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc4ac2, 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x2c3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 916.984565ms ago: executing program 1 (id=2354): socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000740)={0x0, 'erspan0\x00', {0x1}, 0x26}) getrusage(0xffffffffffffffff, &(0x7f0000000780)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r3, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x1003}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b80500000036f2ab0f01d9660f78c4020ab9800000c00f3235000400000f30b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x5b}], 0x1, 0x3, 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x801400, &(0x7f0000000940)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pidfd_send_signal(r4, 0x5, &(0x7f0000000980)={0x5, 0x8, 0xc4ffffff}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000000)={0x4, 0x2, 0x9, 0xf}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) 617.594213ms ago: executing program 3 (id=2355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) sendmsg$nl_route(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="87020400000000002000128008000100736974001400028006000f000a000100"], 0x40}, 0x1, 0x0, 0x0, 0x24008084}, 0x40c0) 617.479908ms ago: executing program 3 (id=2356): r0 = syz_usb_connect(0x3, 0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) write$char_usb(r1, 0x0, 0x0) 29.570982ms ago: executing program 6 (id=2357): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) getrandom(&(0x7f00000009c0)=""/300, 0xcebaa945, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x24025054, &(0x7f0000000b00)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) 0s ago: executing program 1 (id=2358): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="05030500d3fc03003900", 0xa, 0x4, &(0x7f0000000600)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=2359): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): 0 8d b4 26 00 00 00 00 58 b8 [ 324.866412][T11531] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 324.866425][T11531] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 324.866433][T11531] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 324.866439][T11531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.866445][T11531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 324.866451][T11531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.866466][T11531] [ 324.866471][T11531] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 324.906773][T11533] vlan1: entered promiscuous mode [ 324.906786][T11533] ip6gretap0: entered promiscuous mode [ 325.329525][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 325.417718][T11572] bridge0: port 1(batadv_slave_0) entered blocking state [ 325.417775][T11572] bridge0: port 1(batadv_slave_0) entered disabled state [ 325.417834][T11572] batadv_slave_0: entered allmulticast mode [ 325.418582][T11572] batadv_slave_0: entered promiscuous mode [ 325.419091][T11572] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 325.696718][T11593] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.283108][T11606] tipc: Enabled bearer , priority 10 [ 326.468632][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 326.468666][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 326.468675][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 327.034116][ T64] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 327.171075][T11646] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.194553][ T64] usb 9-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 327.196202][ T64] usb 9-1: config index 0 descriptor too short (expected 4257, got 161) [ 327.196238][ T64] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 24825, setting to 64 [ 327.196259][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.222777][T11647] netlink: 'syz.1.1615': attribute type 12 has an invalid length. [ 327.343732][T11652] cgroup: No subsys list or none specified [ 327.440760][ T64] usb 9-1: string descriptor 0 read error: -71 [ 327.453576][ T64] uvcvideo 9-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 327.453638][ T64] uvcvideo 9-1:1.0: Found UVC 1.00 device (046d:0825) [ 327.453668][ T64] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 327.466385][ T64] usb 9-1: USB disconnect, device number 24 [ 327.524619][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 327.684840][ T10] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 327.685770][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.685791][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 327.685804][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 327.687501][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.687574][ T10] usb 10-1: Product: syz [ 327.687583][ T10] usb 10-1: Manufacturer: syz [ 327.687591][ T10] usb 10-1: SerialNumber: syz [ 327.690917][ T10] cdc_mbim 10-1:1.0: skipping garbage [ 328.640674][T11694] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.703087][ T10] cdc_mbim 10-1:1.0: bind() failure [ 328.713675][ T10] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 328.714113][ T10] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 328.714724][ T10] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 328.719592][ T10] usb 10-1: USB disconnect, device number 31 [ 328.783147][ T6420] kernel write not supported for file 1448/net/vlan/vlan0 (pid: 6420 comm: kworker/3:4) [ 328.927313][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1637'.  ÿÿÈ ÿÿÿÿÿÿÿÿÿÿÿ÷ÿÿÿÿÿÿÿ ¶ [ 329.162755][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 329.162773][ T42] audit: type=1326 audit(1793383467.841:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.163070][ T42] audit: type=1326 audit(1793383467.841:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.164554][ T42] audit: type=1326 audit(1793383467.851:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.164594][ T42] audit: type=1326 audit(1793383467.851:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.167014][ T42] audit: type=1326 audit(1793383467.851:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.167051][ T42] audit: type=1326 audit(1793383467.851:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 329.167082][ T42] audit: type=1326 audit(1793383467.851:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 329.167114][ T42] audit: type=1326 audit(1793383467.851:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 329.167146][ T42] audit: type=1326 audit(1793383467.851:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 329.167179][ T42] audit: type=1326 audit(1793383467.851:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11718 comm="syz.4.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46fbc code=0x7ffc0000 [ 329.190690][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190717][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190729][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190740][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190854][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190867][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190878][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190889][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190901][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.190912][ T6420] hid-generic 0400:0003:0000.0004: unknown main item tag 0x0 [ 329.202659][ T6420] hid-generic 0400:0003:0000.0004: hidraw1: HID v0.03 Device [syz0] on syz1 [ 329.303371][T11724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.322434][T11722] fido_id[11722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.511676][ T9] kernel write not supported for file 653/net/vlan/vlan0 (pid: 9 comm: kworker/0:0) [ 330.072671][T11756] rxe_eth0 speed is unknown, defaulting to 1000 [ 330.157323][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 330.157349][ T1131] ata1.00: irq_stat 0x40000000 [ 330.157364][ T1131] ata1.00: failed command: WRITE DMA EXT [ 330.157375][ T1131] ata1.00: cmd 35/00:40:36:c1:0a/00:05:00:00:00/e0 tag 14 dma 688128 out [ 330.157375][ T1131] res 41/04:40:36:c1:0a/00:05:00:00:00/e0 Emask 0x1 (device error) [ 330.157423][ T1131] ata1.00: status: { DRDY ERR } [ 330.157435][ T1131] ata1.00: error: { ABRT } [ 330.160471][ T1131] ata1.00: configured for UDMA/100 [ 330.160524][ T1131] ata1: EH complete [ 330.204125][ T6420] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 330.294516][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 330.294532][ T1131] ata1.00: irq_stat 0x40000000 [ 330.294542][ T1131] ata1.00: failed command: WRITE DMA EXT [ 330.294548][ T1131] ata1.00: cmd 35/00:80:36:f0:0a/00:05:00:00:00/e0 tag 30 dma 720896 out [ 330.294548][ T1131] res 41/04:80:36:f0:0a/00:05:00:00:00/e0 Emask 0x1 (device error) [ 330.294575][ T1131] ata1.00: status: { DRDY ERR } [ 330.294582][ T1131] ata1.00: error: { ABRT } [ 330.296161][ T1131] ata1.00: configured for UDMA/100 [ 330.296216][ T1131] ata1: EH complete [ 330.369386][ T6420] usb 8-1: Using ep0 maxpacket: 16 [ 330.370103][ T6420] usb 8-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 330.371257][ T6420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.373019][ T6420] usb 8-1: config 0 descriptor?? [ 330.379304][ T6420] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 330.407337][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 330.517279][T11778] rxe_eth0 speed is unknown, defaulting to 1000 [ 330.688747][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 330.816246][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 331.093933][T11799] 9p: Bad value for 'wfdno' [ 331.462928][T11816] 9p: Bad value for 'wfdno' [ 331.526748][T11824] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1685'. [ 331.556587][T11830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1688'. [ 331.773826][ T50] kernel write not supported for file 1188/net/vlan/vlan0 (pid: 50 comm: kworker/2:1) [ 331.994092][ T1690] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 332.144522][ T1690] usb 10-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 332.145328][ T1690] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 332.145341][ T1690] usb 10-1: config 0 has no interface number 0 [ 332.147318][ T1690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.147330][ T1690] usb 10-1: Product: syz [ 332.147337][ T1690] usb 10-1: Manufacturer: syz [ 332.147344][ T1690] usb 10-1: SerialNumber: syz [ 332.148502][ T1690] usb 10-1: config 0 descriptor?? [ 332.552415][ T1690] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 332.552434][ T1690] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 332.552548][ T1690] asix 10-1:0.251: probe with driver asix failed with error -71 [ 332.565401][ T1690] usb 10-1: USB disconnect, device number 32 [ 332.790519][T11873] 9p: Bad value for 'wfdno' [ 332.871283][ T6420] usb 8-1: Detected FT232A [ 332.873320][ T6420] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 332.875836][ T6420] usb 8-1: USB disconnect, device number 32 [ 332.878318][ T6420] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 332.878533][ T6420] ftdi_sio 8-1:0.0: device disconnected [ 333.290635][T11901] 9p: Bad value for 'wfdno' [ 333.980173][T11929] overlay: Bad value for 'redirect_dir' [ 334.066003][T11935] FAULT_INJECTION: forcing a failure. [ 334.066003][T11935] name fail_futex, interval 1, probability 0, space 0, times 0 [ 334.066023][T11935] CPU: 3 UID: 0 PID: 11935 Comm: syz.5.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.066037][T11935] Tainted: [L]=SOFTLOCKUP [ 334.066041][T11935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.066048][T11935] Call Trace: [ 334.066051][T11935] [ 334.066056][T11935] dump_stack_lvl+0x100/0x190 [ 334.066077][T11935] should_fail_ex.cold+0x5/0xa [ 334.066094][T11935] get_futex_key+0x1c9/0x13e0 [ 334.066124][T11935] ? __pfx_get_futex_key+0x10/0x10 [ 334.066143][T11935] futex_wake+0xf4/0x5e0 [ 334.066154][T11935] ? event_trigger_write+0x190/0x290 [ 334.066179][T11935] ? kfree+0x22b/0x6d0 [ 334.066194][T11935] ? find_held_lock+0x2b/0x80 [ 334.066210][T11935] ? __pfx_futex_wake+0x10/0x10 [ 334.066223][T11935] ? rcu_read_lock_any_held+0x6a/0x90 [ 334.066240][T11935] ? find_held_lock+0x2b/0x80 [ 334.066254][T11935] ? ksys_write+0x190/0x250 [ 334.066265][T11935] ? ksys_write+0x190/0x250 [ 334.066277][T11935] do_futex+0x2b2/0x440 [ 334.066292][T11935] ? __pfx_do_futex+0x10/0x10 [ 334.066308][T11935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.066323][T11935] __ia32_sys_futex_time32+0x2f4/0x470 [ 334.066341][T11935] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 334.066358][T11935] ? __might_fault+0xc5/0x140 [ 334.066374][T11935] __do_fast_syscall_32+0x14b/0x8c0 [ 334.066389][T11935] do_fast_syscall_32+0x32/0x70 [ 334.066401][T11935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.066414][T11935] RIP: 0023:0xf7f53fbc [ 334.066424][T11935] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 334.066435][T11935] RSP: 002b:00000000f54065cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 334.066445][T11935] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 334.066452][T11935] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 334.066458][T11935] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 334.066465][T11935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 334.066471][T11935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.066484][T11935] [ 334.186862][T11938] 9p: Bad value for 'wfdno' [ 334.424739][ T64] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 334.585789][ T64] usb 10-1: New USB device found: idVendor=1235, idProduct=8203, bcdDevice=0.40 [ 334.586569][ T64] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.586582][ T64] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.586607][ T64] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 191 [ 334.588230][ T64] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.588244][ T64] usb 10-1: Product: syz [ 334.588251][ T64] usb 10-1: Manufacturer: syz [ 334.588258][ T64] usb 10-1: SerialNumber: syz [ 334.811667][ T64] usb 10-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 334.811699][ T64] usb 10-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 334.841690][ T64] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 334.848352][ T64] usb 10-1: USB disconnect, device number 33 [ 334.855563][T11169] udevd[11169]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.967174][T11957] 9p: Bad value for 'wfdno' [ 335.272427][T11975] syzkaller0: Caught tx_queue_len zero misconfig [ 335.361620][T11980] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.399316][T11977] 9p: Bad value for 'wfdno' [ 335.650431][T11993] ip6gre1: left promiscuous mode [ 335.650446][T11993] ip6gre1: left allmulticast mode [ 335.658248][T11993] macsec1: left promiscuous mode [ 335.658332][T11993] macsec1: left allmulticast mode [ 335.658340][T11993] bridge0: left allmulticast mode [ 335.881012][T12005] 9p: Bad value for 'wfdno' [ 336.242848][T12017] 9p: Bad value for 'wfdno' [ 336.264127][ T50] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 336.315117][ T1690] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 336.414589][ T50] usb 9-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 336.415403][ T50] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.415415][ T50] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.416199][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.416211][ T50] usb 9-1: SerialNumber: syz [ 336.464208][ T1690] usb 6-1: Using ep0 maxpacket: 16 [ 336.464885][ T1690] usb 6-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 336.465881][ T1690] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 336.465894][ T1690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.465905][ T1690] usb 6-1: config 0 has no interface number 0 [ 336.467911][ T1690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.467924][ T1690] usb 6-1: Product: syz [ 336.467931][ T1690] usb 6-1: Manufacturer: syz [ 336.467976][ T1690] usb 6-1: SerialNumber: syz [ 336.469958][ T1690] usb 6-1: config 0 descriptor?? [ 336.472562][ T1690] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 336.472578][ T1690] uvcvideo 6-1:0.105: No valid video chain found. [ 336.621323][ T50] usb 9-1: 0:2 : does not exist [ 336.621360][ T50] usb 9-1: unit 120 not found! [ 336.621369][ T50] usb 9-1: unit 48 not found! [ 336.621377][ T50] usb 9-1: unit 52 not found! [ 336.647420][ T50] usb 9-1: USB disconnect, device number 25 [ 336.661472][T11169] udevd[11169]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.672374][ T1690] usb 6-1: USB disconnect, device number 19 [ 337.065220][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 337.205525][T12029] tmpfs: Bad value for 'nr_inodes' [ 338.167577][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 338.171097][T12057] vlan0: entered promiscuous mode [ 338.171110][T12057] gretap0: entered promiscuous mode [ 339.973621][T12069] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 339.973636][T12069] device-mapper: ioctl: error adding target to table [ 340.239288][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 340.239323][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1792'. [ 340.680744][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 341.096440][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 341.162302][T12133] rxe_eth0 speed is unknown, defaulting to 1000 [ 341.275448][ T41] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 341.340572][T12150] tipc: Enabling of bearer rejected, already enabled [ 341.340798][T12150] tipc: Disabling bearer [ 341.405899][ T41] usb 10-1: device descriptor read/64, error -71 [ 341.513627][T12167] input: syz0 as /devices/virtual/input/input85 [ 341.655601][ T41] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 341.740751][T12192] veth0: entered promiscuous mode [ 341.740927][T12192] veth0: left promiscuous mode [ 341.762347][T12179] futex_wake_op: syz.3.1836 tries to shift op by 144; fix this program [ 341.762430][T12179] futex_wake_op: syz.3.1836 tries to shift op by 144; fix this program [ 341.788485][ T41] usb 10-1: device descriptor read/64, error -71 [ 341.808499][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 341.894401][ T41] usb usb10-port1: attempt power cycle [ 342.050397][T12212] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.164176][T12226] input: syz0 as /devices/virtual/input/input86 [ 342.221766][T12230] veth0_vlan: left promiscuous mode [ 342.237339][ T41] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 342.254599][ T41] usb 10-1: device descriptor read/8, error -71 [ 342.514142][ T41] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 342.554342][ T41] usb 10-1: device descriptor read/8, error -71 [ 342.653724][T12267] FAULT_INJECTION: forcing a failure. [ 342.653724][T12267] name failslab, interval 1, probability 5, space 0, times 9988 [ 342.653785][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.3.1874 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.653802][T12267] Tainted: [L]=SOFTLOCKUP [ 342.653806][T12267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.653813][T12267] Call Trace: [ 342.653818][T12267] [ 342.653823][T12267] dump_stack_lvl+0x100/0x190 [ 342.653843][T12267] should_fail_ex.cold+0x5/0xa [ 342.653859][T12267] ? __pfx_ovl_inode_set+0x10/0x10 [ 342.653891][T12267] should_failslab+0xc2/0x120 [ 342.653906][T12267] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 342.653923][T12267] ? __pfx_ovl_inode_test+0x10/0x10 [ 342.653934][T12267] ? ovl_alloc_inode+0x25/0x190 [ 342.653946][T12267] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 342.653957][T12267] ? __pfx_ovl_inode_test+0x10/0x10 [ 342.653968][T12267] ? __pfx_ovl_inode_set+0x10/0x10 [ 342.653978][T12267] ovl_alloc_inode+0x25/0x190 [ 342.653988][T12267] alloc_inode+0x68/0x250 [ 342.654004][T12267] iget5_locked+0x5f/0xa0 [ 342.654033][T12267] ovl_get_trap_inode+0xb2/0x210 [ 342.654047][T12267] ovl_fill_super+0x8a0/0x5d30 [ 342.654061][T12267] ? __init_swait_queue_head+0xca/0x150 [ 342.654094][T12267] ? __pfx_ovl_fill_super+0x10/0x10 [ 342.654108][T12267] ? __pfx_sget_fc+0x10/0x10 [ 342.654123][T12267] ? hook_capable+0x1bc/0x500 [ 342.654140][T12267] ? ovl_next_opt+0x143/0x1c0 [ 342.654152][T12267] ? rcu_is_watching+0x13/0xc0 [ 342.654169][T12267] ? apparmor_capable+0x1d7/0x4d0 [ 342.654182][T12267] ? __pfx_ovl_fill_super+0x10/0x10 [ 342.654196][T12267] get_tree_nodev+0xdd/0x190 [ 342.654207][T12267] vfs_get_tree+0x92/0x320 [ 342.654223][T12267] path_mount+0x7d0/0x2850 [ 342.654244][T12267] ? __pfx_path_mount+0x10/0x10 [ 342.654258][T12267] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.654272][T12267] ? putname+0xb1/0x110 [ 342.654284][T12267] ? kmem_cache_free+0x127/0x6c0 [ 342.654304][T12267] ? __ia32_sys_mount+0x292/0x310 [ 342.654317][T12267] __ia32_sys_mount+0x292/0x310 [ 342.654331][T12267] ? __pfx___ia32_sys_mount+0x10/0x10 [ 342.654350][T12267] __do_fast_syscall_32+0x14b/0x8c0 [ 342.654362][T12267] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.654374][T12267] do_fast_syscall_32+0x32/0x70 [ 342.654388][T12267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.654402][T12267] RIP: 0023:0xf73cefbc [ 342.654411][T12267] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 342.654422][T12267] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 342.654433][T12267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 342.654440][T12267] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 342.654446][T12267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.654452][T12267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.654458][T12267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.654472][T12267] [ 342.664760][ T41] usb usb10-port1: unable to enumerate USB device [ 343.153765][ T10] hid_parser_main: 62 callbacks suppressed [ 343.153781][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153794][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153806][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153817][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153829][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153840][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153851][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153862][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153874][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.153885][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 343.159226][ T10] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.03 Device [syz1] on syz1 [ 343.188440][T12299] fido_id[12299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.251200][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 343.251213][ T42] audit: type=1326 audit(2000000007.779:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.251321][ T42] audit: type=1326 audit(2000000007.779:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.253667][ T42] audit: type=1326 audit(2000000007.779:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.254853][ T42] audit: type=1326 audit(2000000007.789:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.254945][ T42] audit: type=1326 audit(2000000007.789:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.255027][ T42] audit: type=1326 audit(2000000007.789:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.255118][ T42] audit: type=1326 audit(2000000007.789:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.255673][ T42] audit: type=1326 audit(2000000007.789:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.257178][ T42] audit: type=1326 audit(2000000007.789:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.1.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 343.394335][ T1131] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 343.394353][ T1131] ata1.00: irq_stat 0x40000000 [ 343.394362][ T1131] ata1.00: failed command: READ DMA EXT [ 343.394369][ T1131] ata1.00: cmd 25/00:f8:08:10:00/00:0f:00:00:00/e0 tag 14 dma 2093056 in [ 343.394369][ T1131] res 41/04:f8:08:10:00/00:0f:00:00:00/e0 Emask 0x1 (device error) [ 343.394396][ T1131] ata1.00: status: { DRDY ERR } [ 343.394403][ T1131] ata1.00: error: { ABRT } [ 343.395100][ T1131] ata1.00: configured for UDMA/100 [ 343.395187][ T1131] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 343.395211][ T1131] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 343.395229][ T1131] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 343.395247][ T1131] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 00 10 08 00 0f f8 00 [ 343.395258][ T1131] I/O error, dev sda, sector 4104 op 0x0:(READ) flags 0x80700 phys_seg 117 prio class 2 [ 343.397171][ T1131] ata1: EH complete [ 344.273992][ T42] audit: type=1326 audit(2000000008.799:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.3.1902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 344.444115][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 344.584312][ T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 344.594179][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 344.594647][ T10] usb 10-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 344.595472][ T10] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 344.595485][ T10] usb 10-1: config 0 has no interface number 0 [ 344.595504][ T10] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 344.597287][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.597299][ T10] usb 10-1: Product: syz [ 344.597307][ T10] usb 10-1: Manufacturer: syz [ 344.597314][ T10] usb 10-1: SerialNumber: syz [ 344.598561][ T10] usb 10-1: config 0 descriptor?? [ 344.601640][T12329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 344.734550][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 344.735926][ T9] usb 8-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 344.737045][ T9] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 344.737058][ T9] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 344.737068][ T9] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 344.737077][ T9] usb 8-1: config 250 has no interface number 0 [ 344.737095][ T9] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 344.737108][ T9] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 344.737196][ T9] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.737208][ T9] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 344.737219][ T9] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 344.737232][ T9] usb 8-1: config 250 interface 228 has no altsetting 0 [ 344.738591][ T9] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 344.738602][ T9] usb 8-1: Product: syz [ 344.738609][ T9] usb 8-1: SerialNumber: syz [ 344.744747][ T9] hub 8-1:250.228: bad descriptor, ignoring hub [ 344.744760][ T9] hub 8-1:250.228: probe with driver hub failed with error -5 [ 344.804272][T12329] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 344.948249][ T9] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 345.246946][ T9] usb 8-1: USB disconnect, device number 33 [ 345.250883][ T9] usblp0: removed [ 345.408307][ T10] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 345.408422][ T10] asix 10-1:0.188: probe with driver asix failed with error -71 [ 345.416128][ T10] usb 10-1: USB disconnect, device number 38 [ 345.584272][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1906'. [ 345.701034][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1910'. [ 346.014378][ T64] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 346.151621][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'. [ 346.179095][ T64] usb 9-1: unable to get BOS descriptor or descriptor too short [ 346.179761][ T64] usb 9-1: not running at top speed; connect to a high speed hub [ 346.179787][ T64] usb 9-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 346.210490][ T64] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 346.220946][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.220960][ T64] usb 9-1: Product: syz [ 346.220967][ T64] usb 9-1: Manufacturer: syz [ 346.220974][ T64] usb 9-1: SerialNumber: syz [ 346.247350][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 346.432508][ T64] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 346.631551][ T64] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 346.631568][ T64] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 347.033806][ T64] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 347.033824][ T64] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 347.234606][ T64] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 347.238150][T12401] bridge0: port 3(batadv0) entered disabled state [ 347.238416][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.238648][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.275487][ T64] usb 9-1: USB disconnect, device number 26 [ 347.293078][T12117] udevd[12117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.340822][T12401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.345206][T12401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.455167][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.455195][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.455218][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.455235][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.523667][T12438] FAULT_INJECTION: forcing a failure. [ 347.523667][T12438] name failslab, interval 1, probability 5, space 0, times 9986 [ 347.523689][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.1.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.523705][T12438] Tainted: [L]=SOFTLOCKUP [ 347.523712][T12438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.523719][T12438] Call Trace: [ 347.523724][T12438] [ 347.523729][T12438] dump_stack_lvl+0x100/0x190 [ 347.523749][T12438] should_fail_ex.cold+0x5/0xa [ 347.523766][T12438] should_failslab+0xc2/0x120 [ 347.523781][T12438] __kmalloc_noprof+0xfc/0x840 [ 347.523797][T12438] ? capable+0xce/0xf0 [ 347.523813][T12438] ? ovl_fill_super+0x46d/0x5d30 [ 347.523828][T12438] ovl_fill_super+0x46d/0x5d30 [ 347.523842][T12438] ? __init_swait_queue_head+0xca/0x150 [ 347.523861][T12438] ? shrinker_register+0x1db/0x240 [ 347.523886][T12438] ? __pfx_ovl_fill_super+0x10/0x10 [ 347.523904][T12438] ? __pfx_sget_fc+0x10/0x10 [ 347.523929][T12438] ? hook_capable+0x1bc/0x500 [ 347.523956][T12438] ? ovl_next_opt+0x143/0x1c0 [ 347.523976][T12438] ? rcu_is_watching+0x13/0xc0 [ 347.524001][T12438] ? apparmor_capable+0x1d7/0x4d0 [ 347.524036][T12438] ? __pfx_ovl_fill_super+0x10/0x10 [ 347.524048][T12438] get_tree_nodev+0xdd/0x190 [ 347.524060][T12438] vfs_get_tree+0x92/0x320 [ 347.524076][T12438] path_mount+0x7d0/0x2850 [ 347.524094][T12438] ? __pfx_path_mount+0x10/0x10 [ 347.524121][T12438] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.524135][T12438] ? putname+0xb1/0x110 [ 347.524147][T12438] ? kmem_cache_free+0x127/0x6c0 [ 347.524167][T12438] ? __ia32_sys_mount+0x292/0x310 [ 347.524182][T12438] __ia32_sys_mount+0x292/0x310 [ 347.524197][T12438] ? __pfx___ia32_sys_mount+0x10/0x10 [ 347.524220][T12438] __do_fast_syscall_32+0x14b/0x8c0 [ 347.524235][T12438] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.524248][T12438] do_fast_syscall_32+0x32/0x70 [ 347.524261][T12438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.524277][T12438] RIP: 0023:0xf7f35fbc [ 347.524288][T12438] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 347.524298][T12438] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 347.524309][T12438] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 347.524316][T12438] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 347.524322][T12438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.524329][T12438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.524336][T12438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.524351][T12438] [ 347.813533][T12463] FAULT_INJECTION: forcing a failure. [ 347.813533][T12463] name failslab, interval 1, probability 5, space 0, times 9985 [ 347.813567][T12463] CPU: 0 UID: 0 PID: 12463 Comm: syz.4.1955 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.813595][T12463] Tainted: [L]=SOFTLOCKUP [ 347.813602][T12463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.813609][T12463] Call Trace: [ 347.813613][T12463] [ 347.813618][T12463] dump_stack_lvl+0x100/0x190 [ 347.813639][T12463] should_fail_ex.cold+0x5/0xa [ 347.813656][T12463] ? __pfx_ovl_inode_set+0x10/0x10 [ 347.813670][T12463] should_failslab+0xc2/0x120 [ 347.813683][T12463] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 347.813700][T12463] ? __pfx_ovl_inode_test+0x10/0x10 [ 347.813713][T12463] ? ovl_alloc_inode+0x25/0x190 [ 347.813725][T12463] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 347.813735][T12463] ? __pfx_ovl_inode_test+0x10/0x10 [ 347.813745][T12463] ? __pfx_ovl_inode_set+0x10/0x10 [ 347.813755][T12463] ovl_alloc_inode+0x25/0x190 [ 347.813765][T12463] alloc_inode+0x68/0x250 [ 347.813779][T12463] iget5_locked+0x5f/0xa0 [ 347.813796][T12463] ovl_get_trap_inode+0xb2/0x210 [ 347.813809][T12463] ovl_fill_super+0x8a0/0x5d30 [ 347.813822][T12463] ? __init_swait_queue_head+0xca/0x150 [ 347.813844][T12463] ? __pfx_ovl_fill_super+0x10/0x10 [ 347.813855][T12463] ? __pfx_sget_fc+0x10/0x10 [ 347.813870][T12463] ? hook_capable+0x1bc/0x500 [ 347.813887][T12463] ? ovl_next_opt+0x143/0x1c0 [ 347.813898][T12463] ? rcu_is_watching+0x13/0xc0 [ 347.813913][T12463] ? apparmor_capable+0x1d7/0x4d0 [ 347.813931][T12463] ? __pfx_ovl_fill_super+0x10/0x10 [ 347.813947][T12463] get_tree_nodev+0xdd/0x190 [ 347.813966][T12463] vfs_get_tree+0x92/0x320 [ 347.813986][T12463] path_mount+0x7d0/0x2850 [ 347.814033][T12463] ? __pfx_path_mount+0x10/0x10 [ 347.814054][T12463] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.814072][T12463] ? putname+0xb1/0x110 [ 347.814089][T12463] ? kmem_cache_free+0x127/0x6c0 [ 347.814117][T12463] ? __ia32_sys_mount+0x292/0x310 [ 347.814137][T12463] __ia32_sys_mount+0x292/0x310 [ 347.814156][T12463] ? __pfx___ia32_sys_mount+0x10/0x10 [ 347.814188][T12463] __do_fast_syscall_32+0x14b/0x8c0 [ 347.814216][T12463] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.814241][T12463] do_fast_syscall_32+0x32/0x70 [ 347.814266][T12463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.814285][T12463] RIP: 0023:0xf7f46fbc [ 347.814300][T12463] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 347.814316][T12463] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 347.814336][T12463] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 347.814350][T12463] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 347.814361][T12463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.814374][T12463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.814383][T12463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.814401][T12463] [ 347.914217][ T6420] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 348.077001][ T6420] usb 10-1: unable to get BOS descriptor or descriptor too short [ 348.077028][ T6420] usb 10-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 348.077877][ T6420] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.079164][ T6420] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 348.079175][ T6420] usb 10-1: Product: syz [ 348.079182][ T6420] usb 10-1: Manufacturer: syz [ 348.085356][ T6420] uvcvideo 10-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 348.085406][ T6420] uvcvideo 10-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 348.085433][ T6420] uvcvideo 10-1:1.1: No supported video formats found. [ 348.085440][ T6420] uvcvideo 10-1:1.1: Failed to initialize the device (-22). [ 348.085763][ T6420] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -22 [ 350.681236][ T9] usb 10-1: USB disconnect, device number 39 [ 350.700047][T12491] FAULT_INJECTION: forcing a failure. [ 350.700047][T12491] name failslab, interval 1, probability 5, space 0, times 9984 [ 350.700068][T12491] CPU: 2 UID: 0 PID: 12491 Comm: syz.1.1966 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.700085][T12491] Tainted: [L]=SOFTLOCKUP [ 350.700089][T12491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.700096][T12491] Call Trace: [ 350.700101][T12491] [ 350.700106][T12491] dump_stack_lvl+0x100/0x190 [ 350.700126][T12491] should_fail_ex.cold+0x5/0xa [ 350.700142][T12491] should_failslab+0xc2/0x120 [ 350.700157][T12491] __kmalloc_noprof+0xfc/0x840 [ 350.700174][T12491] ? lsm_blob_alloc+0x68/0x90 [ 350.700193][T12491] lsm_blob_alloc+0x68/0x90 [ 350.700209][T12491] security_prepare_creds+0x2d/0x290 [ 350.700226][T12491] prepare_creds+0x5d6/0x950 [ 350.700260][T12491] ovl_fill_super+0x7f2/0x5d30 [ 350.700273][T12491] ? lockdep_init_map_type+0x5c/0x250 [ 350.700288][T12491] ? lockdep_init_map_type+0x5c/0x250 [ 350.700320][T12491] ? __init_swait_queue_head+0xca/0x150 [ 350.700337][T12491] ? shrinker_register+0x1db/0x240 [ 350.700351][T12491] ? sget_fc+0x1048/0x1f60 [ 350.700372][T12491] ? __pfx_ovl_fill_super+0x10/0x10 [ 350.700384][T12491] ? __pfx_sget_fc+0x10/0x10 [ 350.700400][T12491] ? hook_capable+0x1bc/0x500 [ 350.700418][T12491] ? ovl_next_opt+0x143/0x1c0 [ 350.700430][T12491] ? rcu_is_watching+0x13/0xc0 [ 350.700445][T12491] ? apparmor_capable+0x1d7/0x4d0 [ 350.700458][T12491] ? __pfx_ovl_fill_super+0x10/0x10 [ 350.700469][T12491] get_tree_nodev+0xdd/0x190 [ 350.700480][T12491] vfs_get_tree+0x92/0x320 [ 350.700494][T12491] path_mount+0x7d0/0x2850 [ 350.700511][T12491] ? __pfx_path_mount+0x10/0x10 [ 350.700524][T12491] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.700561][T12491] ? putname+0xb1/0x110 [ 350.700574][T12491] ? kmem_cache_free+0x127/0x6c0 [ 350.700595][T12491] ? __ia32_sys_mount+0x292/0x310 [ 350.700609][T12491] __ia32_sys_mount+0x292/0x310 [ 350.700625][T12491] ? __pfx___ia32_sys_mount+0x10/0x10 [ 350.700645][T12491] __do_fast_syscall_32+0x14b/0x8c0 [ 350.700664][T12491] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.700677][T12491] do_fast_syscall_32+0x32/0x70 [ 350.700692][T12491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.700708][T12491] RIP: 0023:0xf7f35fbc [ 350.700719][T12491] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 350.700730][T12491] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 350.700742][T12491] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 350.700749][T12491] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 350.700756][T12491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.700763][T12491] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.700770][T12491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.700784][T12491] [ 350.793800][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 350.948453][T12507] 9p: Bad value for 'wfdno' [ 350.962272][T12524] FAULT_INJECTION: forcing a failure. [ 350.962272][T12524] name failslab, interval 1, probability 5, space 0, times 9983 [ 350.962294][T12524] CPU: 0 UID: 0 PID: 12524 Comm: syz.3.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.962310][T12524] Tainted: [L]=SOFTLOCKUP [ 350.962315][T12524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.962322][T12524] Call Trace: [ 350.962326][T12524] [ 350.962331][T12524] dump_stack_lvl+0x100/0x190 [ 350.962352][T12524] should_fail_ex.cold+0x5/0xa [ 350.962369][T12524] ? __pfx_ovl_inode_set+0x10/0x10 [ 350.962380][T12524] should_failslab+0xc2/0x120 [ 350.962394][T12524] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 350.962411][T12524] ? __pfx_ovl_inode_test+0x10/0x10 [ 350.962421][T12524] ? ovl_alloc_inode+0x25/0x190 [ 350.962432][T12524] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 350.962443][T12524] ? __pfx_ovl_inode_test+0x10/0x10 [ 350.962453][T12524] ? __pfx_ovl_inode_set+0x10/0x10 [ 350.962463][T12524] ovl_alloc_inode+0x25/0x190 [ 350.962474][T12524] alloc_inode+0x68/0x250 [ 350.962490][T12524] iget5_locked+0x5f/0xa0 [ 350.962507][T12524] ovl_get_trap_inode+0xb2/0x210 [ 350.962520][T12524] ovl_fill_super+0x8a0/0x5d30 [ 350.962534][T12524] ? __init_swait_queue_head+0xca/0x150 [ 350.962555][T12524] ? __pfx_ovl_fill_super+0x10/0x10 [ 350.962566][T12524] ? __pfx_sget_fc+0x10/0x10 [ 350.962581][T12524] ? hook_capable+0x1bc/0x500 [ 350.962597][T12524] ? ovl_next_opt+0x143/0x1c0 [ 350.962609][T12524] ? rcu_is_watching+0x13/0xc0 [ 350.962623][T12524] ? apparmor_capable+0x1d7/0x4d0 [ 350.962637][T12524] ? __pfx_ovl_fill_super+0x10/0x10 [ 350.962657][T12524] get_tree_nodev+0xdd/0x190 [ 350.962669][T12524] vfs_get_tree+0x92/0x320 [ 350.962685][T12524] path_mount+0x7d0/0x2850 [ 350.962702][T12524] ? __pfx_path_mount+0x10/0x10 [ 350.962716][T12524] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.962731][T12524] ? putname+0xb1/0x110 [ 350.962743][T12524] ? kmem_cache_free+0x127/0x6c0 [ 350.962762][T12524] ? __ia32_sys_mount+0x292/0x310 [ 350.962775][T12524] __ia32_sys_mount+0x292/0x310 [ 350.962789][T12524] ? __pfx___ia32_sys_mount+0x10/0x10 [ 350.962807][T12524] __do_fast_syscall_32+0x14b/0x8c0 [ 350.962819][T12524] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.962832][T12524] do_fast_syscall_32+0x32/0x70 [ 350.962844][T12524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.962858][T12524] RIP: 0023:0xf73cefbc [ 350.962868][T12524] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 350.962877][T12524] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 350.962888][T12524] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 350.962895][T12524] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 350.962901][T12524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.962907][T12524] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.962914][T12524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.962927][T12524] [ 351.202176][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 351.530215][T12550] 9p: Bad value for 'wfdno' [ 351.639657][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 351.639674][ T42] audit: type=1326 audit(2000000016.169:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 351.640033][ T42] audit: type=1326 audit(2000000016.169:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 351.641215][ T42] audit: type=1326 audit(2000000016.169:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 351.641514][ T42] audit: type=1326 audit(2000000016.169:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 351.642061][ T42] audit: type=1326 audit(2000000016.169:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 351.642315][ T42] audit: type=1326 audit(2000000016.169:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 351.642506][ T42] audit: type=1326 audit(2000000016.169:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 351.642939][ T42] audit: type=1326 audit(2000000016.169:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 351.643137][ T42] audit: type=1326 audit(2000000016.169:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12554 comm="syz.1.1994" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fbc code=0x7ffc0000 [ 351.970172][T12573] 9p: Bad value for 'wfdno' [ 352.484187][ T9] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 352.637003][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 352.637894][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 352.637910][ T9] usb 8-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 352.638735][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 352.640541][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.640554][ T9] usb 8-1: Product: syz [ 352.640561][ T9] usb 8-1: Manufacturer: syz [ 352.640568][ T9] usb 8-1: SerialNumber: syz [ 352.769439][T12598] 9p: Bad value for 'wfdno' [ 352.848936][ T9] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 353.012479][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 353.046638][ T9] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 353.046655][ T9] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 353.247640][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.247945][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.453970][ T9] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 353.453987][ T9] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 353.655373][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2009'. [ 353.656040][ T9] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 353.682421][ T9] usb 8-1: USB disconnect, device number 34 [ 353.716089][T12117] udevd[12117]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.819660][T12654] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2037'. [ 354.261004][T12673] netlink: 'syz.3.2045': attribute type 3 has an invalid length. [ 354.261019][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 354.327309][T12679] FAULT_INJECTION: forcing a failure. [ 354.327309][T12679] name failslab, interval 1, probability 5, space 0, times 9982 [ 354.327339][T12679] CPU: 2 UID: 0 PID: 12679 Comm: syz.1.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.327365][T12679] Tainted: [L]=SOFTLOCKUP [ 354.327373][T12679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.327384][T12679] Call Trace: [ 354.327392][T12679] [ 354.327400][T12679] dump_stack_lvl+0x100/0x190 [ 354.327430][T12679] should_fail_ex.cold+0x5/0xa [ 354.327453][T12679] ? __pfx_ovl_inode_set+0x10/0x10 [ 354.327471][T12679] should_failslab+0xc2/0x120 [ 354.327492][T12679] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 354.327517][T12679] ? __pfx_ovl_inode_test+0x10/0x10 [ 354.327535][T12679] ? ovl_alloc_inode+0x25/0x190 [ 354.327554][T12679] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 354.327570][T12679] ? __pfx_ovl_inode_test+0x10/0x10 [ 354.327586][T12679] ? __pfx_ovl_inode_set+0x10/0x10 [ 354.327602][T12679] ovl_alloc_inode+0x25/0x190 [ 354.327618][T12679] alloc_inode+0x68/0x250 [ 354.327644][T12679] iget5_locked+0x5f/0xa0 [ 354.327670][T12679] ovl_get_trap_inode+0xb2/0x210 [ 354.327690][T12679] ovl_fill_super+0xe00/0x5d30 [ 354.327733][T12679] ? __pfx_ovl_fill_super+0x10/0x10 [ 354.327753][T12679] ? __pfx_sget_fc+0x10/0x10 [ 354.327778][T12679] ? hook_capable+0x1bc/0x500 [ 354.327805][T12679] ? ovl_next_opt+0x143/0x1c0 [ 354.327824][T12679] ? rcu_is_watching+0x13/0xc0 [ 354.327849][T12679] ? apparmor_capable+0x1d7/0x4d0 [ 354.327871][T12679] ? __pfx_ovl_fill_super+0x10/0x10 [ 354.327888][T12679] get_tree_nodev+0xdd/0x190 [ 354.327907][T12679] vfs_get_tree+0x92/0x320 [ 354.327929][T12679] path_mount+0x7d0/0x2850 [ 354.327956][T12679] ? __pfx_path_mount+0x10/0x10 [ 354.327976][T12679] ? lockdep_hardirqs_on+0x7d/0x110 [ 354.327999][T12679] ? putname+0xb1/0x110 [ 354.328017][T12679] ? kmem_cache_free+0x127/0x6c0 [ 354.328049][T12679] ? __ia32_sys_mount+0x292/0x310 [ 354.328083][T12679] __ia32_sys_mount+0x292/0x310 [ 354.328107][T12679] ? __pfx___ia32_sys_mount+0x10/0x10 [ 354.328138][T12679] __do_fast_syscall_32+0x14b/0x8c0 [ 354.328158][T12679] ? lockdep_hardirqs_on+0x7d/0x110 [ 354.328179][T12679] do_fast_syscall_32+0x32/0x70 [ 354.328199][T12679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.328221][T12679] RIP: 0023:0xf7f35fbc [ 354.328235][T12679] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 354.328252][T12679] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 354.328271][T12679] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 354.328282][T12679] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 354.328294][T12679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.328304][T12679] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 354.328314][T12679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.328338][T12679] [ 354.344149][ T1690] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 354.514629][ T1690] usb 9-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 354.515435][ T1690] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 354.515450][ T1690] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 354.516964][ T1690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.516976][ T1690] usb 9-1: Product: syz [ 354.516983][ T1690] usb 9-1: Manufacturer: syz [ 354.516990][ T1690] usb 9-1: SerialNumber: syz [ 354.520693][ T1690] usb 9-1: config 0 descriptor?? [ 354.521150][T12667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.521202][T12667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.726228][T12667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.726282][T12667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.928984][ T1690] Error reading MAC address [ 354.932457][ T1690] usb 9-1: USB disconnect, device number 27 [ 355.193795][T12701] FAULT_INJECTION: forcing a failure. [ 355.193795][T12701] name failslab, interval 1, probability 5, space 0, times 9981 [ 355.193817][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.3.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.193833][T12701] Tainted: [L]=SOFTLOCKUP [ 355.193838][T12701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.193845][T12701] Call Trace: [ 355.193850][T12701] [ 355.193856][T12701] dump_stack_lvl+0x100/0x190 [ 355.193875][T12701] should_fail_ex.cold+0x5/0xa [ 355.193892][T12701] ? __pfx_ovl_inode_set+0x10/0x10 [ 355.193903][T12701] should_failslab+0xc2/0x120 [ 355.193916][T12701] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 355.193933][T12701] ? __pfx_ovl_inode_test+0x10/0x10 [ 355.193945][T12701] ? ovl_alloc_inode+0x25/0x190 [ 355.193957][T12701] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 355.193967][T12701] ? __pfx_ovl_inode_test+0x10/0x10 [ 355.193977][T12701] ? __pfx_ovl_inode_set+0x10/0x10 [ 355.193986][T12701] ovl_alloc_inode+0x25/0x190 [ 355.193996][T12701] alloc_inode+0x68/0x250 [ 355.194024][T12701] iget5_locked+0x5f/0xa0 [ 355.194042][T12701] ovl_get_trap_inode+0xb2/0x210 [ 355.194055][T12701] ovl_fill_super+0xf28/0x5d30 [ 355.194078][T12701] ? __pfx_ovl_fill_super+0x10/0x10 [ 355.194090][T12701] ? __pfx_sget_fc+0x10/0x10 [ 355.194104][T12701] ? hook_capable+0x1bc/0x500 [ 355.194122][T12701] ? ovl_next_opt+0x143/0x1c0 [ 355.194135][T12701] ? rcu_is_watching+0x13/0xc0 [ 355.194150][T12701] ? apparmor_capable+0x1d7/0x4d0 [ 355.194164][T12701] ? __pfx_ovl_fill_super+0x10/0x10 [ 355.194175][T12701] get_tree_nodev+0xdd/0x190 [ 355.194185][T12701] vfs_get_tree+0x92/0x320 [ 355.194200][T12701] path_mount+0x7d0/0x2850 [ 355.194217][T12701] ? __pfx_path_mount+0x10/0x10 [ 355.194235][T12701] ? lockdep_hardirqs_on+0x7d/0x110 [ 355.194250][T12701] ? putname+0xb1/0x110 [ 355.194263][T12701] ? kmem_cache_free+0x127/0x6c0 [ 355.194283][T12701] ? __ia32_sys_mount+0x292/0x310 [ 355.194300][T12701] __ia32_sys_mount+0x292/0x310 [ 355.194315][T12701] ? __pfx___ia32_sys_mount+0x10/0x10 [ 355.194334][T12701] __do_fast_syscall_32+0x14b/0x8c0 [ 355.194348][T12701] do_fast_syscall_32+0x32/0x70 [ 355.194361][T12701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.194375][T12701] RIP: 0023:0xf73cefbc [ 355.194384][T12701] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 355.194394][T12701] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 355.194405][T12701] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 355.194412][T12701] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 355.194418][T12701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.194424][T12701] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.194430][T12701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.194444][T12701] [ 355.694214][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 355.844598][ T9] usb 9-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 355.847579][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.847595][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.849286][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.849297][ T9] usb 9-1: Product: syz [ 355.849304][ T9] usb 9-1: Manufacturer: syz [ 355.849311][ T9] usb 9-1: SerialNumber: syz [ 356.059237][ T9] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 356.267051][ C2] usblp0: nonzero read bulk status received: -71 [ 356.267637][ T50] usb 9-1: USB disconnect, device number 28 [ 356.280953][T12709] usblp0: removed [ 356.430277][T12745] FAULT_INJECTION: forcing a failure. [ 356.430277][T12745] name failslab, interval 1, probability 5, space 0, times 9979 [ 356.430306][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.5.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.430322][T12745] Tainted: [L]=SOFTLOCKUP [ 356.430327][T12745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.430334][T12745] Call Trace: [ 356.430338][T12745] [ 356.430343][T12745] dump_stack_lvl+0x100/0x190 [ 356.430364][T12745] should_fail_ex.cold+0x5/0xa [ 356.430381][T12745] ? __pfx_ovl_inode_set+0x10/0x10 [ 356.430393][T12745] should_failslab+0xc2/0x120 [ 356.430406][T12745] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 356.430422][T12745] ? __pfx_ovl_inode_test+0x10/0x10 [ 356.430433][T12745] ? ovl_alloc_inode+0x25/0x190 [ 356.430444][T12745] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 356.430455][T12745] ? __pfx_ovl_inode_test+0x10/0x10 [ 356.430464][T12745] ? __pfx_ovl_inode_set+0x10/0x10 [ 356.430475][T12745] ovl_alloc_inode+0x25/0x190 [ 356.430486][T12745] alloc_inode+0x68/0x250 [ 356.430501][T12745] iget5_locked+0x5f/0xa0 [ 356.430517][T12745] ovl_get_trap_inode+0xb2/0x210 [ 356.430530][T12745] ovl_fill_super+0xf28/0x5d30 [ 356.430553][T12745] ? __pfx_ovl_fill_super+0x10/0x10 [ 356.430565][T12745] ? __pfx_sget_fc+0x10/0x10 [ 356.430579][T12745] ? hook_capable+0x1bc/0x500 [ 356.430596][T12745] ? ovl_next_opt+0x143/0x1c0 [ 356.430607][T12745] ? rcu_is_watching+0x13/0xc0 [ 356.430623][T12745] ? apparmor_capable+0x1d7/0x4d0 [ 356.430637][T12745] ? __pfx_ovl_fill_super+0x10/0x10 [ 356.430647][T12745] get_tree_nodev+0xdd/0x190 [ 356.430658][T12745] vfs_get_tree+0x92/0x320 [ 356.430673][T12745] path_mount+0x7d0/0x2850 [ 356.430689][T12745] ? __pfx_path_mount+0x10/0x10 [ 356.430702][T12745] ? lockdep_hardirqs_on+0x7d/0x110 [ 356.430716][T12745] ? putname+0xb1/0x110 [ 356.430727][T12745] ? kmem_cache_free+0x127/0x6c0 [ 356.430746][T12745] ? __ia32_sys_mount+0x292/0x310 [ 356.430759][T12745] __ia32_sys_mount+0x292/0x310 [ 356.430774][T12745] ? __pfx___ia32_sys_mount+0x10/0x10 [ 356.430792][T12745] __do_fast_syscall_32+0x14b/0x8c0 [ 356.430807][T12745] do_fast_syscall_32+0x32/0x70 [ 356.430819][T12745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.430833][T12745] RIP: 0023:0xf7f53fbc [ 356.430842][T12745] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 356.430853][T12745] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 356.430864][T12745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 356.430871][T12745] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 356.430877][T12745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.430883][T12745] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.430889][T12745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.430903][T12745] [ 356.609223][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 356.619166][T12750] 9p: Bad value for 'wfdno' [ 356.641821][T12757] device-mapper: table: 248:1: verity: Not enough arguments (-EINVAL) [ 356.641836][T12757] device-mapper: ioctl: error adding target to table [ 356.811669][T12771] FAULT_INJECTION: forcing a failure. [ 356.811669][T12771] name failslab, interval 1, probability 5, space 0, times 9978 [ 356.811692][T12771] CPU: 2 UID: 0 PID: 12771 Comm: syz.4.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.811708][T12771] Tainted: [L]=SOFTLOCKUP [ 356.811713][T12771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.811720][T12771] Call Trace: [ 356.811725][T12771] [ 356.811730][T12771] dump_stack_lvl+0x100/0x190 [ 356.811750][T12771] should_fail_ex.cold+0x5/0xa [ 356.811766][T12771] should_failslab+0xc2/0x120 [ 356.811780][T12771] __kmalloc_noprof+0xfc/0x840 [ 356.811797][T12771] ? security_inode_init_security+0x113/0x370 [ 356.811821][T12771] security_inode_init_security+0x113/0x370 [ 356.811843][T12771] ? __pfx_shmem_initxattrs+0x10/0x10 [ 356.811863][T12771] ? __pfx_security_inode_init_security+0x10/0x10 [ 356.811885][T12771] ? __pfx_make_vfsuid+0x10/0x10 [ 356.811912][T12771] shmem_mknod+0x2ce/0x480 [ 356.811929][T12771] ? __pfx_shmem_mknod+0x10/0x10 [ 356.811944][T12771] ? inode_permission+0x377/0x630 [ 356.811963][T12771] shmem_mkdir+0x31/0x80 [ 356.811977][T12771] vfs_mkdir+0x367/0x850 [ 356.811995][T12771] ovl_workdir_create+0x447/0xaa0 [ 356.812009][T12771] ? lock_acquire+0x1d1/0x380 [ 356.812022][T12771] ? __pfx_ovl_workdir_create+0x10/0x10 [ 356.812033][T12771] ? mnt_get_write_access+0x52/0x2f0 [ 356.812052][T12771] ? mnt_get_write_access+0x1ec/0x2f0 [ 356.812069][T12771] ovl_fill_super+0xec2/0x5d30 [ 356.812092][T12771] ? __pfx_ovl_fill_super+0x10/0x10 [ 356.812104][T12771] ? __pfx_sget_fc+0x10/0x10 [ 356.812121][T12771] ? hook_capable+0x1bc/0x500 [ 356.812137][T12771] ? ovl_next_opt+0x143/0x1c0 [ 356.812149][T12771] ? rcu_is_watching+0x13/0xc0 [ 356.812164][T12771] ? apparmor_capable+0x1d7/0x4d0 [ 356.812178][T12771] ? __pfx_ovl_fill_super+0x10/0x10 [ 356.812188][T12771] get_tree_nodev+0xdd/0x190 [ 356.812199][T12771] vfs_get_tree+0x92/0x320 [ 356.812214][T12771] path_mount+0x7d0/0x2850 [ 356.812230][T12771] ? __pfx_path_mount+0x10/0x10 [ 356.812243][T12771] ? lockdep_hardirqs_on+0x7d/0x110 [ 356.812257][T12771] ? putname+0xb1/0x110 [ 356.812269][T12771] ? kmem_cache_free+0x127/0x6c0 [ 356.812288][T12771] ? __ia32_sys_mount+0x292/0x310 [ 356.812302][T12771] __ia32_sys_mount+0x292/0x310 [ 356.812316][T12771] ? __pfx___ia32_sys_mount+0x10/0x10 [ 356.812335][T12771] __do_fast_syscall_32+0x14b/0x8c0 [ 356.812347][T12771] ? lockdep_hardirqs_on+0x7d/0x110 [ 356.812359][T12771] do_fast_syscall_32+0x32/0x70 [ 356.812372][T12771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.812385][T12771] RIP: 0023:0xf7f46fbc [ 356.812395][T12771] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 356.812405][T12771] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 356.812416][T12771] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 356.812422][T12771] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 356.812429][T12771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.812435][T12771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.812441][T12771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.812456][T12771] [ 356.812590][T12771] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 356.905353][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 356.980248][T12784] FAULT_INJECTION: forcing a failure. [ 356.980248][T12784] name failslab, interval 1, probability 5, space 0, times 9977 [ 356.980268][T12784] CPU: 3 UID: 0 PID: 12784 Comm: syz.3.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.980284][T12784] Tainted: [L]=SOFTLOCKUP [ 356.980289][T12784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.980295][T12784] Call Trace: [ 356.980299][T12784] [ 356.980304][T12784] dump_stack_lvl+0x100/0x190 [ 356.980325][T12784] should_fail_ex.cold+0x5/0xa [ 356.980342][T12784] should_failslab+0xc2/0x120 [ 356.980356][T12784] __kvmalloc_node_noprof+0x113/0x9b0 [ 356.980373][T12784] ? netdev_alloc_config+0x3f/0xd0 [ 356.980387][T12784] ? alloc_netdev_mqs+0xefc/0x1540 [ 356.980404][T12784] alloc_netdev_mqs+0xefc/0x1540 [ 356.980421][T12784] vti6_locate+0x3f2/0x6d0 [ 356.980433][T12784] ? __pfx_vti6_locate+0x10/0x10 [ 356.980448][T12784] vti6_siocdevprivate+0x581/0x760 [ 356.980563][T12784] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 356.980575][T12784] ? kasan_save_track+0x14/0x30 [ 356.980596][T12784] ? rcu_is_watching+0x13/0xc0 [ 356.980612][T12784] ? full_name_hash+0xbc/0x100 [ 356.980630][T12784] dev_ifsioc+0xc2f/0x1ed0 [ 356.980647][T12784] ? __pfx_dev_ifsioc+0x10/0x10 [ 356.980660][T12784] ? __pfx___mutex_lock+0x10/0x10 [ 356.980676][T12784] ? lock_acquire+0x1d1/0x380 [ 356.980689][T12784] ? dev_load+0x8e/0x240 [ 356.980702][T12784] ? dev_load+0x8e/0x240 [ 356.980718][T12784] dev_ioctl+0x70e/0x1070 [ 356.980733][T12784] sock_ioctl+0x494/0x6b0 [ 356.980744][T12784] ? __pfx_sock_ioctl+0x10/0x10 [ 356.980757][T12784] ? do_vfs_ioctl+0x226/0x13e0 [ 356.980774][T12784] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 356.980791][T12784] compat_sock_ioctl+0x400/0x760 [ 356.980803][T12784] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 356.980813][T12784] ? hook_file_ioctl_common+0x140/0x440 [ 356.980845][T12784] ? __fget_files+0x21f/0x3d0 [ 356.980861][T12784] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 356.980873][T12784] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 356.980892][T12784] __do_fast_syscall_32+0x14b/0x8c0 [ 356.980907][T12784] do_fast_syscall_32+0x32/0x70 [ 356.980921][T12784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.980936][T12784] RIP: 0023:0xf73cefbc [ 356.980945][T12784] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 356.980955][T12784] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 356.980966][T12784] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 356.980973][T12784] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.980979][T12784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.980985][T12784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.980992][T12784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.981007][T12784] [ 357.324252][ T6420] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 357.388893][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.389716][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.389900][T12810] tipc: Resetting bearer [ 357.392018][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.441205][T12810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.452929][T12810] veth1_vlan: left promiscuous mode [ 357.453444][T12810] veth0_vlan: left promiscuous mode [ 357.457515][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 357.462615][T12810] veth0_vlan: entered promiscuous mode [ 357.465747][T12810] veth1_vlan: entered promiscuous mode [ 357.472197][T12810] veth1_macvtap: left promiscuous mode [ 357.472722][T12810] veth0_macvtap: left promiscuous mode [ 357.473187][T12810] veth0_macvtap: entered promiscuous mode [ 357.473687][T12810] veth1_macvtap: entered promiscuous mode [ 357.484655][ T6420] usb 10-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 357.485583][ T6420] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.485597][ T6420] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 357.487391][ T6420] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.487403][ T6420] usb 10-1: Product: syz [ 357.487410][ T6420] usb 10-1: Manufacturer: syz [ 357.487417][ T6420] usb 10-1: SerialNumber: syz [ 357.498943][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.505198][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.505865][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.505915][T12810] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 357.513803][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.514256][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.522851][ T36] bridge0: port 1(batadv_slave_0) entered blocking state [ 357.522897][ T36] bridge0: port 1(batadv_slave_0) entered forwarding state [ 357.584160][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.584239][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.584257][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.584273][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.698740][ T6420] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 357.727184][T12814] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.807531][ T12] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.807554][ T12] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.869414][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.869436][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.899792][ C3] usblp0: nonzero read bulk status received: -71 [ 357.900062][ T6420] usb 10-1: USB disconnect, device number 40 [ 357.906179][T12791] usblp0: removed [ 357.922709][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.922729][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.974977][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.975138][T12814] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.975201][T12814] bridge_slave_0: entered allmulticast mode [ 357.975874][T12814] bridge_slave_0: entered promiscuous mode [ 357.986021][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.986102][T12814] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.986205][T12814] bridge_slave_1: entered allmulticast mode [ 357.987600][T12814] bridge_slave_1: entered promiscuous mode [ 357.997583][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.997601][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.023316][T12814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.026116][T12814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.044183][T12814] team0: Port device team_slave_0 added [ 358.048073][T12814] team0: Port device team_slave_1 added [ 358.059082][T12814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.059093][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.059105][T12814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.059939][T12814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.059947][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.059959][T12814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.079383][T12814] hsr_slave_0: entered promiscuous mode [ 358.079811][T12814] hsr_slave_1: entered promiscuous mode [ 358.080136][T12814] debugfs: 'hsr0' already exists in 'hsr' [ 358.080151][T12814] Cannot create hsr debugfs directory [ 358.211935][ T12] netdevsim netdevsim12 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.211959][ T12] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.427326][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'. [ 358.573496][ T12] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 358.578417][ T12] bridge3 (unregistering): left promiscuous mode [ 358.599971][ T50] hid_parser_main: 62 callbacks suppressed [ 358.599985][ T50] hid-generic 0000:0008:0000.0006: unknown main item tag 0x0 [ 358.599999][ T50] hid-generic 0000:0008:0000.0006: unknown main item tag 0x0 [ 358.604805][ T50] hid-generic 0000:0008:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 358.617760][ T12] bond0 (unregistering): Released all slaves [ 358.638829][ T5500] 8021q: adding VLAN 0 to HW filter on device eth10 [ 358.649977][T12848] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.683698][ T12] ovs-dp0: left promiscuous mode [ 358.775130][ T12] tipc: Disabling bearer [ 358.775193][ T12] tipc: Disabling bearer [ 358.776624][ T12] tipc: Left network mode [ 359.061559][ T5500] 8021q: adding VLAN 0 to HW filter on device eth13 [ 359.140112][T12872] veth0_vlan: left promiscuous mode [ 359.162097][T12872] team0: Port device vlan0 removed [ 359.182589][ T237] tipc: Resetting bearer [ 359.190356][ T1690] kernel write not supported for file 1419/net/vlan/vlan0 (pid: 1690 comm: kworker/2:2) [ 359.236372][ T12] hsr_slave_0: left promiscuous mode [ 359.236834][ T12] hsr_slave_1: left promiscuous mode [ 359.241158][ T12] veth1_macvtap: left promiscuous mode [ 359.241197][ T12] veth0_macvtap: left promiscuous mode [ 359.241339][ T12] veth1_vlan: left promiscuous mode [ 359.241364][ T12] veth0_vlan: left promiscuous mode [ 359.465720][T12885] overlayfs: failed to resolve './file2': -2 [ 359.544168][ T5793] Bluetooth: hci2: command tx timeout [ 359.671085][T12894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2122'. [ 359.685696][T12814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.701133][T12814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.710678][T12814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.732066][T12814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.733013][T12814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.751644][T12814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.753131][T12814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.760961][T12814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.879961][T12814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.895379][T12814] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.898910][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.898959][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.907632][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.907679][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.972662][T12907] 9p: Bad value for 'wfdno' [ 360.247294][T12925] overlayfs: failed to resolve './file2': -2 [ 360.341672][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.386329][T12814] veth0_vlan: entered promiscuous mode [ 360.392004][T12814] veth1_vlan: entered promiscuous mode [ 360.408090][T12814] veth0_macvtap: entered promiscuous mode [ 360.410115][T12814] veth1_macvtap: entered promiscuous mode [ 360.426687][T12814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.433910][T12814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.455999][T12929] hub 5-0:1.0: USB hub found [ 360.456563][T12929] hub 5-0:1.0: 1 port detected [ 360.538632][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.538645][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.570284][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.570298][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.574560][T12828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.574715][T12828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.574733][T12828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.574749][T12828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.738969][T12951] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 360.750577][T12952] FAULT_INJECTION: forcing a failure. [ 360.750577][T12952] name fail_futex, interval 1, probability 0, space 0, times 0 [ 360.750632][T12952] CPU: 3 UID: 0 PID: 12952 Comm: syz.4.2133 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.750648][T12952] Tainted: [L]=SOFTLOCKUP [ 360.750652][T12952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.750658][T12952] Call Trace: [ 360.750663][T12952] [ 360.750668][T12952] dump_stack_lvl+0x100/0x190 [ 360.750689][T12952] should_fail_ex.cold+0x5/0xa [ 360.750706][T12952] get_futex_key+0x1c9/0x13e0 [ 360.750724][T12952] ? __pfx_get_futex_key+0x10/0x10 [ 360.750739][T12952] ? putname+0xb1/0x110 [ 360.750755][T12952] futex_wait_setup+0x91/0x540 [ 360.750783][T12952] __futex_wait+0x19f/0x360 [ 360.750798][T12952] ? __pfx___futex_wait+0x10/0x10 [ 360.750809][T12952] ? futex_hash+0x311/0x400 [ 360.750823][T12952] ? __pfx_futex_wake_mark+0x10/0x10 [ 360.750836][T12952] ? __pfx_futex_hash+0x10/0x10 [ 360.750848][T12952] ? __pfx_get_futex_key+0x10/0x10 [ 360.750865][T12952] futex_wait+0xe6/0x370 [ 360.750876][T12952] ? __pfx_futex_wait+0x10/0x10 [ 360.750891][T12952] ? putname+0xb1/0x110 [ 360.750902][T12952] ? kmem_cache_free+0x127/0x6c0 [ 360.750916][T12952] ? do_sys_openat2+0x1ae/0x1d0 [ 360.750934][T12952] do_futex+0x265/0x440 [ 360.750949][T12952] ? __pfx_do_futex+0x10/0x10 [ 360.750965][T12952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.750980][T12952] __ia32_sys_futex_time32+0x2f4/0x470 [ 360.750998][T12952] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 360.751015][T12952] ? __might_fault+0xc5/0x140 [ 360.751032][T12952] __do_fast_syscall_32+0x14b/0x8c0 [ 360.751046][T12952] do_fast_syscall_32+0x32/0x70 [ 360.751059][T12952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.751073][T12952] RIP: 0023:0xf7f46fbc [ 360.751084][T12952] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 360.751094][T12952] RSP: 002b:00000000f53b45bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 360.751105][T12952] RAX: ffffffffffffffda RBX: 00000000f74050b8 RCX: 0000000000000080 [ 360.751112][T12952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74050bc [ 360.751118][T12952] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 360.751124][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.751131][T12952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.751145][T12952] [ 360.783487][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 361.148938][T12981] ieee802154 phy0 wpan0: encryption failed: -126 [ 361.513382][T12426] kernel write not supported for file 22/net/vlan/vlan0 (pid: 12426 comm: kworker/0:9) [ 361.614158][ T5793] Bluetooth: hci2: command tx timeout [ 361.776297][ T42] audit: type=1326 audit(2000000026.309:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.5.2156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 361.778693][ T42] audit: type=1326 audit(2000000026.309:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.5.2156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 361.780385][ T42] audit: type=1326 audit(2000000026.309:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.5.2156" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 361.780476][ T42] audit: type=1326 audit(2000000026.309:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.5.2156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 361.780605][ T42] audit: type=1326 audit(2000000026.309:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13001 comm="syz.5.2156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fbc code=0x7ffc0000 [ 361.807062][T13004] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 361.916632][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2162'. [ 361.917524][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2162'. [ 361.961613][T13015] input: syz0 as /devices/virtual/input/input87 [ 362.673286][ T42] audit: type=1326 audit(2000000027.199:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.3.2170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7fc00000 [ 362.673422][ T42] audit: type=1326 audit(2000000027.199:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.3.2170" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf73cefbc code=0x7fc00000 [ 362.673515][ T42] audit: type=1326 audit(2000000027.199:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.3.2170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7fc00000 [ 362.673646][ T42] audit: type=1326 audit(2000000027.199:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.3.2170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7fc00000 [ 362.673760][ T42] audit: type=1326 audit(2000000027.199:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.3.2170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7fc00000 [ 362.722888][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2172'. [ 363.162800][T13079] FAULT_INJECTION: forcing a failure. [ 363.162800][T13079] name failslab, interval 1, probability 5, space 0, times 9974 [ 363.162831][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.5.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.162857][T13079] Tainted: [L]=SOFTLOCKUP [ 363.162864][T13079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.162875][T13079] Call Trace: [ 363.162882][T13079] [ 363.162888][T13079] dump_stack_lvl+0x100/0x190 [ 363.162920][T13079] should_fail_ex.cold+0x5/0xa [ 363.162945][T13079] should_failslab+0xc2/0x120 [ 363.162966][T13079] __kmalloc_noprof+0xfc/0x840 [ 363.162993][T13079] ? security_inode_init_security+0x113/0x370 [ 363.163023][T13079] security_inode_init_security+0x113/0x370 [ 363.163048][T13079] ? __pfx_shmem_initxattrs+0x10/0x10 [ 363.163070][T13079] ? __pfx_security_inode_init_security+0x10/0x10 [ 363.163095][T13079] ? __pfx_make_vfsuid+0x10/0x10 [ 363.163123][T13079] shmem_mknod+0x2ce/0x480 [ 363.163156][T13079] ? __pfx_shmem_mknod+0x10/0x10 [ 363.163179][T13079] ? inode_permission+0x377/0x630 [ 363.163205][T13079] shmem_mkdir+0x31/0x80 [ 363.163228][T13079] vfs_mkdir+0x367/0x850 [ 363.163254][T13079] ovl_workdir_create+0x447/0xaa0 [ 363.163276][T13079] ? lock_acquire+0x1d1/0x380 [ 363.163297][T13079] ? __pfx_ovl_workdir_create+0x10/0x10 [ 363.163313][T13079] ? mnt_get_write_access+0x52/0x2f0 [ 363.163342][T13079] ? mnt_get_write_access+0x1ec/0x2f0 [ 363.163370][T13079] ovl_fill_super+0xec2/0x5d30 [ 363.163406][T13079] ? __pfx_ovl_fill_super+0x10/0x10 [ 363.163423][T13079] ? __pfx_sget_fc+0x10/0x10 [ 363.163445][T13079] ? hook_capable+0x1bc/0x500 [ 363.163469][T13079] ? ovl_next_opt+0x143/0x1c0 [ 363.163486][T13079] ? rcu_is_watching+0x13/0xc0 [ 363.163509][T13079] ? apparmor_capable+0x1d7/0x4d0 [ 363.163531][T13079] ? __pfx_ovl_fill_super+0x10/0x10 [ 363.163548][T13079] get_tree_nodev+0xdd/0x190 [ 363.163565][T13079] vfs_get_tree+0x92/0x320 [ 363.163588][T13079] path_mount+0x7d0/0x2850 [ 363.163612][T13079] ? __pfx_path_mount+0x10/0x10 [ 363.163632][T13079] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.163654][T13079] ? putname+0xb1/0x110 [ 363.163693][T13079] ? kmem_cache_free+0x127/0x6c0 [ 363.163724][T13079] ? __ia32_sys_mount+0x292/0x310 [ 363.163744][T13079] __ia32_sys_mount+0x292/0x310 [ 363.163766][T13079] ? __pfx___ia32_sys_mount+0x10/0x10 [ 363.163794][T13079] __do_fast_syscall_32+0x14b/0x8c0 [ 363.163813][T13079] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.163832][T13079] do_fast_syscall_32+0x32/0x70 [ 363.163851][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.163871][T13079] RIP: 0023:0xf7f53fbc [ 363.163886][T13079] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 363.163902][T13079] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 363.163919][T13079] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000440 [ 363.163931][T13079] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 00000000800004c0 [ 363.163943][T13079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.163953][T13079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.163962][T13079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.163986][T13079] [ 363.165173][T13079] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 363.364885][T13089] 9pnet_fd: p9_fd_create_tcp (13089): problem connecting socket to 127.0.0.1 [ 363.565807][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'. [ 363.593520][T13058] FAULT_INJECTION: forcing a failure. [ 363.593520][T13058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 363.593542][T13058] CPU: 2 UID: 0 PID: 13058 Comm: syz.3.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.593557][T13058] Tainted: [L]=SOFTLOCKUP [ 363.593561][T13058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.593567][T13058] Call Trace: [ 363.593572][T13058] [ 363.593576][T13058] dump_stack_lvl+0x100/0x190 [ 363.593598][T13058] should_fail_ex.cold+0x5/0xa [ 363.593613][T13058] get_futex_key+0x1c9/0x13e0 [ 363.593629][T13058] ? __pfx_get_futex_key+0x10/0x10 [ 363.593643][T13058] ? __mutex_unlock_slowpath+0x35d/0x930 [ 363.593659][T13058] futex_wake+0xf4/0x5e0 [ 363.593672][T13058] ? __pfx_futex_wake+0x10/0x10 [ 363.593685][T13058] ? detach_task_ctx_data+0x83/0x490 [ 363.593709][T13058] do_futex+0x2b2/0x440 [ 363.593726][T13058] ? __pfx_do_futex+0x10/0x10 [ 363.593739][T13058] ? __might_fault+0xc5/0x140 [ 363.593756][T13058] mm_exit_exec_release+0x256/0x2f0 [ 363.593769][T13058] do_exit+0x6d8/0x2a00 [ 363.593784][T13058] ? __pfx_do_exit+0x10/0x10 [ 363.593796][T13058] ? do_raw_spin_lock+0x128/0x260 [ 363.593810][T13058] ? find_held_lock+0x2b/0x80 [ 363.593825][T13058] ? get_signal+0x7db/0x21d0 [ 363.593837][T13058] do_group_exit+0xd5/0x2a0 [ 363.593851][T13058] get_signal+0x1ebd/0x21d0 [ 363.593864][T13058] ? putname+0xb1/0x110 [ 363.593878][T13058] ? __pfx_get_signal+0x10/0x10 [ 363.593889][T13058] ? do_futex+0x190/0x440 [ 363.593905][T13058] arch_do_signal_or_restart+0x91/0x7a0 [ 363.593923][T13058] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.593947][T13058] exit_to_user_mode_loop+0x139/0x700 [ 363.593961][T13058] ? rcu_is_watching+0x13/0xc0 [ 363.593977][T13058] __do_fast_syscall_32+0x5b0/0x8c0 [ 363.593992][T13058] do_fast_syscall_32+0x32/0x70 [ 363.594005][T13058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.594032][T13058] RIP: 0023:0xf73cefbc [ 363.594042][T13058] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 363.594052][T13058] RSP: 002b:00000000f53a45bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 363.594062][T13058] RAX: fffffffffffffe00 RBX: 00000000f73f50b8 RCX: 0000000000000080 [ 363.594069][T13058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f50bc [ 363.594075][T13058] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 363.594081][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.594087][T13058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.594101][T13058] [ 363.694319][ T5793] Bluetooth: hci2: command tx timeout [ 363.876624][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 364.000828][T13118] 9p: Bad value for 'wfdno' [ 364.501197][T13129] netlink: 'syz.1.2213': attribute type 5 has an invalid length. [ 364.551571][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.553743][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.560715][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.566743][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.569529][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.762143][T13139] 9p: Bad value for 'wfdno' [ 364.798211][ T12] batadv0: left allmulticast mode [ 364.798229][ T12] batadv0: left promiscuous mode [ 364.798340][ T12] bridge0: port 3(batadv0) entered disabled state [ 364.801970][ T12] bridge_slave_1: left allmulticast mode [ 364.801982][ T12] bridge_slave_1: left promiscuous mode [ 364.802133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.805722][ T12] bridge_slave_0: left allmulticast mode [ 364.805740][ T12] bridge_slave_0: left promiscuous mode [ 364.805870][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.960887][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2221'. [ 365.015887][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.020942][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.026323][ T12] bond0 (unregistering): Released all slaves [ 365.035105][ T5500] 8021q: adding VLAN 0 to HW filter on device eth10 [ 365.119778][ T12] tipc: Disabling bearer [ 365.120005][ T12] tipc: Left network mode [ 365.160884][T13130] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.304100][ T1690] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 365.334697][ T5500] 8021q: adding VLAN 0 to HW filter on device eth11 [ 365.468115][ T1690] usb 8-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 365.471121][ T1690] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 365.471171][ T1690] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 365.471184][ T1690] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.471204][ T1690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.499186][T13166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.499269][T13166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.522229][ T1690] pl2303 8-1:1.0: pl2303 converter detected [ 365.526982][ T1690] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 365.576488][ T12] hsr_slave_0: left promiscuous mode [ 365.577439][ T12] hsr_slave_1: left promiscuous mode [ 365.577844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.578531][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.756878][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.771283][ T12] team0 (unregistering): Port device team_slave_0 removed [ 365.784102][ T5796] Bluetooth: hci2: command tx timeout [ 365.824353][T13166] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 365.824604][T13166] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 365.824853][T13166] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 365.825199][T13166] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 365.825492][T13166] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 365.849038][ T5500] 8021q: adding VLAN 0 to HW filter on device eth12 [ 365.895120][T13191] FAULT_INJECTION: forcing a failure. [ 365.895120][T13191] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.895141][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.1.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.895156][T13191] Tainted: [L]=SOFTLOCKUP [ 365.895160][T13191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.895167][T13191] Call Trace: [ 365.895171][T13191] [ 365.895176][T13191] dump_stack_lvl+0x100/0x190 [ 365.895196][T13191] should_fail_ex.cold+0x5/0xa [ 365.895214][T13191] get_futex_key+0x1c9/0x13e0 [ 365.895237][T13191] ? __pfx_get_futex_key+0x10/0x10 [ 365.895256][T13191] futex_wait_setup+0x91/0x540 [ 365.895272][T13191] __futex_wait+0x19f/0x360 [ 365.895285][T13191] ? __pfx___futex_wait+0x10/0x10 [ 365.895295][T13191] ? __pfx_try_to_wake_up+0x10/0x10 [ 365.895308][T13191] ? futex_hash+0x311/0x400 [ 365.895324][T13191] ? __pfx_futex_wake_mark+0x10/0x10 [ 365.895338][T13191] ? find_held_lock+0x2b/0x80 [ 365.895353][T13191] ? futex_wake+0x4ea/0x5e0 [ 365.895369][T13191] futex_wait+0xe6/0x370 [ 365.895380][T13191] ? __pfx_futex_wait+0x10/0x10 [ 365.895395][T13191] ? putname+0xb1/0x110 [ 365.895407][T13191] ? kmem_cache_free+0x127/0x6c0 [ 365.895421][T13191] ? do_sys_openat2+0x1ae/0x1d0 [ 365.895437][T13191] do_futex+0x265/0x440 [ 365.895452][T13191] ? __pfx_do_futex+0x10/0x10 [ 365.895468][T13191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 365.895483][T13191] __ia32_sys_futex_time32+0x2f4/0x470 [ 365.895502][T13191] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 365.895519][T13191] ? __might_fault+0xc5/0x140 [ 365.895535][T13191] __do_fast_syscall_32+0x14b/0x8c0 [ 365.895550][T13191] do_fast_syscall_32+0x32/0x70 [ 365.895562][T13191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.895576][T13191] RIP: 0023:0xf7f94fbc [ 365.895586][T13191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 365.895597][T13191] RSP: 002b:00000000f54045bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 365.895609][T13191] RAX: ffffffffffffffda RBX: 00000000f74550b8 RCX: 0000000000000080 [ 365.895615][T13191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74550bc [ 365.895622][T13191] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 365.895628][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.895634][T13191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.895648][T13191] [ 366.025685][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.025765][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.025827][T13130] bridge_slave_0: entered allmulticast mode [ 366.026649][T13130] bridge_slave_0: entered promiscuous mode [ 366.029875][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.030762][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.030821][T13130] bridge_slave_1: entered allmulticast mode [ 366.031749][T13130] bridge_slave_1: entered promiscuous mode [ 366.066831][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.069617][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.102425][T13130] team0: Port device team_slave_0 added [ 366.107477][T13130] team0: Port device team_slave_1 added [ 366.110496][T13166] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 366.113614][T13166] pl2303 ttyUSB0: error sending break = -32 [ 366.116688][ T64] usb 8-1: USB disconnect, device number 35 [ 366.122371][ T64] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 366.122682][ T64] pl2303 8-1:1.0: device disconnected [ 366.146247][T13130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.146259][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.146272][T13130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.149754][T13130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.149763][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.149776][T13130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.190327][ T5500] 8021q: adding VLAN 0 to HW filter on device eth14 [ 366.211728][T13130] hsr_slave_0: entered promiscuous mode [ 366.212247][T13130] hsr_slave_1: entered promiscuous mode [ 366.212583][T13130] debugfs: 'hsr0' already exists in 'hsr' [ 366.212594][T13130] Cannot create hsr debugfs directory [ 366.282732][T13207] FAULT_INJECTION: forcing a failure. [ 366.282732][T13207] name failslab, interval 1, probability 5, space 0, times 9973 [ 366.282765][T13207] CPU: 0 UID: 0 PID: 13207 Comm: syz.4.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.282793][T13207] Tainted: [L]=SOFTLOCKUP [ 366.282800][T13207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.282810][T13207] Call Trace: [ 366.282818][T13207] [ 366.282826][T13207] dump_stack_lvl+0x100/0x190 [ 366.282859][T13207] should_fail_ex.cold+0x5/0xa [ 366.282886][T13207] should_failslab+0xc2/0x120 [ 366.282900][T13207] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 366.282920][T13207] ? kstrdup_const+0x63/0x80 [ 366.282934][T13207] kstrdup+0x51/0xe0 [ 366.282946][T13207] kstrdup_const+0x63/0x80 [ 366.282958][T13207] __kernfs_new_node+0x9b/0xa10 [ 366.282975][T13207] ? lock_acquire+0x1d1/0x380 [ 366.282987][T13207] ? __pfx___kernfs_new_node+0x10/0x10 [ 366.283005][T13207] ? lock_acquire+0x1d1/0x380 [ 366.283015][T13207] ? kernfs_root+0x23/0x2a0 [ 366.283029][T13207] ? find_held_lock+0x2b/0x80 [ 366.283042][T13207] ? kernfs_root+0xee/0x2a0 [ 366.283055][T13207] ? kernfs_root+0xee/0x2a0 [ 366.283074][T13207] kernfs_new_node+0x194/0x200 [ 366.283092][T13207] ? __pfx_kernfs_new_node+0x10/0x10 [ 366.283109][T13207] ? kernfs_add_one+0x213/0xb40 [ 366.283126][T13207] __kernfs_create_file+0x53/0x350 [ 366.283140][T13207] cgroup_addrm_files+0x48e/0xd30 [ 366.283172][T13207] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 366.283204][T13207] ? css_next_descendant_pre+0x58/0x1a0 [ 366.283237][T13207] css_populate_dir+0x161/0x590 [ 366.283265][T13207] cgroup_apply_control_enable+0x441/0xdd0 [ 366.283316][T13207] cgroup_mkdir+0x9da/0x13a0 [ 366.283332][T13207] ? __pfx_cgroup_mkdir+0x10/0x10 [ 366.283346][T13207] kernfs_iop_mkdir+0x111/0x190 [ 366.283363][T13207] ? security_inode_mkdir+0xc9/0x2b0 [ 366.283381][T13207] vfs_mkdir+0x367/0x850 [ 366.283400][T13207] filename_mkdirat+0x48b/0x5e0 [ 366.283415][T13207] ? __pfx_filename_mkdirat+0x10/0x10 [ 366.283428][T13207] ? strncpy_from_user+0x19d/0x2d0 [ 366.283446][T13207] ? do_getname+0x191/0x390 [ 366.283462][T13207] __ia32_sys_mkdirat+0x88/0xc0 [ 366.283488][T13207] __do_fast_syscall_32+0x14b/0x8c0 [ 366.283505][T13207] do_fast_syscall_32+0x32/0x70 [ 366.283519][T13207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.283533][T13207] RIP: 0023:0xf7f46fbc [ 366.283543][T13207] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 366.283554][T13207] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 366.283564][T13207] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 366.283576][T13207] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 366.283582][T13207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.283588][T13207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 366.283594][T13207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.283609][T13207] [ 366.283875][T13207] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 366.403492][T13130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.407814][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.408404][T13130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.421358][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.421978][T13130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.430431][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.433776][T13130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.441225][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.504422][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.511629][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.521638][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.521687][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.531217][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.531267][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.654505][ T5796] Bluetooth: hci0: command tx timeout [ 366.738853][T13241] FAULT_INJECTION: forcing a failure. [ 366.738853][T13241] name failslab, interval 1, probability 5, space 0, times 9972 [ 366.738873][T13241] CPU: 2 UID: 0 PID: 13241 Comm: syz.4.2236 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.738887][T13241] Tainted: [L]=SOFTLOCKUP [ 366.738891][T13241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.738898][T13241] Call Trace: [ 366.738902][T13241] [ 366.738907][T13241] dump_stack_lvl+0x100/0x190 [ 366.738928][T13241] should_fail_ex.cold+0x5/0xa [ 366.738946][T13241] should_failslab+0xc2/0x120 [ 366.738959][T13241] __kmalloc_noprof+0xfc/0x840 [ 366.738975][T13241] ? rcu_is_watching+0x13/0xc0 [ 366.738990][T13241] ? tomoyo_realpath_from_path+0xb6/0x690 [ 366.739011][T13241] tomoyo_realpath_from_path+0xb6/0x690 [ 366.739036][T13241] tomoyo_check_open_permission+0x2af/0x3c0 [ 366.739051][T13241] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 366.739070][T13241] ? hook_file_open+0x245/0x8e0 [ 366.739100][T13241] tomoyo_file_open+0x6b/0x90 [ 366.739112][T13241] security_file_open+0xb5/0x1e0 [ 366.739128][T13241] do_dentry_open+0x552/0x1470 [ 366.739144][T13241] vfs_open_consume+0xcc/0x460 [ 366.739159][T13241] path_openat+0x1547/0x23f0 [ 366.739174][T13241] ? __pfx_path_openat+0x10/0x10 [ 366.739189][T13241] do_file_open+0x20e/0x430 [ 366.739202][T13241] ? __pfx_do_file_open+0x10/0x10 [ 366.739224][T13241] ? _raw_spin_unlock+0x28/0x50 [ 366.739241][T13241] ? alloc_fd+0x471/0x7a0 [ 366.739256][T13241] do_sys_openat2+0x163/0x1d0 [ 366.739270][T13241] ? __pfx_do_sys_openat2+0x10/0x10 [ 366.739285][T13241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 366.739301][T13241] __ia32_compat_sys_openat+0x12d/0x210 [ 366.739317][T13241] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 366.739337][T13241] __do_fast_syscall_32+0x14b/0x8c0 [ 366.739352][T13241] do_fast_syscall_32+0x32/0x70 [ 366.739365][T13241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.739379][T13241] RIP: 0023:0xf7f46fbc [ 366.739389][T13241] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 366.739399][T13241] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 366.739410][T13241] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 366.739416][T13241] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.739423][T13241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.739429][T13241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 366.739435][T13241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.739449][T13241] [ 366.739453][T13241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.808698][T13130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.946562][T13130] veth0_vlan: entered promiscuous mode [ 366.950365][T13130] veth1_vlan: entered promiscuous mode [ 366.964238][T13130] veth0_macvtap: entered promiscuous mode [ 366.966629][T13130] veth1_macvtap: entered promiscuous mode [ 366.973305][T13130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.980110][T13130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.024532][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.024748][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.024858][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.038134][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.038148][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.050707][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.050719][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.054776][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.176387][T13262] FAULT_INJECTION: forcing a failure. [ 367.176387][T13262] name failslab, interval 1, probability 5, space 0, times 9971 [ 367.176408][T13262] CPU: 3 UID: 0 PID: 13262 Comm: syz.6.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.176424][T13262] Tainted: [L]=SOFTLOCKUP [ 367.176429][T13262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.176436][T13262] Call Trace: [ 367.176441][T13262] [ 367.176446][T13262] dump_stack_lvl+0x100/0x190 [ 367.176492][T13262] should_fail_ex.cold+0x5/0xa [ 367.176510][T13262] should_failslab+0xc2/0x120 [ 367.176524][T13262] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 367.176543][T13262] ? kstrdup_const+0x63/0x80 [ 367.176558][T13262] kstrdup+0x51/0xe0 [ 367.176572][T13262] kstrdup_const+0x63/0x80 [ 367.176583][T13262] __kernfs_new_node+0x9b/0xa10 [ 367.176599][T13262] ? lock_acquire+0x1d1/0x380 [ 367.176613][T13262] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.176630][T13262] ? lock_acquire+0x1d1/0x380 [ 367.176640][T13262] ? kernfs_root+0x23/0x2a0 [ 367.176654][T13262] ? find_held_lock+0x2b/0x80 [ 367.176668][T13262] ? kernfs_root+0xee/0x2a0 [ 367.176681][T13262] ? kernfs_root+0xee/0x2a0 [ 367.176698][T13262] kernfs_new_node+0x194/0x200 [ 367.176714][T13262] ? __pfx_kernfs_new_node+0x10/0x10 [ 367.176730][T13262] ? kernfs_add_one+0x213/0xb40 [ 367.176748][T13262] __kernfs_create_file+0x53/0x350 [ 367.176761][T13262] cgroup_addrm_files+0x48e/0xd30 [ 367.176782][T13262] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 367.176801][T13262] ? css_next_descendant_pre+0x58/0x1a0 [ 367.176820][T13262] css_populate_dir+0x161/0x590 [ 367.176836][T13262] cgroup_apply_control_enable+0x441/0xdd0 [ 367.176858][T13262] cgroup_mkdir+0x9da/0x13a0 [ 367.176873][T13262] ? __pfx_cgroup_mkdir+0x10/0x10 [ 367.176885][T13262] kernfs_iop_mkdir+0x111/0x190 [ 367.176900][T13262] ? security_inode_mkdir+0xc9/0x2b0 [ 367.176917][T13262] vfs_mkdir+0x367/0x850 [ 367.176934][T13262] filename_mkdirat+0x48b/0x5e0 [ 367.176948][T13262] ? __pfx_filename_mkdirat+0x10/0x10 [ 367.176961][T13262] ? strncpy_from_user+0x19d/0x2d0 [ 367.176979][T13262] ? do_getname+0x191/0x390 [ 367.176995][T13262] __ia32_sys_mkdirat+0x88/0xc0 [ 367.177014][T13262] __do_fast_syscall_32+0x14b/0x8c0 [ 367.177032][T13262] do_fast_syscall_32+0x32/0x70 [ 367.177045][T13262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.177060][T13262] RIP: 0023:0xf7f94fbc [ 367.177070][T13262] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 367.177082][T13262] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 367.177094][T13262] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 367.177102][T13262] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 367.177109][T13262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.177115][T13262] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 367.177121][T13262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.177136][T13262] [ 367.177140][T13262] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 367.271455][T13265] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.391720][T13275] bridge0: port 1(batadv_slave_0) entered disabled state [ 367.686000][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 367.874902][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 368.038726][T13336] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.052161][T13343] netlink: 'syz.4.2271': attribute type 12 has an invalid length. [ 368.703433][T13385] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.728470][T13391] netlink: 'syz.3.2291': attribute type 12 has an invalid length. [ 368.734203][ T5796] Bluetooth: hci0: command tx timeout [ 369.010104][T13403] netlink: 'syz.4.2297': attribute type 4 has an invalid length. [ 369.016024][T13403] netlink: 'syz.4.2297': attribute type 4 has an invalid length. [ 369.317502][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 369.351223][T13420] evm: overlay not supported [ 369.597102][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 369.904158][ T50] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 370.077633][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 370.077671][ T50] usb 6-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 370.078499][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.080911][ T50] usb 6-1: string descriptor 0 read error: -22 [ 370.080969][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.814211][ T5796] Bluetooth: hci0: command tx timeout [ 370.897267][ T50] usb 6-1: USB disconnect, device number 20 [ 371.252376][ T9] sony 0005:054C:03D5.0007: UNIQ does not contain a MAC address; duplicate check skipped [ 371.286393][ T9] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0007/input/input88 [ 371.323565][ T9] sony 0005:054C:03D5.0007: input,hidraw1: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 371.381573][T13470] fido_id[13470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.734561][T12423] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 371.875314][ T50] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 371.884785][T12423] usb 11-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 371.886093][T12423] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.886111][T12423] usb 11-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 371.886152][T12423] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.887928][T12423] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.887945][T12423] usb 11-1: Product: syz [ 371.887957][T12423] usb 11-1: Manufacturer: syz [ 371.887967][T12423] usb 11-1: SerialNumber: syz [ 372.055272][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 372.055741][ T50] usb 9-1: New USB device found: idVendor=258a, idProduct=6a88, bcdDevice=0.00 [ 372.056590][ T50] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.056604][ T50] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.056617][ T50] usb 9-1: config 0 interface 0 has no altsetting 0 [ 372.056632][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.057826][ T50] usb 9-1: config 0 descriptor?? [ 372.114294][T12423] usb 11-1: 0:2 : does not exist [ 372.164771][T12423] usb 11-1: USB disconnect, device number 2 [ 372.192113][T12117] udevd[12117]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.465872][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465890][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465902][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465913][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465925][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465936][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465947][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465958][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465969][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465980][ T50] itetech 0003:258A:6A88.0008: unknown main item tag 0x0 [ 372.465995][ T50] itetech 0003:258A:6A88.0008: unbalanced collection at end of report description [ 372.466276][ T50] itetech 0003:258A:6A88.0008: probe with driver itetech failed with error -22 [ 372.671093][ T5890] usb 9-1: USB disconnect, device number 29 [ 372.804283][ T50] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 372.894307][ T5796] Bluetooth: hci0: command tx timeout [ 372.954551][ T50] usb 6-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 372.955632][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.955649][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17008, setting to 1024 [ 372.955668][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.959622][ T50] usb 6-1: config 0 descriptor?? [ 373.391553][ T50] playstation 0003:054C:0DF2.0009: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 373.448015][T13528] FAULT_INJECTION: forcing a failure. [ 373.448015][T13528] name failslab, interval 1, probability 5, space 0, times 9970 [ 373.448044][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.4.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.448075][T13528] Tainted: [L]=SOFTLOCKUP [ 373.448082][T13528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 373.448093][T13528] Call Trace: [ 373.448100][T13528] [ 373.448108][T13528] dump_stack_lvl+0x100/0x190 [ 373.448141][T13528] should_fail_ex.cold+0x5/0xa [ 373.448169][T13528] should_failslab+0xc2/0x120 [ 373.448192][T13528] kmem_cache_alloc_noprof+0x92/0x6a0 [ 373.448220][T13528] ? __kernfs_new_node+0xd2/0xa10 [ 373.448251][T13528] __kernfs_new_node+0xd2/0xa10 [ 373.448281][T13528] ? __pfx___kernfs_new_node+0x10/0x10 [ 373.448309][T13528] ? lock_acquire+0x1d1/0x380 [ 373.448328][T13528] ? kernfs_root+0x23/0x2a0 [ 373.448351][T13528] ? find_held_lock+0x2b/0x80 [ 373.448374][T13528] ? kernfs_root+0xee/0x2a0 [ 373.448395][T13528] ? kernfs_root+0xee/0x2a0 [ 373.448449][T13528] kernfs_new_node+0x194/0x200 [ 373.448480][T13528] ? __pfx_kernfs_new_node+0x10/0x10 [ 373.448507][T13528] ? kernfs_add_one+0x213/0xb40 [ 373.448537][T13528] __kernfs_create_file+0x53/0x350 [ 373.448560][T13528] sysfs_add_file_mode_ns+0x207/0x3c0 [ 373.448590][T13528] internal_create_group+0x593/0xfb0 [ 373.448621][T13528] ? __pfx_internal_create_group+0x10/0x10 [ 373.448644][T13528] ? driver_probe_device+0x4a/0x140 [ 373.448702][T13528] ? __driver_attach+0x231/0x5b0 [ 373.448724][T13528] ? bus_for_each_dev+0x13e/0x1d0 [ 373.448743][T13528] ? driver_register+0x1e2/0x360 [ 373.448778][T13528] netdev_queue_update_kobjects+0x17a/0x6f0 [ 373.448810][T13528] netdev_register_kobject+0x2e9/0x410 [ 373.448832][T13528] register_netdevice+0x1313/0x26b0 [ 373.448853][T13528] ? __pfx_register_netdevice+0x10/0x10 [ 373.448877][T13528] register_netdev+0x34/0x50 [ 373.448899][T13528] gether_register_netdev+0x93/0x130 [ 373.448947][T13528] ecm_bind+0x848/0xc00 [ 373.448968][T13528] ? __pfx_ecm_bind+0x10/0x10 [ 373.448987][T13528] usb_add_function+0x219/0x890 [ 373.449027][T13528] configfs_composite_bind+0xd83/0x1960 [ 373.449087][T13528] gadget_bind_driver+0x28c/0xbf0 [ 373.449110][T13528] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 373.449140][T13528] ? __pfx_gadget_bind_driver+0x10/0x10 [ 373.449162][T13528] really_probe+0x241/0xa60 [ 373.449190][T13528] __driver_probe_device+0x210/0x460 [ 373.449213][T13528] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 373.449245][T13528] driver_probe_device+0x4a/0x140 [ 373.449269][T13528] __driver_attach+0x231/0x5b0 [ 373.449292][T13528] ? __pfx___driver_attach+0x10/0x10 [ 373.449316][T13528] bus_for_each_dev+0x13e/0x1d0 [ 373.449336][T13528] ? __pfx_bus_for_each_dev+0x10/0x10 [ 373.449352][T13528] ? bus_add_driver+0x306/0x620 [ 373.449380][T13528] bus_add_driver+0x4bf/0x620 [ 373.449404][T13528] driver_register+0x1e2/0x360 [ 373.449432][T13528] usb_gadget_register_driver_owner+0x132/0x210 [ 373.449453][T13528] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 373.449481][T13528] configfs_write_iter+0x302/0x4e0 [ 373.449511][T13528] vfs_write+0x6af/0x1050 [ 373.449530][T13528] ? __pfx_configfs_write_iter+0x10/0x10 [ 373.449556][T13528] ? __pfx_vfs_write+0x10/0x10 [ 373.449573][T13528] ? find_held_lock+0x2b/0x80 [ 373.449617][T13528] ksys_write+0x12a/0x250 [ 373.449636][T13528] ? __pfx_ksys_write+0x10/0x10 [ 373.449662][T13528] __do_fast_syscall_32+0x14b/0x8c0 [ 373.449679][T13528] do_fast_syscall_32+0x32/0x70 [ 373.449698][T13528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.449720][T13528] RIP: 0023:0xf7f46fbc [ 373.449736][T13528] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 373.449752][T13528] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 373.449770][T13528] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 373.449781][T13528] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 373.449792][T13528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.449803][T13528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 373.449815][T13528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.449843][T13528] [ 373.477023][T13528] udc dummy_udc.0: failed to start g1: -12 [ 373.477039][T13528] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 373.487390][T13528] UDC core: g1: couldn't find an available UDC or it's busy [ 373.569267][ T50] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -32 [ 373.569283][ T50] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -32 [ 373.569306][ T50] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 373.569314][ T50] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 373.573250][ T50] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -32 [ 373.579364][ T50] usb 6-1: USB disconnect, device number 21 [ 373.774108][T12423] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 373.924604][T12423] usb 11-1: New USB device found: idVendor=06cb, idProduct=2968, bcdDevice=0.00 [ 373.925473][T12423] usb 11-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 373.925490][T12423] usb 11-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.925502][T12423] usb 11-1: config 0 interface 0 has no altsetting 0 [ 373.925517][T12423] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.930071][T12423] usb 11-1: config 0 descriptor?? [ 373.959026][T13541] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.358322][T12423] itetech 0003:06CB:2968.000A: collection stack underflow [ 374.358339][T12423] itetech 0003:06CB:2968.000A: item 0 2 0 12 parsing failed [ 374.358684][T12423] itetech 0003:06CB:2968.000A: probe with driver itetech failed with error -22 [ 374.483195][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 374.539811][T13306] usb 11-1: USB disconnect, device number 3 [ 374.824190][ T5890] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 374.975155][ T5890] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=1.00 [ 374.978271][ T5890] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.982549][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.982567][ T5890] usb 8-1: Product: syz [ 374.982578][ T5890] usb 8-1: Manufacturer: syz [ 374.982589][ T5890] usb 8-1: SerialNumber: syz [ 374.989221][ T5890] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 374.989236][ T5890] cdc_wdm 8-1:1.0: Unknown control protocol [ 375.163975][T13561] ------------[ cut here ]------------ [ 375.163986][T13561] kernel BUG at net/core/dev.c:11605! [ 375.164002][T13561] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.169669][T13561] CPU: 2 UID: 0 PID: 13561 Comm: syz.1.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.174702][T13561] Tainted: [L]=SOFTLOCKUP [ 375.176028][T13561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 375.179124][T13561] RIP: 0010:register_netdevice+0xace/0x26b0 [ 375.180887][T13561] Code: 0f 0b e8 b5 1c 54 f8 48 8d 3d 7e cb bf 08 ba 50 2d 00 00 48 c7 c6 80 87 5c 8d 67 48 0f b9 3a e9 0a f6 ff ff e8 93 1c 54 f8 90 <0f> 0b e8 8b 1c 54 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 79 [ 375.186627][T13561] RSP: 0018:ffffc90006647778 EFLAGS: 00010283 [ 375.188541][T13561] RAX: 0000000000000919 RBX: 1ffff92000cc8ef8 RCX: ffffc90026371000 [ 375.190990][T13561] RDX: 0000000000080000 RSI: ffffffff89b9a42d RDI: 0000000000000001 [ 375.193425][T13561] RBP: ffff88806ba4c000 R08: 0000000000000000 R09: 0000000000000003 [ 375.195908][T13561] R10: ffffffff91f31dc7 R11: 0000000000000000 R12: 0000000000000003 [ 375.198368][T13561] R13: ffff88806ba4cf50 R14: ffff88806ba4d089 R15: ffff8880621af0bc [ 375.200832][T13561] FS: 0000000000000000(0000) GS:ffff888095483000(0063) knlGS:00000000f5446b40 [ 375.203556][T13561] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 375.205502][T13561] CR2: 000000002dd12ff8 CR3: 0000000062091000 CR4: 0000000000352ef0 [ 375.207813][T13561] Call Trace: [ 375.208891][T13561] [ 375.209841][T13561] ? __pfx_register_netdevice+0x10/0x10 [ 375.211581][T13561] register_netdev+0x34/0x50 [ 375.213013][T13561] gether_register_netdev+0x93/0x130 [ 375.214495][T13561] ecm_bind+0x848/0xc00 [ 375.215792][T13561] ? rcu_is_watching+0x13/0xc0 [ 375.217337][T13561] ? __pfx_ecm_bind+0x10/0x10 [ 375.218807][T13561] usb_add_function+0x219/0x890 [ 375.220335][T13561] ? composite_dev_prepare+0x231/0x420 [ 375.222064][T13561] configfs_composite_bind+0xd83/0x1960 [ 375.223741][T13561] gadget_bind_driver+0x28c/0xbf0 [ 375.225260][T13561] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 375.227009][T13561] ? __pfx_gadget_bind_driver+0x10/0x10 [ 375.228760][T13561] really_probe+0x241/0xa60 [ 375.230199][T13561] __driver_probe_device+0x210/0x460 [ 375.231852][T13561] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.233685][T13561] driver_probe_device+0x4a/0x140 [ 375.235285][T13561] __driver_attach+0x231/0x5b0 [ 375.236798][T13561] ? __pfx___driver_attach+0x10/0x10 [ 375.238448][T13561] bus_for_each_dev+0x13e/0x1d0 [ 375.239976][T13561] ? __pfx_bus_for_each_dev+0x10/0x10 [ 375.241651][T13561] ? bus_add_driver+0x306/0x620 [ 375.243168][T13561] bus_add_driver+0x4bf/0x620 [ 375.244619][T13561] driver_register+0x1e2/0x360 [ 375.246116][T13561] usb_gadget_register_driver_owner+0x132/0x210 [ 375.248077][T13561] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 375.249845][T13561] configfs_write_iter+0x302/0x4e0 [ 375.251452][T13561] vfs_write+0x6af/0x1050 [ 375.252801][T13561] ? __pfx_configfs_write_iter+0x10/0x10 [ 375.254529][T13561] ? __pfx_vfs_write+0x10/0x10 [ 375.256004][T13561] ? find_held_lock+0x2b/0x80 [ 375.257443][T13561] ksys_write+0x12a/0x250 [ 375.258798][T13561] ? __pfx_ksys_write+0x10/0x10 [ 375.260322][T13561] __do_fast_syscall_32+0x14b/0x8c0 [ 375.261953][T13561] do_fast_syscall_32+0x32/0x70 [ 375.263448][T13561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.265375][T13561] RIP: 0023:0xf7f94fbc [ 375.266648][T13561] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 375.272545][T13561] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 375.275047][T13561] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 375.277482][T13561] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 375.279933][T13561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.282333][T13561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 375.284771][T13561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.287166][T13561] [ 375.288148][T13561] Modules linked in: [ 375.289588][T13561] ---[ end trace 0000000000000000 ]--- [ 375.324494][T13561] RIP: 0010:register_netdevice+0xace/0x26b0 [ 375.324523][T13561] Code: 0f 0b e8 b5 1c 54 f8 48 8d 3d 7e cb bf 08 ba 50 2d 00 00 48 c7 c6 80 87 5c 8d 67 48 0f b9 3a e9 0a f6 ff ff e8 93 1c 54 f8 90 <0f> 0b e8 8b 1c 54 f8 90 0f 0b 48 8b 5c 24 18 48 8b 6c 24 20 e8 79 [ 375.324535][T13561] RSP: 0018:ffffc90006647778 EFLAGS: 00010283 [ 375.324546][T13561] RAX: 0000000000000919 RBX: 1ffff92000cc8ef8 RCX: ffffc90026371000 [ 375.324554][T13561] RDX: 0000000000080000 RSI: ffffffff89b9a42d RDI: 0000000000000001 [ 375.324561][T13561] RBP: ffff88806ba4c000 R08: 0000000000000000 R09: 0000000000000003 [ 375.324569][T13561] R10: ffffffff91f31dc7 R11: 0000000000000000 R12: 0000000000000003 [ 375.324576][T13561] R13: ffff88806ba4cf50 R14: ffff88806ba4d089 R15: ffff8880621af0bc [ 375.324583][T13561] FS: 0000000000000000(0000) GS:ffff888095483000(0063) knlGS:00000000f5446b40 [ 375.324608][T13561] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 375.324617][T13561] CR2: 000000002e323ffc CR3: 0000000062091000 CR4: 0000000000352ef0 [ 375.324626][T13561] Kernel panic - not syncing: Fatal exception [ 375.354815][T13561] Kernel Offset: disabled [ 375.356107][T13561] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:05:14 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=1ffff92001931ee0 RCX=ffffc900047a9000 RDX=1ffff92001931f1c RSI=ffffffff89b232f0 RDI=0000000000000001 RBP=ffffc9000c98f8e0 RSP=ffffc9000c98f6f8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000c98f8d0 R11=0000000000000000 R12=ffffc9000c98f8d0 R13=ffffc9000c98fd40 R14=ffff8880246a6600 R15=ffff8880246a6600 RIP=ffffffff820dc0c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095283000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5424ff4 CR3=000000006c7ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df72580 RSI=ffffffff81b80e9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802af243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b80e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095383000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080007100 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c034f5 RDI=ffffffff9cf36f60 RBP=ffffffff9cf36f20 RSP=ffffc90006646f18 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=000000003a555043 R12=0000000000000000 R13=0000000000000020 R14=000000000000000f R15=ffffc90006647230 RIP=ffffffff85c0351f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095483000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002dd12ff8 CR3=0000000062091000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=ffffc900076878f8 RCX=ffffffff826ad4c1 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90007687730 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900076876d7 R11=ffffffff829077b0 R12=ffff888014b7a4c0 R13=ffffc90007687950 R14=0000000000000001 R15=ffffea000184f380 RIP=ffffffff820db958 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095583000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080465000 CR3=000000006bee6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000