last executing test programs: 18.845563057s ago: executing program 0 (id=334): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000002ac0)={&(0x7f0000002b40)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xa6fe, 0x400, 0x3, 0x200404e}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000031e40)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000031f40)=0xe4) setreuid(0x0, r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000031f80), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000031fc0)='./file0\x00', &(0x7f0000032000), 0x0, &(0x7f0000032040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000320c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000034100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000034180)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r9, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000034240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000342c0)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffff8, 0x0, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x1101, r9, r10, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000034480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004d00)="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", 0x2000, &(0x7f0000034640)={&(0x7f0000006d00)={0x50, 0x0, 0x4, {0x7, 0x2d, 0x6, 0x0, 0x90, 0x1000, 0xfff, 0x4, 0x0, 0x0, 0x40, 0x7}}, &(0x7f0000006d80)={0x18, 0xffffffffffffffda, 0x6, {0x6}}, &(0x7f0000006dc0)={0x18, 0x0, 0x3, {0x7}}, &(0x7f0000006e00)={0x18, 0xffffffffffffffda, 0x1, {0x2}}, &(0x7f0000006e40)={0x18, 0xffffffffffffffda, 0x0, {0xfffffffb}}, &(0x7f0000006e80)={0x28, 0x0, 0x7, {{0x2a, 0x101, 0x1}}}, &(0x7f0000006ec0)={0x60, 0x0, 0xe0, {{0x3, 0x6, 0x8000000000000001, 0x100000001, 0x3, 0x9, 0x9, 0xc}}}, &(0x7f0000006f40)={0x18, 0x0, 0x3, {0x2}}, &(0x7f0000006f80)=ANY=[@ANYBLOB="1700574e4008d7a2108bb2a79e000000000000f7ffffff"], &(0x7f0000006fc0)={0x20, 0x0, 0xffffffffffffff0d, {0x0, 0x2}}, &(0x7f000000d440)={0x78, 0x0, 0x2, {0x5, 0x6, 0x0, {0x6, 0x7fffffff, 0x71c0, 0x8000000000000001, 0x43, 0x2, 0x4, 0x2, 0x7, 0xc000, 0x4, 0x0, 0x0, 0x8, 0x8}}}, &(0x7f00000158c0)={0x90, 0x0, 0x10, {0x1, 0x1, 0x1, 0x0, 0x9, 0x0, {0x5, 0x8001, 0xb, 0x5, 0x10001, 0x6, 0x3, 0x8, 0x834, 0x9000, 0x6, 0x0, 0x0, 0x6, 0x4}}}, &(0x7f0000015980)={0xe8, 0x0, 0x0, [{0x3, 0x9ce, 0x0, 0x10001}, {0x1, 0x3, 0x8, 0x9, 'rootmode'}, {0x0, 0x401, 0x8, 0x0, 'rootmode'}, {0x5, 0xffffffff, 0x8, 0x8c09, '\'!(.)!\\\x00'}, {0x1, 0xffffffff00000001, 0x3, 0x0, '$*)'}, {0x3, 0x0, 0x1, 0x1, '\\'}, {0x0, 0x5, 0x8, 0x8, '#,,[u},,'}]}, &(0x7f0000031580)={0x650, 0x0, 0x4, [{{0x2, 0x0, 0x9, 0x2e, 0x9, 0xff73, {0x6, 0x2, 0xa, 0x8, 0x3, 0x8, 0xffffff53, 0xfffffff7, 0x8, 0x4000, 0x413e00d2, 0x0, 0x0, 0x0, 0x200}}, {0x1, 0xa6f2, 0xa, 0x4, '/dev/fuse\x00'}}, {{0x5, 0x0, 0x0, 0xfffffffffffffff8, 0xffffffff, 0x4ad1, {0x1, 0xfff, 0x1, 0x800000000, 0x0, 0x1ff, 0x3, 0x80, 0x3ff, 0xa000, 0x101, 0x0, 0x0, 0x10000, 0x3}}, {0x2, 0x0, 0x0, 0xdfb5}}, {{0x5, 0x0, 0xc, 0x5, 0x7, 0x0, {0x1, 0x0, 0x5, 0x10, 0x1, 0x836c, 0x7f, 0x0, 0xe1a, 0xa000, 0x4, 0x0, 0x0, 0x3, 0x503e}}, {0x6, 0x3, 0x7, 0x5, '-/..&u-'}}, {{0x5, 0x1, 0x1, 0x3, 0x70, 0x9, {0x5, 0x8, 0xfff, 0x6, 0x2, 0x0, 0x81, 0xe, 0x81, 0x8000, 0x4, 0x0, 0x0, 0x3, 0x401}}, {0x3, 0x0, 0x6, 0x9, 'wlan1\x00'}}, {{0x0, 0x3, 0x7, 0x200, 0x9, 0x2, {0x6, 0x9, 0x7, 0x5, 0x401, 0x9, 0x0, 0x4, 0x48000000, 0x2000, 0x4, 0xee01, 0x0, 0x8, 0x4}}, {0x5, 0x5, 0x2, 0x9, '{Y'}}, {{0x2, 0x2, 0x740, 0x8, 0xee1, 0x5, {0x4, 0x2, 0x1, 0xb84, 0x2, 0x5, 0x101, 0x8, 0xe, 0x1000, 0x1, 0x0, 0x0, 0xe, 0x400}}, {0x6, 0x7, 0x1, 0x9, '\x00'}}, {{0x0, 0x0, 0x6, 0xa0, 0xfffff75e, 0xffffffff, {0x2, 0x1, 0x6, 0x0, 0x8, 0x6, 0x930, 0x4, 0x9, 0x6000, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x500}}, {0x5, 0x80000001, 0x7, 0x6, 'user_id'}}, {{0x6, 0x3, 0x2, 0x80000000, 0xe4, 0x7, {0x3, 0x71, 0x4, 0x140, 0x3, 0x800, 0x0, 0x7fff, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x6, 0x8000000000000000, 0x8, 0xffffffff, 'group_id'}}, {{0x4, 0x2, 0x2, 0x1ff, 0x3, 0x908d, {0x5, 0x2, 0x81, 0x6, 0x8, 0x1, 0x2, 0x2, 0xf, 0x1000, 0x6, 0x0, 0x0, 0x0, 0xf}}, {0x4, 0x8, 0x8, 0x5, 'nl80211\x00'}}, {{0x4, 0x3, 0x7f, 0x7fff, 0x3, 0xac, {0x0, 0x2, 0x1, 0xfffffffffffffff9, 0xffff, 0xda37, 0xfffffffa, 0x0, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x9, 0x8}}, {0x0, 0xfffffffffffffffb, 0x1, 0x7, '\x00'}}]}, &(0x7f0000034380)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x5, 0x2, 0x5, 0x6, {0x2, 0xf4b, 0x2, 0x1, 0x4, 0x4, 0x1, 0x5, 0x1, 0x4000, 0xe, r7, r10, 0x1, 0x4e}}, {0x0, 0x1}}}, &(0x7f0000034440)={0x20, 0x0, 0xce, {0x401, 0x0, 0x9, 0x4}}, &(0x7f0000034500)={0x130, 0xfffffffffffffffe, 0x5, {0xe54, 0x2, 0x0, '\x00', {0x10000, 0x7ff, 0x2, 0x6, 0xffffffffffffffff, r11, 0x2000, '\x00', 0x3, 0x2, 0x92, 0xe, {0x4, 0x5}, {0x9, 0x4}, {0x7fffffff, 0x7}, {0x4}, 0xacad, 0xff, 0x6, 0x4}}}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002bc0)="308f4f94771584351b85c5532a9cb3f13986e87863cfd608f17cb38bfda319b1b6d9db268133fddb02793b3a1b7181dc6313dc41ecafbf1ea3019af5ba74c41b3541d155925411d9cb3b4f2d7ef7c0c0a388f683aefdd9cc0c02cd972c6c47ce2751d7a1b6934222cb3096aabe72040ee4133e86c0217bdeedf7f8579e7026eba71d2bd71cad8e39e9c27dae9d321037e38158ac3bc8efddd849a3ecd08d51a09e670f0e7fd2246c268f23192ff644711e285eb6a0651797189819bd1e7d53c12f1d3da1249901cb1f7eb2078555a4537658cb0ea50b7da2bfffd71e3e476fd61a341ae840b184e2f0010f3a306ea794392992c2dc2eabb74eff7c97831b1241ff7e31e37898bbdc99362c73da8d1f215434ca06420ea62fb997f8a67bb02f1139ac96e04bbe07628156f37d94777b3402e46189855ae041e716a0cd828533972db242ebbb1b6dc7dc39ddcc8d869a3bf4c341329cf806cb22d31953f5184f1f23d67381ea29b23ed37d2318bd92b525be93d275e09b9fb5856aab08d9cb87e858673025a4cfcf534cf2becca10e2334d1051dda98f9f63ab2093559ba2d6778d4f502bb51e5a73841fa436cef7fd217b3767cf9e09d01a6887a15f73d6296771119262b319d4e4291325461fff02678d8bc169a47820111c3ca3fdb5d2bd45d6629728e999374b312cb81bdb9d4c53b0cb2a442b987a968f78e3387796fc1016f67b8250fc8c98adeaac1f44da1d35faaa50b9329ec998f5e0ec2ba75f8c44ab8ffc944c0c6473f25c2f05ee289089317b06f2704d00af5ef3efde2fe9ff0933f14fad803e923d207e24a0d999bc5e34b1c1c292cd2a8278346cbf3c8f826cbcb4457b947212e2150e82743f0a90989a50b4ed751c131a3ba860921bcd7446bff9ab953a9de76a22fc0a5c6795ba7eafb35a91dd464ee7354e6e8784166295976a25aaf2eaad3c2750137b3507aee0a01cb79b0b92ab1b33b0e916fd8364dfa688b17328c23bfcdd61f24d36942707a8a4fa0e74cad7c3b3a898af2d225dbce9604933248d6bbebd34178dd0e6e63b8debed6ad5688704cfdb6b8514b0a7463a21cc02315def4d0f81aa7627ebde1e02acd1e598a265fe122f868e072a163037de847302d2ab8b80d10154810194b3ba3830e6e4f3d68063ffde12fa6515f23c83299afd889b3fbf6ff782e51a5342abcd1d6d707aea071d18479cd28abdcc4617d0094c1e7af425dafb9a580e71a7aff964b9ac8ed50e7b9498ea3f420ba43353ceb9a965824b3faad049d98370b465061243fae891f5eb9cf8e284cadf3d49c3e216438422bcaad32b275ffdba21e1cb8d4f7a83576f5968e552dcca09a11e1744c63d96b6884315e274f028e5c0c8d3b00f8ce2cd844388127fe9ef02ac9e2bb7544b61c00c82ef8552b01f55aadd3b3de2c2c3e106ef4099a320b76e637ade07a2792fdc0b1464022a7d11d2228d91f15a1c017847c4a0d12e5c51434f2fa50f94ff6d969f013765a67d0991a3cbf93828eb32e3c7c824dec7374e576b1651511a702c3f07ad2c0ba9a046b8d6cd56c74523682f1aa892986f29e13a7a49175f6e59fd0387f1b9279c76ffc0b87696d112a815a770d50206a2e9d4532d37ac9da0b600f2d75a9aaa7702cfcb4d2f4a463f06ba14d13f1f890033d89ca4a5b4b392828d25b274003dd27c311903ef1b8674d37e169af1078257b6d25a76d6374711c18d656c6ddbed246d6d629401d304c9d240b0f230b3a80e42646f95ba6468faad645cf0805de47a05a45db26ff8bd949a8a49055ae167196922b4fd0502e630dd6ff0186702bbdebadf981e7022691335144b1fcc0d8b0fade1f178bb3f052a2c480e55b9b6fe17b27368ebf429a3745fd7314a3799e692c8cac67b04053c5cb656e190fbdfb2afbe1d79d546f3bc268307210ee318b1205a579cf308995908a302b52eac5318c04af7ff3d172b0ce810cffb15b778472eb68d3ff886fb09d3e553912851e66687b48e881d55689382a48c8166c738ad94ec28c1f7c048d543c791e9c43136a26e2a871b3871c312240d6c9432cacbad105d3a0d5f2bcf24d2835e624c65fca1da66388a0a603ae0e3a0969bd100f6c61c766901a5f7d08cae2f648be0ad00fd7191b318d4abccb863e33f5a389d89306934e4d1a786420ef118bd46f3d87618b707234496b8825250b424cf49714c5598a8c480b625c4f8a6a9fbac9e25ae827b2883a2ba4c7b4e920cf9dc51edcc26d7f6c5200717bb7deee62fe3c439ccfca6b22e6593a631f7ff20975dd0e19582d3571c80e4b34ea625566f124562e5332e323c7a1a8509e3650a2b5a79df7d7165219e471ee226bffc55a75efc5d2d2eb4384820fbf1cf23f506d91b595d20ad9dc61be99e6ea68303aee3943e82c2d25deba50f9f5e979e08bbf6bc9266d9a5cc5f5501645fc1217c1110f495fbf25814102de273f5fcd1cce82acf474e7caf8baec955b1a6fdeba6e4937df67bab7dd8ec31a630f04e1f93684435caf02611214a2e57ce895f6f3af108e1de38db5bbcaa4df8c0c31cb6e26f3f5837fb5acddf99619a1addffa413ee29913d255e70b2f60b6882892a9ecaf76aeddd41cdacc4df88295d2eb565fbf659fa5cafc2463c8c54878fffc54008693f253eb590d665c9671b7a969c72d56f10bfb4d3ad644db2ff2b01172c51db49917ede52edf4e11023a525599a241fad18710430cd9533e88a8a3b3885ab1fd396f1969633bfe77efeb325013e2bda4bf87a17290fd06bbb3ff120922acd161acfe2774733f33ca578981828a790311b611558e58fa9f0b44e92288f5cb9324c0c26ac1e33210e914026797f0fd0b7207953112da4f4541a36d6ab2a3a80903375fa352f19306a01be396679c581d72542087701a2943bb86556c991ab736ca7954bbc99d5ebb8e6a7ad148fe7ef4a30d17bce34ad252408236c0a55cee344ba79fa9233fb7ae72c07b1505305d8ce2f834b9aee3f4f3e77f86cc529d729592b509287d5e03b8b215e0c0dd20ec668c5b022fda4de57ed890e0dd3fcf8fd370a2e6a210139361d0233a550c60fd30bc6f62f948cd5691d64b2ddf1a0a82c3109896a5ed057a59bf9089191f6b664913fb75b2b5392da6205e4926967092d4c71a9c95bacbbe327783c24a47f385023752d05556c7a6225692f931d121c1caa6c75dae4d656e4cb8f0b6d745f3f590ee9ab0883d93ce76956c24c1838a2f4e7903bc2a041db42ba7ff3c54541ad4e2f83c7b47d07f1672c0f014d87fe17de3dcde1e47f50a76ef390c9d9b69ab317948dac2b47aef1fa0bd6c92ba31151b4c774f018ca3ad428d3fd6dd503084165d7e82860763db1c45728c238a19e62a93102655e4bc10f60996cdfc6e62489021a521d2edb63319cd5d91a2ecf2a98e125a82df82e5872adf15f2328dbd3a10cdb509b6b8f8f81fc2c286ac62e8b64daca66b4d36152399a38a59e100cb70694228b03d60a21269421f07088815736ceddc054e610bc3a08a3c9215f3905e9de9c5d216ead0910f99616a33d4bd0d11399b4e3fb5843515b72591e44fcb7462bc9b2dd8a0bb26b8add560946a609fa5f2c95db31aec78924665819f75d56547d40d00a42fbb01236fdfa612467601eb358ef664efbb10b2e1c949729763f8e58f99ee33ac9fefa98234232e2590343f563a0b458497adff08b4bfd42aaa2e218e540c811467f2f28430ac408ff4d88e1a94dd26d8f8f7e1bc6055228b2772049ce830adc5fee653b28fec3a9588197f5b9afadc9c8a14eea738d863ebeb709d3120713ec2ccb7da6b614bb2d8eaab6e5b7455b3d9f8afa691823d9cb293454230a5db24fc1a091781231026339d3d05fcf731d9bbbfa5cb1b58ffc8e5a801daf948df3529aef142791b1d6f54c21f310d8bac7527fd63f2dfbd9cc03f34ba3ecda9fe478883dac7ec025370ff594d37735431d3c5a63580783d5e79b3d5c6e9b8ee3f0f69541a1fb2a4afa836e5683a0fefaa965ffa79349bf2a2f15a3afb0322885f4cbbb761320973c27a44b924c38b56f79d81120e3c6272eafb741986c52ef0eb93821866239574d98157b4da7c9a91113785311b1e99836d0195aac8ba86560f25f7580f69a1ad752ea26ca555e17a0678a2d075d58dbe2d87a441ba92c7355dae578ba9b5ac14cb92950107bd148122fee16f0f4519423e9ce25d0108ecdefb5c17b414f5191da6c8b699bdd95257fac0e00c1112ad4f1f7e887b2e5eab1dca1e8feed87328adfbecbb8e3614347b28621ab0d9d0576b4daa2c8fd3ede61742656d1f1c26b46669fea8f58267e439f6355dab1d7e5146e3533c6fc3906023919275d810789f8046e78f2741b4c6be3ca01b2df4a45c45b9a338948351ffe2059566f1091396062576ae674b359f71c815d0f1cd18579a581146b81ce05eb92e9758a8cbbb11c206555b14be788f8ba3057ffbaaad8916144e56bdfcae8a9b3640f387558afe4095b4779696fe497dbbffe0070bf133eb1f0d929b5134efd0aeb317927af709b0ed5218d88110cdd27ae146048bb26a6ce8f53cc422951221023765d4629375c582ce90baeb1b9dca05d3550e96d1556e4031f0289e5ac18304bfbfc75fc4a2998ab507a1fa89f9a5fa67a9a4dd80ab0011e6d72c2c6835a6b9ea2ed28a4431a31e2695d7fd2f613bca1b5d1dc6ada9f2031c92ed38b30cc05ef25067c29fa1616c16f17975c08792fc4d521aa32cd09e492c8f90023afda5f4664f0c706dbf79b40e6558c691ddac572c92cae3e9d132c665ab69a519df9eb85098abb8ba1baa0b576b93ef8f34908cf43e8d2843f8703cba2a22fd7667ce9b0d5a9a1a5d5138be4a34bef70b9e3531963b6cbbf07da131efee739ab887a8c976b7423a1464f56563c6b65edc8ae66d2fc526cedc6af4ac616c9e9daf00b865fcfaac28202743ed40aa1641bd272358886981f3fc17e3c6187859757172adeffc2c6578387fcb9de29d957e7fd4c8fba790349ced82cf212ef6c234c1bf565451f353598a957793a6e7dfe940e957a49b593e17a387703f008396e0ea0d5d98e1d07212dfcb4fbab9b54fc78a0a07803ffe62796feec1e0f59220d821dd52b18c3b2a8eccd9cc8a04bac6a536b625070e1628dcc8d90d24e19d3945aca91f11c54caff198503a316e5b2ed18a52d5d416fbb5290900fffe47c72f2350b3c62202cc4e06c7c33f57cbe16cd7c335a46fb63b4e3e77a20bdcf7deb810f7eda4ca9787458052f7a317e05739a93a2a4fbd9967855a91afbc07ab1ce297bd95b97ec5d890e1e09e704908752a172c3ba4bee5f7a459b1373b9244fea7c5cc585e644b0fbe0cf13cad973eaf0e58beee2dadd0033756ab239fd92f7defc96d4f837b133a0a2ca59e70223a0677d2019439389a567e06c3f67e6dcf6b0a74fc61eb8e0a70bbd28d69093ecfbb6eb27eb51230edf06743684d0b81aae253a9880d0fc73f065e261c097876e8978daad1c7d7ba5b3019ab39cdebb26230e72fdadc6f1036e1a06d0e6bf733b9b89b68a7e8743a6ee2125d9a8b5357c35c93e1de4ab1c8247dbd55cb6b6d16efc03cefabe2b013741d707ad7650d6be75be3a7d469290abec3abbcfef1561a424fa54aeda345d15d626b2f5184bd08c349fd5288d9e39f5645203f763cba13733f0c72cb4d22adbc5300d3da50db2b732a72a17efbd6b2187f1201abeaf686c703f6b364018af4a0b8cbaf89936d9d85b24ac7df6685a464123d4bbaa189039fe6dccb5454bdb3403909e6969a4ad18ed8a427d3b9fa3532467e9f2e07e4bf17e6acc89c1fba74f78b63b7e9713022b62930e0242ba50f5c52699fc333ebed1e4061d37e5109b75774a24ba9ec2ba76daacb4f69281b29adaf89a440b060929a411a281832810b6975f944f47eaaf8b6509986760480550be0f5f128ea460d0d12231eebe5cbf0c787f72d438d4c62a80f995dcdfe933c4f9fab3c54a3f01126ae011a5dfa703820e7a073950b1537b77b9551f30cb50a1d0c53047f8cb62c64f11b87a55eadf99a0c6e2a40753a02daa2635c269170247a0a59c7971aa7a60ce00236d6226b8ded67be89a3b7c6ed658013eea108cc227ce5391da62caa4df4bf5c84f12e24510cea6dcffa77a9351f827d99610ed2838bd01be98507e35246b9f0d1627877df2dd7a030d6699a29bdbfac7821fa840683b69755f496086fd1c481eece51d8751394a815c2620c1b6b0d0ace2301cc1cf161a048ea190f65ade47dcde3a261b5802bb54d9abe1d30fda5b6168a04c08b7b254787adfebc7ab32502173b88356e4672245d3f336bf1ef61bcac2bfaac0bf626ad1437bc0434f935b96a24a5b8ee6c684be40a3f5552410ddddbf6cc0aa719c154aede8d3ecff053e33d3a674623ed2f69ee8fd2e37989f8d3fad25627d17658613a95ae8b29c317920f3ed6a5e541eb85312da5858e02f087d79f002c2a509823bc7bfad1093d0acb0092e6d92984e7148aa264356e97f112e55dd4cd7b962c29e40cb58b1c752bf549e683bb8ed68ba4f6396032577db95a6fcd382a905f3fd84c1accef612cb4721079abee24bf4e6621e861338e211b8c605586f63d8851df63b64c65ac0148d95e23e0b40c55fa4736e234ea9d3e520c5187ddd894fcfecae3547f7d3516a96d52364478b816dedd31f8de2072a3e4052742e09892c1af11e7912a218a3150343afd34b2047f99725600636371dfc584229240cf669df60c8b956ad1f0945c35f60d78d8741d1205482c8985f5208ad95a41bbbd5204e22192d8d6dff18cac16bedf9e47ef596e86a5c7e11133395c755f0dd213f484ec28d9d41db6ab3d030ae4d110384d11f00cb9c791318884d35bbf0d47f1f735d7ec931758919a5fb379b7430acd688705566a5946b766bed8881bdb57a8369930533c10e1063f377ff0319238c517f71ec97b03e1b954e240a2131845cd6a0af86c0c4e93af284d7da07d8e7ad80227f620dadb5f81852f7fe23a6cf56340dd71e3cd3dc68731562e236ec9ffbd056b9c2ea14deea83bf4c2218e4cba4bfc6fae34d1c8004df23724d3d4781b55ab266ac4d44a9d468d983b1f583cc951a3651fe25c6f0fc811565d9268c5f4f54f915343a74ab39ace954a72bfface0353996599b346e903391b23a114e2772a04c4294060c644c7cf52485942b98ca93d150682be61cb160a69f2c69a05c6c1805dd0d132182a70f8b81ade01b1dcb8520e659feb46066122db68109627546adf269fc67c66fad21a9232ad4c0e6bdc44c1e93fec19e4707a7d51e7c7f2803ce9211e6280e195700830bf578f31be6316b01bda4475d4eaf75fad4134faf16f51521e830e718401461a5f62fe515cf56e2f51da2c8f667cf6b124c8c8be28843acc82671d2d701d05ebb19df1a6f48f1d4543e9496d3d50d5ef67d29b393bdf0a4bd5d01c32fc8e6f0dc384285b6f58defc06cd7b20b04a47d6719a4238f0d6a69ead55c5905aad066362ae1a459d88f14d5c379726c8e9b177029ca80473871a3176969291675ca61d214ae4f47b09ebb3d610d18be8cef820868356776b9129d7875d8221c53cf5d0ee1559dad42c5f776a5b679dea1a0454ee10ec7a8950d56513aecc74ccfc81acb4c25252e4a66fc248329e5246eb5fc7a8f18deb555a36b2488e07ce2a18a9d7f3b0f5990675c1d64af8369e9840ad0c3ba428a0690c7407bdd4a2d5a75d6ecaba6c4e7bebe8a5293fb29a67021e61f99417a6081fc47d7486bb337347cc3bcf3940a320675f1e6b1fbf78fe34af5485dbe22f2a6c0c863b0ebfec2a27923215917aebe107a6e902b7e21eafe124dcecad4112a3337280d41de0a8dba13679c6b8ac07389c31b418827a938b188b043587d0781903a3f38e7cfe8486cf03de749991e9634f70f6c966475f92de5993caf0f5c3ff4a26305578aa5b6fd17567343fdebf20c80ff648b9e3cc92ead693526356da4dcf23beb2ba12a61a38b8b04ec7ad0bba7dddea3affc7f4b5770517a44ec8a5c97ce96b9802a8f8e319153da820ebab1994936f3c3406efd2e435829c9e8db5bc5a86d291a87c10600e91f9c7ea3c550558bb1adaa6a81ba836ca38d7da5194a2e6cb0f45efbb19953a1db093a7e02512e5638666b372d518e3c24a8cb60032235c51813dcda0a10d6e3ddf14dc6b13ee8d82bda2155335c0151ef1e056c675dd5059f80885c653a2b1283e3b4fab926e98a2a1d1af4a700e5798e79e8f816b30bdd7fd377f9fa803a81d76b5d378776ca820e83677c66bc2d6a4f3454734cb244259bbcb99827a5b214d66574e1951325828233622f4cb0cb9194bd8ce8217b0f76faea49e7f742640f039f5017d9c77d6c1711bea52396e04e930b3eb70b27f41980f61d191585b111d2338ef32bd20d3679d41a9d434e0b21235c42b776217aabe6bf69ab728b40fda0570b1f7688ae9b9fd3ded0f19fa7b12e5e7d8d7b7df562d212e88721ce8a5b877ed992ca37948558d57778e0d5f809ae4598534cb7b6c1b16cef5ba41ff318d993d3dac9a39981d27cb35043e394e1c491ab8050b7dfb02897a77b728dd1e84e9ac4da54160c6f68238ba1f2e56c01222d252f6b4b2331516288de3bdb8db926721de32a1d28fdb431df6f79edcb3fda2529703a2e3792f5bf6f664f1935409ba85c03215d2ca2c5c72adb7325c7ffd3a149860bc84a4d8fd4017cbcf6d4233e00485d6bbb4e1ac87301f320a8cb24426c1c67a96a01ac94fed196fd90872e25ec944d4d301ef386175a9302437b4a5e7142eb232074703bc15ec04430656194675a3ea982b26a10625da6649128ba32d69c78b4538ada76cb84f932a51b32c61ad95e49134bd416820f57d2894edbc5dc5b63ff61f62b3ee8f006f722675be420544304e600fdc584bd4e58d2534b32937caf369f4bf6bafd04746654dca48e434570e0a633915dc302292605fa7575bc4fde147282cd63b72f3d3b4697371a6c9b378089a16b97cca9b62fca17a251e1e221156fd23101811be97050d1a92117fbdabf1306636d1714a2b2406b246e9104b350f662bc334e239015ae384be398ac02bcf552646a9ad8a88da27052ad16f85f006788cdfe307d0c736b3a929f9f9393de73fc00300c7b38531afad6627a5fd0ff8165baa03faf8238c45851bfc362d7fe58b306a3ade0ab711fd1fa2f215f8bb9b909ad446a5a44e8d8903c5982ee664031bf91ec3560a88022e3be3df4c1d4764d3cccca239b14dd839b110f54cf8745fc986fff5976334502439ab836e7ca747f91e7ad3f202fd999d003a24db2f337d52aebda89cdf6141e05fb030bd0b0eee61915a4364a33f7a05181e44f5f1a15a907eb92eb2000033350357ca2bfd7ff375b62d877185dc612d2f14625ccbbc4aee1b4bdc4e15fdd1532963adc984c929ec32f0b048287308438a9bf237b58d96d65caefbef0267581bf6a7918b8175dd026b3d6f37904840b5ba6c4bb0a226c39554cffdd9fe6ea4e9b04c7b91fcdc21606e1cfaf62ba41886b967ebe7d813e2c342b71db1b22b7f0c43c0309497ea038a632eaa51aada24533000a677ebb46f7c3c210565d7aeda40ce29865fa97d051ee5490bdcc6e491751099ac2320f049530b2d414b6ad5858dde992423ff2a7ba7cc4315e19ca73aa63d8020275915d26e9a259fad594c0f25402da3ec66756b2af91b76f7300ab3f40cc15ec6a19c43aba2f97a38e1cbd368c275e4fb34e7c1bc436c482e217227a8f4465c0f5c4cdf03510f785c56120196e1594b2d4f34b10a5acb1b23947a4a9c9c0d9704d88f2c62020e20d3db89d2b09ae560f018fdb6c2ac9720eec3b6d0cb8c9c7144048910f4bbe7070a998deabbdbd98b6dc1f824e6a66ce0bb71037cbe7cc2cb393cee0c87963f8d442150abcacca378371ce8790e86769956b30c0e04ca7c4af0c066402ad10ddb35d984012a7d02702b67f12cfb5c1f28d52d0d618469c722bf9c90bcc521e510bf61f7933edb383faa331907a4fe0f283a6ef71b0ba9dacf52a2e4b6ac1106211f99ada45a48309519e2f4a56d43e1ca43fbe7d612ead95c8a516a916448bc7281803338eed8eb0d7b0d06700f7745332c86ba048579b7c2dc6f94b048bc3903ac637296605378b4d9b7a445fe7d24027a59f0af02d006347b61cc8660c80268fa85d65baa4ccccaa213c6f0bebd4673c312558febcededb5192738d347bda4920eff6ecd42357c86fc3f8ffc72143598ce6faba1acf3e35562a0ce73f3182bbf5b84257a522298c500265db3e774788b5b72a933566bfda2dc4b3bed6bc81669bbe0b2705ac5b08cb669e69ab6740456c7e1a3abb96c9b212512a8780cb59f82744d1f712d1e5591f9cbdf02be11bdc3b647a7e4da5c62017bd16dc495b1cc0da65ee035ecbd96f673da66e1adabb58ccfabd01d55beea781cd5270e18e4846a2f2d527a43b70380507568876ad5499386511a94988840f2e6c565a7b3db9909e010c48e31e9ddbc107eb3b7d8bd11aa0549e18d4e0749f0dee8913e0231dd25bc66915f02f74f29af0ccf67f7b3efa990538cb676baa926c3f567193b7387e548ee6be5161b2da1039532fd1a0c4096b93179ee11a806724bba3fb50d699a0b09fe8919c731b6c848adb17410b4da64f6f03def4b3b92e64df2fc8dd4c981a633f8ada2d1bc6b0f32b7a756a6edd7029528fd6b4a11da00c55769224936f4adef968d516952137740b75112dedab146a2bc09073d49d1e960da845876a6e60fd8b0f444af01dfd3c00372462c0f57273e774f3cddb16ca2fcd7dd13f28b6f13251fbe77ed7cb190f73fa4ecc00b71e73b0545a906c5e30d495c41ba95bbe14fb30f9508482c82e434873fb588a65f3ff951d17f1beeef07da5bd974d84adf1b34df8f96005768e810194f756c1ee60cd429c7b00c98cfe430581313f3ceebf7bcc3e27a3537926a072af66e9d8eb64050f936b3709238f4aa4e99bec0aa4716cdd2a77f259cf591ec900a17875d813faa04eea61a2a796cd51103cdf4473472b26caae2bc07e5b422ad0ee8523c05c2db9ce75a90cf6174366b8aff045b8fd601f3f63fa0b698c6305543eb468edfb30d9b482a554ca786181f2b543b0a8a1cdad8366b29d60ed21fce9e7bdcef32417281e45aa0acb4bc2f0be0de1e42691317e0e799f29e3e230ce3629397f6d236f4c8bb77e488ade6b39fa7b1925f9df6245a7662b75c57dcc9286effdc537f97875ae46f54ba2e0ec5924bc56754a4058ee987be3ca2d552d2414d77209dc79eb714ecd544facf85bd37275859e079153a36a41b7700192069a8df7df93d527258d7587b02863a892f7cc2aa4a26989661257768ad5e4e49635e06726bd2544c50bf6ff5867f9dc48a8dce0c5954734da63b63f1ad6954286994790b81e3f0c4d64f1321ad652ea9a989c63a5bda214ea147720d65ce6075096968a4fb54e239177be207e7a728e480600a5144d089d9a196a50f6c0c04f023d9834c09056f811d18c771a6bcbc4cc51c4c63455e95664a2034b6171bbbf763d65297bbe5550e3c055c21abcc9f038a760", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c40)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0x2, 0x5, 0x404, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0xa7c, r13}, 0x38) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r15, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r16, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) bind$bt_hci(r12, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write(r12, &(0x7f00000003c0)="4c00000011000e14001d000200001e0002000000200000", 0x17) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000340)) utimensat(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2280, 0x101) 17.980819526s ago: executing program 0 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/kernel/modprobe\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 17.945622296s ago: executing program 0 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/33) mount(0x0, &(0x7f0000000380)='./pipe\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c000580"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000540)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000680)=0x18) mount(&(0x7f00000006c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000940)="0a000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.77091162s ago: executing program 0 (id=344): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x20132, 0xffffffffffffffff, 0x4c7ac000) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async, rerun: 32) pwrite64(r1, &(0x7f0000000140)="b8c4", 0x2, 0xfff) (async, rerun: 32) r3 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000100)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 17.691605356s ago: executing program 0 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00', 0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x6, &(0x7f0000000ac0)=""/4109, &(0x7f0000001b00)=0x100d) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x1, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}]}, 0x38}}, 0x0) r5 = syz_io_uring_setup(0xd3a, &(0x7f0000000040)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r9, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000200)=@IORING_OP_FSETXATTR={0x29, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/o2net/connected_nodes\x00', 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) io_uring_enter(r5, 0x51c7, 0x6c38, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x804000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r11}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = socket(0xa, 0x5, 0x0) connect$inet(r13, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r12) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r12, 0x1, 0x0) ioctl$TIOCGPTPEER(r11, 0x5441, 0x4b) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0x4, 0x3}, 0xc) 16.81624462s ago: executing program 0 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000001020000000900020073797a32000000000900010073797a30000000000c00034000000000000000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) 4.58801904s ago: executing program 2 (id=418): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic=')']}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000540)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket(0x40000000015, 0x5, 0x0) socket(0x40000000015, 0x805, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000005c0)={r7, r7, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3.683683944s ago: executing program 2 (id=420): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103000000000009050203"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022190000005716bd45051500160000b091"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000003c0)={0x2, 0x100}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) read$dsp(r5, &(0x7f0000000880)=""/4086, 0xff6) write$dsp(r4, 0x0, 0x0) read$dsp(r5, &(0x7f00000018c0)=""/92, 0x5c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x20, 0x0, 0x6e, 0x3, {{0x21, 0x4, 0x1, 0x34, 0x84, 0x68, 0x0, 0x35, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xa5, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20a4f6f4}, {@multicast2, 0x5}, {@loopback, 0x7}, {@remote, 0x8}, {@loopback, 0xffffff79}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x9}, {@broadcast, 0xfffffffa}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xb5, [@private=0xa010101, @multicast1, @multicast2, @local, @local]}]}}}}}) 3.680290736s ago: executing program 3 (id=421): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[], 0xffffff6a) splice(r2, 0x0, r1, 0x0, 0x40010002, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000380)={0x2, 0x4, 0x1, 0x168e, 0x4, 0x0, [{0xfffffffffffffff7, 0x1, 0xff, '\x00', 0x401}, {0x61, 0x12, 0x10000, '\x00', 0x801}, {0x1, 0x8, 0xfffffffffffffffc, '\x00', 0x308}, {0x1, 0x1, 0x56c, '\x00', 0x1300}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xd, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES64=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x1000) syz_emit_ethernet(0x80, &(0x7f0000000300)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x46, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x5]}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.210463s ago: executing program 1 (id=426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001680)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000016c0)={r2, r0, 0x0, r0}, 0x5) 3.192853266s ago: executing program 1 (id=427): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x800, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e1b0000000000000000001c0012800b0001006970766c616e00001cd99f116acbcc7602000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="0800101d89b5eb00", 0x8}], 0x1}, 0x20008880) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000029723c09485b8420176a5419013f817a5f70d7895d9dcd86814b26f856d6e9837299303f736ada7f545ae6166a4053174b8937deb268fd9ecbd3cd9afcc2eca51f5e37a6a23157558aaaab4155645fd55d00000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000480)='GPL\x00', 0x2, 0xba, &(0x7f00000004c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r4, &(0x7f0000000800), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000008c0), 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000a80)='ncpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2.721845453s ago: executing program 3 (id=428): r0 = syz_open_dev$evdev(&(0x7f0000004200), 0x0, 0x802) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0xf5) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005040000"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x143102) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb000d010000e0000000003937733fbcb865236e05ce7d128131e6a482afd3653003548ae80e63f653ee69062dc41d7f78458bb0798fcfaa0a779f7ece7bab92bcbf7d2d347866f8934bfe"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'vlan0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bdae71fa083cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d868f3eda7bf2ab8a883c3720bd152932480f95fec0f7a20d2b6e1f604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408abc5ea81d2fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x8, 0x401}}) r6 = add_key(&(0x7f0000000540)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000600)=""/4096, 0xffffffffffffffd2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) write$evdev(r0, &(0x7f0000004240), 0x3f5aa546) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 2.421242168s ago: executing program 3 (id=429): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000100)=@multiplanar_userptr={0x1ff, 0x4, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "b90d5ac7"}, 0x1ff, 0x2, {0x0}, 0x9ad9}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r5 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x800) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000540)=0xc) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000640)='bpf_lsm_inode_unlink\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4bdfa30b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0xa, 0x6, 0x0, 0xffffffffffffffe0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xc2, &(0x7f0000000400)=""/194, 0x41100, 0x4, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x7, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x10, 0x2}, {0x4, 0x3, 0xe, 0xa}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x5}, 0x94) write$binfmt_format(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2.193100115s ago: executing program 1 (id=430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000780)=[0x5], 0x0, 0xffffffffffffbfd4, 0x1, 0x1}}, 0x40) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400, 0x116) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000580)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) pread64(r2, &(0x7f0000000240)=""/23, 0x17, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.061570054s ago: executing program 1 (id=431): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000100)=@multiplanar_userptr={0x1ff, 0x4, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "b90d5ac7"}, 0x1ff, 0x2, {0x0}, 0x9ad9}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) r5 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x800) (fail_nth: 2) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000540)=0xc) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000640)='bpf_lsm_inode_unlink\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4bdfa30b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0xa, 0x6, 0x0, 0xffffffffffffffe0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xc2, &(0x7f0000000400)=""/194, 0x41100, 0x4, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x7, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x10, 0x2}, {0x4, 0x3, 0xe, 0xa}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x5}, 0x94) write$binfmt_format(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.790738097s ago: executing program 2 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/33) mount(0x0, &(0x7f0000000380)='./pipe\x00', &(0x7f00000003c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c00058007"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000540)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000680)=0x18) mount(&(0x7f00000006c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000940)="0a000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.748825615s ago: executing program 32 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000001020000000900020073797a32000000000900010073797a30000000000c00034000000000000000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) 1.435128997s ago: executing program 3 (id=434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0x82, 0x1f, "08b2105013152e1d4fba423c9d0d46834193a36bf05a441882cb8b1b8a9c319c5c13aa64b51d1b1d9a04021c0165b0bf56697610e57dcc6c4163360840bccd1987c8be7aa0fb702d36c7055b6a400c579f50880479c8db24ca1bd802107eb2e6c904ccc12e083e83cdb17999b3e19de8f1dc24fb59eaf1bd4486813ba9e0"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfffffff7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_VENDOR_DATA={0x7, 0x1f, "c68d7c"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40041}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$udambuf(0xffffff9c, &(0x7f00000005c0), 0x2) r4 = memfd_create(&(0x7f0000000600)='macvlan1\x00', 0x1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000640)={r4, 0x1, 0x100000000, 0x1000}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(morus640,sha512-arm)\x00'}, 0x58) r6 = accept4(r2, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x80800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="88010000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf250500000008000600170c000030000380080005006401010214000600ff02000000000000000000000000000108000500e0000002050008000300000060000380140002006d6163766c616e3100000000000000001400020076657468315f766c616e000000000000089701200200000014000600ff010000000000000000000000000001080005000a01010205000800f70000000800010001000000080004000500000008000400100000005000028014000100ff02000000000000000a00000008000800ffffffff0800030002000000060002004e220000080003000100000006000b0002000000080006000b0000005000018008000900560000000800050002000000060001000a0000000600020011000000060004004e240000080009000f0000000a0006006c626c63720000000600020062000000080009001500000024000280080005000700000006000e004e20000006000e004e24000008000600080000000800050005000000"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) readv(r2, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/143, 0x8f}], 0x1) 1.426978406s ago: executing program 3 (id=435): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r3], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000100)=@multiplanar_userptr={0x1ff, 0x4, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "b90d5ac7"}, 0x1ff, 0x2, {0x0}, 0x9ad9}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdir(0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000500)={@multicast1, @multicast1, 0x0}, &(0x7f0000000540)=0xc) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000640)='bpf_lsm_inode_unlink\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4bdfa30b}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x6, 0x0, 0xffffffffffffffe0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xc2, &(0x7f0000000400)=""/194, 0x41100, 0x4, '\x00', r7, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x7, 0x3}, 0x10, r8, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x10, 0x2}, {0x4, 0x3, 0xe, 0xa}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x5}, 0x94) write$binfmt_format(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x401, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.091730345s ago: executing program 1 (id=436): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`\x7f4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000300)='./md0\x00', 0x84080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000400)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000480)={0x0, 0x1000c89f, 0xc000, 0x0, 0x20002f7}) r3 = socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='f2fs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000600)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$md_node(0xffffffffffffff9c, &(0x7f0000000640)='./md0\x00', 0x2, 0x0) ioctl$GET_BITMAP_FILE(r1, 0x90000915, &(0x7f0000001780)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@deltclass={0x48, 0x29, 0x222, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x7, 0x10}, {0xd, 0x9}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x48}}, 0x200400c0) ftruncate(r0, 0x2000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x1, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 831.61716ms ago: executing program 2 (id=437): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000010c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000001280)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000012c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) recvmsg$unix(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/209, 0xd1}], 0x1}, 0x0) 655.288452ms ago: executing program 2 (id=438): socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) socket(0x25, 0x5, 0x20000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000280)}, 0x10) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="03c900bc58862c0a5a0983ba6222a9fa640f277895df7da75693bf8fb1c1f3d776330914ceab78c96a19d9312cd7b371d2f71cae174e22645289140b170ab1fe602c6b44b4bd184574b218c4323c121a935b774120854bce9a03bb57ec6301fc97b325126885d949a92a168e9206f9b7321327adb7be4da41d2c10f8e06db5d737bb9bab89f1e3023b611902000000a0c634bfd6f499b310395bd502a93a39fde70960fbc833a6d4ffeba5cddade6a06fb25f58570b0efcb3273687f7ffb9d52"], 0xc0) 421.741836ms ago: executing program 3 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0xa10, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@snapshot={0x0, 0x400, 0x0, 0x58, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'p', 0x20, '128', ' 1 discard_zeroes_cow'}}]}) openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 240.134018ms ago: executing program 1 (id=440): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103000000000009050203"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022190000005716bd45051500160000b091"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000003c0)={0x2, 0x100}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) read$dsp(r5, &(0x7f0000000880)=""/4086, 0xff6) write$dsp(r4, 0x0, 0x0) read$dsp(r5, &(0x7f00000018c0)=""/92, 0x5c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x20, 0x0, 0x6e, 0x3, {{0x21, 0x4, 0x1, 0x34, 0x84, 0x68, 0x0, 0x35, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xa5, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20a4f6f4}, {@multicast2, 0x5}, {@loopback, 0x7}, {@remote, 0x8}, {@loopback, 0xffffff79}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x9}, {@broadcast, 0xfffffffa}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xb5, [@private=0xa010101, @multicast1, @multicast2, @local, @local]}]}}}}}) 0s ago: executing program 2 (id=441): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000240)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) getpid() r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r4, &(0x7f0000000480)=""/234, 0xea) openat$dir(0xffffff9c, &(0x7f0000000040)='./sys/bus/pci/rescan\x00', 0x100, 0x1) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)='ping\x00', 0x5, 0x0, &(0x7f0000000940)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r5, &(0x7f0000000980)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x2a010, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x80, 0x0, 0x68, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '1024', 0x20, '2 start_sector 8'}}]}) kernel console output (not intermixed with test programs): 00 00800080 01000001 [ 64.352141][ C3] ufshcd 0000:00:06.0: UPIU[16] - Request UPIU phys@0xfffeb400 [ 64.352150][ C3] UPIU REQ: 00000000: 10c42001 00000000 00000000 00100000 [ 64.352157][ C3] UPIU REQ: 00000010: 00000003 0000b817 00000000 00000000 [ 64.352163][ C3] ufshcd 0000:00:06.0: UPIU[16] - Response UPIU phys@0xfffeb480 [ 64.352171][ C3] UPIU RSP: 00000000: 00000000 00000000 00000000 00000000 [ 64.352178][ C3] UPIU RSP: 00000010: 00000000 00000000 00000000 00000000 [ 64.352185][ C3] UPIU RSP: 00000020: 00000000 00000000 00000000 00000000 [ 64.352191][ C3] UPIU RSP: 00000030: 00000000 [ 64.352196][ C3] ufshcd 0000:00:06.0: UPIU[16] - PRDT - 1 entries phys@0xfffeb500 [ 64.352205][ C3] UPIU PRDT: 00000000: fff98000 00000000 00000000 00000fff [ 64.354299][ C2] DMAR: DRHD: handling fault status reg 2 [ 64.390992][ C3] ufshcd 0000:00:06.0: OCS error from controller = 1 for tag 16 [ 64.391876][ C3] host_regs: 00000000: 0107021f 00000000 00000400 00000000 [ 64.391886][ C3] host_regs: 00000010: 00000000 00000000 00000000 00000000 [ 64.391894][ C3] host_regs: 00000020: 00000000 00071ef5 00000000 00000000 [ 64.391901][ C3] host_regs: 00000030: 0000000f 00000001 00000000 00000000 [ 64.391909][ C3] host_regs: 00000040: 00000000 00000000 00000000 00000000 [ 64.391916][ C3] host_regs: 00000050: fffdd000 00000000 00000000 00000000 [ 64.391923][ C3] host_regs: 00000060: 00000001 0001e1e1 00000000 00000000 [ 64.391930][ C3] host_regs: 00000070: fffdc000 00000000 00000000 00000000 [ 64.391937][ C3] host_regs: 00000080: 00000000 00000000 00000000 00000000 [ 64.391944][ C3] host_regs: 00000090: 00000000 15610000 00000001 00000000 [ 64.391959][ C3] ufshcd 0000:00:06.0: No record of pa_err [ 64.391966][ C3] ufshcd 0000:00:06.0: No record of dl_err [ 64.391971][ C3] ufshcd 0000:00:06.0: No record of nl_err [ 64.391977][ C3] ufshcd 0000:00:06.0: No record of tl_err [ 64.391983][ C3] ufshcd 0000:00:06.0: No record of dme_err [ 64.391988][ C3] ufshcd 0000:00:06.0: No record of auto_hibern8_err [ 64.391994][ C3] ufshcd 0000:00:06.0: No record of fatal_err [ 64.392000][ C3] ufshcd 0000:00:06.0: No record of link_startup_fail [ 64.392006][ C3] ufshcd 0000:00:06.0: No record of resume_fail [ 64.392011][ C3] ufshcd 0000:00:06.0: No record of suspend_fail [ 64.392017][ C3] ufshcd 0000:00:06.0: No record of wlun resume_fail [ 64.392023][ C3] ufshcd 0000:00:06.0: No record of wlun suspend_fail [ 64.392029][ C3] ufshcd 0000:00:06.0: No record of dev_reset [ 64.392034][ C3] ufshcd 0000:00:06.0: No record of host_reset [ 64.392040][ C3] ufshcd 0000:00:06.0: No record of task_abort [ 64.392046][ C3] ufshcd 0000:00:06.0: UFS Host state=1 [ 64.392056][ C3] ufshcd 0000:00:06.0: 1 outstanding reqs, tasks=0x0 [ 64.392063][ C3] ufshcd 0000:00:06.0: saved_err=0x0, saved_uic_err=0x0 [ 64.392070][ C3] ufshcd 0000:00:06.0: Device power mode=1, UIC link state=1 [ 64.392077][ C3] ufshcd 0000:00:06.0: PM in progress=0, sys. suspended=0 [ 64.392084][ C3] ufshcd 0000:00:06.0: Auto BKOPS=0, Host self-block=0 [ 64.392090][ C3] ufshcd 0000:00:06.0: Clk gate=0 [ 64.392096][ C3] ufshcd 0000:00:06.0: last_hibern8_exit_tstamp at 0 us, hibern8_exit_cnt=0 [ 64.392103][ C3] ufshcd 0000:00:06.0: error handling flags=0x0, req. abort count=0 [ 64.392110][ C3] ufshcd 0000:00:06.0: hba->ufs_version=0x400, Host capabilities=0x107021f, caps=0x0 [ 64.392118][ C3] ufshcd 0000:00:06.0: quirks=0x0, dev. quirks=0x0 [ 64.392125][ C3] ufshcd 0000:00:06.0: UFS dev info: QEMU QEMU UFS rev [ 64.392133][ C3] ufshcd 0000:00:06.0: UPIU[16] - Transfer Request Descriptor phys@0xfffdd200 [ 64.392142][ C3] UPIU TRD: 00000000: 13000000 00000000 00000001 00000000 [ 64.392149][ C3] UPIU TRD: 00000010: fffeb400 00000000 00800080 01000001 [ 64.392155][ C3] ufshcd 0000:00:06.0: UPIU[16] - Request UPIU phys@0xfffeb400 [ 64.392164][ C3] UPIU REQ: 00000000: 10c42001 00000000 00000000 00100000 [ 64.392171][ C3] UPIU REQ: 00000010: 00000003 0000b817 00000000 00000000 [ 64.392177][ C3] ufshcd 0000:00:06.0: UPIU[16] - Response UPIU phys@0xfffeb480 [ 64.392185][ C3] UPIU RSP: 00000000: 00000000 00000000 00000000 00000000 [ 64.392192][ C3] UPIU RSP: 00000010: 00000000 00000000 00000000 00000000 [ 64.392199][ C3] UPIU RSP: 00000020: 00000000 00000000 00000000 00000000 [ 64.392205][ C3] UPIU RSP: 00000030: 00000000 [ 64.392210][ C3] ufshcd 0000:00:06.0: UPIU[16] - PRDT - 1 entries phys@0xfffeb500 [ 64.392220][ C3] UPIU PRDT: 00000000: fff98000 00000000 00000000 00000fff [ 64.441003][ C3] ufshcd 0000:00:06.0: OCS error from controller = 1 for tag 16 [ 64.441902][ C3] host_regs: 00000000: 0107021f 00000000 00000400 00000000 [ 64.441913][ C3] host_regs: 00000010: 00000000 00000000 00000000 00000000 [ 64.441921][ C3] host_regs: 00000020: 00000000 00071ef5 00000000 00000000 [ 64.441928][ C3] host_regs: 00000030: 0000000f 00000001 00000000 00000000 [ 64.441935][ C3] host_regs: 00000040: 00000000 00000000 00000000 00000000 [ 64.441942][ C3] host_regs: 00000050: fffdd000 00000000 00000000 00000000 [ 64.441949][ C3] host_regs: 00000060: 00000001 0001e1e1 00000000 00000000 [ 64.441956][ C3] host_regs: 00000070: fffdc000 00000000 00000000 00000000 [ 64.441963][ C3] host_regs: 00000080: 00000000 00000000 00000000 00000000 [ 64.441971][ C3] host_regs: 00000090: 00000000 15610000 00000001 00000000 [ 64.441984][ C3] ufshcd 0000:00:06.0: No record of pa_err [ 64.441991][ C3] ufshcd 0000:00:06.0: No record of dl_err [ 64.441997][ C3] ufshcd 0000:00:06.0: No record of nl_err [ 64.442002][ C3] ufshcd 0000:00:06.0: No record of tl_err [ 64.442008][ C3] ufshcd 0000:00:06.0: No record of dme_err [ 64.442014][ C3] ufshcd 0000:00:06.0: No record of auto_hibern8_err [ 64.442020][ C3] ufshcd 0000:00:06.0: No record of fatal_err [ 64.442025][ C3] ufshcd 0000:00:06.0: No record of link_startup_fail [ 64.442031][ C3] ufshcd 0000:00:06.0: No record of resume_fail [ 64.442037][ C3] ufshcd 0000:00:06.0: No record of suspend_fail [ 64.442043][ C3] ufshcd 0000:00:06.0: No record of wlun resume_fail [ 64.442048][ C3] ufshcd 0000:00:06.0: No record of wlun suspend_fail [ 64.442054][ C3] ufshcd 0000:00:06.0: No record of dev_reset [ 64.442060][ C3] ufshcd 0000:00:06.0: No record of host_reset [ 64.442066][ C3] ufshcd 0000:00:06.0: No record of task_abort [ 64.442072][ C3] ufshcd 0000:00:06.0: UFS Host state=1 [ 64.442081][ C3] ufshcd 0000:00:06.0: 1 outstanding reqs, tasks=0x0 [ 64.442088][ C3] ufshcd 0000:00:06.0: saved_err=0x0, saved_uic_err=0x0 [ 64.442094][ C3] ufshcd 0000:00:06.0: Device power mode=1, UIC link state=1 [ 64.442101][ C3] ufshcd 0000:00:06.0: PM in progress=0, sys. suspended=0 [ 64.442108][ C3] ufshcd 0000:00:06.0: Auto BKOPS=0, Host self-block=0 [ 64.442115][ C3] ufshcd 0000:00:06.0: Clk gate=0 [ 64.442120][ C3] ufshcd 0000:00:06.0: last_hibern8_exit_tstamp at 0 us, hibern8_exit_cnt=0 [ 64.442127][ C3] ufshcd 0000:00:06.0: error handling flags=0x0, req. abort count=0 [ 64.442134][ C3] ufshcd 0000:00:06.0: hba->ufs_version=0x400, Host capabilities=0x107021f, caps=0x0 [ 64.442142][ C3] ufshcd 0000:00:06.0: quirks=0x0, dev. quirks=0x0 [ 64.442149][ C3] ufshcd 0000:00:06.0: UFS dev info: QEMU QEMU UFS rev [ 64.442157][ C3] ufshcd 0000:00:06.0: UPIU[16] - Transfer Request Descriptor phys@0xfffdd200 [ 64.442166][ C3] UPIU TRD: 00000000: 13000000 00000000 00000001 00000000 [ 64.442174][ C3] UPIU TRD: 00000010: fffeb400 00000000 00800080 01000001 [ 64.442180][ C3] ufshcd 0000:00:06.0: UPIU[16] - Request UPIU phys@0xfffeb400 [ 64.442188][ C3] UPIU REQ: 00000000: 10c42001 00000000 00000000 00100000 [ 64.442195][ C3] UPIU REQ: 00000010: 00000003 0000b817 00000000 00000000 [ 64.442201][ C3] ufshcd 0000:00:06.0: UPIU[16] - Response UPIU phys@0xfffeb480 [ 64.442210][ C3] UPIU RSP: 00000000: 00000000 00000000 00000000 00000000 [ 64.442217][ C3] UPIU RSP: 00000010: 00000000 00000000 00000000 00000000 [ 64.442224][ C3] UPIU RSP: 00000020: 00000000 00000000 00000000 00000000 [ 64.442230][ C3] UPIU RSP: 00000030: 00000000 [ 64.442235][ C3] ufshcd 0000:00:06.0: UPIU[16] - PRDT - 1 entries phys@0xfffeb500 [ 64.442244][ C3] UPIU PRDT: 00000000: fff98000 00000000 00000000 00000fff [ 64.693783][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 64.760975][ T6596] 9pnet_fd: Insufficient options for proto=fd [ 65.020809][ T5167] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.171344][ T6595] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 65.173743][ T5167] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 65.177184][ T5167] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.177224][ T5167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.194348][ T5167] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 65.194521][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 65.194573][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 65.196142][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 65.196205][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 65.198733][ T5167] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 65.204766][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 65.204829][ T5167] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 65.208726][ T5167] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 66.594504][ T6548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.600396][ T41] usb 6-1: USB disconnect, device number 3 [ 66.616663][ T41] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 66.619974][ T41] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 66.628126][ T41] keyspan 6-1:1.0: device disconnected [ 66.704537][ T6600] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 66.806885][ T6612] netlink: 'syz.0.214': attribute type 49 has an invalid length. [ 66.809034][ T6612] bond0: (slave bond_slave_0): Releasing backup interface [ 66.859190][ T6615] fuse: Bad value for 'user_id' [ 66.859202][ T6615] fuse: Bad value for 'user_id' [ 66.864094][ T6612] bond_slave_0: entered promiscuous mode [ 66.864106][ T6612] bond_slave_0: entered allmulticast mode [ 66.866311][ T5878] usb 7-1: USB disconnect, device number 7 [ 66.975971][ T6627] netlink: 288 bytes leftover after parsing attributes in process `syz.3.215'. [ 67.610749][ T1352] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.778912][ T1352] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 67.779848][ T1352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.779883][ T1352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.788844][ T1352] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 67.789009][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 67.789057][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 67.796149][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 67.796222][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 67.798285][ T1352] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 67.805018][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 67.805077][ T1352] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 67.808767][ T1352] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.250123][ T63] IPVS: starting estimator thread 0... [ 68.330785][ T6655] IPVS: using max 30 ests per chain, 72000 per kthread [ 68.378746][ T6662] FAULT_INJECTION: forcing a failure. [ 68.378746][ T6662] name failslab, interval 1, probability 0, space 0, times 0 [ 68.378816][ T6662] CPU: 0 UID: 0 PID: 6662 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 68.378836][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.378846][ T6662] Call Trace: [ 68.378852][ T6662] [ 68.378859][ T6662] dump_stack_lvl+0x100/0x190 [ 68.378890][ T6662] should_fail_ex.cold+0x5/0xa [ 68.378917][ T6662] should_failslab+0xc2/0x120 [ 68.378939][ T6662] __kmalloc_noprof+0xfc/0x840 [ 68.378966][ T6662] ? __pfx_dynamic_dname+0x10/0x10 [ 68.378994][ T6662] ? tomoyo_encode2+0xfb/0x3c0 [ 68.379026][ T6662] tomoyo_encode2+0xfb/0x3c0 [ 68.379056][ T6662] tomoyo_encode+0x29/0x50 [ 68.379081][ T6662] tomoyo_realpath_from_path+0x18c/0x690 [ 68.379113][ T6662] tomoyo_path_number_perm+0x23c/0x580 [ 68.379136][ T6662] ? tomoyo_path_number_perm+0x22e/0x580 [ 68.379161][ T6662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.379191][ T6662] ? get_pid_task+0x106/0x250 [ 68.379222][ T6662] ? __lock_acquire+0x5c0/0x1f40 [ 68.379253][ T6662] ? __fget_files+0x34/0x3d0 [ 68.379273][ T6662] ? find_held_lock+0x2b/0x80 [ 68.379297][ T6662] ? __fget_files+0x215/0x3d0 [ 68.379314][ T6662] ? hook_file_ioctl_common+0x140/0x440 [ 68.379338][ T6662] ? __fget_files+0x215/0x3d0 [ 68.379361][ T6662] ? __fget_files+0x21f/0x3d0 [ 68.379385][ T6662] security_file_ioctl_compat+0xd3/0x230 [ 68.379411][ T6662] __ia32_compat_sys_ioctl+0xc2/0x360 [ 68.379442][ T6662] __do_fast_syscall_32+0x14b/0x8c0 [ 68.379465][ T6662] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.379489][ T6662] do_fast_syscall_32+0x32/0x70 [ 68.379513][ T6662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.379535][ T6662] RIP: 0023:0xf742efbc [ 68.379550][ T6662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.379566][ T6662] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 68.379583][ T6662] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 68.379594][ T6662] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.379605][ T6662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.379615][ T6662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.379625][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.379650][ T6662] [ 68.379667][ T6662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.812109][ T6666] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.072666][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 69.105264][ T6670] FAULT_INJECTION: forcing a failure. [ 69.105264][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 69.106215][ T6670] CPU: 2 UID: 0 PID: 6670 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(full) [ 69.106230][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.106237][ T6670] Call Trace: [ 69.106241][ T6670] [ 69.106245][ T6670] dump_stack_lvl+0x100/0x190 [ 69.106265][ T6670] should_fail_ex.cold+0x5/0xa [ 69.106280][ T6670] should_failslab+0xc2/0x120 [ 69.106297][ T6670] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.106315][ T6670] ? __alloc_skb+0x140/0x710 [ 69.106332][ T6670] __alloc_skb+0x140/0x710 [ 69.106346][ T6670] ? __pfx___alloc_skb+0x10/0x10 [ 69.106364][ T6670] tcp_stream_alloc_skb+0x34/0x660 [ 69.106380][ T6670] tcp_sendmsg_locked+0x141d/0x46b0 [ 69.106405][ T6670] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 69.106421][ T6670] ? lock_acquire+0x1d1/0x380 [ 69.106432][ T6670] ? do_raw_spin_lock+0x128/0x260 [ 69.106445][ T6670] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 69.106462][ T6670] ? __local_bh_enable_ip+0xa5/0x120 [ 69.106474][ T6670] tcp_sendmsg+0x2e/0x50 [ 69.106489][ T6670] ? __pfx_tcp_sendmsg+0x10/0x10 [ 69.106504][ T6670] inet_sendmsg+0xb9/0x140 [ 69.106520][ T6670] ____sys_sendmsg+0xa23/0xc30 [ 69.106530][ T6670] ? __pfx_inet_sendmsg+0x10/0x10 [ 69.106546][ T6670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.106564][ T6670] ___sys_sendmsg+0x190/0x1e0 [ 69.106576][ T6670] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.106595][ T6670] ? find_held_lock+0x2b/0x80 [ 69.106617][ T6670] __sys_sendmsg+0x160/0x210 [ 69.106632][ T6670] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.106654][ T6670] __do_fast_syscall_32+0x14b/0x8c0 [ 69.106668][ T6670] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.106682][ T6670] do_fast_syscall_32+0x32/0x70 [ 69.106696][ T6670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.106709][ T6670] RIP: 0023:0xf744efbc [ 69.106718][ T6670] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.106728][ T6670] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.106739][ T6670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 69.106745][ T6670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.106751][ T6670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.106757][ T6670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.106763][ T6670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.106777][ T6670] [ 70.093450][ T6634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.093925][ T6678] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 70.093934][ T6678] netlink: 224 bytes leftover after parsing attributes in process `syz.0.227'. [ 70.435212][ T5878] usb 6-1: USB disconnect, device number 4 [ 70.448346][ T5878] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 70.454202][ T5878] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 70.456646][ T5878] keyspan 6-1:1.0: device disconnected [ 70.974871][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.974909][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.139443][ T10] cfg80211: failed to load regulatory.db [ 71.683042][ T6721] FAULT_INJECTION: forcing a failure. [ 71.683042][ T6721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.683059][ T6721] CPU: 2 UID: 0 PID: 6721 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) [ 71.683071][ T6721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.683077][ T6721] Call Trace: [ 71.683081][ T6721] [ 71.683086][ T6721] dump_stack_lvl+0x100/0x190 [ 71.683106][ T6721] should_fail_ex.cold+0x5/0xa [ 71.683122][ T6721] _copy_from_iter+0x1f4/0x16c0 [ 71.683141][ T6721] ? __pfx__copy_from_iter+0x10/0x10 [ 71.683155][ T6721] ? trace_kmalloc+0xeb/0x110 [ 71.683167][ T6721] ? __kasan_kmalloc+0xaa/0xb0 [ 71.683179][ T6721] ? __kmalloc_noprof+0x350/0x840 [ 71.683201][ T6721] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 71.683216][ T6721] kernfs_fop_write_iter+0x186/0x5f0 [ 71.683229][ T6721] vfs_write+0x6af/0x1050 [ 71.683240][ T6721] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.683253][ T6721] ? __pfx_vfs_write+0x10/0x10 [ 71.683262][ T6721] ? find_held_lock+0x2b/0x80 [ 71.683286][ T6721] ksys_write+0x12a/0x250 [ 71.683296][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 71.683310][ T6721] __do_fast_syscall_32+0x14b/0x8c0 [ 71.683324][ T6721] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.683339][ T6721] do_fast_syscall_32+0x32/0x70 [ 71.683352][ T6721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.683365][ T6721] RIP: 0023:0xf745efbc [ 71.683374][ T6721] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.683384][ T6721] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 71.683396][ T6721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 71.683402][ T6721] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.683408][ T6721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.683414][ T6721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.683419][ T6721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.683433][ T6721] [ 72.086334][ T6733] No fuse device found [ 72.086362][ T6733] No fuse device found [ 72.086376][ T6733] No fuse device found [ 72.086389][ T6733] No fuse device found [ 72.086402][ T6733] No fuse device found [ 72.086414][ T6733] No fuse device found [ 72.086427][ T6733] No fuse device found [ 72.086440][ T6733] No fuse device found [ 72.088557][ T6733] No fuse device found [ 72.088574][ T6733] No fuse device found [ 72.353824][ T6745] FAULT_INJECTION: forcing a failure. [ 72.353824][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.353848][ T6745] CPU: 3 UID: 0 PID: 6745 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 72.353864][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.353872][ T6745] Call Trace: [ 72.353878][ T6745] [ 72.353884][ T6745] dump_stack_lvl+0x100/0x190 [ 72.353910][ T6745] should_fail_ex.cold+0x5/0xa [ 72.353930][ T6745] _copy_from_user+0x2e/0xd0 [ 72.353951][ T6745] ucma_bind+0xa8/0x220 [ 72.353968][ T6745] ? __pfx_ucma_bind+0x10/0x10 [ 72.354001][ T6745] ? __pfx_ucma_bind+0x10/0x10 [ 72.354017][ T6745] ucma_write+0x1f6/0x330 [ 72.354032][ T6745] ? __pfx_ucma_write+0x10/0x10 [ 72.354047][ T6745] ? bpf_lsm_file_permission+0x9/0x10 [ 72.354068][ T6745] ? security_file_permission+0x76/0x210 [ 72.354090][ T6745] ? rw_verify_area+0xce/0x6d0 [ 72.354113][ T6745] vfs_write+0x2aa/0x1050 [ 72.354127][ T6745] ? __pfx_ucma_write+0x10/0x10 [ 72.354141][ T6745] ? lock_acquire+0x1d1/0x380 [ 72.354156][ T6745] ? __fget_files+0x34/0x3d0 [ 72.354172][ T6745] ? __pfx_vfs_write+0x10/0x10 [ 72.354185][ T6745] ? find_held_lock+0x2b/0x80 [ 72.354204][ T6745] ? __fget_files+0x215/0x3d0 [ 72.354219][ T6745] ? __fget_files+0x215/0x3d0 [ 72.354237][ T6745] ? __fget_files+0x21f/0x3d0 [ 72.354259][ T6745] ksys_write+0x1f8/0x250 [ 72.354296][ T6745] ? __pfx_ksys_write+0x10/0x10 [ 72.354317][ T6745] __do_fast_syscall_32+0x14b/0x8c0 [ 72.354337][ T6745] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.354357][ T6745] do_fast_syscall_32+0x32/0x70 [ 72.354378][ T6745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.354399][ T6745] RIP: 0023:0xf742efbc [ 72.354411][ T6745] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.354424][ T6745] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 72.354439][ T6745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 72.354447][ T6745] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.354455][ T6745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.354463][ T6745] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.354471][ T6745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.354488][ T6745] [ 72.525300][ T6752] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 72.811706][ T5942] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 72.961451][ T5942] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 72.962408][ T5942] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.962428][ T5942] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 72.962455][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.997782][ T5942] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 73.059356][ T6769] FAULT_INJECTION: forcing a failure. [ 73.059356][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.059382][ T6769] CPU: 3 UID: 0 PID: 6769 Comm: syz.3.250 Not tainted syzkaller #0 PREEMPT(full) [ 73.059403][ T6769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.059412][ T6769] Call Trace: [ 73.059418][ T6769] [ 73.059425][ T6769] dump_stack_lvl+0x100/0x190 [ 73.059455][ T6769] should_fail_ex.cold+0x5/0xa [ 73.059479][ T6769] _copy_from_user+0x2e/0xd0 [ 73.059506][ T6769] memdup_user_nul+0x6c/0x120 [ 73.059529][ T6769] bm_entry_write+0x96/0xe80 [ 73.059561][ T6769] ? __pfx_bm_entry_write+0x10/0x10 [ 73.059583][ T6769] vfs_writev+0x5ed/0xdd0 [ 73.059604][ T6769] ? __pfx_vfs_writev+0x10/0x10 [ 73.059623][ T6769] ? lock_acquire+0x1d1/0x380 [ 73.059640][ T6769] ? __fget_files+0x34/0x3d0 [ 73.059666][ T6769] ? __fget_files+0x21f/0x3d0 [ 73.059688][ T6769] ? do_pwritev+0x125/0x2e0 [ 73.059703][ T6769] do_pwritev+0x125/0x2e0 [ 73.059720][ T6769] ? __pfx_do_pwritev+0x10/0x10 [ 73.059741][ T6769] __do_fast_syscall_32+0x14b/0x8c0 [ 73.059763][ T6769] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.059785][ T6769] do_fast_syscall_32+0x32/0x70 [ 73.059814][ T6769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.059833][ T6769] RIP: 0023:0xf745efbc [ 73.059847][ T6769] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.059863][ T6769] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000014e [ 73.059879][ T6769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001680 [ 73.059890][ T6769] RDX: 0000000000000001 RSI: 0000000000000080 RDI: 000000000240000a [ 73.059900][ T6769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.059910][ T6769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.059918][ T6769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.059941][ T6769] [ 73.788771][ T6782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 73.904436][ T6784] FAULT_INJECTION: forcing a failure. [ 73.904436][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 73.904461][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(full) [ 73.904479][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.904486][ T6784] Call Trace: [ 73.904490][ T6784] [ 73.904494][ T6784] dump_stack_lvl+0x100/0x190 [ 73.904514][ T6784] should_fail_ex.cold+0x5/0xa [ 73.904530][ T6784] should_failslab+0xc2/0x120 [ 73.904543][ T6784] __kmalloc_noprof+0xfc/0x840 [ 73.904559][ T6784] ? __pfx_dynamic_dname+0x10/0x10 [ 73.904574][ T6784] ? tomoyo_encode2+0xfb/0x3c0 [ 73.904592][ T6784] tomoyo_encode2+0xfb/0x3c0 [ 73.904609][ T6784] tomoyo_encode+0x29/0x50 [ 73.904623][ T6784] tomoyo_realpath_from_path+0x18c/0x690 [ 73.904642][ T6784] tomoyo_path_number_perm+0x23c/0x580 [ 73.904656][ T6784] ? tomoyo_path_number_perm+0x22e/0x580 [ 73.904670][ T6784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 73.904685][ T6784] ? get_pid_task+0x106/0x250 [ 73.904702][ T6784] ? __lock_acquire+0x5c0/0x1f40 [ 73.904719][ T6784] ? __fget_files+0x34/0x3d0 [ 73.904731][ T6784] ? find_held_lock+0x2b/0x80 [ 73.904748][ T6784] ? __fget_files+0x215/0x3d0 [ 73.904763][ T6784] ? hook_file_ioctl_common+0x140/0x440 [ 73.904785][ T6784] ? __fget_files+0x215/0x3d0 [ 73.904809][ T6784] ? __fget_files+0x21f/0x3d0 [ 73.904827][ T6784] security_file_ioctl_compat+0xd3/0x230 [ 73.904842][ T6784] __ia32_compat_sys_ioctl+0xc2/0x360 [ 73.904860][ T6784] __do_fast_syscall_32+0x14b/0x8c0 [ 73.904874][ T6784] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.904894][ T6784] do_fast_syscall_32+0x32/0x70 [ 73.904908][ T6784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.904921][ T6784] RIP: 0023:0xf7f37fbc [ 73.904930][ T6784] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.904940][ T6784] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 73.904951][ T6784] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004400ae8f [ 73.904957][ T6784] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.904964][ T6784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.904969][ T6784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.904975][ T6784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.904989][ T6784] [ 73.904998][ T6784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 73.905138][ T6784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 74.119047][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 74.132934][ T6796] ======================================================= [ 74.132934][ T6796] WARNING: The mand mount option has been deprecated and [ 74.132934][ T6796] and is ignored by this kernel. Remove the mand [ 74.132934][ T6796] option from the mount to silence this warning. [ 74.132934][ T6796] ======================================================= [ 74.145885][ T6796] Console: switching to colour dummy device 80x25 [ 74.176320][ T6799] FAULT_INJECTION: forcing a failure. [ 74.176320][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 74.176338][ T6799] CPU: 2 UID: 0 PID: 6799 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 74.176350][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.176356][ T6799] Call Trace: [ 74.176360][ T6799] [ 74.176365][ T6799] dump_stack_lvl+0x100/0x190 [ 74.176384][ T6799] should_fail_ex.cold+0x5/0xa [ 74.176399][ T6799] should_failslab+0xc2/0x120 [ 74.176413][ T6799] __kmalloc_noprof+0xfc/0x840 [ 74.176441][ T6799] ? __pfx_dynamic_dname+0x10/0x10 [ 74.176458][ T6799] ? tomoyo_encode2+0xfb/0x3c0 [ 74.176476][ T6799] tomoyo_encode2+0xfb/0x3c0 [ 74.176493][ T6799] tomoyo_encode+0x29/0x50 [ 74.176508][ T6799] tomoyo_realpath_from_path+0x18c/0x690 [ 74.176527][ T6799] tomoyo_path_number_perm+0x23c/0x580 [ 74.176540][ T6799] ? tomoyo_path_number_perm+0x22e/0x580 [ 74.176554][ T6799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.176569][ T6799] ? get_pid_task+0x106/0x250 [ 74.176586][ T6799] ? __lock_acquire+0x5c0/0x1f40 [ 74.176603][ T6799] ? __fget_files+0x34/0x3d0 [ 74.176615][ T6799] ? find_held_lock+0x2b/0x80 [ 74.176628][ T6799] ? __fget_files+0x215/0x3d0 [ 74.176639][ T6799] ? hook_file_ioctl_common+0x140/0x440 [ 74.176652][ T6799] ? __fget_files+0x215/0x3d0 [ 74.176670][ T6799] ? __fget_files+0x21f/0x3d0 [ 74.176684][ T6799] security_file_ioctl_compat+0xd3/0x230 [ 74.176699][ T6799] __ia32_compat_sys_ioctl+0xc2/0x360 [ 74.176716][ T6799] __do_fast_syscall_32+0x14b/0x8c0 [ 74.176730][ T6799] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.176744][ T6799] do_fast_syscall_32+0x32/0x70 [ 74.176758][ T6799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.176771][ T6799] RIP: 0023:0xf745efbc [ 74.176779][ T6799] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.176789][ T6799] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 74.176800][ T6799] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000aec7 [ 74.176806][ T6799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.176812][ T6799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.176818][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.176824][ T6799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.176838][ T6799] [ 74.176938][ T6799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.324454][ T1352] usb 7-1: USB disconnect, device number 8 [ 74.326407][ T1352] idmouse 7-1:1.0: disconnected [ 74.395621][ T6808] Bluetooth: MGMT ver 1.23 [ 75.276489][ T6830] FAULT_INJECTION: forcing a failure. [ 75.276489][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 75.276508][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 75.276519][ T6830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.276525][ T6830] Call Trace: [ 75.276529][ T6830] [ 75.276533][ T6830] dump_stack_lvl+0x100/0x190 [ 75.276553][ T6830] should_fail_ex.cold+0x5/0xa [ 75.276569][ T6830] should_failslab+0xc2/0x120 [ 75.276582][ T6830] __kmalloc_noprof+0xfc/0x840 [ 75.276597][ T6830] ? rcu_is_watching+0x13/0xc0 [ 75.276611][ T6830] ? tomoyo_encode2+0xfb/0x3c0 [ 75.276630][ T6830] tomoyo_encode2+0xfb/0x3c0 [ 75.276647][ T6830] tomoyo_encode+0x29/0x50 [ 75.276661][ T6830] tomoyo_realpath_from_path+0x18c/0x690 [ 75.276680][ T6830] tomoyo_path_number_perm+0x23c/0x580 [ 75.276694][ T6830] ? tomoyo_path_number_perm+0x22e/0x580 [ 75.276708][ T6830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.276722][ T6830] ? get_pid_task+0x106/0x250 [ 75.276740][ T6830] ? __lock_acquire+0x5c0/0x1f40 [ 75.276757][ T6830] ? __fget_files+0x34/0x3d0 [ 75.276769][ T6830] ? find_held_lock+0x2b/0x80 [ 75.276786][ T6830] ? __fget_files+0x215/0x3d0 [ 75.276796][ T6830] ? hook_file_ioctl_common+0x140/0x440 [ 75.276810][ T6830] ? __fget_files+0x215/0x3d0 [ 75.276823][ T6830] ? __fget_files+0x21f/0x3d0 [ 75.276836][ T6830] security_file_ioctl_compat+0xd3/0x230 [ 75.276851][ T6830] __ia32_compat_sys_ioctl+0xc2/0x360 [ 75.276869][ T6830] __do_fast_syscall_32+0x14b/0x8c0 [ 75.276883][ T6830] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.276897][ T6830] do_fast_syscall_32+0x32/0x70 [ 75.276910][ T6830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.276924][ T6830] RIP: 0023:0xf7f37fbc [ 75.276933][ T6830] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 75.276943][ T6830] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 75.276954][ T6830] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 75.276960][ T6830] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.276966][ T6830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.276972][ T6830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.276978][ T6830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.276992][ T6830] [ 75.277001][ T6830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.429535][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 75.429555][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x656e instead [ 75.429567][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x7072 instead [ 75.429575][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x666e instead [ 75.429584][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000088: 0x662e instead [ 75.429592][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000008c: 0x6863 instead [ 75.429600][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000090: 0x656e instead [ 75.429611][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x0009 instead [ 75.429620][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000e0: 0x0800 instead [ 75.429634][ T6841] jffs2: Empty flash at 0x00000150 ends at 0x00000158 [ 75.429640][ T6841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000160: 0xfffd instead [ 75.429648][ T6841] jffs2: Further such events for this erase block will not be printed [ 75.429653][ T6841] jffs2: Empty flash at 0x00000164 ends at 0x00000168 [ 75.437754][ T6841] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 75.437762][ T6841] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 75.525715][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 75.590768][ T1352] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 75.751134][ T1352] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.751961][ T1352] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.751974][ T1352] usb 6-1: config 0 has no interface number 0 [ 75.751990][ T1352] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.752001][ T1352] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 75.752012][ T1352] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 75.752024][ T1352] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 75.752035][ T1352] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 75.752046][ T1352] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.752063][ T1352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.753218][ T1352] usb 6-1: config 0 descriptor?? [ 75.753782][ T6837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.753869][ T6837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.756974][ T1352] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.015063][ T6837] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 76.020943][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.021168][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.021203][ T6852] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 76.036670][ T1352] usb 6-1: USB disconnect, device number 5 [ 76.039647][ T1352] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 76.131720][ T6859] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 76.132556][ T6859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 76.212863][ T6861] gadgetfs: bound to dummy_udc driver [ 76.303115][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 76.303662][ T6863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'. [ 76.303679][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 76.307146][ T6863] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 76.460843][ T5878] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 76.461253][ C1] gadgetfs: connected [ 76.461417][ T5878] gadgetfs: disconnected [ 76.527533][ T6873] FAULT_INJECTION: forcing a failure. [ 76.527533][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 76.527559][ T6873] CPU: 3 UID: 0 PID: 6873 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(full) [ 76.527579][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.527589][ T6873] Call Trace: [ 76.527596][ T6873] [ 76.527603][ T6873] dump_stack_lvl+0x100/0x190 [ 76.527635][ T6873] should_fail_ex.cold+0x5/0xa [ 76.527660][ T6873] should_failslab+0xc2/0x120 [ 76.527681][ T6873] __kmalloc_noprof+0xfc/0x840 [ 76.527708][ T6873] ? __pfx_dynamic_dname+0x10/0x10 [ 76.527733][ T6873] ? tomoyo_encode2+0xfb/0x3c0 [ 76.527765][ T6873] tomoyo_encode2+0xfb/0x3c0 [ 76.527793][ T6873] tomoyo_encode+0x29/0x50 [ 76.527818][ T6873] tomoyo_realpath_from_path+0x18c/0x690 [ 76.527850][ T6873] tomoyo_path_number_perm+0x23c/0x580 [ 76.527872][ T6873] ? tomoyo_path_number_perm+0x22e/0x580 [ 76.527896][ T6873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.527919][ T6873] ? get_pid_task+0x106/0x250 [ 76.527948][ T6873] ? __lock_acquire+0x5c0/0x1f40 [ 76.527979][ T6873] ? __fget_files+0x34/0x3d0 [ 76.527998][ T6873] ? find_held_lock+0x2b/0x80 [ 76.528021][ T6873] ? __fget_files+0x215/0x3d0 [ 76.528038][ T6873] ? hook_file_ioctl_common+0x140/0x440 [ 76.528062][ T6873] ? __fget_files+0x215/0x3d0 [ 76.528085][ T6873] ? __fget_files+0x21f/0x3d0 [ 76.528217][ T6873] security_file_ioctl_compat+0xd3/0x230 [ 76.528242][ T6873] __ia32_compat_sys_ioctl+0xc2/0x360 [ 76.528273][ T6873] __do_fast_syscall_32+0x14b/0x8c0 [ 76.528299][ T6873] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.528323][ T6873] do_fast_syscall_32+0x32/0x70 [ 76.528346][ T6873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.528367][ T6873] RIP: 0023:0xf745efbc [ 76.528381][ T6873] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.528397][ T6873] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 76.528414][ T6873] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 76.528425][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.528435][ T6873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.528445][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.528455][ T6873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.528480][ T6873] [ 76.528495][ T6873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.610997][ C1] gadgetfs: connected [ 76.612286][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 76.612657][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 76.612774][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.614887][ C1] gadgetfs: configuration #1 [ 76.846197][ T6848] gadgetfs: suspended from state 3 [ 76.846256][ T6848] gadgetfs: disconnected [ 76.848209][ T1043] usb 5-1: USB disconnect, device number 10 [ 77.024587][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 77.121154][ T6891] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.257261][ T6891] md/raid1:md2: active with 2 out of 2 mirrors [ 77.258004][ T6891] md2: detected capacity change from 0 to 4096 [ 77.356153][ T6891] md2: detected capacity change from 4096 to 0 [ 77.356178][ T6891] md: md2 stopped. [ 77.648188][ T6889] syz.1.284 (6889) used greatest stack depth: 18792 bytes left [ 77.660896][ T6924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.822852][ T6932] FAULT_INJECTION: forcing a failure. [ 77.822852][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 77.822879][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(full) [ 77.822901][ T6932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.822913][ T6932] Call Trace: [ 77.822919][ T6932] [ 77.822927][ T6932] dump_stack_lvl+0x100/0x190 [ 77.822961][ T6932] should_fail_ex.cold+0x5/0xa [ 77.822988][ T6932] should_failslab+0xc2/0x120 [ 77.823010][ T6932] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.823038][ T6932] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 77.823058][ T6932] ? acpi_ut_create_update_state+0x72/0x130 [ 77.823091][ T6932] acpi_ut_create_update_state+0x72/0x130 [ 77.823119][ T6932] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 77.823144][ T6932] acpi_ut_update_object_reference+0x32f/0x800 [ 77.823169][ T6932] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 77.823189][ T6932] ? __pfx_acpi_ut_trace+0x10/0x10 [ 77.823205][ T6932] ? __pfx_acpi_ut_trace+0x10/0x10 [ 77.823222][ T6932] ? acpi_ut_status_exit+0x111/0x1c0 [ 77.823255][ T6932] acpi_ut_add_reference+0x80/0x170 [ 77.823275][ T6932] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 77.823300][ T6932] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 77.823325][ T6932] ? acpi_ds_create_operand+0x267/0xc20 [ 77.823354][ T6932] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 77.823376][ T6932] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 77.823396][ T6932] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 77.823424][ T6932] ? __asan_memset+0x23/0x50 [ 77.823450][ T6932] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 77.823472][ T6932] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 77.823500][ T6932] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 77.823528][ T6932] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 77.823552][ T6932] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 77.823574][ T6932] acpi_ds_exec_end_op+0xb78/0x1e60 [ 77.823602][ T6932] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 77.823626][ T6932] acpi_ps_parse_loop+0x5e1/0x26e0 [ 77.823666][ T6932] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 77.823683][ T6932] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 77.823700][ T6932] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 77.823711][ T6932] ? acpi_ut_create_thread_state+0x6d/0x170 [ 77.823733][ T6932] acpi_ps_parse_aml+0x81e/0x1120 [ 77.823753][ T6932] acpi_ps_execute_method+0x5c4/0xe90 [ 77.823768][ T6932] acpi_ns_evaluate+0x640/0x1670 [ 77.823783][ T6932] acpi_ut_evaluate_object+0xf7/0x610 [ 77.823799][ T6932] acpi_rs_get_prt_method_data+0xa0/0x150 [ 77.823812][ T6932] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 77.823823][ T6932] ? acpi_ut_status_exit+0x111/0x1c0 [ 77.823841][ T6932] ? acpi_rs_validate_parameters+0x104/0x210 [ 77.823853][ T6932] acpi_get_irq_routing_table+0xb8/0x140 [ 77.823866][ T6932] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 77.823880][ T6932] ? do_raw_spin_lock+0x128/0x260 [ 77.823894][ T6932] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 77.823908][ T6932] ? do_raw_spin_lock+0x128/0x260 [ 77.823923][ T6932] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 77.823936][ T6932] ? mark_held_locks+0x40/0x70 [ 77.823947][ T6932] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.823961][ T6932] acpi_pci_irq_lookup+0x8e/0x6b0 [ 77.823973][ T6932] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 77.823989][ T6932] acpi_pci_irq_disable+0x1a8/0x360 [ 77.824001][ T6932] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 77.824012][ T6932] pcibios_disable_device+0x89/0xb0 [ 77.824025][ T6932] do_pci_disable_device+0x9f/0x100 [ 77.824036][ T6932] ? __pfx_do_pci_disable_device+0x10/0x10 [ 77.824048][ T6932] ? pci_release_region.part.0+0x15b/0x2e0 [ 77.824064][ T6932] pci_disable_device+0x130/0x270 [ 77.824076][ T6932] virtio_pci_remove+0xcf/0x110 [ 77.824089][ T6932] pci_device_remove+0xb2/0x1d0 [ 77.824103][ T6932] ? __pfx_pci_device_remove+0x10/0x10 [ 77.824118][ T6932] device_remove+0xcb/0x180 [ 77.824140][ T6932] device_release_driver_internal+0x441/0x610 [ 77.824169][ T6932] pci_stop_bus_device+0x120/0x160 [ 77.824191][ T6932] pci_stop_and_remove_bus_device+0x58/0xa0 [ 77.824208][ T6932] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 77.824221][ T6932] remove_store+0x123/0x140 [ 77.824234][ T6932] ? __pfx_remove_store+0x10/0x10 [ 77.824247][ T6932] ? find_held_lock+0x2b/0x80 [ 77.824262][ T6932] ? sysfs_file_kobj+0xe4/0x290 [ 77.824275][ T6932] ? sysfs_file_kobj+0xe4/0x290 [ 77.824289][ T6932] ? __pfx_remove_store+0x10/0x10 [ 77.824300][ T6932] dev_attr_store+0x58/0x80 [ 77.824310][ T6932] ? __pfx_dev_attr_store+0x10/0x10 [ 77.824320][ T6932] sysfs_kf_write+0xf2/0x150 [ 77.824333][ T6932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 77.824344][ T6932] ? __pfx_sysfs_kf_write+0x10/0x10 [ 77.824358][ T6932] vfs_write+0x6af/0x1050 [ 77.824369][ T6932] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 77.824382][ T6932] ? __pfx_vfs_write+0x10/0x10 [ 77.824391][ T6932] ? find_held_lock+0x2b/0x80 [ 77.824414][ T6932] ksys_write+0x12a/0x250 [ 77.824425][ T6932] ? __pfx_ksys_write+0x10/0x10 [ 77.824439][ T6932] __do_fast_syscall_32+0x14b/0x8c0 [ 77.824453][ T6932] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.824467][ T6932] do_fast_syscall_32+0x32/0x70 [ 77.824480][ T6932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.824493][ T6932] RIP: 0023:0xf7f37fbc [ 77.824503][ T6932] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 77.824512][ T6932] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 77.824523][ T6932] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001900 [ 77.824532][ T6932] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.824542][ T6932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.824551][ T6932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.824560][ T6932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.824587][ T6932] [ 77.824598][ T6932] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 77.833419][ T6924] md/raid1:md2: active with 2 out of 2 mirrors [ 77.833783][ T6924] md2: detected capacity change from 0 to 4096 [ 77.888261][ T6924] md2: detected capacity change from 4096 to 0 [ 77.888280][ T6924] md: md2 stopped. [ 77.997053][ T6938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.205313][ T6946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.281442][ T6946] md: could not open device unknown-block(1,0). [ 78.281477][ T6946] md: error, md_import_device() returned -16 [ 78.321450][ T6951] gadgetfs: bound to dummy_udc driver [ 78.350351][ T6952] md: md0 stopped. [ 78.411614][ T6954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.503261][ T6959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 78.503593][ T6959] FAULT_INJECTION: forcing a failure. [ 78.503593][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 78.503608][ T6959] CPU: 2 UID: 0 PID: 6959 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 78.503620][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.503626][ T6959] Call Trace: [ 78.503630][ T6959] [ 78.503634][ T6959] dump_stack_lvl+0x100/0x190 [ 78.503654][ T6959] should_fail_ex.cold+0x5/0xa [ 78.503670][ T6959] should_failslab+0xc2/0x120 [ 78.503682][ T6959] __kmalloc_noprof+0xfc/0x840 [ 78.503698][ T6959] ? __pfx_dynamic_dname+0x10/0x10 [ 78.503713][ T6959] ? tomoyo_encode2+0xfb/0x3c0 [ 78.503731][ T6959] tomoyo_encode2+0xfb/0x3c0 [ 78.503748][ T6959] tomoyo_encode+0x29/0x50 [ 78.503763][ T6959] tomoyo_realpath_from_path+0x18c/0x690 [ 78.503782][ T6959] tomoyo_path_number_perm+0x23c/0x580 [ 78.503795][ T6959] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.503810][ T6959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.503824][ T6959] ? get_pid_task+0x106/0x250 [ 78.503841][ T6959] ? __lock_acquire+0x5c0/0x1f40 [ 78.503858][ T6959] ? __fget_files+0x34/0x3d0 [ 78.503870][ T6959] ? find_held_lock+0x2b/0x80 [ 78.503884][ T6959] ? __fget_files+0x215/0x3d0 [ 78.503894][ T6959] ? hook_file_ioctl_common+0x140/0x440 [ 78.503907][ T6959] ? __fget_files+0x215/0x3d0 [ 78.503921][ T6959] ? __fget_files+0x21f/0x3d0 [ 78.503934][ T6959] security_file_ioctl_compat+0xd3/0x230 [ 78.503949][ T6959] __ia32_compat_sys_ioctl+0xc2/0x360 [ 78.503967][ T6959] __do_fast_syscall_32+0x14b/0x8c0 [ 78.503980][ T6959] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.503994][ T6959] do_fast_syscall_32+0x32/0x70 [ 78.504008][ T6959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.504021][ T6959] RIP: 0023:0xf742efbc [ 78.504033][ T6959] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 78.504042][ T6959] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 78.504053][ T6959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 78.504059][ T6959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.504065][ T6959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.504071][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.504076][ T6959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.504090][ T6959] [ 78.504099][ T6959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.506898][ T6959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.561339][ T29] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 78.561542][ C1] gadgetfs: connected [ 78.562230][ T29] gadgetfs: disconnected [ 78.710872][ C1] gadgetfs: connected [ 78.711691][ T29] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 78.711930][ T29] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 78.711948][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.716108][ C1] gadgetfs: configuration #1 [ 78.717580][ T6966] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 78.736767][ T6966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.881284][ T6939] gadgetfs: suspended from state 3 [ 78.881350][ T6939] gadgetfs: disconnected [ 78.882136][ T29] usb 5-1: USB disconnect, device number 11 [ 78.943879][ T6976] FAULT_INJECTION: forcing a failure. [ 78.943879][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 78.943918][ T6976] CPU: 2 UID: 0 PID: 6976 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 78.943937][ T6976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.943957][ T6976] Call Trace: [ 78.943963][ T6976] [ 78.943970][ T6976] dump_stack_lvl+0x100/0x190 [ 78.944012][ T6976] should_fail_ex.cold+0x5/0xa [ 78.944037][ T6976] should_failslab+0xc2/0x120 [ 78.944063][ T6976] __kmalloc_noprof+0xfc/0x840 [ 78.944090][ T6976] ? tomoyo_encode2+0xfb/0x3c0 [ 78.944118][ T6976] tomoyo_encode2+0xfb/0x3c0 [ 78.944145][ T6976] tomoyo_encode+0x29/0x50 [ 78.944169][ T6976] tomoyo_realpath_from_path+0x18c/0x690 [ 78.944199][ T6976] tomoyo_path_number_perm+0x23c/0x580 [ 78.944221][ T6976] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.944244][ T6976] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.944267][ T6976] ? get_pid_task+0x106/0x250 [ 78.944294][ T6976] ? __lock_acquire+0x5c0/0x1f40 [ 78.944325][ T6976] ? __fget_files+0x34/0x3d0 [ 78.944346][ T6976] ? find_held_lock+0x2b/0x80 [ 78.944366][ T6976] ? __fget_files+0x215/0x3d0 [ 78.944383][ T6976] ? hook_file_ioctl_common+0x140/0x440 [ 78.944405][ T6976] ? __fget_files+0x215/0x3d0 [ 78.944426][ T6976] ? __fget_files+0x21f/0x3d0 [ 78.944449][ T6976] security_file_ioctl_compat+0xd3/0x230 [ 78.944473][ T6976] __ia32_compat_sys_ioctl+0xc2/0x360 [ 78.944501][ T6976] __do_fast_syscall_32+0x14b/0x8c0 [ 78.944529][ T6976] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.944551][ T6976] do_fast_syscall_32+0x32/0x70 [ 78.944574][ T6976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.944594][ T6976] RIP: 0023:0xf742efbc [ 78.944609][ T6976] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 78.944623][ T6976] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 78.944646][ T6976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086602 [ 78.944656][ T6976] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.944667][ T6976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.944676][ T6976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.944686][ T6976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.944709][ T6976] [ 78.944725][ T6976] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.049327][ T6986] netlink: 'syz.2.311': attribute type 19 has an invalid length. [ 79.050010][ T6986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.311'. [ 79.103622][ T6993] Illegal XDP return value 4294967274 on prog (id 41) dev syz_tun, expect packet loss! [ 79.173175][ T6995] md: couldn't update array info. -22 [ 79.220978][ T6998] md: could not open device unknown-block(1,2). [ 79.221035][ T6998] md: md_import_device returned -16 [ 79.221735][ T6995] FAULT_INJECTION: forcing a failure. [ 79.221735][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 79.221753][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.1.315 Not tainted syzkaller #0 PREEMPT(full) [ 79.221765][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.221772][ T6995] Call Trace: [ 79.221776][ T6995] [ 79.221780][ T6995] dump_stack_lvl+0x100/0x190 [ 79.221800][ T6995] should_fail_ex.cold+0x5/0xa [ 79.221816][ T6995] should_failslab+0xc2/0x120 [ 79.221828][ T6995] __kmalloc_noprof+0xfc/0x840 [ 79.221847][ T6995] ? tomoyo_encode2+0xfb/0x3c0 [ 79.221866][ T6995] tomoyo_encode2+0xfb/0x3c0 [ 79.221883][ T6995] tomoyo_encode+0x29/0x50 [ 79.221898][ T6995] tomoyo_realpath_from_path+0x18c/0x690 [ 79.221917][ T6995] tomoyo_path_number_perm+0x23c/0x580 [ 79.221930][ T6995] ? tomoyo_path_number_perm+0x22e/0x580 [ 79.221945][ T6995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 79.221959][ T6995] ? get_pid_task+0x106/0x250 [ 79.221976][ T6995] ? __lock_acquire+0x5c0/0x1f40 [ 79.221993][ T6995] ? __fget_files+0x34/0x3d0 [ 79.222005][ T6995] ? find_held_lock+0x2b/0x80 [ 79.222019][ T6995] ? __fget_files+0x215/0x3d0 [ 79.222029][ T6995] ? hook_file_ioctl_common+0x140/0x440 [ 79.222044][ T6995] ? __fget_files+0x215/0x3d0 [ 79.222057][ T6995] ? __fget_files+0x21f/0x3d0 [ 79.222070][ T6995] security_file_ioctl_compat+0xd3/0x230 [ 79.222085][ T6995] __ia32_compat_sys_ioctl+0xc2/0x360 [ 79.222103][ T6995] __do_fast_syscall_32+0x14b/0x8c0 [ 79.222116][ T6995] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.222130][ T6995] do_fast_syscall_32+0x32/0x70 [ 79.222147][ T6995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.222166][ T6995] RIP: 0023:0xf7f37fbc [ 79.222180][ T6995] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 79.222194][ T6995] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 79.222211][ T6995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040140921 [ 79.222223][ T6995] RDX: 0000000080000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.222233][ T6995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.222241][ T6995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.222252][ T6995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.222275][ T6995] [ 79.222294][ T6995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.242482][ T7001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.242500][ T7001] block device autoloading is deprecated and will be removed. [ 79.251259][ T6995] md: could not open device unknown-block(1,3). [ 79.251286][ T6995] md: md_import_device returned -16 [ 79.569431][ T7016] Invalid ELF header magic: != ELF [ 79.583206][ T7016] FAULT_INJECTION: forcing a failure. [ 79.583206][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 79.583446][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.1.318 Not tainted syzkaller #0 PREEMPT(full) [ 79.583480][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.583487][ T7016] Call Trace: [ 79.583491][ T7016] [ 79.583496][ T7016] dump_stack_lvl+0x100/0x190 [ 79.583516][ T7016] should_fail_ex.cold+0x5/0xa [ 79.583532][ T7016] should_failslab+0xc2/0x120 [ 79.583544][ T7016] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 79.583562][ T7016] ? __alloc_skb+0x140/0x710 [ 79.583585][ T7016] __alloc_skb+0x140/0x710 [ 79.583598][ T7016] ? __alloc_skb+0x5b7/0x710 [ 79.583611][ T7016] ? __pfx___alloc_skb+0x10/0x10 [ 79.583628][ T7016] netlink_dump+0x187/0xd30 [ 79.583645][ T7016] ? __pfx_netlink_dump+0x10/0x10 [ 79.583658][ T7016] ? kasan_quarantine_put+0x104/0x240 [ 79.583674][ T7016] ? kfree_skbmem+0x19f/0x210 [ 79.583687][ T7016] netlink_recvmsg+0x86a/0xb60 [ 79.583703][ T7016] ? __pfx_netlink_recvmsg+0x10/0x10 [ 79.583717][ T7016] ? __lock_acquire+0x5c0/0x1f40 [ 79.583731][ T7016] ? aa_sock_msg_perm+0x11e/0x200 [ 79.583745][ T7016] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 79.583759][ T7016] ? __pfx_netlink_recvmsg+0x10/0x10 [ 79.583778][ T7016] sock_recvmsg+0x1d5/0x220 [ 79.583790][ T7016] ____sys_recvmsg+0x21e/0x6a0 [ 79.583803][ T7016] ? __pfx_____sys_recvmsg+0x10/0x10 [ 79.583820][ T7016] ? __lock_acquire+0x5c0/0x1f40 [ 79.583833][ T7016] ___sys_recvmsg+0x16a/0x1a0 [ 79.583845][ T7016] ? __pfx____sys_recvmsg+0x10/0x10 [ 79.583857][ T7016] ? lock_acquire+0x1d1/0x380 [ 79.583878][ T7016] do_recvmmsg+0x548/0x750 [ 79.583892][ T7016] ? __pfx_do_recvmmsg+0x10/0x10 [ 79.583904][ T7016] ? rcu_is_watching+0x13/0xc0 [ 79.583918][ T7016] ? trace_sched_exit_tp+0x120/0x160 [ 79.583932][ T7016] ? __schedule+0x1270/0x6990 [ 79.583952][ T7016] __sys_recvmmsg+0x21f/0x270 [ 79.583967][ T7016] ? __pfx___sys_recvmmsg+0x10/0x10 [ 79.583982][ T7016] ? __might_fault+0xc5/0x140 [ 79.583995][ T7016] ? __might_fault+0xc5/0x140 [ 79.584009][ T7016] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 79.584023][ T7016] ? __might_fault+0x111/0x140 [ 79.584035][ T7016] __do_fast_syscall_32+0x14b/0x8c0 [ 79.584052][ T7016] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.584066][ T7016] do_fast_syscall_32+0x32/0x70 [ 79.584080][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.584093][ T7016] RIP: 0023:0xf7f37fbc [ 79.584102][ T7016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 79.584112][ T7016] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 79.584123][ T7016] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000440 [ 79.584129][ T7016] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.584135][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.584141][ T7016] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.584147][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.584161][ T7016] [ 79.855616][ T7022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.855635][ T7022] block device autoloading is deprecated and will be removed. [ 79.952068][ T7024] md: could not open device unknown-block(1,0). [ 79.952105][ T7024] md: error, md_import_device() returned -16 [ 79.954942][ T7025] gadgetfs: bound to dummy_udc driver [ 80.012386][ T7027] Invalid ELF header magic: != ELF [ 80.242756][ T29] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 80.242946][ C1] gadgetfs: connected [ 80.245201][ T29] gadgetfs: disconnected [ 80.395424][ C1] gadgetfs: connected [ 80.396470][ T29] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 80.396794][ T29] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 80.396823][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.411389][ C1] gadgetfs: configuration #1 [ 80.574755][ T7018] gadgetfs: suspended from state 3 [ 80.574812][ T7018] gadgetfs: disconnected [ 80.575979][ T5878] usb 5-1: USB disconnect, device number 12 [ 80.947325][ T7049] FAULT_INJECTION: forcing a failure. [ 80.947325][ T7049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.947345][ T7049] CPU: 3 UID: 0 PID: 7049 Comm: syz.2.328 Not tainted syzkaller #0 PREEMPT(full) [ 80.947357][ T7049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.947363][ T7049] Call Trace: [ 80.947367][ T7049] [ 80.947372][ T7049] dump_stack_lvl+0x100/0x190 [ 80.947392][ T7049] should_fail_ex.cold+0x5/0xa [ 80.947407][ T7049] _copy_from_user+0x2e/0xd0 [ 80.947436][ T7049] move_addr_to_kernel+0x65/0x170 [ 80.947450][ T7049] get_compat_msghdr+0x3c7/0x480 [ 80.947463][ T7049] ? __pfx_get_compat_msghdr+0x10/0x10 [ 80.947477][ T7049] ? _kstrtoull+0x144/0x200 [ 80.947488][ T7049] ? __pfx__kstrtoull+0x10/0x10 [ 80.947500][ T7049] ___sys_sendmsg+0x1b6/0x1e0 [ 80.947513][ T7049] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.947524][ T7049] ? __lock_acquire+0x5c0/0x1f40 [ 80.947541][ T7049] ? __fget_files+0x34/0x3d0 [ 80.947562][ T7049] __sys_sendmmsg+0x304/0x440 [ 80.947578][ T7049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.947593][ T7049] ? find_held_lock+0x2b/0x80 [ 80.947616][ T7049] ? __might_fault+0xc5/0x140 [ 80.947629][ T7049] ? find_held_lock+0x2b/0x80 [ 80.947642][ T7049] ? __might_fault+0xc5/0x140 [ 80.947667][ T7049] ? __might_fault+0xc5/0x140 [ 80.947681][ T7049] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 80.947695][ T7049] __do_fast_syscall_32+0x14b/0x8c0 [ 80.947709][ T7049] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.947722][ T7049] do_fast_syscall_32+0x32/0x70 [ 80.947736][ T7049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.947749][ T7049] RIP: 0023:0xf744efbc [ 80.947758][ T7049] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 80.947768][ T7049] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 80.947778][ T7049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ac0 [ 80.947785][ T7049] RDX: 00000000801ae9af RSI: 000000000000ff00 RDI: 0000000000000000 [ 80.947791][ T7049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.947797][ T7049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.947803][ T7049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.947817][ T7049] [ 81.213676][ T7062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 81.216942][ T7062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.447458][ T7070] FAULT_INJECTION: forcing a failure. [ 81.447458][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 81.447484][ T7070] CPU: 0 UID: 0 PID: 7070 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 81.447503][ T7070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.447512][ T7070] Call Trace: [ 81.447518][ T7070] [ 81.447526][ T7070] dump_stack_lvl+0x100/0x190 [ 81.447555][ T7070] should_fail_ex.cold+0x5/0xa [ 81.447580][ T7070] should_failslab+0xc2/0x120 [ 81.447599][ T7070] __kmalloc_noprof+0xfc/0x840 [ 81.447630][ T7070] ? __pfx_dynamic_dname+0x10/0x10 [ 81.447657][ T7070] ? tomoyo_encode2+0xfb/0x3c0 [ 81.447685][ T7070] tomoyo_encode2+0xfb/0x3c0 [ 81.447713][ T7070] tomoyo_encode+0x29/0x50 [ 81.447736][ T7070] tomoyo_realpath_from_path+0x18c/0x690 [ 81.447765][ T7070] tomoyo_path_number_perm+0x23c/0x580 [ 81.447789][ T7070] ? tomoyo_path_number_perm+0x22e/0x580 [ 81.447809][ T7070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.447834][ T7070] ? get_pid_task+0x106/0x250 [ 81.447859][ T7070] ? __lock_acquire+0x5c0/0x1f40 [ 81.447889][ T7070] ? __fget_files+0x34/0x3d0 [ 81.447909][ T7070] ? find_held_lock+0x2b/0x80 [ 81.447933][ T7070] ? __fget_files+0x215/0x3d0 [ 81.447950][ T7070] ? hook_file_ioctl_common+0x140/0x440 [ 81.447973][ T7070] ? __fget_files+0x215/0x3d0 [ 81.447996][ T7070] ? __fget_files+0x21f/0x3d0 [ 81.448034][ T7070] security_file_ioctl_compat+0xd3/0x230 [ 81.448061][ T7070] __ia32_compat_sys_ioctl+0xc2/0x360 [ 81.448088][ T7070] __do_fast_syscall_32+0x14b/0x8c0 [ 81.448110][ T7070] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.448133][ T7070] do_fast_syscall_32+0x32/0x70 [ 81.448154][ T7070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.448176][ T7070] RIP: 0023:0xf744efbc [ 81.448190][ T7070] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 81.448204][ T7070] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 81.448223][ T7070] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 81.448233][ T7070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.448241][ T7070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.448249][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.448260][ T7070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.448284][ T7070] [ 81.448506][ T7070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.629505][ T7076] Bluetooth: hci0: unsupported parameter 5134 [ 81.629526][ T7076] Bluetooth: hci0: unsupported parameter 8192 [ 81.629538][ T7076] Bluetooth: hci0: unsupported parameter 5134 [ 81.629548][ T7076] Bluetooth: hci0: unsupported parameter 8192 [ 81.746730][ T7078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.936738][ T7078] md/raid1:md2: active with 2 out of 2 mirrors [ 81.937467][ T7078] md2: detected capacity change from 0 to 4096 [ 82.020839][ T7078] md2: detected capacity change from 4096 to 0 [ 82.020860][ T7078] md: md2 stopped. [ 82.339995][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 82.340810][ T5942] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.359456][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 82.491400][ T5942] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 82.492524][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.492547][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.492564][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 82.492582][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.492608][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.498247][ T5942] usb 8-1: config 0 descriptor?? [ 82.527204][ T7101] gadgetfs: bound to dummy_udc driver [ 82.624132][ T7105] 9p: Bad value for 'rfdno' [ 82.780772][ T5878] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 82.781130][ C1] gadgetfs: connected [ 82.781592][ T5878] gadgetfs: disconnected [ 82.904920][ T5942] hid_parser_main: 1 callbacks suppressed [ 82.904934][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904947][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904958][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904969][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904980][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904991][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.905002][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.905013][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.905024][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.905035][ T5942] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.913410][ T5942] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.940985][ C1] gadgetfs: connected [ 82.942109][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 82.942416][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 82.942487][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.944115][ C1] gadgetfs: configuration #1 [ 83.080826][ T1352] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.105330][ T7084] plantronics 0003:047F:FFFF.0005: usb_submit_urb(out) failed: -90 [ 83.109787][ T7084] pim6reg: entered allmulticast mode [ 83.111555][ T7084] pim6reg: left allmulticast mode [ 83.145171][ T7085] gadgetfs: suspended from state 3 [ 83.145467][ T7085] gadgetfs: disconnected [ 83.148515][ T5878] usb 5-1: USB disconnect, device number 13 [ 83.242241][ T1352] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.242265][ T1352] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 83.243167][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.243189][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.243201][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.244025][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.244045][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.244057][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.244873][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.244892][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.244904][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.245720][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.245740][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.245754][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.246902][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.246923][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.246935][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.247824][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.247844][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.247855][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.248690][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.248710][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.248722][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.249558][ T1352] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.249577][ T1352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.249589][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 83.252373][ T1352] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.252386][ T1352] usb 6-1: Product: syz [ 83.252393][ T1352] usb 6-1: Manufacturer: syz [ 83.252399][ T1352] usb 6-1: SerialNumber: syz [ 83.256376][ T1352] usb 6-1: config 0 descriptor?? [ 83.263074][ T1352] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 83.485462][ T41] usb 6-1: USB disconnect, device number 6 [ 83.491906][ T41] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 83.628954][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.633778][ T7136] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 83.649055][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.654991][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'. [ 83.665910][ T7136] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 83.675467][ T7136] bond1: (slave wlan1): Enslaving as an active interface with a down link [ 84.448519][ T7148] gadgetfs: bound to dummy_udc driver [ 84.643917][ T41] usb 8-1: USB disconnect, device number 5 [ 84.691355][ T5878] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 84.691561][ C1] gadgetfs: connected [ 84.691988][ T5878] gadgetfs: disconnected [ 84.840915][ C1] gadgetfs: connected [ 84.841808][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 84.842057][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 84.842076][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.844089][ C1] gadgetfs: configuration #1 [ 85.095322][ T7144] gadgetfs: suspended from state 3 [ 85.095443][ T7144] gadgetfs: disconnected [ 85.101669][ T5878] usb 5-1: USB disconnect, device number 14 [ 85.448938][ T7162] affs: No valid root block on device nbd1 [ 85.543543][ T7165] FAULT_INJECTION: forcing a failure. [ 85.543543][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 85.543562][ T7165] CPU: 2 UID: 0 PID: 7165 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) [ 85.543574][ T7165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.543580][ T7165] Call Trace: [ 85.543584][ T7165] [ 85.543588][ T7165] dump_stack_lvl+0x100/0x190 [ 85.543608][ T7165] should_fail_ex.cold+0x5/0xa [ 85.543623][ T7165] should_failslab+0xc2/0x120 [ 85.543636][ T7165] __kmalloc_noprof+0xfc/0x840 [ 85.543651][ T7165] ? __pfx_dynamic_dname+0x10/0x10 [ 85.543667][ T7165] ? tomoyo_encode2+0xfb/0x3c0 [ 85.543686][ T7165] tomoyo_encode2+0xfb/0x3c0 [ 85.543703][ T7165] tomoyo_encode+0x29/0x50 [ 85.543718][ T7165] tomoyo_realpath_from_path+0x18c/0x690 [ 85.543737][ T7165] tomoyo_path_number_perm+0x23c/0x580 [ 85.543750][ T7165] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.543764][ T7165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.543779][ T7165] ? get_pid_task+0x106/0x250 [ 85.543796][ T7165] ? __lock_acquire+0x5c0/0x1f40 [ 85.543814][ T7165] ? __fget_files+0x34/0x3d0 [ 85.543825][ T7165] ? find_held_lock+0x2b/0x80 [ 85.543839][ T7165] ? __fget_files+0x215/0x3d0 [ 85.543849][ T7165] ? hook_file_ioctl_common+0x140/0x440 [ 85.543863][ T7165] ? __fget_files+0x215/0x3d0 [ 85.543877][ T7165] ? __fget_files+0x21f/0x3d0 [ 85.543890][ T7165] security_file_ioctl_compat+0xd3/0x230 [ 85.543905][ T7165] __ia32_compat_sys_ioctl+0xc2/0x360 [ 85.543923][ T7165] __do_fast_syscall_32+0x14b/0x8c0 [ 85.543937][ T7165] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.543951][ T7165] do_fast_syscall_32+0x32/0x70 [ 85.543965][ T7165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.543978][ T7165] RIP: 0023:0xf7f37fbc [ 85.543987][ T7165] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.543997][ T7165] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 85.544008][ T7165] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005452 [ 85.544014][ T7165] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.544021][ T7165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.544027][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.544033][ T7165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.544046][ T7165] [ 85.544055][ T7165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.691741][ T5802] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.798050][ T7172] hub 5-0:1.0: USB hub found [ 85.798361][ T7172] hub 5-0:1.0: 1 port detected [ 86.430214][ T7186] gadgetfs: bound to dummy_udc driver [ 86.434771][ T5167] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.591526][ T5167] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 86.592744][ T5167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.592768][ T5167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.592786][ T5167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 86.592803][ T5167] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.592830][ T5167] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.594702][ T5167] usb 8-1: config 0 descriptor?? [ 86.670745][ T5878] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 86.670939][ C1] gadgetfs: connected [ 86.671282][ T5878] gadgetfs: disconnected [ 86.820905][ C1] gadgetfs: connected [ 86.821575][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 86.821809][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.821828][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.823219][ C1] gadgetfs: configuration #1 [ 87.013467][ T5167] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 87.066435][ T7183] gadgetfs: suspended from state 3 [ 87.066671][ T7183] gadgetfs: disconnected [ 87.067859][ T5878] usb 5-1: USB disconnect, device number 15 [ 87.196906][ T7191] netlink: 'syz.1.373': attribute type 3 has an invalid length. [ 87.200938][ T7181] plantronics 0003:047F:FFFF.0006: usb_submit_urb(out) failed: -90 [ 87.204104][ T7181] pim6reg: entered allmulticast mode [ 87.208094][ T7181] pim6reg: left allmulticast mode [ 87.226256][ T7193] FAULT_INJECTION: forcing a failure. [ 87.226256][ T7193] name failslab, interval 1, probability 0, space 0, times 0 [ 87.226274][ T7193] CPU: 2 UID: 0 PID: 7193 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) [ 87.226286][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.226292][ T7193] Call Trace: [ 87.226296][ T7193] [ 87.226300][ T7193] dump_stack_lvl+0x100/0x190 [ 87.226320][ T7193] should_fail_ex.cold+0x5/0xa [ 87.226335][ T7193] should_failslab+0xc2/0x120 [ 87.226348][ T7193] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.226365][ T7193] ? do_getname+0x35/0x390 [ 87.226381][ T7193] do_getname+0x35/0x390 [ 87.226396][ T7193] path_setxattrat+0x360/0x3b0 [ 87.226410][ T7193] ? __pfx_path_setxattrat+0x10/0x10 [ 87.226425][ T7193] ? rcu_read_lock_any_held+0x6a/0x90 [ 87.226441][ T7193] ? find_held_lock+0x2b/0x80 [ 87.226464][ T7193] ? __might_fault+0xc5/0x140 [ 87.226477][ T7193] ? find_held_lock+0x2b/0x80 [ 87.226490][ T7193] ? __might_fault+0xc5/0x140 [ 87.226502][ T7193] ? __might_fault+0xc5/0x140 [ 87.226515][ T7193] __ia32_sys_setxattr+0xc4/0x140 [ 87.226528][ T7193] ? __might_fault+0x111/0x140 [ 87.226541][ T7193] __do_fast_syscall_32+0x14b/0x8c0 [ 87.226555][ T7193] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.226569][ T7193] do_fast_syscall_32+0x32/0x70 [ 87.226582][ T7193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.226600][ T7193] RIP: 0023:0xf744efbc [ 87.226609][ T7193] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 87.226619][ T7193] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 87.226629][ T7193] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 87.226636][ T7193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 87.226642][ T7193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.226647][ T7193] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.226653][ T7193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.226666][ T7193] [ 87.361749][ T7196] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.524946][ T7196] md/raid1:md2: active with 2 out of 2 mirrors [ 87.525326][ T7196] md2: detected capacity change from 0 to 4096 [ 87.597048][ T7196] md2: detected capacity change from 4096 to 0 [ 87.597083][ T7196] md: md2 stopped. [ 87.806391][ T7209] FAULT_INJECTION: forcing a failure. [ 87.806391][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.806409][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 87.806420][ T7209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.806427][ T7209] Call Trace: [ 87.806431][ T7209] [ 87.806436][ T7209] dump_stack_lvl+0x100/0x190 [ 87.806456][ T7209] should_fail_ex.cold+0x5/0xa [ 87.806472][ T7209] _copy_from_user+0x2e/0xd0 [ 87.806487][ T7209] io_uring_setup+0xc0/0x160 [ 87.806503][ T7209] ? rcu_read_lock_any_held+0x6a/0x90 [ 87.806519][ T7209] ? find_held_lock+0x2b/0x80 [ 87.806547][ T7209] ? __pfx_io_uring_setup+0x10/0x10 [ 87.806562][ T7209] ? ksys_write+0x190/0x250 [ 87.806574][ T7209] ? __lock_acquire+0x5c0/0x1f40 [ 87.806592][ T7209] ? find_held_lock+0x2b/0x80 [ 87.806605][ T7209] ? __might_fault+0xc5/0x140 [ 87.806618][ T7209] ? __might_fault+0xc5/0x140 [ 87.806632][ T7209] __ia32_sys_io_uring_setup+0xc2/0x170 [ 87.806648][ T7209] __do_fast_syscall_32+0x14b/0x8c0 [ 87.806662][ T7209] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.806676][ T7209] do_fast_syscall_32+0x32/0x70 [ 87.806690][ T7209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.806703][ T7209] RIP: 0023:0xf744efbc [ 87.806711][ T7209] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 87.806721][ T7209] RSP: 002b:00000000f546643c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 87.806732][ T7209] RAX: ffffffffffffffda RBX: 00000000000003f7 RCX: 0000000080001cc8 [ 87.806738][ T7209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.806744][ T7209] RBP: 00000000f54664fc R08: 0000000000000000 R09: 0000000000000000 [ 87.806750][ T7209] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.806756][ T7209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.806769][ T7209] [ 88.335862][ T7216] FAULT_INJECTION: forcing a failure. [ 88.335862][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 88.335880][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(full) [ 88.335892][ T7216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.335898][ T7216] Call Trace: [ 88.335902][ T7216] [ 88.335906][ T7216] dump_stack_lvl+0x100/0x190 [ 88.335926][ T7216] should_fail_ex.cold+0x5/0xa [ 88.335941][ T7216] should_failslab+0xc2/0x120 [ 88.335954][ T7216] __kmalloc_noprof+0xfc/0x840 [ 88.335970][ T7216] ? __pfx_dynamic_dname+0x10/0x10 [ 88.335986][ T7216] ? tomoyo_encode2+0xfb/0x3c0 [ 88.336004][ T7216] tomoyo_encode2+0xfb/0x3c0 [ 88.336021][ T7216] tomoyo_encode+0x29/0x50 [ 88.336036][ T7216] tomoyo_realpath_from_path+0x18c/0x690 [ 88.336055][ T7216] tomoyo_path_number_perm+0x23c/0x580 [ 88.336068][ T7216] ? tomoyo_path_number_perm+0x22e/0x580 [ 88.336083][ T7216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.336097][ T7216] ? get_pid_task+0x106/0x250 [ 88.336114][ T7216] ? __lock_acquire+0x5c0/0x1f40 [ 88.336132][ T7216] ? __fget_files+0x34/0x3d0 [ 88.336144][ T7216] ? find_held_lock+0x2b/0x80 [ 88.336160][ T7216] ? __fget_files+0x215/0x3d0 [ 88.336170][ T7216] ? hook_file_ioctl_common+0x140/0x440 [ 88.336184][ T7216] ? __fget_files+0x215/0x3d0 [ 88.336197][ T7216] ? __fget_files+0x21f/0x3d0 [ 88.336210][ T7216] security_file_ioctl_compat+0xd3/0x230 [ 88.336225][ T7216] __ia32_compat_sys_ioctl+0xc2/0x360 [ 88.336243][ T7216] __do_fast_syscall_32+0x14b/0x8c0 [ 88.336257][ T7216] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.336270][ T7216] do_fast_syscall_32+0x32/0x70 [ 88.336284][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.336297][ T7216] RIP: 0023:0xf7f37fbc [ 88.336306][ T7216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 88.336316][ T7216] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 88.336327][ T7216] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 88.336334][ T7216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.336340][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.336345][ T7216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.336351][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.336365][ T7216] [ 88.336374][ T7216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.654084][ T7225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.711016][ T7225] md: couldn't update array info. -22 [ 88.711175][ T7227] md: could not open device unknown-block(1,2). [ 88.711221][ T7227] md: md_import_device returned -16 [ 88.762321][ T7228] 9pnet_virtio: no channels available for device syz [ 88.792511][ T7228] gadgetfs: bound to dummy_udc driver [ 88.798637][ T7225] md: could not open device unknown-block(1,3). [ 88.798694][ T7225] md: md_import_device returned -16 [ 88.844499][ T7225] md1: detected capacity change from 1024 to 0 [ 88.844512][ T7225] md: md1 stopped. [ 89.052486][ T5878] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 89.052680][ C1] gadgetfs: connected [ 89.052792][ T5878] gadgetfs: disconnected [ 89.077956][ T43] audit: type=1326 audit(1793683926.312:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.1.386" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f37fbc code=0x0 [ 89.103199][ T1043] usb 8-1: USB disconnect, device number 6 [ 89.211533][ C1] gadgetfs: connected [ 89.214550][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 89.216138][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 89.216343][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.226673][ C1] gadgetfs: configuration #1 [ 89.326643][ T7220] gadgetfs: suspended from state 3 [ 89.326846][ T7220] gadgetfs: disconnected [ 89.328061][ T1043] usb 5-1: USB disconnect, device number 16 [ 89.420776][ T5942] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.571738][ T5942] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.574502][ T5942] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.574520][ T5942] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 89.574531][ T5942] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.576305][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.576320][ T5942] usb 6-1: Product: syz [ 89.576329][ T5942] usb 6-1: Manufacturer: syz [ 89.576338][ T5942] usb 6-1: SerialNumber: syz [ 89.579339][ T5942] usb 6-1: config 0 descriptor?? [ 89.579874][ T7232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.591079][ T5942] usb 6-1: selecting invalid altsetting 0 [ 90.334282][ T7252] FAULT_INJECTION: forcing a failure. [ 90.334282][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.334301][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) [ 90.334313][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.334320][ T7252] Call Trace: [ 90.334324][ T7252] [ 90.334328][ T7252] dump_stack_lvl+0x100/0x190 [ 90.334348][ T7252] should_fail_ex.cold+0x5/0xa [ 90.334365][ T7252] _copy_to_user+0x32/0xd0 [ 90.334381][ T7252] simple_read_from_buffer+0xcb/0x170 [ 90.334395][ T7252] proc_fail_nth_read+0x1af/0x230 [ 90.334408][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.334422][ T7252] ? rw_verify_area+0xce/0x6d0 [ 90.334437][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.334449][ T7252] vfs_read+0x1e4/0xb40 [ 90.334460][ T7252] ? lock_acquire+0x1d1/0x380 [ 90.334471][ T7252] ? __fget_files+0x34/0x3d0 [ 90.334482][ T7252] ? __pfx_vfs_read+0x10/0x10 [ 90.334491][ T7252] ? find_held_lock+0x2b/0x80 [ 90.334505][ T7252] ? __fget_files+0x215/0x3d0 [ 90.334518][ T7252] ? __fget_files+0x21f/0x3d0 [ 90.334533][ T7252] ksys_read+0x12a/0x250 [ 90.334543][ T7252] ? __pfx_ksys_read+0x10/0x10 [ 90.334557][ T7252] do_int80_emulation+0x166/0x650 [ 90.334573][ T7252] asm_int80_emulation+0x1a/0x20 [ 90.334584][ T7252] RIP: 0023:0xf71b7f6b [ 90.334593][ T7252] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 90.334603][ T7252] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 90.334613][ T7252] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 90.334620][ T7252] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 90.334626][ T7252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.334632][ T7252] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.334638][ T7252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.334663][ T7252] [ 90.375764][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 90.375783][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 90.575427][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 90.650079][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 90.756766][ T7262] 9pnet_virtio: no channels available for device syz [ 90.765887][ T7262] gadgetfs: bound to dummy_udc driver [ 91.000781][ T5878] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 91.001200][ C1] gadgetfs: connected [ 91.002385][ T5878] gadgetfs: disconnected [ 91.150926][ C1] gadgetfs: connected [ 91.151676][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 91.151943][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 91.151970][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.153686][ C1] gadgetfs: configuration #1 [ 91.359951][ T7257] gadgetfs: suspended from state 3 [ 91.360017][ T7257] gadgetfs: disconnected [ 91.361255][ T5878] usb 5-1: USB disconnect, device number 17 [ 92.064422][ T7276] input: syz0 as /devices/virtual/input/input10 [ 92.110026][ T5942] usb 6-1: USB disconnect, device number 7 [ 92.220750][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 92.371239][ T42] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 92.372167][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.372182][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.372193][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 92.372204][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.372220][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.373374][ T42] usb 7-1: config 0 descriptor?? [ 92.790895][ T42] hid_parser_main: 12 callbacks suppressed [ 92.790909][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790922][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790933][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790944][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790955][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790966][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790978][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790988][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.790999][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.791096][ T42] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 92.799576][ T42] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 92.893387][ T7290] FAULT_INJECTION: forcing a failure. [ 92.893387][ T7290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.893405][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.1.401 Not tainted syzkaller #0 PREEMPT(full) [ 92.893417][ T7290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.893423][ T7290] Call Trace: [ 92.893427][ T7290] [ 92.893432][ T7290] dump_stack_lvl+0x100/0x190 [ 92.893452][ T7290] should_fail_ex.cold+0x5/0xa [ 92.893468][ T7290] _copy_to_iter+0x1f3/0x1750 [ 92.893512][ T7290] ? down_write+0x141/0x1f0 [ 92.893535][ T7290] ? __pfx__copy_to_iter+0x10/0x10 [ 92.893559][ T7290] ? __lock_acquire+0x5c0/0x1f40 [ 92.893579][ T7290] simple_copy_to_iter+0x46/0x90 [ 92.893593][ T7290] __skb_datagram_iter+0x129/0x8f0 [ 92.893605][ T7290] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.893617][ T7290] ? __pfx_sctp_skb_recv_datagram+0x10/0x10 [ 92.893632][ T7290] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.893648][ T7290] skb_copy_datagram_iter+0xa1/0x250 [ 92.893663][ T7290] sctp_recvmsg+0x253/0xe70 [ 92.893678][ T7290] ? __pfx_sctp_recvmsg+0x10/0x10 [ 92.893695][ T7290] ? __pfx_sctp_recvmsg+0x10/0x10 [ 92.893708][ T7290] inet_recvmsg+0x455/0x4c0 [ 92.893722][ T7290] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 92.893736][ T7290] ? __pfx_inet_recvmsg+0x10/0x10 [ 92.893751][ T7290] sock_recvmsg+0x1b8/0x220 [ 92.893763][ T7290] ____sys_recvmsg+0x21e/0x6a0 [ 92.893781][ T7290] ? __pfx_____sys_recvmsg+0x10/0x10 [ 92.893798][ T7290] ? __lock_acquire+0x5c0/0x1f40 [ 92.893811][ T7290] ___sys_recvmsg+0x16a/0x1a0 [ 92.893823][ T7290] ? __pfx____sys_recvmsg+0x10/0x10 [ 92.893835][ T7290] ? lock_acquire+0x1d1/0x380 [ 92.893857][ T7290] do_recvmmsg+0x548/0x750 [ 92.893870][ T7290] ? __pfx_do_recvmmsg+0x10/0x10 [ 92.893883][ T7290] ? find_held_lock+0x2b/0x80 [ 92.893897][ T7290] ? ksys_write+0x190/0x250 [ 92.893907][ T7290] ? ksys_write+0x190/0x250 [ 92.893922][ T7290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.893938][ T7290] __sys_recvmmsg+0x21f/0x270 [ 92.893954][ T7290] ? __pfx___sys_recvmmsg+0x10/0x10 [ 92.893969][ T7290] ? __might_fault+0xc5/0x140 [ 92.893981][ T7290] ? __might_fault+0xc5/0x140 [ 92.893995][ T7290] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 92.894009][ T7290] ? __might_fault+0x111/0x140 [ 92.894021][ T7290] __do_fast_syscall_32+0x14b/0x8c0 [ 92.894035][ T7290] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.894049][ T7290] do_fast_syscall_32+0x32/0x70 [ 92.894063][ T7290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.894077][ T7290] RIP: 0023:0xf7f37fbc [ 92.894085][ T7290] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 92.894095][ T7290] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 92.894106][ T7290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004240 [ 92.894112][ T7290] RDX: 0000000000000003 RSI: 0000000000000023 RDI: 0000000000000000 [ 92.894118][ T7290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.894124][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.894130][ T7290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.894146][ T7290] [ 92.980458][ T7274] plantronics 0003:047F:FFFF.0007: usb_submit_urb(out) failed: -90 [ 92.990325][ T7274] pim6reg: entered allmulticast mode [ 93.007097][ T7274] pim6reg: left allmulticast mode [ 93.700086][ T7304] openvswitch: netlink: Flow key attr not present in new flow. [ 93.785863][ T7305] FAULT_INJECTION: forcing a failure. [ 93.785863][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 93.785939][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.3.406 Not tainted syzkaller #0 PREEMPT(full) [ 93.785964][ T7305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.785970][ T7305] Call Trace: [ 93.785974][ T7305] [ 93.785979][ T7305] dump_stack_lvl+0x100/0x190 [ 93.785999][ T7305] should_fail_ex.cold+0x5/0xa [ 93.786016][ T7305] should_failslab+0xc2/0x120 [ 93.786029][ T7305] __kmalloc_noprof+0xfc/0x840 [ 93.786044][ T7305] ? __pfx_dynamic_dname+0x10/0x10 [ 93.786060][ T7305] ? tomoyo_encode2+0xfb/0x3c0 [ 93.786079][ T7305] tomoyo_encode2+0xfb/0x3c0 [ 93.786096][ T7305] tomoyo_encode+0x29/0x50 [ 93.786111][ T7305] tomoyo_realpath_from_path+0x18c/0x690 [ 93.786135][ T7305] tomoyo_path_number_perm+0x23c/0x580 [ 93.786152][ T7305] ? tomoyo_path_number_perm+0x22e/0x580 [ 93.786169][ T7305] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.786194][ T7305] ? __lock_acquire+0x5c0/0x1f40 [ 93.786215][ T7305] ? __fget_files+0x34/0x3d0 [ 93.786230][ T7305] ? find_held_lock+0x2b/0x80 [ 93.786246][ T7305] ? __fget_files+0x215/0x3d0 [ 93.786257][ T7305] ? hook_file_ioctl_common+0x140/0x440 [ 93.786270][ T7305] ? __fget_files+0x215/0x3d0 [ 93.786283][ T7305] ? __fget_files+0x21f/0x3d0 [ 93.786297][ T7305] security_file_ioctl_compat+0xd3/0x230 [ 93.786312][ T7305] __ia32_compat_sys_ioctl+0xc2/0x360 [ 93.786330][ T7305] __do_fast_syscall_32+0x14b/0x8c0 [ 93.786344][ T7305] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.786358][ T7305] do_fast_syscall_32+0x32/0x70 [ 93.786372][ T7305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.786385][ T7305] RIP: 0023:0xf745efbc [ 93.786394][ T7305] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 93.786404][ T7305] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 93.786415][ T7305] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400448c9 [ 93.786421][ T7305] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.786427][ T7305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.786433][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.786439][ T7305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.786453][ T7305] [ 93.786516][ T7305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.938288][ T7311] netlink: 'syz.1.407': attribute type 11 has an invalid length. [ 93.938347][ T7311] netlink: 448 bytes leftover after parsing attributes in process `syz.1.407'. [ 94.500772][ T5942] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 94.662080][ T5942] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.662947][ T5942] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 94.662977][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.663244][ T5942] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.663263][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.663280][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.664128][ T5942] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 94.664161][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.664180][ T5942] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.664196][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.664212][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.665218][ T5942] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 94.665254][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.665271][ T5942] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.665287][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.665303][ T5942] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.667794][ T5942] usb 6-1: string descriptor 0 read error: -22 [ 94.667906][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.679405][ T5942] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 94.697525][ T1352] usb 7-1: USB disconnect, device number 9 [ 94.874509][ T5942] usb 6-1: USB disconnect, device number 8 [ 95.313034][ T7326] FAULT_INJECTION: forcing a failure. [ 95.313034][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 95.313060][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.2.412 Not tainted syzkaller #0 PREEMPT(full) [ 95.313080][ T7326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.313089][ T7326] Call Trace: [ 95.313095][ T7326] [ 95.313102][ T7326] dump_stack_lvl+0x100/0x190 [ 95.313130][ T7326] should_fail_ex.cold+0x5/0xa [ 95.313168][ T7326] should_failslab+0xc2/0x120 [ 95.313185][ T7326] kmem_cache_alloc_noprof+0x92/0x6a0 [ 95.313210][ T7326] ? ptlock_alloc+0x1f/0x70 [ 95.313234][ T7326] ptlock_alloc+0x1f/0x70 [ 95.313251][ T7326] pte_alloc_one+0x82/0x3d0 [ 95.313272][ T7326] __do_fault+0x26c/0x440 [ 95.313295][ T7326] do_fault+0x585/0x1890 [ 95.313309][ T7326] ? __pfx_filemap_map_pages+0x10/0x10 [ 95.313333][ T7326] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 95.313357][ T7326] ? __pfx_do_fault+0x10/0x10 [ 95.313368][ T7326] ? pgd_none+0x9f/0xe0 [ 95.313382][ T7326] ? __pfx_pgd_none+0x10/0x10 [ 95.313401][ T7326] ? lock_acquire+0x1d1/0x380 [ 95.313422][ T7326] __handle_mm_fault+0x150b/0x2f60 [ 95.313442][ T7326] ? lock_vma_under_rcu+0x11d/0x590 [ 95.313463][ T7326] ? __pfx___handle_mm_fault+0x10/0x10 [ 95.313483][ T7326] ? lock_vma_under_rcu+0x17c/0x590 [ 95.313511][ T7326] handle_mm_fault+0x363/0xa20 [ 95.313531][ T7326] do_user_addr_fault+0x59c/0x12f0 [ 95.313557][ T7326] exc_page_fault+0x6f/0xd0 [ 95.313577][ T7326] asm_exc_page_fault+0x26/0x30 [ 95.313593][ T7326] RIP: 0023:0xf71c6d86 [ 95.313608][ T7326] Code: 03 76 37 f7 c6 03 00 00 00 74 16 a4 49 f7 c6 03 00 00 00 74 0c a4 49 f7 c6 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 [ 95.313620][ T7326] RSP: 002b:00000000f54664f8 EFLAGS: 00010246 [ 95.313635][ T7326] RAX: 0000000000000000 RBX: 00000000f743eff4 RCX: 0000000000000006 [ 95.313645][ T7326] RDX: 0000000000000000 RSI: 0000000080000940 RDI: 0000000080ffb020 [ 95.313653][ T7326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.313662][ T7326] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.313671][ T7326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.313690][ T7326] [ 95.313940][ T7326] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 95.440253][ T7329] FAULT_INJECTION: forcing a failure. [ 95.440253][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 95.440273][ T7329] CPU: 0 UID: 0 PID: 7329 Comm: syz.2.413 Not tainted syzkaller #0 PREEMPT(full) [ 95.440291][ T7329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.440301][ T7329] Call Trace: [ 95.440307][ T7329] [ 95.440314][ T7329] dump_stack_lvl+0x100/0x190 [ 95.440342][ T7329] should_fail_ex.cold+0x5/0xa [ 95.440361][ T7329] should_failslab+0xc2/0x120 [ 95.440380][ T7329] __kmalloc_noprof+0xfc/0x840 [ 95.440405][ T7329] ? __pfx_dynamic_dname+0x10/0x10 [ 95.440429][ T7329] ? tomoyo_encode2+0xfb/0x3c0 [ 95.440453][ T7329] tomoyo_encode2+0xfb/0x3c0 [ 95.440479][ T7329] tomoyo_encode+0x29/0x50 [ 95.440501][ T7329] tomoyo_realpath_from_path+0x18c/0x690 [ 95.440531][ T7329] tomoyo_path_number_perm+0x23c/0x580 [ 95.440559][ T7329] ? tomoyo_path_number_perm+0x22e/0x580 [ 95.440589][ T7329] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.440610][ T7329] ? get_pid_task+0x106/0x250 [ 95.440654][ T7329] ? __lock_acquire+0x5c0/0x1f40 [ 95.440680][ T7329] ? __fget_files+0x34/0x3d0 [ 95.440698][ T7329] ? find_held_lock+0x2b/0x80 [ 95.440720][ T7329] ? __fget_files+0x215/0x3d0 [ 95.440736][ T7329] ? hook_file_ioctl_common+0x140/0x440 [ 95.440757][ T7329] ? __fget_files+0x215/0x3d0 [ 95.440774][ T7329] ? __fget_files+0x21f/0x3d0 [ 95.440795][ T7329] security_file_ioctl_compat+0xd3/0x230 [ 95.440818][ T7329] __ia32_compat_sys_ioctl+0xc2/0x360 [ 95.440847][ T7329] __do_fast_syscall_32+0x14b/0x8c0 [ 95.440864][ T7329] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.440885][ T7329] do_fast_syscall_32+0x32/0x70 [ 95.440907][ T7329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.440926][ T7329] RIP: 0023:0xf744efbc [ 95.440939][ T7329] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.440954][ T7329] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 95.440965][ T7329] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004040aea0 [ 95.440976][ T7329] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.440985][ T7329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.440995][ T7329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.441004][ T7329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.441048][ T7329] [ 95.478738][ T7329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.484867][ T7329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.609184][ T7338] 9pnet_virtio: no channels available for device syz [ 95.668571][ T7340] 9pnet_virtio: no channels available for device syz [ 95.706467][ T7344] openvswitch: netlink: Flow key attr not present in new flow. [ 96.479613][ T7347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.671880][ T7352] bridge0: port 3(syz_tun) entered blocking state [ 96.671950][ T7352] bridge0: port 3(syz_tun) entered disabled state [ 96.672164][ T7352] syz_tun: entered allmulticast mode [ 96.682988][ T7352] syz_tun: entered promiscuous mode [ 96.683747][ T7352] bridge0: port 3(syz_tun) entered blocking state [ 96.683859][ T7352] bridge0: port 3(syz_tun) entered forwarding state [ 96.716662][ T7354] FAULT_INJECTION: forcing a failure. [ 96.716662][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.716688][ T7354] CPU: 2 UID: 0 PID: 7354 Comm: syz.1.422 Not tainted syzkaller #0 PREEMPT(full) [ 96.716707][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.716716][ T7354] Call Trace: [ 96.716722][ T7354] [ 96.716729][ T7354] dump_stack_lvl+0x100/0x190 [ 96.716759][ T7354] should_fail_ex.cold+0x5/0xa [ 96.716783][ T7354] strncpy_from_user+0x3b/0x2d0 [ 96.716803][ T7354] do_getname+0x78/0x390 [ 96.716828][ T7354] do_sys_openat2+0xc3/0x1d0 [ 96.716850][ T7354] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.716875][ T7354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.716901][ T7354] __ia32_compat_sys_openat+0x12d/0x210 [ 96.716924][ T7354] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 96.716956][ T7354] __do_fast_syscall_32+0x14b/0x8c0 [ 96.716977][ T7354] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.716999][ T7354] do_fast_syscall_32+0x32/0x70 [ 96.717043][ T7354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.717064][ T7354] RIP: 0023:0xf7f37fbc [ 96.717077][ T7354] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 96.717092][ T7354] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 96.717110][ T7354] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 96.717120][ T7354] RDX: 0000000000000400 RSI: 0000000000000116 RDI: 0000000000000000 [ 96.717130][ T7354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.717140][ T7354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.717149][ T7354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.717175][ T7354] [ 96.900707][ T5942] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 97.063450][ T5942] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 97.065108][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.065125][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.065136][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.065147][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.065163][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.066439][ T5942] usb 7-1: config 0 descriptor?? [ 97.143121][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 97.479213][ T5942] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.674622][ T7350] plantronics 0003:047F:FFFF.0008: usb_submit_urb(out) failed: -90 [ 97.687066][ T7350] pim6reg: entered allmulticast mode [ 97.757211][ T7350] pim6reg: left allmulticast mode [ 97.864264][ T7378] ntfs3(nullb0): Primary boot signature is not NTFS. [ 97.869644][ T7378] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 97.879433][ T1352] usb 7-1: USB disconnect, device number 10 [ 98.226086][ T7386] ntfs3(nullb0): Primary boot signature is not NTFS. [ 98.226328][ T7386] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 98.334741][ T7388] FAULT_INJECTION: forcing a failure. [ 98.334741][ T7388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.334782][ T7388] CPU: 2 UID: 0 PID: 7388 Comm: syz.1.431 Not tainted syzkaller #0 PREEMPT(full) [ 98.334802][ T7388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.334812][ T7388] Call Trace: [ 98.334818][ T7388] [ 98.334824][ T7388] dump_stack_lvl+0x100/0x190 [ 98.334852][ T7388] should_fail_ex.cold+0x5/0xa [ 98.334876][ T7388] strncpy_from_user+0x3b/0x2d0 [ 98.334896][ T7388] do_getname+0x78/0x390 [ 98.334920][ T7388] do_sys_openat2+0xc3/0x1d0 [ 98.334942][ T7388] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.334966][ T7388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.334993][ T7388] __ia32_compat_sys_openat+0x12d/0x210 [ 98.335015][ T7388] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 98.335046][ T7388] __do_fast_syscall_32+0x14b/0x8c0 [ 98.335066][ T7388] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.335087][ T7388] do_fast_syscall_32+0x32/0x70 [ 98.335108][ T7388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.335128][ T7388] RIP: 0023:0xf7f37fbc [ 98.335142][ T7388] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.335156][ T7388] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 98.335173][ T7388] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 98.335183][ T7388] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.335192][ T7388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.335201][ T7388] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.335211][ T7388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.335232][ T7388] [ 98.676494][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.677215][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.679529][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.680515][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.687818][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.695070][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.696575][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.697904][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.699002][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.699374][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.878786][ T7405] ntfs3(nullb0): Primary boot signature is not NTFS. [ 98.879002][ T7405] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 98.955677][ T7393] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.168594][ T5940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.191778][ T7411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.191792][ T7411] block device autoloading is deprecated and will be removed. [ 99.279403][ T5940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.358462][ T5940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.503958][ T5940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.525936][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.525999][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.526156][ T7393] bridge_slave_0: entered allmulticast mode [ 99.526838][ T7393] bridge_slave_0: entered promiscuous mode [ 99.528473][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.528552][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.528608][ T7393] bridge_slave_1: entered allmulticast mode [ 99.529342][ T7393] bridge_slave_1: entered promiscuous mode [ 99.543745][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.545454][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.562295][ T7393] team0: Port device team_slave_0 added [ 99.565903][ T7393] team0: Port device team_slave_1 added [ 99.577335][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.577345][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.577358][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.578263][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.578270][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.578282][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.598618][ T7393] hsr_slave_0: entered promiscuous mode [ 99.599116][ T7393] hsr_slave_1: entered promiscuous mode [ 99.599419][ T7393] debugfs: 'hsr0' already exists in 'hsr' [ 99.599428][ T7393] Cannot create hsr debugfs directory [ 99.776257][ T5940] bridge_slave_1: left allmulticast mode [ 99.776287][ T5940] bridge_slave_1: left promiscuous mode [ 99.777818][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.788745][ T5940] bridge_slave_0: left allmulticast mode [ 99.788761][ T5940] bridge_slave_0: left promiscuous mode [ 99.788874][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.185438][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.189079][ T5940] bond0 (unregistering): Released all slaves [ 100.224856][ T7431] 9pnet_virtio: no channels available for device syz [ 100.260573][ T7431] gadgetfs: bound to dummy_udc driver [ 100.390791][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.500738][ T5878] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 100.500968][ C1] gadgetfs: connected [ 100.501261][ T5878] gadgetfs: disconnected [ 100.526956][ T7433] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 100.564687][ T10] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 100.566018][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.566034][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.566044][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.566056][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.566072][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.569553][ T7433] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 100.569677][ T7433] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 100.571146][ T10] usb 6-1: config 0 descriptor?? [ 100.573333][ T7433] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 100.573906][ T7433] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 100.644705][ T7433] pci 0000:00:01.0: Adding to iommu group 1 [ 100.658515][ T7433] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 100.658529][ T7433] pci 0000:00:01.0: vgaarb: bridge control possible [ 100.658536][ T7433] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 100.663826][ T7433] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 100.668939][ T7433] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 100.669005][ T7433] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 100.669179][ T7433] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 100.676238][ C1] gadgetfs: connected [ 100.680426][ T7433] pci 0000:00:05.0: Adding to iommu group 5 [ 100.690307][ T5878] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 100.690588][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 100.690606][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.697273][ T7433] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 100.706255][ T7433] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 100.708365][ T7433] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 100.709357][ T7433] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 100.710437][ T7433] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 100.715137][ T7433] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 100.723921][ T7433] [drm] Found bochs VGA, ID 0xb0c5. [ 100.723931][ T7433] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 100.730836][ T5802] Bluetooth: hci4: command tx timeout [ 100.769187][ T7433] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 100.779435][ C1] gadgetfs: configuration #1 [ 100.836207][ T7433] Console: switching to colour frame buffer device 160x50 [ 100.836248][ T7433] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 100.844819][ T7433] ===================================== ** replaying previous printk message ** [ 100.844819][ T7433] ================================================================== [ 100.844841][ T7433] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 100.844938][ T7433] Read of size 1 at addr ffff888022e03bd0 by task syz.2.441/7433 [ 100.844951][ T7433] [ 100.844969][ T7433] CPU: 3 UID: 0 PID: 7433 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT(full) [ 100.845009][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.845031][ T7433] Call Trace: [ 100.845038][ T7433] [ 100.845046][ T7433] dump_stack_lvl+0x100/0x190 [ 100.845071][ T7433] print_report+0x13d/0x4b0 [ 100.845108][ T7433] ? __virt_addr_valid+0x239/0x430 [ 100.845129][ T7433] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 100.845149][ T7433] kasan_report+0xdf/0x1c0 [ 100.845167][ T7433] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 100.845190][ T7433] acpi_ns_get_attached_object+0x148/0x1b0 [ 100.845211][ T7433] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 100.845230][ T7433] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 100.845247][ T7433] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 100.845267][ T7433] ? acpi_ds_create_operand+0x267/0xc20 [ 100.845292][ T7433] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 100.845312][ T7433] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 100.845330][ T7433] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 100.845354][ T7433] ? __asan_memset+0x23/0x50 [ 100.845378][ T7433] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 100.845395][ T7433] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 100.845419][ T7433] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 100.845444][ T7433] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 100.845467][ T7433] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 100.845484][ T7433] acpi_ds_exec_end_op+0xb78/0x1e60 [ 100.845508][ T7433] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 100.845531][ T7433] acpi_ps_parse_loop+0x5e1/0x26e0 [ 100.845558][ T7433] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 100.845585][ T7433] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 100.845610][ T7433] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 100.845628][ T7433] ? acpi_ut_create_thread_state+0x6d/0x170 [ 100.845655][ T7433] acpi_ps_parse_aml+0x81e/0x1120 [ 100.845680][ T7433] acpi_ps_execute_method+0x5c4/0xe90 [ 100.845700][ T7433] acpi_ns_evaluate+0x640/0x1670 [ 100.845719][ T7433] acpi_ut_evaluate_object+0xf7/0x610 [ 100.845739][ T7433] acpi_rs_get_prt_method_data+0xa0/0x150 [ 100.845759][ T7433] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 100.845777][ T7433] ? acpi_ut_status_exit+0x111/0x1c0 [ 100.845803][ T7433] ? acpi_rs_validate_parameters+0x104/0x210 [ 100.845823][ T7433] acpi_get_irq_routing_table+0xb8/0x140 [ 100.845842][ T7433] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 100.845865][ T7433] ? do_raw_spin_lock+0x128/0x260 [ 100.845886][ T7433] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 100.845908][ T7433] ? mark_held_locks+0x40/0x70 [ 100.845926][ T7433] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 100.845944][ T7433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.845990][ T7433] ? pci_conf1_read+0x138/0x240 [ 100.846012][ T7433] acpi_pci_irq_lookup+0x8e/0x6b0 [ 100.846032][ T7433] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 100.846051][ T7433] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 100.846068][ T7433] ? __driver_probe_device+0x210/0x460 [ 100.846115][ T7433] ? __device_attach_driver+0x1df/0x320 [ 100.846138][ T7433] ? bus_for_each_drv+0x159/0x1e0 [ 100.846157][ T7433] ? __device_attach+0x1e4/0x4c0 [ 100.846181][ T7433] acpi_pci_irq_enable+0x1f5/0x6f0 [ 100.846200][ T7433] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 100.846221][ T7433] ? __pfx_pci_enable_resources+0x10/0x10 [ 100.846241][ T7433] ? __pfx___pci_set_power_state+0x10/0x10 [ 100.846269][ T7433] pcibios_enable_device+0xb6/0xe0 [ 100.846289][ T7433] do_pci_enable_device+0x21f/0x4a0 [ 100.846304][ T7433] ? __pfx_do_pci_enable_device+0x10/0x10 [ 100.846322][ T7433] ? pci_update_current_state+0x102/0x240 [ 100.846347][ T7433] ? __pfx_pci_update_current_state+0x10/0x10 [ 100.846371][ T7433] ? ksm_scan_thread+0x4e20/0x71e0 [ 100.846395][ T7433] ? __kasan_kmalloc+0xaa/0xb0 [ 100.846414][ T7433] pci_enable_device_flags+0x27c/0x370 [ 100.846434][ T7433] ? __pfx_virtio_pci_probe+0x10/0x10 [ 100.846453][ T7433] virtio_pci_probe+0x1d5/0x410 [ 100.846472][ T7433] local_pci_probe+0xdd/0x1b0 [ 100.846494][ T7433] pci_call_probe+0x176/0x800 [ 100.846510][ T7433] ? pci_match_device+0x147/0x7d0 [ 100.846534][ T7433] ? __pfx_pci_call_probe+0x10/0x10 [ 100.846551][ T7433] ? __pfx_pci_match_device+0x10/0x10 [ 100.846579][ T7433] ? pci_find_host_bridge+0x3c/0x80 [ 100.846609][ T7433] pci_device_probe+0x25b/0x400 [ 100.846626][ T7433] ? __pfx_pci_device_probe+0x10/0x10 [ 100.846644][ T7433] ? sysfs_create_link+0x68/0xc0 [ 100.846668][ T7433] ? __pfx_pci_device_probe+0x10/0x10 [ 100.846683][ T7433] really_probe+0x241/0xa60 [ 100.846708][ T7433] __driver_probe_device+0x210/0x460 [ 100.846731][ T7433] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.846749][ T7433] driver_probe_device+0x4a/0x140 [ 100.846773][ T7433] __device_attach_driver+0x1df/0x320 [ 100.846799][ T7433] ? __pfx___device_attach_driver+0x10/0x10 [ 100.846822][ T7433] bus_for_each_drv+0x159/0x1e0 [ 100.846841][ T7433] ? __pfx_bus_for_each_drv+0x10/0x10 [ 100.846862][ T7433] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.846882][ T7433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.846901][ T7433] __device_attach+0x1e4/0x4c0 [ 100.846925][ T7433] ? __pfx___device_attach+0x10/0x10 [ 100.846949][ T7433] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.846970][ T7433] device_initial_probe+0xaf/0xf0 [ 100.846995][ T7433] pci_bus_add_device+0xc5/0x100 [ 100.847016][ T7433] pci_bus_add_devices+0x9a/0x1f0 [ 100.847038][ T7433] pci_rescan_bus+0x2a/0x40 [ 100.847062][ T7433] rescan_store+0xfb/0x130 [ 100.847088][ T7433] ? __pfx_rescan_store+0x10/0x10 [ 100.847112][ T7433] ? sysfs_file_kobj+0xe4/0x290 [ 100.847134][ T7433] ? __pfx_rescan_store+0x10/0x10 [ 100.847158][ T7433] bus_attr_store+0x74/0xb0 [ 100.847176][ T7433] ? __pfx_bus_attr_store+0x10/0x10 [ 100.847193][ T7433] sysfs_kf_write+0xf2/0x150 [ 100.847216][ T7433] kernfs_fop_write_iter+0x3e0/0x5f0 [ 100.847232][ T7433] ? __pfx_sysfs_kf_write+0x10/0x10 [ 100.847254][ T7433] vfs_write+0x6af/0x1050 [ 100.847270][ T7433] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 100.847290][ T7433] ? __pfx_vfs_write+0x10/0x10 [ 100.847304][ T7433] ? find_held_lock+0x2b/0x80 [ 100.847334][ T7433] ksys_write+0x12a/0x250 [ 100.847351][ T7433] ? __pfx_ksys_write+0x10/0x10 [ 100.847369][ T7433] __do_fast_syscall_32+0x14b/0x8c0 [ 100.847391][ T7433] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.847412][ T7433] do_fast_syscall_32+0x32/0x70 [ 100.847433][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.847455][ T7433] RIP: 0023:0xf744efbc [ 100.847468][ T7433] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.847485][ T7433] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 100.847502][ T7433] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000a00 [ 100.847515][ T7433] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.847524][ T7433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.847534][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.847546][ T7433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.847561][ T7433] [ 100.847566][ T7433] [ 100.847576][ T7433] Allocated by task 1: [ 100.847593][ T7433] kasan_save_stack+0x30/0x50 [ 100.847610][ T7433] kasan_save_track+0x14/0x30 [ 100.847624][ T7433] __kasan_slab_alloc+0x89/0x90 [ 100.847640][ T7433] kmem_cache_alloc_noprof+0x269/0x6a0 [ 100.847662][ T7433] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 100.847683][ T7433] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 100.847704][ T7433] acpi_ds_build_internal_object+0x173/0x790 [ 100.847724][ T7433] acpi_ds_create_node+0xe3/0x280 [ 100.847743][ T7433] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 100.847764][ T7433] acpi_ps_parse_loop+0x5e1/0x26e0 [ 100.847784][ T7433] acpi_ps_parse_aml+0x81e/0x1120 [ 100.847807][ T7433] acpi_ps_execute_table+0x393/0x500 [ 100.847820][ T7433] acpi_ns_execute_table+0x596/0x970 [ 100.847838][ T7433] acpi_ns_parse_table+0xcb/0x160 [ 100.847854][ T7433] acpi_ns_load_table+0xc9/0x490 [ 100.847870][ T7433] acpi_tb_load_namespace+0x2b0/0x8f0 [ 100.847889][ T7433] acpi_load_tables+0x89/0x160 [ 100.847908][ T7433] acpi_init+0x146/0x840 [ 100.847921][ T7433] do_one_initcall+0x11c/0x6f0 [ 100.847938][ T7433] kernel_init_freeable+0x6ea/0x7b0 [ 100.847959][ T7433] kernel_init+0x21/0x1e0 [ 100.847978][ T7433] ret_from_fork+0x730/0xd60 [ 100.847996][ T7433] ret_from_fork_asm+0x1a/0x30 [ 100.848011][ T7433] [ 100.848014][ T7433] Freed by task 6932: [ 100.848023][ T7433] kasan_save_stack+0x30/0x50 [ 100.848037][ T7433] kasan_save_track+0x14/0x30 [ 100.848050][ T7433] kasan_save_free_info+0x3b/0x70 [ 100.848070][ T7433] __kasan_slab_free+0x5f/0x80 [ 100.848085][ T7433] kmem_cache_free+0x127/0x6c0 [ 100.848105][ T7433] acpi_os_release_object+0x1c/0x30 [ 100.848119][ T7433] acpi_ut_delete_object_desc+0xea/0x130 [ 100.848140][ T7433] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 100.848157][ T7433] acpi_ut_update_object_reference+0x5f9/0x800 [ 100.848173][ T7433] acpi_ut_remove_reference+0x192/0x1d0 [ 100.848190][ T7433] acpi_rs_get_prt_method_data+0xcd/0x150 [ 100.848206][ T7433] acpi_get_irq_routing_table+0xb8/0x140 [ 100.848224][ T7433] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 100.848240][ T7433] acpi_pci_irq_lookup+0x8e/0x6b0 [ 100.848257][ T7433] acpi_pci_irq_disable+0x1a8/0x360 [ 100.848273][ T7433] pcibios_disable_device+0x89/0xb0 [ 100.848290][ T7433] do_pci_disable_device+0x9f/0x100 [ 100.848304][ T7433] pci_disable_device+0x130/0x270 [ 100.848320][ T7433] virtio_pci_remove+0xcf/0x110 [ 100.848351][ T7433] pci_device_remove+0xb2/0x1d0 [ 100.848371][ T7433] device_remove+0xcb/0x180 [ 100.848391][ T7433] device_release_driver_internal+0x441/0x610 [ 100.848414][ T7433] pci_stop_bus_device+0x120/0x160 [ 100.848427][ T7433] pci_stop_and_remove_bus_device+0x58/0xa0 [ 100.848443][ T7433] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 100.848459][ T7433] remove_store+0x123/0x140 [ 100.848476][ T7433] dev_attr_store+0x58/0x80 [ 100.848489][ T7433] sysfs_kf_write+0xf2/0x150 [ 100.848506][ T7433] kernfs_fop_write_iter+0x3e0/0x5f0 [ 100.848521][ T7433] vfs_write+0x6af/0x1050 [ 100.848533][ T7433] ksys_write+0x12a/0x250 [ 100.848548][ T7433] __do_fast_syscall_32+0x14b/0x8c0 [ 100.848566][ T7433] do_fast_syscall_32+0x32/0x70 [ 100.848590][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.848610][ T7433] [ 100.848613][ T7433] The buggy address belongs to the object at ffff888022e03bc8 [ 100.848613][ T7433] which belongs to the cache Acpi-Operand of size 72 [ 100.848625][ T7433] The buggy address is located 8 bytes inside of [ 100.848625][ T7433] freed 72-byte region [ffff888022e03bc8, ffff888022e03c10) [ 100.848642][ T7433] [ 100.848646][ T7433] The buggy address belongs to the physical page: [ 100.848652][ T7433] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022e03f08 pfn:0x22e03 [ 100.848668][ T7433] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 100.848682][ T7433] page_type: f5(slab) [ 100.848695][ T7433] raw: 00fff00000000200 ffff88801d44da40 ffffea00008c4910 ffffea00008a5490 [ 100.848722][ T7433] raw: ffff888022e03f08 0000000200270014 00000000f5000000 0000000000000000 [ 100.848732][ T7433] page dumped because: kasan: bad access detected [ 100.848771][ T7433] page_owner tracks the page as allocated [ 100.848778][ T7433] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2577500318 [ 100.848804][ T7433] post_alloc_hook+0xfd/0x120 [ 100.848823][ T7433] get_page_from_freelist+0x1113/0x35e0 [ 100.848845][ T7433] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 100.848867][ T7433] new_slab+0xb1/0x6d0 [ 100.848886][ T7433] refill_objects+0xe3/0x410 [ 100.848905][ T7433] __pcs_replace_empty_main+0x35e/0x650 [ 100.848925][ T7433] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 100.848946][ T7433] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 100.848965][ T7433] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 100.848986][ T7433] acpi_ds_create_operand+0x6be/0xc20 [ 100.849025][ T7433] acpi_ds_eval_data_object_operands+0x125/0x640 [ 100.849047][ T7433] acpi_ds_exec_end_op+0xe41/0x1e60 [ 100.849066][ T7433] acpi_ps_parse_loop+0x5e1/0x26e0 [ 100.849087][ T7433] acpi_ps_parse_aml+0x81e/0x1120 [ 100.849109][ T7433] acpi_ps_execute_table+0x393/0x500 [ 100.849123][ T7433] acpi_ns_execute_table+0x596/0x970 [ 100.849140][ T7433] page_owner free stack trace missing [ 100.849147][ T7433] [ 100.849150][ T7433] Memory state around the buggy address: [ 100.849157][ T7433] ffff888022e03a80: fc fc 00 00 00 00 00 00 00 00 00 fc fc fc fc fa [ 100.849167][ T7433] ffff888022e03b00: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 100.849179][ T7433] >ffff888022e03b80: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 100.849187][ T7433] ^ [ 100.849195][ T7433] ffff888022e03c00: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 100.849207][ T7433] ffff888022e03c80: fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc [ 100.849215][ T7433] ================================================================== [ 100.849251][ T7433] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.315472][ T7433] CPU: 3 UID: 0 PID: 7433 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT(full) [ 101.318462][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.322084][ T7433] Call Trace: [ 101.323276][ T7433] [ 101.324293][ T7433] dump_stack_lvl+0x100/0x190 [ 101.325816][ T7433] vpanic+0x2dc/0x6f8 [ 101.327257][ T7433] panic+0xd1/0xe0 [ 101.328581][ T7433] ? __pfx_panic+0x10/0x10 [ 101.330219][ T7433] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 101.332004][ T7433] ? preempt_schedule+0x57/0xd0 [ 101.333461][ T7433] check_panic_on_warn.cold+0x19/0x34 [ 101.335048][ T7433] end_report.part.0+0x3a/0x90 [ 101.336492][ T7433] kasan_report.cold+0xe/0x18 [ 101.337929][ T7433] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 101.339706][ T7433] acpi_ns_get_attached_object+0x148/0x1b0 [ 101.341497][ T7433] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 101.343258][ T7433] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 101.344796][ T7433] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 101.346785][ T7433] ? acpi_ds_create_operand+0x267/0xc20 [ 101.348445][ T7433] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 101.350128][ T7433] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 101.351931][ T7433] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 101.353520][ T7433] ? __asan_memset+0x23/0x50 [ 101.354900][ T7433] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 101.356687][ T7433] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 101.358382][ T7433] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 101.360258][ T7433] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 101.362016][ T7433] ? acpi_ut_trace_ptr+0x191/0x2a0 [ 101.363562][ T7433] acpi_ds_exec_end_op+0xb78/0x1e60 [ 101.365141][ T7433] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 101.366824][ T7433] acpi_ps_parse_loop+0x5e1/0x26e0 [ 101.368353][ T7433] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 101.370016][ T7433] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 101.371691][ T7433] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 101.373482][ T7433] ? acpi_ut_create_thread_state+0x6d/0x170 [ 101.375247][ T7433] acpi_ps_parse_aml+0x81e/0x1120 [ 101.376763][ T7433] acpi_ps_execute_method+0x5c4/0xe90 [ 101.378355][ T7433] acpi_ns_evaluate+0x640/0x1670 [ 101.379863][ T7433] acpi_ut_evaluate_object+0xf7/0x610 [ 101.381516][ T7433] acpi_rs_get_prt_method_data+0xa0/0x150 [ 101.383210][ T7433] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 101.385054][ T7433] ? acpi_ut_status_exit+0x111/0x1c0 [ 101.386652][ T7433] ? acpi_rs_validate_parameters+0x104/0x210 [ 101.388456][ T7433] acpi_get_irq_routing_table+0xb8/0x140 [ 101.390163][ T7433] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 101.392138][ T7433] ? do_raw_spin_lock+0x128/0x260 [ 101.394041][ T7433] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 101.396176][ T7433] ? mark_held_locks+0x40/0x70 [ 101.397971][ T7433] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 101.400319][ T7433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.402456][ T7433] ? pci_conf1_read+0x138/0x240 [ 101.404079][ T7433] acpi_pci_irq_lookup+0x8e/0x6b0 [ 101.405987][ T7433] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 101.408065][ T7433] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 101.410246][ T7433] ? __driver_probe_device+0x210/0x460 [ 101.411864][ T7433] ? __device_attach_driver+0x1df/0x320 [ 101.413847][ T7433] ? bus_for_each_drv+0x159/0x1e0 [ 101.415706][ T7433] ? __device_attach+0x1e4/0x4c0 [ 101.417294][ T7433] acpi_pci_irq_enable+0x1f5/0x6f0 [ 101.419216][ T7433] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 101.421115][ T7433] ? __pfx_pci_enable_resources+0x10/0x10 [ 101.423047][ T7433] ? __pfx___pci_set_power_state+0x10/0x10 [ 101.425062][ T7433] pcibios_enable_device+0xb6/0xe0 [ 101.426909][ T7433] do_pci_enable_device+0x21f/0x4a0 [ 101.428812][ T7433] ? __pfx_do_pci_enable_device+0x10/0x10 [ 101.430935][ T7433] ? pci_update_current_state+0x102/0x240 [ 101.433035][ T7433] ? __pfx_pci_update_current_state+0x10/0x10 [ 101.435190][ T7433] ? ksm_scan_thread+0x4e20/0x71e0 [ 101.436915][ T7433] ? __kasan_kmalloc+0xaa/0xb0 [ 101.438318][ T7433] pci_enable_device_flags+0x27c/0x370 [ 101.439936][ T7433] ? __pfx_virtio_pci_probe+0x10/0x10 [ 101.441517][ T7433] virtio_pci_probe+0x1d5/0x410 [ 101.442971][ T7433] local_pci_probe+0xdd/0x1b0 [ 101.444353][ T7433] pci_call_probe+0x176/0x800 [ 101.445764][ T7433] ? pci_match_device+0x147/0x7d0 [ 101.447258][ T7433] ? __pfx_pci_call_probe+0x10/0x10 [ 101.448778][ T7433] ? __pfx_pci_match_device+0x10/0x10 [ 101.450347][ T7433] ? pci_find_host_bridge+0x3c/0x80 [ 101.451867][ T7433] pci_device_probe+0x25b/0x400 [ 101.453292][ T7433] ? __pfx_pci_device_probe+0x10/0x10 [ 101.454877][ T7433] ? sysfs_create_link+0x68/0xc0 [ 101.456331][ T7433] ? __pfx_pci_device_probe+0x10/0x10 [ 101.457959][ T7433] really_probe+0x241/0xa60 [ 101.459341][ T7433] __driver_probe_device+0x210/0x460 [ 101.460921][ T7433] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 101.462652][ T7433] driver_probe_device+0x4a/0x140 [ 101.464135][ T7433] __device_attach_driver+0x1df/0x320 [ 101.465711][ T7433] ? __pfx___device_attach_driver+0x10/0x10 [ 101.467460][ T7433] bus_for_each_drv+0x159/0x1e0 [ 101.468937][ T7433] ? __pfx_bus_for_each_drv+0x10/0x10 [ 101.470555][ T7433] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.472115][ T7433] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.473862][ T7433] __device_attach+0x1e4/0x4c0 [ 101.475310][ T7433] ? __pfx___device_attach+0x10/0x10 [ 101.476900][ T7433] ? do_raw_spin_unlock+0x145/0x1e0 [ 101.478474][ T7433] device_initial_probe+0xaf/0xf0 [ 101.479995][ T7433] pci_bus_add_device+0xc5/0x100 [ 101.481529][ T7433] pci_bus_add_devices+0x9a/0x1f0 [ 101.483022][ T7433] pci_rescan_bus+0x2a/0x40 [ 101.484378][ T7433] rescan_store+0xfb/0x130 [ 101.485776][ T7433] ? __pfx_rescan_store+0x10/0x10 [ 101.487337][ T7433] ? sysfs_file_kobj+0xe4/0x290 [ 101.488847][ T7433] ? __pfx_rescan_store+0x10/0x10 [ 101.490423][ T7433] bus_attr_store+0x74/0xb0 [ 101.491858][ T7433] ? __pfx_bus_attr_store+0x10/0x10 [ 101.493501][ T7433] sysfs_kf_write+0xf2/0x150 [ 101.494967][ T7433] kernfs_fop_write_iter+0x3e0/0x5f0 [ 101.496625][ T7433] ? __pfx_sysfs_kf_write+0x10/0x10 [ 101.498264][ T7433] vfs_write+0x6af/0x1050 [ 101.499645][ T7433] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 101.501482][ T7433] ? __pfx_vfs_write+0x10/0x10 [ 101.502990][ T7433] ? find_held_lock+0x2b/0x80 [ 101.504476][ T7433] ksys_write+0x12a/0x250 [ 101.505844][ T7433] ? __pfx_ksys_write+0x10/0x10 [ 101.507322][ T7433] __do_fast_syscall_32+0x14b/0x8c0 [ 101.508972][ T7433] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.510626][ T7433] do_fast_syscall_32+0x32/0x70 [ 101.512153][ T7433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.514147][ T7433] RIP: 0023:0xf744efbc [ 101.515422][ T7433] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 101.521349][ T7433] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 101.523930][ T7433] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000a00 [ 101.526366][ T7433] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.528738][ T7433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.531178][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.533653][ T7433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.536123][ T7433] [ 101.537693][ T7433] Kernel Offset: disabled [ 101.539015][ T7433] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:32:18 Registers: info registers vcpu 0 CPU#0 RAX=000000000013660d RBX=ffffffff8fc91540 RCX=ffffffff8beba325 RDX=0000000000000001 RSI=ffffffff8e6250b5 RDI=ffffffff8c835a80 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8beb87bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095281000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e424220 CR3=000000005009a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff1fcee2c RBX=fffffbfff1fcee2d RCX=ffffffff81c949fe RDX=0000000000000001 RSI=0000000000000004 RDI=ffffffff8fe77160 RBP=fffffbfff1fcee2c RSP=ffffc900006bf920 R8 =0000000000000000 R9 =fffffbfff1fcee2c R10=0000000000000003 R11=3d3d3d3d3d3d3d3d R12=ffffffff90e0a2e0 R13=ffffc900006bfda8 R14=0000000000000000 R15=ffffc900006bfdb4 RIP=ffffffff828687e1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095381000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72395d0 CR3=0000000043832000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f7c1b RBX=ffff88801e324b00 RCX=ffffffff8beba325 RDX=0000000000000001 RSI=ffffffff8e6250b5 RDI=ffffffff8c835a80 RBP=ffffed1003c64960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed1005606825 R10=ffff88802b03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8beb87bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095481000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bb5b115960 CR3=000000006dfa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c08375 RDI=ffffffff9cf3a5e0 RBP=ffffffff9cf3a5a0 RSP=ffffc90002d76520 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=0000000033343754 R12=0000000000000000 R13=0000000000000031 R14=0000000000000003 R15=ffffc90002d76838 RIP=ffffffff85c0839f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095581000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bb5b0e65e0 CR3=000000006dfa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=00000000000000ff Opmask02=00000000fffffeff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bb5b0e1a00 000055bb5b0e1a00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bb5b0d4d30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bb5b0d2a70 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a8e752c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3446413130303030 7673313131313030 3030643433323130 303030763a696370 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030306930306373 3330636230303131 3030303064733446 4131303030307673 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e0c0c0c0c0d0d0d 0d59090e0f0c0d0d 0d0d4b07545e4d00 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f52bb6d25b1eb0ac 000055be00b97d66 0000000000000251 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bb5b0d68c0 000055bb5b0d4dd0 0000000000000081 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000