last executing test programs: 7.156131187s ago: executing program 1 (id=1029): syz_usb_connect(0x2, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES64], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x4040) (fail_nth: 5) 5.302246864s ago: executing program 1 (id=1037): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000801701000002007b8c0000000000000000"], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49", 0xc}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.723400291s ago: executing program 1 (id=1043): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={r1, r2, 0x0, 0x0, 0x45}) (fail_nth: 5) 4.316593263s ago: executing program 1 (id=1046): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="e6ffd8653f2a420a184484a6ac1e2f2da79a035c9d457fb2a82ef16caebf3afc1af6d8803f34568a2e3c107015f41e4859d3a1a58f6fada860e7ade78ebecb22c3dff62a8ba5f90253d130ac8c71ffbb0b03a6929766138d665ae1ce452cfd096520ec64a82a32a0273543009002c0c7bf7b165370a776205ad6c24d82e5cff0b19e9ef0c12134c98278a8eae30c9f896951395aabbc7930268e96acc38a33442961426261947dcd2a63707fd4e7d51dc45ece6df74b446e7b6fa31ea112a856b41dada81241ed0fd03c08974da2d6f4533ebd863b713f0a4f70dbc96a8dcd50dff1ba82766be81af9be9d8c7cb43ad27317330a81", 0xf5}, {&(0x7f0000000100)="098c3fed08df7fc424f7b1e24de710442254f7327766e62aac6978242393cea9f0486de57ddd25a40f00e3b810b8bf4f497b261ef667b3d90d428e29", 0x3c}, {&(0x7f0000000140)="c98447cd89f6ae2c225d3b3a2f1ed58b746e5ee4311f1a11d4ecc5ee1f9dd1b57bf7d76d9cac387cefb11511cdffe64bf8f8036cc71162b34c9db5ea12f80b5b9133d9f1d74d4f3808570eb9cfddee99f6a42755faf7b58c1e1537a153a02bd208fe1a4d12acbb7184b5ddc952c0dc839b3c5942a09a5b2fe9b62ba19b46160f31cbc2700971bb2b20d26bb5f702343d1c7d2461ec9c93f2c518c5fdad4943746c8449eac4ec755993dc523e606b754e837ff2c717d151f72c1a7eac26b1ff9eeff52c492caa39bff0575c474d99ae05bf2ec917aea3c9def80eff", 0xdb}, {&(0x7f0000000240)="b2941de8927404a736de550ecfe9d255bfbe7f9a2ade2c9496c3164ac2c733474a70a4e6351d4628e0c354ff1d3829c7bdeabaf11ec0d5f3e8d5c60c0d309bd46ce66bae3d41f9ef0a10f7d4c52b2d4adfdbcec07b7d19badb", 0x59}, {&(0x7f00000002c0)="b472af127f98f427e96f1b864c5fcd43753529474f9589cd444a07cb6b9892dbf9b4483f8a96f9dd520ee4b8c3d74ffe0b622cf89a2e25d92fc7d984ab767d875b7060b8d469eaf61e2787cd98649509a38f4ac678b636660fc3010b3283eb9ce8bf269f795498f34072e3d16b83a363b7b5bece7e0cf6e52d33ced08bfec2e515ade91ce5a67412169e", 0x8a}, {&(0x7f0000000380)="96208d5c", 0x4}, {&(0x7f00000003c0)="2fcdc85265ac1d147f57844e26c93f98dd1c802fd2e8b9c14c209216bca752ad46c1655af12ac2a77d2a3193cb56244495c90eef76f348b961e6a20805453d9f2f65696383c299fb62b2366c3328bad2fcfaf346310bc8b572acfabebeef7e83e4b008c0a570b95fd535bc614cea4ec11889cc162d61fbf6e07f74246d6d8267d1cfe16f4d0866823a256c10d19e519b23191ad09bcd40b5f78ef5ce1628d21ecbff0557c1842effca97c415ec2bfffdae1525fc46cb7311019a", 0xba}], 0x7, 0x8, 0x7, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FIBMAP(r3, 0x604, 0x0) 3.572700907s ago: executing program 0 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) 3.073033633s ago: executing program 0 (id=1058): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) close(0x3) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendto$inet6(r3, &(0x7f0000000780)='#', 0x1, 0x50, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) r6 = socket$kcm(0x10, 0x2, 0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) r9 = dup3(r7, r8, 0x80000) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x2, 0x1}, 0x1, 0x1, 0x0, 0x0, "6e34038346136e862d8be1adbb4a31d47920e01bad4817aeefd2f7fe0fb94efa9106754e71952d9f11ff78f95a00dc686dddb1289ce8c9963035238643b4657a"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr\x00') 2.374681661s ago: executing program 0 (id=1064): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}]}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x7}) r1 = socket$inet6(0xa, 0x6, 0x42) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'ip6gretap0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540)=[{0x2b, 0x0, [0x221, 0x5, 0x1ff, 0x2, 0x4b, 0x6, 0x10001, 0x6, 0xb, 0xfffffff9, 0x3, 0x2, 0x141b, 0x5, 0x20, 0x9]}], r5, 0x1, 0x1, 0x48}}, 0x20) syz_open_dev$midi(&(0x7f0000004300), 0x7, 0x202202) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004380)={r3, r7, 0x25, 0x1a, @void}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(0x3) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) r10 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000040c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x6}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000040)="2edcf083287ebc2b57a7f61a02af4e5d05aaa8bea4fea9d636aa84d314c200c940836ae7cfc6aa505d5037840bc9262f8a8ce0e31d2ac83d628365d4de581c3af8af4e032ed05f308469589d093853875714af5a8dadeb5a4045797fc398eb883d9952e9c431d2dc1c7fad57da80aac10f278985050c56b752e7ae53fb6dbf87a7f6c3758f4e97d739250773c26bc6506e289f684a7e4fb97a83aaa72dbe24ceab79505f58558a57c732c8c88227779a3a1ff9f186a4ff60f4d5502e", 0xbc}, {&(0x7f0000000100)="8a8882c242a0edbe2b807dbbe9e26a28d668113d90533a396c76b2f1e95e6d8a3bfb30e8eb19874a67b71733f3d252f950da9ab89e032b225e8ccac9e8814098ec4f9f2744f8ee590a6c297711a6269607bbce1a48d67e77158f2f7136695396b0538236ef5d0675e9366725168eb18f44eff64d931044c0546add8a1b5836e05c1736b436ebe040ee9572e88e4c946e15b4f49434087a3a87b4b57821660c4aae88543e1e8e4ff26f879cccc2122af7ba98a777ce67ca87c51e", 0xba}, {&(0x7f0000000200)="fbae16a399ab8aff5c8dec3118f1d83cde37fcf76944a6dfb66dde694bcbe568bb5467f1acad39b45d3226de7f16f1bd24ead971d0f2e4739d2f51b691c13e3f41d9e2397b7b677e5bd66b6628b03314537c5b4adbf79e", 0x57}, {&(0x7f0000000280)="a7a6119ad0da066b38b982d3d11b498c309d43d71201572db6ac41897c339a5bd025ad05d04fb6990551c022a0051a4d5ee021d4580da937195533deb1b79fe05c0a0e7ca8de2cbb5bd9027708c98d83e349981cac895824780e685b6a8719f389e66e2854bb8fa637bbadbed213e5ffc90b766ef01ac54e470824f5d20a60fd26b38d566caf10b4509df1a477bdb2c4a6922fabd07ad1b46950583013e31c3825291a0b70e18413f3383e028e4695111ae416567c", 0xb5}, {&(0x7f0000000340)="dea02f798fa72924ca4fb47dc6b794fa72f5a7b748d4af159d62d3a469eea10edb", 0x21}, {&(0x7f0000000380)="07c761488d6624f895b5561072170a23dca8a46f0b6e353f1819c0eb9af26104006d8bb18ebe4ed6032e82120302409e6d2e38948de0cc190e9345cdbca6e2213c1b9a9946ab20ee7f3fbf7bfb612591e9d58924b3985776ce5376", 0x5b}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="f4b3f2b43750fbfa3645970182bf86ac76fbbcd1556474fca25b483eab923a642177737c70b68d2144937efb0a3076d987be417fe048b3f1e71dd0ce3589cf599ca018b2811757021d41d02f2232", 0x4e}, {&(0x7f0000001480)="7820c75fba9e0a5bf33f169520f18e90a4c309e964161d94938062879ad663c0c6bbc6eacf98e192acae55adc54f383d50e40645b8f455054247f262c1c0a9b61fb073f39fb23fc24b0161106a36a51cf6fc6f519bff84817d231b2240cb374fde56581196caa749c9657b5c7f908e5006d350f0f550840df4d59e17c52d9716d72665e71167f57ca4b73a8280f9043715e6f366d8ba521279b6e7fc240161504f7bc7d2e79a99a938b2e6f90ca3d18589c6dc8050b3713fc018289f16dd95358bb6c9fa9cd9c3c3b62480108aef4661884d69ccac148cd3368252aeea00a8fcb8c009", 0xe3}], 0x9}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x6, @local, 0x2}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001680)="d54ab5e74045751b1ad4cfb5fb88fa0584d51dd7d2ae9c30b8c77193f3e70ab0f9052358655ce0fe736e147eeda2b5857d8d5a4007a945d39f69bbb8e23434085b000d4b89a895071b96e7e6a1e0371c670f13a2a0b22065a2d4d334ef8c9d564f907aa2e3bf1323be96f6cebc0f302f3143960a8cb2fbcd10f442bb2167c09326882eac23b45b1cda8dc98db693cb0c54376c230fbb32bfcf2d51350c4f0570b4f5119fd527d06f4125d72a2bc3439a17bbce6d766b01e07bbecd1c12f3d53b8878413e854153b5f84568", 0xcb}, {&(0x7f0000001780)="896418d1e7f7bb9fc28efcc0fc6a3e46025cfebcc40c9b5ae9439d6d7575a82e3f894959ad37f1b87b97ba4491b1758a9831f07d5073", 0x36}, {&(0x7f00000017c0)="70febf9341b8599c867ec8ffec373c3fab61b1d551758134710041a6723b46ab3f8b00061c262e4c2c286d81940ff27e2492f16a1fae637c3d43bf0d3a89bb9b2cf06f38f141b28ed1a874b28e63e1aab248ecc5091833f11a9488d6735d3ebd7b58e1ea6854e11b2efb139a6307f9dda8b73ff87d699373f1f6ed0980d925948d7abe49f080719ffde30b8e73641809615f21", 0x93}, {&(0x7f0000001880)="763d822b04aa60c3c2faf50ad08e61a043f42167b165633bd5ab52ec6541f96bf7fb93786d13e00440124ba9e0392a9ba28125425bc83234d6c561a9cee47f9997ce9f3c3f37ce0923953e33b4fb", 0x4e}, {&(0x7f0000001900)="4a3a72e5b02be555acfbbd5455719aa9908fd8c5207f1e8c5224d06d2b8abe185b1ebab759d1c37669d33117e7325895eed2113591fa88", 0x37}], 0x5, &(0x7f0000001a00)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a40)="718fe895bed263bfa7921912590f00633ed27d641b5d5bf3d3d8fcc58717a1c192123876f0b25fa921f96f7543c975dd505e9114341e6bffc0e7f85117ccbde5201e18f07f512e11291ff834f636772c25b579fafef156171cf91f25f74607200b8692a4913fa74a13e3279dc9de047eee3e9a44b2e15348234ff86ae8e233fd099b262cd60f78a092ff0e233fec9c5b915c35a7ad7007ece690f2a0ee", 0x9d}, {&(0x7f0000001b00)="1265a322d6a963478a3be3646b84ea07ceefa8ff3083848553b6c5ee21947e8135dd44a74ba63296ea206ccde39d893d7d9454e396fcf6df12172b621899ec5169e1fa07a4f82d4d994aa0fcc35fef702cdec1c652be5a45cd079470ecea83fbe345af20a2911f6804fff3d75ec6e6f6270ac0d8120f4626b73a0318d1ec51b8bcdb58fc2c1b4a932f13845d765d691643c68339b797249befcd", 0x9a}, {&(0x7f0000001bc0)="49e59b0c9c8ab981b6b27bf23e0c8a4381eb6c499c5c5bb08c8cb7ccc44be9a42e27b8deb486226eb17fbaf8c6ac6812bc502054fca0272d68b20489d05e7f7eb447585f096d95574c455b4101f8afaae15f9c907c8c1d1adf8f51c5278d89e289dd1dcd315919b23ce36b05f0f152c16d9daa104f", 0x75}, {&(0x7f0000001c40)="800926098531ee34fae58a4bc3110fb095e6c05afe08b153628eea783071bc155e8637d7fd6b15", 0x27}, {&(0x7f0000001c80)="25dfffba963e5f2e2ab5d878d530fc1985e938803747dbc736712e88d4b1bfded9a8771833ab03ea409b7a0351c4425b1da473d587e5c2113ef45624c3458a51a50f83287a906ce0099c210d3430b91fa94eaaae6a32be15d2a42f16e6e3a943457b0b5c7d87610a43ebc34bad08c8fdebc1e3e56fa1f80136d60e5942bfc41f5dfb31311b2e134b3349e6d7a5f9a492668b5c18a27fcaa45392f58c337fb37ee2328c7291d98d11d4fef845a148f49297b7f11ea1b4c34c054339520f7c67c67fbba86d0b6e48", 0xc7}], 0x5}}, {{&(0x7f0000001e00)={0xa, 0x4e23, 0x1f60, @remote, 0x11}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001e40)="0ececb1c0a3022fbcc3978d3c8e507c3f104dd090f5369f193866098859f5d47cc8dff1937e521ab014a78598115a76807454c15baa87866478c962ceb8d5b57e0aa2251725493f4589bc7adc9507648b630883df7606825e643c491fbe81b202e1859fc5e61240761cec7cf396366bf77864bf321c78326", 0x78}, {&(0x7f0000001ec0)="898a49b252625f0baf1d45", 0xb}, {&(0x7f0000001f00)="d21970243cd1af3be2a7d84b7f3338978cc3e13170038701c1610536cae6b708a6ba4667bc0a432a7439026e4dffa9924a5d4e42e45945bdc95dd46717530390e9cac1a9b6c6", 0x46}, {&(0x7f0000001f80)="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", 0xfe}, {&(0x7f0000002080)="02037dfd37acd42e46cc05334d8b324114c4ede5fb84e91a51811ab14c98589d154c9d928359b0c5d0414d333231e32e4aa35662a1a3454e9ef0cffae865adde564253450ddc23cc1c6f1762a4aff194d14c320af89541aa4ac9fbd62e225c3ba3595c177f7b9973df99821e2bc0181450839c482d5de9e2398cb6333a64f8eb16761c949303628e6749704b6a51a306db5cf99e0e016612eef7789e", 0x9c}], 0x5}}, {{&(0x7f00000021c0)={0xa, 0x4e24, 0x5, @empty, 0x200}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000002200)="9d8275bc765c01ea6bbb6ba94300e43fb9148d821d6262a3507b07d171", 0x1d}, {&(0x7f0000002240)="60d276125e8527ae3a631aa4bb73b73b3e84a55170272602a30e5eb78062eef90929852d3050ae21fbfe9f9da7a2504b6e3b7df5ab42b0ea0e83b94730584409c64452839eb46f30330a8c94f7257c8747ca4cc185a1b20dfa5ed3df33559b2914f62c8c4c915ea66ae69c97a2fff4eb009390824914b8b2c2", 0x79}], 0x2, &(0x7f0000002300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x87, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x168, 0x29, 0x36, {0x2f, 0x29, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @mcast1}, @generic={0x1, 0x11, "757f821fed14edea3737b82b93c323b367"}, @generic={0xb, 0xfb, "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"}, @pad1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x0, 0x8, 0x0, [@private1, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x29, 0xc, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0x60, "4cf80242be8070e98eabae4311df990d45d0edae9d7bd339064a0f612503b35890a84eb959d152d3ff0967ca97370690865acf73156549075c4395ba902777faf9acaee283d5489f47f32b0910999686f9d682ca02a23a74878b1ef71223585f"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x300}}, {{&(0x7f0000002600)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002640)="58541185f73458681a4a336a735aa354a747dda01a285ae34a98cfe1590a53d486a46711d1eb216dcb6c25f8285f877c3bb7082b1584f9752a5073a60193bb171c8e96d9b5cab27d33f4de9bc6c04cc6dfa1ae7d01a5e8de25f7e220760b357bc636a7", 0x63}, {&(0x7f00000026c0)="d291aaae21cbb911822d1aa9e55e7858c84beafde516b0abd60a852b14067cce471b16cc4ced93597ccc3531a805c12cc76ec32bdf991d", 0x37}, {&(0x7f0000002700)="e065f122dedfef0e877a95c8220ad43cbd0f5a2c7514b244b3c4b1072768da8202381a4d7ad740c77b12079bc2fd5eed2d0a84c4e5a417791d669ff8903ed03c2993cbb6c5b0caf95f93ae232db0219499888605b1edf8ed712ced39eb1a05c11544448d4b2023731d0542a3096adceb1726ad", 0x73}, {&(0x7f0000002780)="c48167bdf1fc5c6203fc949906f4de1bd1f52af5434ad37e89588335e9b678be8bda758a11ae1a5eb5bfaf22169ebce236822f0daa54ab42be69c8b6e13f311f77435473fc5d7e2cb9b3dab2b3b643d884b9bd5545f09d11c3945786b7bbde7f206d95fc4e6f50ef68516b80849f244d8961b91a4f497f907a02a1b72299b2651fc2194d28bc55aed25830efb13bd65516eba012da44db3c47720868cc14762092f77fce9b1f646f45d2d9d2763d753edfc215dd8a26a679c272d3e501815599378cc07e55c51c33e7ed99db4e95a37fb25d490b153d746378d78738f5f1b978095ba1ad4d08f4", 0xe7}, {&(0x7f0000002880)="9d00521e3db87e7e4840a0029e34226104abfed4b5c31b1c1fcce7c579510923", 0x20}], 0x5, &(0x7f0000002940)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x89, 0x7, '\x00', [@generic={0x1, 0x38, "451fc823ebb95c269a28c8b6d0b752667b605981f599a617bdda3cd9748987928e88dd70b8228060fab752cddf9dbccf518d379efbf0e64a"}]}}}], 0xa8}}, {{&(0x7f0000002a00)={0xa, 0x4e23, 0x1000, @empty, 0x3}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="ecee1e9259beb4298a78865efd76d20af6b5022ab95bc74001e9d4d25d39c140246e822e84a3e50fab311729b21902e2cefec715d0478a5fd22049de470a784bb0b44d84671e63814078758d5c120e76f0e72d761e3d77b31d66b83ab8e784f6413bd2ff24211eb7d2003cafa7144680425583325cb3802eb6d4777afc734fbb80918799e33a47c09124aab7fa41744fa03bca60422e06f7052db2e207fca65a6508775892243f5e7523577f50acdb9e16077ea2fa19380b0e6279014b0bb459a654b5933b65bf44be16", 0xca}, {&(0x7f0000003b40)="a808a26412e7cbc6ab7cb9b28dff04bf6ea00c1b49b4504542d8acd2272b7c3f46aeb88d", 0x24}, {&(0x7f0000003b80)="11bd57b2ddf380dde0c51485a464e4b303c0edbbd078620492e46e380146357236e5cdc9e8b9520f0ab32164e706148e2e47e383d64d1fff6f9e64f6e27dcf85ac61be4e09a36ca92dbe78b4c962d1ac3e6fd492e950c139433c28e6bd326c60ff1a4f9dfd686f405aa9ad7411f69ef67b53644a9a7784265c7f042992b29b", 0x7f}, {&(0x7f0000003c00)="609b90c885827419e760a2f5b8e35eeda97d1c84eb2b", 0x16}], 0x5, &(0x7f0000003cc0)=[@dstopts={{0x20, 0x29, 0x37, {0x1d, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r11}}}, @dstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x9}, @pad1, @ra, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xdb, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0xf8}}, {{&(0x7f0000003dc0)={0xa, 0x4e23, 0x3ff, @remote, 0x6}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000003e00)="ec947d791d21f4f0a484c4f970f74107ed0e7cd1d512273e878bdf3aaf2c6eee0a0839a753115b9504445578ffdc9df37f226fbe3c38a07b28adf03222caa3fc11cdbee00827b59aa25483a46cebdad2a32b6497265ad78628aa4180489df7491658e0ea8a594ce491d6b1c3ed582212f2d1e166553e77f0f4ec21479a87beaf2868fd51a9c13c2828f1e42dc3a3c4", 0x8f}], 0x1, &(0x7f0000003f00)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x30}}, {{&(0x7f0000003f40)={0xa, 0x4e24, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000004040)=[{&(0x7f0000003f80)="e76d3159260bdefe9d4c3dc442d87cb453ec0dae6766fbb41c5c192fa745a7540e83d78e01a635854651993929952a0975495641dddfc2a4ce53c0fc8a85763b86dda114a85319e3d265f4290fe7b050156bf3da1406de85a30575a78f3d7b2e6b1e903551fe786414691e3e0092ea2b6be98af4523f9c13e5041c3c70964dee35efacb793e5bde56bf893bc1cc07e9557cbfcfd9b101b224be216a9d30c45ffeb8d", 0xa2}], 0x1, &(0x7f0000004080)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim, @pad1]}}}, @flowinfo={{0x14}}], 0x38}}], 0x9, 0x4000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock2(&(0x7f000052f000/0x1000)=nil, 0x1000, 0x0) 1.477485619s ago: executing program 3 (id=1069): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1, 0x100) write(r0, &(0x7f0000000400)='1', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x208882, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x14}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="f5baded7adbb480f925d308617eaa13a1f2cc3307cddd2cdb5f7af75d1494353a44c71de47a4daaf44cd84efea75f6b6f21679707481c9f6921508dac17269d71750e2a8f566a6b15716c707d58c09dcf7bb4acb4c961c13cfbc5eac94947f3fa18a6f4af8a3595b4712a43d84604171268895c502ab12d179c60bc409005494d8e72a8b02e3fd466904da83c8b4d295ab9bd9dc45b95bb502e51a1d97e6284a05bbf6abb3a4bdf282b0af98f33f48aea9e617e4bbcc7a49c55f0c92", @ANYRES64=r3, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRESDEC=r6]) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='autofs\x00', 0x0, &(0x7f00000012c0)='\xa3(\x81\xa1\xb3\xd6yj\xb7\x1f\xe8\xc9+UeS=_0\x11\xd0\x90\x98\xc9e\x0e\x92}\x9eOwa\xd8\v\x9a\x98O\xa4\x15\xb6\xe6}\xd9s\x8f\x16\xf6\xf3\xf3\v/\x02\xd5\xb6\x05\x1a\x95\xf3\x1ci\x85\x0f\xdcm\v\xaey\xeb\x83Kd\xbdEP\x1aG\x81\b\xbf!\xd3%G\xed\xad\xfa\x0f0xffffffffffffffff}, 0x6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', r0, 0x4000, r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0', 0xb) faccessat2(r2, &(0x7f00000001c0)='./file0\x00', 0x2c, 0x300) 1.40614117s ago: executing program 2 (id=1071): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) chdir(&(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) dup(0xffffffffffffffff) 1.297269542s ago: executing program 2 (id=1072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x2000000, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) 1.296671145s ago: executing program 3 (id=1073): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000180)={'sit0\x00'}) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r4, 0x5f3f}, &(0x7f0000000080)=0x8) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x5, 0x6, 0xfff}) 1.163827075s ago: executing program 2 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}, [], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x2) 1.163491351s ago: executing program 3 (id=1075): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x90080, 0x0) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f00000000c0)={0x7, 0xf38, 0x7fffffffffffffff, 0x8c9, 0x2, 0x4, 0x4}) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r8 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1]:/\x00', 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x141, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.162714869s ago: executing program 1 (id=1076): r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xffffffffffeffff8, 0x48a01) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="9145d48152c96c9ddde37f89055bd4", @ANYRESHEX=r4, @ANYBLOB=',\x00']) lchown(&(0x7f0000000100)='\x00', r4, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x4, 0x0, 0x80000001, 0x201, 0x1, 0x8000000003fb, 0x1, 0x9, 0xa, 0x4, 0x10000, 0x4, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x5, 0x1, 0x8, 0x1, 0x4, 0x401, 0x8000, 0xffffffffffff0001, 0xffff, 0x57bf4b04, 0x4, 0x4, 0x6, 0x7, 0x100000000, 0x8, 0x7ff, 0x4, 0x80000000000401, 0x5, 0x400000401, 0x1ff, 0x10000, 0xee, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x2, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x77, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x4, 0x8000, 0x100080, 0x10007f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0xa, 0xb, 0x7ffd, 0x0, 0x4, 0x200005e997b8e, 0x1, 0x0, 0x6, 0x4, 0x100, 0x1000000006, 0x6, 0x6, 0x0, 0xffffffffffffff95, 0x80000000000a, 0x108000001, 0xcc7c, 0x8, 0x100000000, 0x100000000000006, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0xa, 0x1, 0x2, 0x8000, 0x20001, 0x5, 0xfff, 0x8, 0x80]}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0xa45) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r9 = socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r11 = fanotify_init(0xf00, 0x1000) fanotify_mark(r11, 0x105, 0x10000839, r10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') sendmmsg$inet(r9, &(0x7f0000000bc0)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)='\a', 0x1}], 0x1}}], 0x1, 0x800) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r8, 0x4}, 0x8) 1.162480134s ago: executing program 0 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000080)='romfs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x40005, 0x2) socket$netlink(0x10, 0x3, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e1d", @ANYRES16=r1], 0x22) 1.088100974s ago: executing program 2 (id=1078): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000801701000002007b8c0000000000000000"], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49", 0xc}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 942.859285ms ago: executing program 1 (id=1079): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3d, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001f00), &(0x7f0000003000)=0x8) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 663.724134ms ago: executing program 3 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10294, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 650.602082ms ago: executing program 2 (id=1081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01}, 0x0) (fail_nth: 5) 209.590892ms ago: executing program 3 (id=1082): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0000:00:1d.7', 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write(r1, &(0x7f00000002c0)='0_00:00:1d.7', 0xc) 140.304305ms ago: executing program 0 (id=1083): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00006dbffc), 0xd) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001040)={0x3, 0x3, 0xa, 0x2008, 0x14, "fb6b155a28a58c069f400cb6b82df30ea54fa6"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001080)={0x0, 0x1a, "75b6cbdbb3648312b3cf49d45c5ac46f9d3a748221934c290ec3"}, &(0x7f00000010c0)=0x22) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 140.007573ms ago: executing program 3 (id=1084): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000b800000db61ff00000065400800040003000000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1f) ioctl$I2C_SLAVE(r5, 0x703, 0x237) 0s ago: executing program 2 (id=1085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb09587", 0x42}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1e", 0x4e}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:1d.7', 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) unlink(&(0x7f0000000040)='./file1\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write(r3, &(0x7f00000002c0)='0000:00:1d.7', 0xc) kernel console output (not intermixed with test programs): 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.319150][ T8546] RSP: 002b:00007fd5e5509fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.319171][ T8546] RAX: ffffffffffffffda RBX: 00007fd5e550a6c0 RCX: 00007fd5e455e90e [ 268.319181][ T8546] RDX: 000000000000004a RSI: 0000200000000240 RDI: 00000000000000c8 [ 268.319192][ T8546] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 268.319204][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.319215][ T8546] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 268.319244][ T8546] [ 268.456809][ T1753] usb 8-1: device descriptor read/64, error -71 [ 268.970447][ T1753] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 268.995492][ T8548] kAFS: unable to lookup cell '(,c' [ 269.142564][ T1753] usb 8-1: device descriptor read/64, error -71 [ 269.250887][ T1753] usb usb8-port1: attempt power cycle [ 269.618596][ T1753] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 269.655659][ T1753] usb 8-1: device descriptor read/8, error -71 [ 269.999770][ T1753] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 270.052556][ T1753] usb 8-1: device descriptor read/8, error -71 [ 270.102824][ T5597] nci: nci_ntf_packet: unknown ntf opcode 0xa37 [ 270.215979][ T1753] usb usb8-port1: unable to enumerate USB device [ 270.398862][ T5814] usb 6-1: USB disconnect, device number 27 [ 270.863246][ T8575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.304568][ T8600] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 271.323000][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 271.323021][ T42] audit: type=1400 audit(1786972052.798:671): avc: denied { read write } for pid=8608 comm="syz.2.865" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.359606][ T42] audit: type=1400 audit(1786972052.798:672): avc: denied { open } for pid=8608 comm="syz.2.865" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.359662][ T42] audit: type=1326 audit(1786972052.808:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.3.863" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb98119e0d9 code=0x0 [ 271.635144][ T8617] batman_adv: batadv0: Adding interface: veth0 [ 271.635181][ T8617] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.635211][ T8617] batman_adv: batadv0: Interface activated: veth0 [ 271.646334][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.646371][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.652279][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.806679][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.818625][ T1753] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 271.874424][ T8617] batman_adv: batadv0: Interface deactivated: veth0 [ 271.874455][ T8617] batman_adv: batadv0: Removing interface: veth0 [ 271.963458][ T42] audit: type=1400 audit(1786972053.408:674): avc: denied { setopt } for pid=8618 comm="syz.1.867" lport=43482 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 272.027565][ T1753] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 272.076028][ T1753] usb 5-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.080227][ T1753] usb 5-1: config 1 interface 0 has no altsetting 0 [ 272.110191][ T1753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.137091][ T1753] usb 5-1: Product: syz [ 272.139780][ T1753] usb 5-1: Manufacturer: syz [ 272.142311][ T1753] usb 5-1: SerialNumber: syz [ 272.278713][ T8623] FAULT_INJECTION: forcing a failure. [ 272.278713][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.299452][ T8623] CPU: 2 UID: 0 PID: 8623 Comm: syz.1.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.299485][ T8623] Tainted: [L]=SOFTLOCKUP [ 272.299491][ T8623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.299521][ T8623] Call Trace: [ 272.299528][ T8623] [ 272.299537][ T8623] dump_stack_lvl+0x100/0x190 [ 272.299566][ T8623] should_fail_ex.cold+0x5/0xa [ 272.299588][ T8623] _copy_to_user+0x32/0xd0 [ 272.299614][ T8623] copy_siginfo_to_user+0x27/0xc0 [ 272.299641][ T8623] x64_setup_rt_frame+0xa03/0xce0 [ 272.299687][ T8623] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 272.299712][ T8623] arch_do_signal_or_restart+0x5ee/0x7e0 [ 272.299733][ T8623] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 272.299872][ T8623] ? find_held_lock+0x2b/0x80 [ 272.299889][ T8623] ? __might_fault+0xc5/0x140 [ 272.299925][ T8623] exit_to_user_mode_loop+0x139/0x700 [ 272.299956][ T8623] ? rcu_is_watching+0x12/0xc0 [ 272.299985][ T8623] do_syscall_64+0x666/0x870 [ 272.300005][ T8623] ? clear_bhb_loop+0x70/0xc0 [ 272.300027][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.300045][ T8623] RIP: 0033:0x7fe45df9e0d7 [ 272.300062][ T8623] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 272.300077][ T8623] RSP: 002b:00007fe45ef09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.300097][ T8623] RAX: 0000000000000010 RBX: 00007fe45e226090 RCX: 00007fe45df9e0d9 [ 272.300108][ T8623] RDX: 0000200000000440 RSI: 00000000c0502100 RDI: 0000000000000003 [ 272.300119][ T8623] RBP: 00007fe45ef09090 R08: 0000000000000000 R09: 0000000000000000 [ 272.300130][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.300140][ T8623] R13: 00007fe45e226128 R14: 00007fe45e226090 R15: 00007ffec817b498 [ 272.300162][ T8623] [ 272.341149][ T8626] FAULT_INJECTION: forcing a failure. [ 272.341149][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.530035][ T8626] CPU: 2 UID: 0 PID: 8626 Comm: syz.2.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.530068][ T8626] Tainted: [L]=SOFTLOCKUP [ 272.530075][ T8626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.530102][ T8626] Call Trace: [ 272.530111][ T8626] [ 272.530121][ T8626] dump_stack_lvl+0x100/0x190 [ 272.530153][ T8626] should_fail_ex.cold+0x5/0xa [ 272.530176][ T8626] _copy_from_user+0x2e/0xd0 [ 272.530200][ T8626] comedi_unlocked_ioctl+0x9b5/0x3310 [ 272.530289][ T8626] ? tomoyo_path_number_perm+0x188/0x580 [ 272.530326][ T8626] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 272.530362][ T8626] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 272.530389][ T8626] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 272.530424][ T8626] ? __fget_files+0x215/0x3d0 [ 272.530440][ T8626] ? hook_file_ioctl_common+0x140/0x440 [ 272.530465][ T8626] ? selinux_file_ioctl+0x13b/0x290 [ 272.530488][ T8626] ? selinux_file_ioctl+0xb6/0x290 [ 272.530514][ T8626] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 272.530544][ T8626] __x64_sys_ioctl+0x18e/0x210 [ 272.530570][ T8626] do_syscall_64+0x115/0x870 [ 272.530591][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 272.530612][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.530629][ T8626] RIP: 0033:0x7fd5e459e0d9 [ 272.530644][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.530662][ T8626] RSP: 002b:00007fd5e550a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.530680][ T8626] RAX: ffffffffffffffda RBX: 00007fd5e4825fa0 RCX: 00007fd5e459e0d9 [ 272.530691][ T8626] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 272.530701][ T8626] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 272.530712][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.530722][ T8626] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 272.530746][ T8626] [ 272.710983][ T1753] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 272.758387][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.879007][ T5749] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 272.988254][ T8629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.544845][ T8610] kAFS: unable to lookup cell '(,c' [ 273.595425][ T8637] FAULT_INJECTION: forcing a failure. [ 273.595425][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 273.608628][ T8637] CPU: 2 UID: 0 PID: 8637 Comm: syz.1.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.608663][ T8637] Tainted: [L]=SOFTLOCKUP [ 273.608671][ T8637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.608683][ T8637] Call Trace: [ 273.608693][ T8637] [ 273.608703][ T8637] dump_stack_lvl+0x100/0x190 [ 273.608736][ T8637] should_fail_ex.cold+0x5/0xa [ 273.608762][ T8637] should_failslab+0xc2/0x120 [ 273.608790][ T8637] __kvmalloc_node_noprof+0x116/0x970 [ 273.608814][ T8637] ? kasan_save_stack+0x30/0x50 [ 273.608841][ T8637] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 273.608884][ T8637] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 273.608912][ T8637] mmu_topup_memory_caches+0x25/0x170 [ 273.608952][ T8637] kvm_mmu_load+0xe2/0x2570 [ 273.608976][ T8637] ? register_lock_class+0x40/0x560 [ 273.609003][ T8637] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 273.609026][ T8637] ? __pfx_kvm_mmu_load+0x10/0x10 [ 273.609474][ T8637] ? __lock_acquire+0x49f/0x1a40 [ 273.609510][ T8637] kvm_arch_vcpu_pre_fault_memory+0x6ab/0x800 [ 273.609541][ T8637] ? __pfx_kvm_arch_vcpu_pre_fault_memory+0x10/0x10 [ 273.609574][ T8637] kvm_vcpu_ioctl+0x100d/0x1700 [ 273.609595][ T8637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 273.609615][ T8637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.609655][ T8637] ? do_vfs_ioctl+0x226/0x13e0 [ 273.609684][ T8637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 273.609722][ T8637] ? __fget_files+0x215/0x3d0 [ 273.609742][ T8637] ? hook_file_ioctl_common+0x140/0x440 [ 273.609774][ T8637] ? selinux_file_ioctl+0x13b/0x290 [ 273.609803][ T8637] ? selinux_file_ioctl+0xb6/0x290 [ 273.609834][ T8637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 273.609859][ T8637] __x64_sys_ioctl+0x18e/0x210 [ 273.609890][ T8637] do_syscall_64+0x115/0x870 [ 273.609914][ T8637] ? clear_bhb_loop+0x70/0xc0 [ 273.609938][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.609957][ T8637] RIP: 0033:0x7fe45df9e0d9 [ 273.609977][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.609996][ T8637] RSP: 002b:00007fe45ef2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.610018][ T8637] RAX: ffffffffffffffda RBX: 00007fe45e225fa0 RCX: 00007fe45df9e0d9 [ 273.610030][ T8637] RDX: 0000200000000040 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 273.610043][ T8637] RBP: 00007fe45ef2a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.610054][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.610066][ T8637] R13: 00007fe45e226038 R14: 00007fe45e225fa0 R15: 00007ffec817b498 [ 273.610098][ T8637] [ 274.085083][ T42] audit: type=1400 audit(1786972055.568:675): avc: denied { cmd } for pid=8638 comm="syz.2.873" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 274.138725][ T42] audit: type=1400 audit(1786972055.618:676): avc: denied { map } for pid=8638 comm="syz.2.873" path="/dev/ublkc0" dev="devtmpfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.531008][ T1753] usb 5-1: USB disconnect, device number 20 [ 274.575376][ T1753] usblp0: removed [ 274.656079][ T5747] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 274.684471][ T5747] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 274.873527][ T8666] FAULT_INJECTION: forcing a failure. [ 274.873527][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.909427][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.0.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.909461][ T8666] Tainted: [L]=SOFTLOCKUP [ 274.909469][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.909482][ T8666] Call Trace: [ 274.909488][ T8666] [ 274.909496][ T8666] dump_stack_lvl+0x100/0x190 [ 274.909526][ T8666] should_fail_ex.cold+0x5/0xa [ 274.909553][ T8666] strncpy_from_user+0x3b/0x2d0 [ 274.909580][ T8666] do_getname+0x78/0x390 [ 274.909609][ T8666] __x64_sys_symlinkat+0x8b/0xe0 [ 274.909637][ T8666] do_syscall_64+0x115/0x870 [ 274.909660][ T8666] ? clear_bhb_loop+0x70/0xc0 [ 274.909683][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.909703][ T8666] RIP: 0033:0x7fe8d699e0d9 [ 274.909720][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.909737][ T8666] RSP: 002b:00007fe8d77a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 274.909759][ T8666] RAX: ffffffffffffffda RBX: 00007fe8d6c25fa0 RCX: 00007fe8d699e0d9 [ 274.909772][ T8666] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 274.909785][ T8666] RBP: 00007fe8d77a0090 R08: 0000000000000000 R09: 0000000000000000 [ 274.909796][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.909808][ T8666] R13: 00007fe8d6c26038 R14: 00007fe8d6c25fa0 R15: 00007fff21190478 [ 274.909832][ T8666] [ 275.103758][ T42] audit: type=1400 audit(1786972056.578:677): avc: denied { create } for pid=8669 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.289916][ T8674] FAULT_INJECTION: forcing a failure. [ 275.289916][ T8674] name failslab, interval 1, probability 0, space 0, times 0 [ 275.289956][ T8674] CPU: 2 UID: 0 PID: 8674 Comm: syz.3.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.289981][ T8674] Tainted: [L]=SOFTLOCKUP [ 275.289995][ T8674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.290006][ T8674] Call Trace: [ 275.290012][ T8674] [ 275.290019][ T8674] dump_stack_lvl+0x100/0x190 [ 275.290047][ T8674] should_fail_ex.cold+0x5/0xa [ 275.290070][ T8674] should_failslab+0xc2/0x120 [ 275.290093][ T8674] kmem_cache_alloc_noprof+0x91/0x6a0 [ 275.290114][ T8674] ? trace_kmem_cache_alloc+0xdd/0x100 [ 275.290136][ T8674] ? security_file_alloc+0x34/0x2c0 [ 275.290158][ T8674] security_file_alloc+0x34/0x2c0 [ 275.290174][ T8674] init_file+0x95/0x480 [ 275.290229][ T8674] alloc_empty_file+0x79/0x1c0 [ 275.290252][ T8674] path_openat+0xe7/0x4280 [ 275.290270][ T8674] ? unwind_get_return_address+0x59/0xa0 [ 275.290290][ T8674] ? arch_stack_walk+0xa6/0xf0 [ 275.290334][ T8674] ? __pfx_path_openat+0x10/0x10 [ 275.290351][ T8674] ? stack_trace_save+0x8e/0xc0 [ 275.290370][ T8674] ? __pfx_stack_trace_save+0x10/0x10 [ 275.290386][ T8674] ? __pfx_check_buffer+0x10/0x10 [ 275.290405][ T8674] do_file_open+0x20e/0x430 [ 275.290425][ T8674] ? __pfx_do_file_open+0x10/0x10 [ 275.290441][ T8674] ? __kasan_slab_alloc+0x89/0x90 [ 275.290462][ T8674] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 275.290480][ T8674] ? do_getname+0x35/0x390 [ 275.290516][ T8674] ? __lock_acquire+0x49f/0x1a40 [ 275.290544][ T8674] do_open_execat+0xd1/0x360 [ 275.290570][ T8674] ? __pfx_do_open_execat+0x10/0x10 [ 275.290597][ T8674] ? __might_fault+0xc5/0x140 [ 275.290614][ T8674] ? __might_fault+0xc5/0x140 [ 275.290635][ T8674] alloc_bprm+0x2d/0x9d0 [ 275.290663][ T8674] do_execveat_common.isra.0+0x19c/0x580 [ 275.290690][ T8674] ? do_getname+0x191/0x390 [ 275.290714][ T8674] __x64_sys_execve+0x93/0xd0 [ 275.290731][ T8674] do_syscall_64+0x115/0x870 [ 275.290752][ T8674] ? clear_bhb_loop+0x70/0xc0 [ 275.290773][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.290791][ T8674] RIP: 0033:0x7fb98119e0d9 [ 275.290810][ T8674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.290828][ T8674] RSP: 002b:00007fb982113028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 275.290847][ T8674] RAX: ffffffffffffffda RBX: 00007fb981426090 RCX: 00007fb98119e0d9 [ 275.290874][ T8674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 275.290885][ T8674] RBP: 00007fb982113090 R08: 0000000000000000 R09: 0000000000000000 [ 275.290895][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.290906][ T8674] R13: 00007fb981426128 R14: 00007fb981426090 R15: 00007ffd5a52a6b8 [ 275.290929][ T8674] [ 275.471911][ T8686] __nla_validate_parse: 3 callbacks suppressed [ 275.471934][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 275.539291][ T1351] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 275.836805][ T8692] FAULT_INJECTION: forcing a failure. [ 275.836805][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 275.841998][ T8692] CPU: 2 UID: 0 PID: 8692 Comm: syz.1.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.842031][ T8692] Tainted: [L]=SOFTLOCKUP [ 275.842038][ T8692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.842050][ T8692] Call Trace: [ 275.842056][ T8692] [ 275.842063][ T8692] dump_stack_lvl+0x100/0x190 [ 275.842094][ T8692] should_fail_ex.cold+0x5/0xa [ 275.842118][ T8692] should_failslab+0xc2/0x120 [ 275.842142][ T8692] __kmalloc_cache_noprof+0x91/0x6c0 [ 275.842161][ T8692] ? fuse_io_alloc+0x47/0x150 [ 275.842855][ T8692] fuse_io_alloc+0x47/0x150 [ 275.842888][ T8692] fuse_direct_io+0x310/0x23f0 [ 275.842926][ T8692] ? kasan_save_track+0x14/0x30 [ 275.842948][ T8692] ? __pfx_fuse_direct_io+0x10/0x10 [ 275.842971][ T8692] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 275.842989][ T8692] ? lockdep_init_map_type+0x5c/0x250 [ 275.843015][ T8692] fuse_direct_IO+0xc57/0xfd0 [ 275.843043][ T8692] ? __pfx_aio_complete_rw+0x10/0x10 [ 275.843068][ T8692] ? __pfx_fuse_direct_IO+0x10/0x10 [ 275.843092][ T8692] ? generic_write_check_limits+0x1ef/0x280 [ 275.843124][ T8692] ? __pfx_down_write+0x10/0x10 [ 275.843148][ T8692] ? __kernel_text_address+0xd/0x30 [ 275.843171][ T8692] fuse_direct_write_iter+0x4f8/0x8f0 [ 275.843197][ T8692] ? look_up_lock_class+0x55/0x120 [ 275.843215][ T8692] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 275.843238][ T8692] ? register_lock_class+0x40/0x560 [ 275.843260][ T8692] ? stack_trace_save+0x8e/0xc0 [ 275.843280][ T8692] ? __lock_acquire+0x49f/0x1a40 [ 275.843302][ T8692] ? kasan_save_stack+0x3f/0x50 [ 275.843324][ T8692] ? kasan_save_track+0x14/0x30 [ 275.843354][ T8692] fuse_file_write_iter+0x59b/0x960 [ 275.843382][ T8692] aio_write+0x3ba/0x920 [ 275.843405][ T8692] ? __pfx_aio_write+0x10/0x10 [ 275.843424][ T8692] ? __lock_acquire+0x49f/0x1a40 [ 275.843459][ T8692] ? __might_fault+0xc5/0x140 [ 275.843481][ T8692] ? io_submit_one+0x1142/0x1fb0 [ 275.843502][ T8692] io_submit_one+0x1142/0x1fb0 [ 275.843525][ T8692] ? __lock_acquire+0x49f/0x1a40 [ 275.843547][ T8692] ? __pfx_io_submit_one+0x10/0x10 [ 275.843576][ T8692] ? __might_fault+0xc5/0x140 [ 275.843598][ T8692] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 275.843620][ T8692] __x64_sys_io_submit+0x1b1/0x3a0 [ 275.843644][ T8692] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 275.843676][ T8692] do_syscall_64+0x115/0x870 [ 275.843695][ T8692] ? clear_bhb_loop+0x70/0xc0 [ 275.843715][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.843732][ T8692] RIP: 0033:0x7fe45df9e0d9 [ 275.843748][ T8692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.843763][ T8692] RSP: 002b:00007fe45ef09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 275.843782][ T8692] RAX: ffffffffffffffda RBX: 00007fe45e226090 RCX: 00007fe45df9e0d9 [ 275.843792][ T8692] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 00007fe45eee0000 [ 275.843803][ T8692] RBP: 00007fe45ef09090 R08: 0000000000000000 R09: 0000000000000000 [ 275.843813][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.843823][ T8692] R13: 00007fe45e226128 R14: 00007fe45e226090 R15: 00007ffec817b498 [ 275.843846][ T8692] [ 276.019346][ T1351] usb 5-1: Using ep0 maxpacket: 32 [ 276.134109][ T42] audit: type=1400 audit(1786972057.618:678): avc: denied { create } for pid=8688 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 276.159026][ T1351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.176137][ T42] audit: type=1400 audit(1786972057.618:679): avc: denied { write } for pid=8688 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 276.179864][ T1351] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 276.181355][ T1351] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 276.181385][ T1351] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 276.181405][ T1351] usb 5-1: config 14 has no interface number 0 [ 276.181420][ T1351] usb 5-1: config 14 has no interface number 1 [ 276.181469][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 276.181493][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 276.181517][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 276.181539][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 276.181565][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 276.181589][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.181613][ T1351] usb 5-1: config 14 interface 57 has no altsetting 0 [ 276.181630][ T1351] usb 5-1: config 14 interface 228 has no altsetting 0 [ 276.183938][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.183962][ T1351] usb 5-1: Product: syz [ 276.184040][ T1351] usb 5-1: Manufacturer: syz [ 276.184052][ T1351] usb 5-1: SerialNumber: syz [ 276.752027][ T8691] infiniband syz0: set active [ 276.769552][ T8691] infiniband syz0: added bond_slave_1 [ 276.802518][ T8691] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 276.812592][ T8691] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 276.826510][ T8691] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 276.882093][ T8691] RDS/IB: syz0: added [ 276.884922][ T8691] smc: adding ib device syz0 with port count 1 [ 276.888871][ T8691] smc: ib device syz0 port 1 has no pnetid [ 276.950408][ T1351] legousbtower 5-1:14.57: interrupt endpoints not found [ 278.113906][ T8676] FAULT_INJECTION: forcing a failure. [ 278.113906][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.136214][ T8676] CPU: 1 UID: 0 PID: 8676 Comm: syz.0.886 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.136245][ T8676] Tainted: [L]=SOFTLOCKUP [ 278.136251][ T8676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.136263][ T8676] Call Trace: [ 278.136274][ T8676] [ 278.136283][ T8676] dump_stack_lvl+0x100/0x190 [ 278.136313][ T8676] should_fail_ex.cold+0x5/0xa [ 278.136335][ T8676] core_sys_select+0x5d1/0xbb0 [ 278.136359][ T8676] ? __pfx_core_sys_select+0x10/0x10 [ 278.136376][ T8676] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 278.136416][ T8676] ? __pfx_set_user_sigmask+0x10/0x10 [ 278.136438][ T8676] ? ring_buffer_unlock_commit+0x2e6/0x6f0 [ 278.136462][ T8676] do_pselect.constprop.0+0x238/0x270 [ 278.136482][ T8676] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 278.136504][ T8676] ? find_held_lock+0x2b/0x80 [ 278.136519][ T8676] ? trace_syscall_enter+0xd9/0x110 [ 278.136546][ T8676] __x64_sys_pselect6+0x149/0x1c0 [ 278.136569][ T8676] do_syscall_64+0x115/0x870 [ 278.136589][ T8676] ? clear_bhb_loop+0x70/0xc0 [ 278.136610][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.136628][ T8676] RIP: 0033:0x7fe8d699e0d9 [ 278.136644][ T8676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.136661][ T8676] RSP: 002b:00007fe8d77a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 278.136680][ T8676] RAX: ffffffffffffffda RBX: 00007fe8d6c25fa0 RCX: 00007fe8d699e0d9 [ 278.136773][ T8676] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 278.136784][ T8676] RBP: 00007fe8d77a0090 R08: 0000000000000000 R09: 0000000000000000 [ 278.136794][ T8676] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 278.136804][ T8676] R13: 00007fe8d6c26038 R14: 00007fe8d6c25fa0 R15: 00007fff21190478 [ 278.136828][ T8676] [ 278.414000][ T42] audit: type=1400 audit(1786972059.898:680): avc: denied { write } for pid=8698 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.474631][ T42] audit: type=1800 audit(1786972059.958:681): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.893" name="cdrom" dev="configfs" ino=31604 res=0 errno=0 [ 278.513378][ T42] audit: type=1800 audit(1786972059.998:682): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.893" name="file" dev="configfs" ino=31605 res=0 errno=0 [ 278.528234][ T42] audit: type=1400 audit(1786972060.008:683): avc: denied { write } for pid=8700 comm="syz.3.893" name="c.1" dev="configfs" ino=12471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.589254][ T42] audit: type=1400 audit(1786972060.008:684): avc: denied { write } for pid=8700 comm="syz.3.893" name="c.1" dev="configfs" ino=12471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 278.601741][ T42] audit: type=1800 audit(1786972060.028:685): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.893" name="UDC" dev="configfs" ino=32232 res=0 errno=0 [ 278.989653][ T1351] legousbtower 5-1:14.228: get version request failed: -110 [ 278.996405][ T1351] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -110 [ 279.286491][ T42] audit: type=1400 audit(1786972060.758:686): avc: denied { bind } for pid=8715 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.465185][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 279.505126][ T1351] usb 5-1: USB disconnect, device number 21 [ 279.684225][ T24] usb 6-1: device descriptor read/64, error -71 [ 279.760051][ T42] audit: type=1400 audit(1786972061.228:687): avc: denied { getattr } for pid=8717 comm="syz.3.899" name="/" dev="9p" ino=80478277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 279.773107][ T8721] FAULT_INJECTION: forcing a failure. [ 279.773107][ T8721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.781822][ T8718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.819216][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.0.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.819249][ T8721] Tainted: [L]=SOFTLOCKUP [ 279.819255][ T8721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.819265][ T8721] Call Trace: [ 279.819273][ T8721] [ 279.819283][ T8721] dump_stack_lvl+0x100/0x190 [ 279.819311][ T8721] should_fail_ex.cold+0x5/0xa [ 279.819333][ T8721] _copy_from_iter+0x1f4/0x1690 [ 279.819358][ T8721] ? __asan_memset+0x23/0x50 [ 279.819377][ T8721] ? __pfx__copy_from_iter+0x10/0x10 [ 279.820542][ T8721] ? __pfx___alloc_skb+0x10/0x10 [ 279.820568][ T8721] netlink_sendmsg+0x808/0xda0 [ 279.820593][ T8721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.820614][ T8721] ? selinux_socket_sendmsg+0x198/0x2f0 [ 279.820643][ T8721] ____sys_sendmsg+0xa4d/0xbe0 [ 279.820659][ T8721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.820679][ T8721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.820701][ T8721] ? __pfx_trace_clock_local+0x10/0x10 [ 279.820729][ T8721] ___sys_sendmsg+0x190/0x1e0 [ 279.820747][ T8721] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.820762][ T8721] ? __lock_acquire+0x49f/0x1a40 [ 279.820804][ T8721] __sys_sendmsg+0x160/0x210 [ 279.820825][ T8721] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.820853][ T8721] do_syscall_64+0x115/0x870 [ 279.820875][ T8721] ? clear_bhb_loop+0x70/0xc0 [ 279.820894][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.820909][ T8721] RIP: 0033:0x7fe8d699e0d9 [ 279.820933][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.820948][ T8721] RSP: 002b:00007fe8d77a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.820966][ T8721] RAX: ffffffffffffffda RBX: 00007fe8d6c25fa0 RCX: 00007fe8d699e0d9 [ 279.820976][ T8721] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 279.820986][ T8721] RBP: 00007fe8d77a0090 R08: 0000000000000000 R09: 0000000000000000 [ 279.820998][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.821006][ T8721] R13: 00007fe8d6c26038 R14: 00007fe8d6c25fa0 R15: 00007fff21190478 [ 279.821029][ T8721] [ 279.953455][ T8725] FAULT_INJECTION: forcing a failure. [ 279.953455][ T8725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.085509][ T42] audit: type=1400 audit(1786972061.538:688): avc: denied { set_context_mgr } for pid=8726 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 280.112146][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 280.178764][ T8725] CPU: 3 UID: 0 PID: 8725 Comm: syz.2.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.178804][ T8725] Tainted: [L]=SOFTLOCKUP [ 280.178812][ T8725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.178826][ T8725] Call Trace: [ 280.178836][ T8725] [ 280.178845][ T8725] dump_stack_lvl+0x100/0x190 [ 280.178884][ T8725] should_fail_ex.cold+0x5/0xa [ 280.178913][ T8725] _copy_to_user+0x32/0xd0 [ 280.178955][ T8725] simple_read_from_buffer+0xcb/0x170 [ 280.178983][ T8725] proc_fail_nth_read+0x1af/0x230 [ 280.179021][ T8725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.179083][ T8725] ? rw_verify_area+0xce/0x6d0 [ 280.179115][ T8725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.179150][ T8725] vfs_read+0x1e4/0xb40 [ 280.179206][ T8725] ? __pfx_vfs_read+0x10/0x10 [ 280.179236][ T8725] ? __fget_files+0x215/0x3d0 [ 280.179264][ T8725] ? __fget_files+0x21f/0x3d0 [ 280.179292][ T8725] ksys_read+0x12a/0x250 [ 280.179310][ T8725] ? __pfx_ksys_read+0x10/0x10 [ 280.179326][ T8725] ? trace_syscall_enter+0xd9/0x110 [ 280.179364][ T8725] do_syscall_64+0x115/0x870 [ 280.179389][ T8725] ? clear_bhb_loop+0x70/0xc0 [ 280.179415][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.179436][ T8725] RIP: 0033:0x7fd5e455e90e [ 280.179453][ T8725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.179473][ T8725] RSP: 002b:00007fd5e5509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.179497][ T8725] RAX: ffffffffffffffda RBX: 00007fd5e550a6c0 RCX: 00007fd5e455e90e [ 280.179511][ T8725] RDX: 000000000000000f RSI: 00007fd5e550a0a0 RDI: 0000000000000004 [ 280.179524][ T8725] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 280.179538][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.179551][ T8725] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 280.179580][ T8725] [ 280.228582][ T8727] binder: 8726:8727 ioctl 80044dfe 200000000180 returned -22 [ 280.350719][ T24] usb 6-1: device descriptor read/64, error -71 [ 280.371702][ T5747] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 280.443330][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 280.443379][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 280.484184][ T5747] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 280.532657][ T8728] geneve0: entered promiscuous mode [ 280.550811][ T24] usb usb6-port1: attempt power cycle [ 280.847795][ T8739] jffs2: notice: (8739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 280.923777][ T8739] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 280.935782][ T8736] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 280.940387][ T8739] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.957563][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 280.967172][ T42] audit: type=1400 audit(1786972062.438:689): avc: denied { setattr } for pid=8738 comm="syz.2.907" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.992094][ T8739] vhci_hcd vhci_hcd.0: Device attached [ 281.030559][ T24] usb 6-1: device descriptor read/8, error -71 [ 281.036810][ T8736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.150491][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 281.331894][ T5814] usb 42-1: SetAddress Request (2) to port 0 [ 281.336025][ T5814] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 281.364704][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 281.380337][ T24] usb 6-1: device descriptor read/8, error -71 [ 281.491959][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 281.510238][ T24] usb usb6-port1: unable to enumerate USB device [ 281.594593][ T8741] vhci_hcd: connection reset by peer [ 281.609176][ T12] vhci_hcd vhci_hcd.2: stop threads [ 281.626859][ T12] vhci_hcd vhci_hcd.2: release socket [ 281.638194][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 281.974731][ T1344] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 282.069397][ T1351] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 282.127387][ T1344] usb 8-1: device descriptor read/64, error -71 [ 282.222770][ T1351] usb 5-1: Using ep0 maxpacket: 32 [ 282.237449][ T1351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.256399][ T1351] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 282.277787][ T1351] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 282.342406][ T1351] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 282.348677][ T1351] usb 5-1: config 14 has no interface number 0 [ 282.354699][ T1351] usb 5-1: config 14 has no interface number 1 [ 282.373465][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 282.397847][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 282.403190][ T1344] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 282.407058][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 282.407215][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 282.407242][ T1351] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 282.407343][ T1351] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.407365][ T1351] usb 5-1: config 14 interface 57 has no altsetting 0 [ 282.407380][ T1351] usb 5-1: config 14 interface 228 has no altsetting 0 [ 282.411646][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.411672][ T1351] usb 5-1: Product: syz [ 282.411684][ T1351] usb 5-1: Manufacturer: syz [ 282.411695][ T1351] usb 5-1: SerialNumber: syz [ 282.630487][ T1344] usb 8-1: device descriptor read/64, error -71 [ 282.671890][ T8778] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.912'. [ 282.771904][ T1344] usb usb8-port1: attempt power cycle [ 282.848930][ T1351] legousbtower 5-1:14.57: interrupt endpoints not found [ 283.115051][ T1344] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 283.137636][ T8794] kvm: apic: phys broadcast and lowest prio [ 283.151225][ T1344] usb 8-1: device descriptor read/8, error -71 [ 283.199500][ T8800] FAULT_INJECTION: forcing a failure. [ 283.199500][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 283.213396][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.2.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.213430][ T8800] Tainted: [L]=SOFTLOCKUP [ 283.213437][ T8800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.213458][ T8800] Call Trace: [ 283.213475][ T8800] [ 283.213484][ T8800] dump_stack_lvl+0x100/0x190 [ 283.213844][ T8800] should_fail_ex.cold+0x5/0xa [ 283.213883][ T8800] should_failslab+0xc2/0x120 [ 283.213918][ T8800] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 283.213950][ T8800] ? __get_vm_area_node+0x101/0x330 [ 283.213980][ T8800] __get_vm_area_node+0x101/0x330 [ 283.214008][ T8800] __vmalloc_node_range_noprof+0x228/0x1630 [ 283.214033][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.214062][ T8800] ? rcu_is_watching+0x12/0xc0 [ 283.214103][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.214128][ T8800] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 283.214179][ T8800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.214211][ T8800] ? trace_kmem_cache_alloc+0xdd/0x100 [ 283.214237][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.214256][ T8800] __vmalloc_node_noprof+0xad/0xf0 [ 283.214277][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.214298][ T8800] copy_process+0x7fb/0x8030 [ 283.214348][ T8800] ? __pfx_copy_process+0x10/0x10 [ 283.214373][ T8800] ? __kasan_kmalloc+0xaa/0xb0 [ 283.214395][ T8800] ? lockdep_init_map_type+0x5c/0x250 [ 283.214420][ T8800] ? lockdep_init_map_type+0x5c/0x250 [ 283.214443][ T8800] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 283.214476][ T8800] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 283.214495][ T8800] vhost_task_create+0x1db/0x370 [ 283.214516][ T8800] ? __pfx_vhost_task_create+0x10/0x10 [ 283.214543][ T8800] ? __pfx_vhost_task_fn+0x10/0x10 [ 283.214565][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 283.214599][ T8800] ? kasan_quarantine_put+0x104/0x240 [ 283.214625][ T8800] kvm_mmu_post_init_vm+0x1b3/0x360 [ 283.214651][ T8800] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 283.214678][ T8800] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 283.214712][ T8800] kvm_vcpu_ioctl+0x730/0x1700 [ 283.214734][ T8800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.214754][ T8800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.215792][ T8800] ? do_vfs_ioctl+0x226/0x13e0 [ 283.230276][ T8800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 283.230305][ T8800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 283.230359][ T8800] ? __fget_files+0x215/0x3d0 [ 283.230378][ T8800] ? hook_file_ioctl_common+0x140/0x440 [ 283.230407][ T8800] ? selinux_file_ioctl+0x13b/0x290 [ 283.230434][ T8800] ? selinux_file_ioctl+0xb6/0x290 [ 283.230464][ T8800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.230489][ T8800] __x64_sys_ioctl+0x18e/0x210 [ 283.230521][ T8800] do_syscall_64+0x115/0x870 [ 283.230543][ T8800] ? clear_bhb_loop+0x70/0xc0 [ 283.230568][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.230588][ T8800] RIP: 0033:0x7fd5e459e0d9 [ 283.230608][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.230626][ T8800] RSP: 002b:00007fd5e54e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.230659][ T8800] RAX: ffffffffffffffda RBX: 00007fd5e4826090 RCX: 00007fd5e459e0d9 [ 283.230672][ T8800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 283.230684][ T8800] RBP: 00007fd5e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 283.230696][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.230707][ T8800] R13: 00007fd5e4826128 R14: 00007fd5e4826090 R15: 00007ffe61488708 [ 283.230735][ T8800] [ 283.252547][ T8799] kvm: apic: phys broadcast and lowest prio [ 283.263814][ T8800] syz.2.917: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 283.266886][ T1351] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 283.270823][ T8800] ,cpuset=/ [ 283.469624][ T1344] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 283.496421][ T1351] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 283.498474][ T8800] ,mems_allowed=0-1 [ 283.498515][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.2.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.498539][ T8800] Tainted: [L]=SOFTLOCKUP [ 283.498546][ T8800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.498557][ T8800] Call Trace: [ 283.498563][ T8800] [ 283.498572][ T8800] dump_stack_lvl+0x100/0x190 [ 283.498602][ T8800] warn_alloc.cold+0x94/0xa8 [ 283.498641][ T8800] ? __pfx_warn_alloc+0x10/0x10 [ 283.498658][ T8800] ? __kasan_kmalloc+0x8a/0xb0 [ 283.498688][ T8800] ? __get_vm_area_node+0x208/0x330 [ 283.498718][ T8800] __vmalloc_node_range_noprof+0xccd/0x1630 [ 283.498742][ T8800] ? rcu_is_watching+0x12/0xc0 [ 283.498775][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.498799][ T8800] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 283.498825][ T8800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.498854][ T8800] ? trace_kmem_cache_alloc+0xdd/0x100 [ 283.498880][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.498903][ T8800] __vmalloc_node_noprof+0xad/0xf0 [ 283.498926][ T8800] ? vhost_task_create+0x1db/0x370 [ 283.498946][ T8800] copy_process+0x7fb/0x8030 [ 283.498982][ T8800] ? __pfx_copy_process+0x10/0x10 [ 283.499005][ T8800] ? __kasan_kmalloc+0xaa/0xb0 [ 283.499026][ T8800] ? lockdep_init_map_type+0x5c/0x250 [ 283.499079][ T8800] ? lockdep_init_map_type+0x5c/0x250 [ 283.499103][ T8800] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 283.499126][ T8800] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 283.499145][ T8800] vhost_task_create+0x1db/0x370 [ 283.499168][ T8800] ? __pfx_vhost_task_create+0x10/0x10 [ 283.499195][ T8800] ? __pfx_vhost_task_fn+0x10/0x10 [ 283.499217][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 283.499238][ T8800] ? kasan_quarantine_put+0x104/0x240 [ 283.499265][ T8800] kvm_mmu_post_init_vm+0x1b3/0x360 [ 283.499291][ T8800] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 283.499318][ T8800] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 283.499344][ T8800] kvm_vcpu_ioctl+0x730/0x1700 [ 283.499365][ T8800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.499385][ T8800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.499408][ T8800] ? do_vfs_ioctl+0x226/0x13e0 [ 283.499432][ T8800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 283.499459][ T8800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 283.499494][ T8800] ? __fget_files+0x215/0x3d0 [ 283.499511][ T8800] ? hook_file_ioctl_common+0x140/0x440 [ 283.499538][ T8800] ? selinux_file_ioctl+0x13b/0x290 [ 283.499563][ T8800] ? selinux_file_ioctl+0xb6/0x290 [ 283.499590][ T8800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.499611][ T8800] __x64_sys_ioctl+0x18e/0x210 [ 283.499638][ T8800] do_syscall_64+0x115/0x870 [ 283.499659][ T8800] ? clear_bhb_loop+0x70/0xc0 [ 283.499680][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.499698][ T8800] RIP: 0033:0x7fd5e459e0d9 [ 283.499716][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.499733][ T8800] RSP: 002b:00007fd5e54e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.499752][ T8800] RAX: ffffffffffffffda RBX: 00007fd5e4826090 RCX: 00007fd5e459e0d9 [ 283.499763][ T8800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 283.499774][ T8800] RBP: 00007fd5e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 283.499784][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.499795][ T8800] R13: 00007fd5e4826128 R14: 00007fd5e4826090 R15: 00007ffe61488708 [ 283.499818][ T8800] [ 283.499961][ T8800] Mem-Info: [ 283.499976][ T8800] active_anon:11788 inactive_anon:0 isolated_anon:0 [ 283.499976][ T8800] active_file:0 inactive_file:65394 isolated_file:0 [ 283.499976][ T8800] unevictable:1000 dirty:134 writeback:0 [ 283.499976][ T8800] slab_reclaimable:7829 slab_unreclaimable:68977 [ 283.499976][ T8800] mapped:26459 shmem:1557 pagetables:1339 [ 283.499976][ T8800] sec_pagetables:299 bounce:0 [ 283.499976][ T8800] kernel_misc_reclaimable:0 [ 283.499976][ T8800] free:449823 free_pcp:6948 free_cma:0 [ 283.500028][ T8800] Node 0 active_anon:47152kB inactive_anon:0kB active_file:0kB inactive_file:261380kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105836kB dirty:536kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13760kB pagetables:5168kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.500074][ T8800] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.500115][ T8800] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.500164][ T8800] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 283.500203][ T8800] Node 0 DMA32 free:126460kB boost:0kB min:27368kB low:34208kB high:41048kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47152kB inactive_anon:0kB active_file:0kB inactive_file:261380kB unevictable:2000kB writepending:536kB zspages:0kB present:2080628kB managed:1254904kB mlocked:0kB bounce:0kB free_pcp:27616kB local_pcp:7024kB free_cma:0kB [ 283.500254][ T8800] lowmem_reserve[]: 0 0 0 0 0 [ 283.500292][ T8800] Node 1 Normal free:1657472kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 283.500345][ T8800] lowmem_reserve[]: 0 0 0 0 0 [ 283.500384][ T8800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 283.500615][ T8800] Node 0 DMA32: 285*4kB (UM) 93*8kB (ME) 28*16kB (ME) 137*32kB (UE) 227*64kB (UME) 112*128kB (UME) 43*256kB (UME) 46*512kB (UME) 27*1024kB (UM) 10*2048kB (UM) 2*4096kB (UM) = 126460kB [ 283.500783][ T8800] Node 1 Normal: 20*4kB (UM) 26*8kB (U) 42*16kB (UM) 46*32kB (UM) 18*64kB (UM) 15*128kB (UM) 9*256kB (U) 8*512kB (UM) 5*1024kB (U) 5*2048kB (UM) 398*4096kB (UM) = 1657472kB [ 283.501091][ T8800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.501107][ T8800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.501123][ T8800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.501137][ T8800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.501152][ T8800] 66947 total pagecache pages [ 283.501161][ T8800] 0 pages in swap cache [ 283.501168][ T8800] Free swap = 124996kB [ 283.501177][ T8800] Total swap = 124996kB [ 283.501186][ T8800] 1048443 pages RAM [ 283.501194][ T8800] 0 pages HighMem/MovableOnly [ 283.501201][ T8800] 285406 pages reserved [ 283.501209][ T8800] 0 pages cma reserved [ 283.886922][ C2] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 283.887717][ T24] usb 5-1: USB disconnect, device number 22 [ 283.893336][ T24] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 283.982626][ T1344] usb 8-1: device descriptor read/8, error -71 [ 284.243134][ T8806] FAULT_INJECTION: forcing a failure. [ 284.243134][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 284.249040][ T8806] CPU: 2 UID: 0 PID: 8806 Comm: syz.0.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.249091][ T8806] Tainted: [L]=SOFTLOCKUP [ 284.249098][ T8806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.249109][ T8806] Call Trace: [ 284.249118][ T8806] [ 284.249128][ T8806] dump_stack_lvl+0x100/0x190 [ 284.249156][ T8806] should_fail_ex.cold+0x5/0xa [ 284.249171][ T8806] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 284.249191][ T8806] should_failslab+0xc2/0x120 [ 284.249208][ T8806] kmem_cache_alloc_noprof+0x91/0x6a0 [ 284.249224][ T8806] ? skb_clone+0x190/0x400 [ 284.249258][ T8806] skb_clone+0x190/0x400 [ 284.249274][ T8806] netlink_deliver_tap+0xaed/0xcc0 [ 284.249296][ T8806] netlink_unicast+0x62b/0x850 [ 284.249312][ T8806] ? __pfx_netlink_unicast+0x10/0x10 [ 284.249328][ T8806] netlink_sendmsg+0x8b0/0xda0 [ 284.249343][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.249358][ T8806] ? selinux_socket_sendmsg+0x198/0x2f0 [ 284.249378][ T8806] ____sys_sendmsg+0xa4d/0xbe0 [ 284.249390][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.249404][ T8806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.249418][ T8806] ? __pfx_trace_clock_local+0x10/0x10 [ 284.249437][ T8806] ___sys_sendmsg+0x190/0x1e0 [ 284.249450][ T8806] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.249466][ T8806] ? __lock_acquire+0x49f/0x1a40 [ 284.249498][ T8806] __sys_sendmsg+0x160/0x210 [ 284.249515][ T8806] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.249538][ T8806] do_syscall_64+0x115/0x870 [ 284.249552][ T8806] ? clear_bhb_loop+0x70/0xc0 [ 284.249567][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.249579][ T8806] RIP: 0033:0x7fe8d699e0d9 [ 284.249592][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.249604][ T8806] RSP: 002b:00007fe8d77a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.249618][ T8806] RAX: ffffffffffffffda RBX: 00007fe8d6c25fa0 RCX: 00007fe8d699e0d9 [ 284.249625][ T8806] RDX: 0000000000008054 RSI: 0000200000000780 RDI: 0000000000000004 [ 284.249632][ T8806] RBP: 00007fe8d77a0090 R08: 0000000000000000 R09: 0000000000000000 [ 284.249639][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.249646][ T8806] R13: 00007fe8d6c26038 R14: 00007fe8d6c25fa0 R15: 00007fff21190478 [ 284.249667][ T8806] [ 284.260475][ T1344] usb usb8-port1: unable to enumerate USB device [ 284.396702][ T8812] kAFS: No cell specified [ 284.430653][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 284.430674][ T42] audit: type=1400 audit(1786972065.918:701): avc: denied { connect } for pid=8814 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.565519][ T42] audit: type=1400 audit(1786972066.048:702): avc: denied { write } for pid=8817 comm="syz.2.923" name="subsystems" dev="configfs" ino=3346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.594130][ T42] audit: type=1800 audit(1786972066.068:703): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.923" name="attr_allow_any_host" dev="configfs" ino=33125 res=0 errno=0 [ 284.627740][ T8818] nvmet_tcp: failed to bind port socket -99 [ 284.635309][ T8820] FAULT_INJECTION: forcing a failure. [ 284.635309][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 284.635348][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.0.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.635371][ T8820] Tainted: [L]=SOFTLOCKUP [ 284.635377][ T8820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.635387][ T8820] Call Trace: [ 284.635393][ T8820] [ 284.635400][ T8820] dump_stack_lvl+0x100/0x190 [ 284.635427][ T8820] should_fail_ex.cold+0x5/0xa [ 284.635448][ T8820] should_failslab+0xc2/0x120 [ 284.635481][ T8820] __kmalloc_noprof+0xfc/0x820 [ 284.635500][ T8820] ? __lock_acquire+0x49f/0x1a40 [ 284.635523][ T8820] ? tomoyo_encode2+0xfb/0x3c0 [ 284.635545][ T8820] tomoyo_encode2+0xfb/0x3c0 [ 284.635565][ T8820] tomoyo_encode+0x29/0x50 [ 284.635581][ T8820] tomoyo_mount_acl+0x14c/0x8b0 [ 284.635606][ T8820] ? is_bpf_text_address+0x8a/0x1a0 [ 284.635646][ T8820] ? bpf_ksym_find+0x128/0x1c0 [ 284.635672][ T8820] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.635702][ T8820] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 284.635725][ T8820] ? kernel_text_address+0x8d/0x100 [ 284.635748][ T8820] ? unwind_get_return_address+0x59/0xa0 [ 284.635787][ T8820] ? tomoyo_domain+0xb2/0x150 [ 284.635807][ T8820] ? tomoyo_profile+0x47/0x60 [ 284.635831][ T8820] tomoyo_mount_permission+0x214/0x460 [ 284.635857][ T8820] ? tomoyo_mount_permission+0x1f6/0x460 [ 284.635886][ T8820] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 284.635927][ T8820] security_sb_mount+0xdd/0x270 [ 284.635953][ T8820] path_mount+0x158/0x23d0 [ 284.635981][ T8820] ? __pfx_path_mount+0x10/0x10 [ 284.636001][ T8820] ? lockdep_hardirqs_on+0x78/0x100 [ 284.636026][ T8820] ? putname+0xb1/0x110 [ 284.636046][ T8820] ? kmem_cache_free+0x127/0x6b0 [ 284.636074][ T8820] ? __x64_sys_mount+0x293/0x310 [ 284.636095][ T8820] __x64_sys_mount+0x293/0x310 [ 284.636119][ T8820] ? __pfx___x64_sys_mount+0x10/0x10 [ 284.636142][ T8820] ? trace_syscall_enter+0xd9/0x110 [ 284.636176][ T8820] do_syscall_64+0x115/0x870 [ 284.636196][ T8820] ? clear_bhb_loop+0x70/0xc0 [ 284.636218][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.636237][ T8820] RIP: 0033:0x7fe8d699e0d9 [ 284.636255][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.636272][ T8820] RSP: 002b:00007fe8d77a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.636293][ T8820] RAX: ffffffffffffffda RBX: 00007fe8d6c25fa0 RCX: 00007fe8d699e0d9 [ 284.636306][ T8820] RDX: 0000200000000c00 RSI: 0000200000000b00 RDI: 0000000000000000 [ 284.636317][ T8820] RBP: 00007fe8d77a0090 R08: 0000000000000000 R09: 0000000000000000 [ 284.636329][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.636340][ T8820] R13: 00007fe8d6c26038 R14: 00007fe8d6c25fa0 R15: 00007fff21190478 [ 284.636366][ T8820] [ 284.645682][ T42] audit: type=1400 audit(1786972066.068:704): avc: denied { write } for pid=8817 comm="syz.2.923" name="ports" dev="configfs" ino=3347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.645724][ T42] audit: type=1800 audit(1786972066.068:705): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.923" name="addr_trtype" dev="configfs" ino=33131 res=0 errno=0 [ 284.645754][ T42] audit: type=1800 audit(1786972066.068:706): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.923" name="addr_traddr" dev="configfs" ino=33132 res=0 errno=0 [ 284.645833][ T42] audit: type=1800 audit(1786972066.068:707): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.923" name="addr_trsvcid" dev="configfs" ino=33133 res=0 errno=0 [ 284.645869][ T42] audit: type=1800 audit(1786972066.078:708): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.923" name="addr_adrfam" dev="configfs" ino=33134 res=0 errno=0 [ 284.645899][ T42] audit: type=1400 audit(1786972066.078:709): avc: denied { write } for pid=8817 comm="syz.2.923" name="subsystems" dev="configfs" ino=33127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.645930][ T42] audit: type=1400 audit(1786972066.078:710): avc: denied { write } for pid=8817 comm="syz.2.923" name="subsystems" dev="configfs" ino=33127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.071951][ T5855] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 285.187176][ T8829] tipc: Started in network mode [ 285.189641][ T8829] tipc: Node identity 7f000001, cluster identity 4711 [ 285.197767][ T8829] tipc: New replicast peer: 127.0.0.1 [ 285.223869][ T5855] usb 6-1: device descriptor read/64, error -71 [ 285.237721][ T8829] tipc: Enabled bearer , priority 10 [ 285.306413][ T1171] nvmet: connect request for invalid subsystem testsubsys! [ 285.357124][ T8823] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 285.367030][ T5747] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19 [ 285.410655][ T5747] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 285.502478][ T5855] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 285.598239][ T8830] kAFS: unable to lookup cell '(,c' [ 285.629487][ T5855] usb 6-1: device descriptor read/64, error -71 [ 285.735709][ T8834] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.928'. [ 285.749601][ T5855] usb usb6-port1: attempt power cycle [ 285.813445][ T8837] netlink: 256 bytes leftover after parsing attributes in process `syz.2.930'. [ 285.998423][ T8845] FAULT_INJECTION: forcing a failure. [ 285.998423][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 286.043063][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.3.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.043099][ T8845] Tainted: [L]=SOFTLOCKUP [ 286.043106][ T8845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.043117][ T8845] Call Trace: [ 286.043126][ T8845] [ 286.043134][ T8845] dump_stack_lvl+0x100/0x190 [ 286.043165][ T8845] should_fail_ex.cold+0x5/0xa [ 286.043189][ T8845] should_failslab+0xc2/0x120 [ 286.043213][ T8845] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 286.043238][ T8845] ? event_inject_write+0x8ff/0x2190 [ 286.043261][ T8845] kmemdup_nul+0x49/0xd0 [ 286.043299][ T8845] event_inject_write+0x8ff/0x2190 [ 286.043324][ T8845] ? __pfx_event_inject_write+0x10/0x10 [ 286.043362][ T8845] vfs_write+0x2aa/0x1050 [ 286.043381][ T8845] ? __pfx_event_inject_write+0x10/0x10 [ 286.043406][ T8845] ? __pfx_vfs_write+0x10/0x10 [ 286.043422][ T8845] ? __fget_files+0x215/0x3d0 [ 286.043446][ T8845] ? __fget_files+0x21f/0x3d0 [ 286.043469][ T8845] ksys_write+0x12a/0x250 [ 286.043484][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 286.043499][ T8845] ? trace_syscall_enter+0xd9/0x110 [ 286.043531][ T8845] do_syscall_64+0x115/0x870 [ 286.043552][ T8845] ? clear_bhb_loop+0x70/0xc0 [ 286.043574][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.043591][ T8845] RIP: 0033:0x7fb98119e0d9 [ 286.043608][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.043625][ T8845] RSP: 002b:00007fb982134028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.043644][ T8845] RAX: ffffffffffffffda RBX: 00007fb981425fa0 RCX: 00007fb98119e0d9 [ 286.043656][ T8845] RDX: 000000000000000e RSI: 00002000000011c0 RDI: 0000000000000003 [ 286.043666][ T8845] RBP: 00007fb982134090 R08: 0000000000000000 R09: 0000000000000000 [ 286.043676][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.043687][ T8845] R13: 00007fb981426038 R14: 00007fb981425fa0 R15: 00007ffd5a52a6b8 [ 286.043711][ T8845] [ 286.108022][ T5747] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 286.111584][ T5855] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 286.298660][ T1351] tipc: Node number set to 2130706433 [ 286.330035][ T5855] usb 6-1: device descriptor read/8, error -71 [ 286.393644][ T5747] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 286.412490][ T5747] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 286.446644][ T5814] usb 42-1: device descriptor read/8, error -110 [ 286.473571][ T8859] netlink: 256 bytes leftover after parsing attributes in process `syz.2.938'. [ 286.610914][ T5855] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 286.618605][ T8863] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 286.630092][ T5855] usb 6-1: device descriptor read/8, error -71 [ 286.631797][ T8863] CIFS: Attempting to mount //127.0.0.1/s:e[12harefDr=root [ 286.672637][ T8863] CIFS: VFS: Error connecting to socket. Aborting operation. [ 286.710623][ T8863] CIFS: VFS: cifs_mount failed w/return code = -101 [ 286.769728][ T5855] usb usb6-port1: unable to enumerate USB device [ 286.850355][ T5814] usb usb42-port1: attempt power cycle [ 287.208620][ T8871] kAFS: unable to lookup cell '(,c' [ 287.395779][ T8875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.943'. [ 287.402564][ T8875] FAULT_INJECTION: forcing a failure. [ 287.402564][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.411715][ T8875] CPU: 3 UID: 0 PID: 8875 Comm: syz.1.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.411744][ T8875] Tainted: [L]=SOFTLOCKUP [ 287.411750][ T8875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.411760][ T8875] Call Trace: [ 287.411766][ T8875] [ 287.411772][ T8875] dump_stack_lvl+0x100/0x190 [ 287.411800][ T8875] should_fail_ex.cold+0x5/0xa [ 287.411820][ T8875] _copy_to_user+0x32/0xd0 [ 287.411844][ T8875] simple_read_from_buffer+0xcb/0x170 [ 287.411862][ T8875] proc_fail_nth_read+0x1af/0x230 [ 287.411887][ T8875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.411911][ T8875] ? rw_verify_area+0xce/0x6d0 [ 287.411932][ T8875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.411955][ T8875] vfs_read+0x1e4/0xb40 [ 287.411980][ T8875] ? __pfx_vfs_read+0x10/0x10 [ 287.412001][ T8875] ? __fget_files+0x215/0x3d0 [ 287.412021][ T8875] ? __fget_files+0x21f/0x3d0 [ 287.412060][ T8875] ksys_read+0x12a/0x250 [ 287.412073][ T8875] ? __pfx_ksys_read+0x10/0x10 [ 287.412085][ T8875] ? trace_syscall_enter+0xd9/0x110 [ 287.412112][ T8875] do_syscall_64+0x115/0x870 [ 287.412129][ T8875] ? clear_bhb_loop+0x70/0xc0 [ 287.412147][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.412162][ T8875] RIP: 0033:0x7fe45df5e90e [ 287.412176][ T8875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.412190][ T8875] RSP: 002b:00007fe45ef29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.412209][ T8875] RAX: ffffffffffffffda RBX: 00007fe45ef2a6c0 RCX: 00007fe45df5e90e [ 287.412218][ T8875] RDX: 000000000000000f RSI: 00007fe45ef2a0a0 RDI: 0000000000000006 [ 287.412227][ T8875] RBP: 00007fe45ef2a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.412236][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.412245][ T8875] R13: 00007fe45e226038 R14: 00007fe45e225fa0 R15: 00007ffec817b498 [ 287.412266][ T8875] [ 287.450988][ T5814] usb usb42-port1: unable to enumerate USB device [ 287.892846][ T8886] FAULT_INJECTION: forcing a failure. [ 287.892846][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 287.909481][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.3.947 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.909512][ T8886] Tainted: [L]=SOFTLOCKUP [ 287.909518][ T8886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.909529][ T8886] Call Trace: [ 287.909536][ T8886] [ 287.909544][ T8886] dump_stack_lvl+0x100/0x190 [ 287.909574][ T8886] should_fail_ex.cold+0x5/0xa [ 287.909596][ T8886] should_failslab+0xc2/0x120 [ 287.909618][ T8886] __kmalloc_noprof+0xfc/0x820 [ 287.909638][ T8886] ? constrain_params_by_rules+0x175/0xd20 [ 287.909684][ T8886] constrain_params_by_rules+0x175/0xd20 [ 287.909708][ T8886] ? stack_depot_save_flags+0x27/0x9d0 [ 287.909736][ T8886] ? kasan_save_stack+0x3f/0x50 [ 287.909756][ T8886] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 287.909770][ T8886] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 287.909807][ T8886] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 287.909838][ T8886] ? do_sys_poll+0x6e5/0xe90 [ 287.909853][ T8886] ? __x64_sys_ppoll+0x2b5/0x350 [ 287.909870][ T8886] ? do_syscall_64+0x115/0x870 [ 287.909903][ T8886] ? rcu_is_watching+0x12/0xc0 [ 287.909930][ T8886] ? snd_interval_refine+0x2d0/0x580 [ 287.909954][ T8886] snd_pcm_hw_refine+0x82a/0xb40 [ 287.909980][ T8886] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 287.910006][ T8886] ? __kasan_kmalloc+0xaa/0xb0 [ 287.910027][ T8886] ? __asan_memset+0x23/0x50 [ 287.910043][ T8886] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 287.910071][ T8886] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 287.910100][ T8886] ? trace_contention_end+0x126/0x160 [ 287.910171][ T8886] ? rcu_is_watching+0x12/0xc0 [ 287.910198][ T8886] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 287.910225][ T8886] ? __pfx___mutex_lock+0x10/0x10 [ 287.910243][ T8886] ? __mutex_lock+0x26d/0x1bd0 [ 287.910263][ T8886] ? find_held_lock+0x2b/0x80 [ 287.910305][ T8886] ? __mutex_unlock_slowpath+0x35d/0x930 [ 287.910331][ T8886] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 287.910349][ T8886] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 287.910370][ T8886] snd_pcm_oss_poll+0x404/0xae0 [ 287.910388][ T8886] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 287.910403][ T8886] ? __fget_files+0x21f/0x3d0 [ 287.910424][ T8886] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 287.910439][ T8886] do_sys_poll+0x6e5/0xe90 [ 287.910462][ T8886] ? __pfx_do_sys_poll+0x10/0x10 [ 287.910476][ T8886] ? arch_stack_walk+0xa6/0xf0 [ 287.910518][ T8886] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 287.910540][ T8886] ? __pfx_pollwake+0x10/0x10 [ 287.910555][ T8886] ? __pfx_pollwake+0x10/0x10 [ 287.910571][ T8886] ? __pfx_pollwake+0x10/0x10 [ 287.910585][ T8886] ? __pfx_pollwake+0x10/0x10 [ 287.910620][ T8886] ? set_user_sigmask+0x1e1/0x270 [ 287.910639][ T8886] ? __pfx_set_user_sigmask+0x10/0x10 [ 287.910657][ T8886] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 287.910682][ T8886] __x64_sys_ppoll+0x2b5/0x350 [ 287.910701][ T8886] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 287.910715][ T8886] ? find_held_lock+0x2b/0x80 [ 287.910730][ T8886] ? trace_syscall_enter+0xd9/0x110 [ 287.910756][ T8886] do_syscall_64+0x115/0x870 [ 287.910773][ T8886] ? clear_bhb_loop+0x70/0xc0 [ 287.910792][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.910808][ T8886] RIP: 0033:0x7fb98119e0d9 [ 287.910830][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.910846][ T8886] RSP: 002b:00007fb982134028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 287.910863][ T8886] RAX: ffffffffffffffda RBX: 00007fb981425fa0 RCX: 00007fb98119e0d9 [ 287.910872][ T8886] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 287.910881][ T8886] RBP: 00007fb982134090 R08: 0000000000000000 R09: 0000000000000000 [ 287.910889][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.910898][ T8886] R13: 00007fb981426038 R14: 00007fb981425fa0 R15: 00007ffd5a52a6b8 [ 287.910918][ T8886] [ 288.406261][ T5747] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 288.417469][ T5747] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 288.649304][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 288.911011][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 288.914992][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.938949][ T24] usb 6-1: config 0 has no interfaces? [ 288.944238][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.953883][ T24] usb 6-1: Product: syz [ 288.956204][ T24] usb 6-1: Manufacturer: syz [ 288.958566][ T24] usb 6-1: SerialNumber: syz [ 288.963684][ T24] usb 6-1: config 0 descriptor?? [ 289.814335][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 289.814356][ T42] audit: type=1326 audit(1786972071.298:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.0.955" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8d699e0d9 code=0x0 [ 290.086261][ T8920] netlink: zone id is out of range [ 290.098326][ T8920] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 290.113231][ T5747] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 290.119580][ T8916] kAFS: unable to lookup cell '(,c' [ 290.130442][ T5747] Bluetooth: hci3: Injecting HCI hardware error event [ 290.162773][ T5747] Bluetooth: hci3: hardware error 0x00 [ 290.946196][ T42] audit: type=1800 audit(1786972072.428:717): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.961" name="attr_allow_any_host" dev="configfs" ino=35094 res=0 errno=0 [ 290.992941][ T42] audit: type=1800 audit(1786972072.478:718): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.961" name="addr_trtype" dev="configfs" ino=35843 res=0 errno=0 [ 291.025022][ T8935] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 291.045472][ T42] audit: type=1800 audit(1786972072.478:719): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.961" name="addr_traddr" dev="configfs" ino=35844 res=0 errno=0 [ 291.066689][ T42] audit: type=1800 audit(1786972072.478:720): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.961" name="addr_trsvcid" dev="configfs" ino=35845 res=0 errno=0 [ 291.100477][ T42] audit: type=1800 audit(1786972072.508:721): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.961" name="addr_adrfam" dev="configfs" ino=35846 res=0 errno=0 [ 291.112569][ T42] audit: type=1400 audit(1786972072.508:722): avc: denied { write } for pid=8934 comm="syz.0.961" name="subsystems" dev="configfs" ino=33127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.137114][ T42] audit: type=1400 audit(1786972072.508:723): avc: denied { write } for pid=8934 comm="syz.0.961" name="subsystems" dev="configfs" ino=33127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.297624][ T8939] FAULT_INJECTION: forcing a failure. [ 291.297624][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 291.304858][ T8939] CPU: 2 UID: 0 PID: 8939 Comm: syz.0.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.304891][ T8939] Tainted: [L]=SOFTLOCKUP [ 291.304897][ T8939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.304908][ T8939] Call Trace: [ 291.304915][ T8939] [ 291.304922][ T8939] dump_stack_lvl+0x100/0x190 [ 291.304953][ T8939] should_fail_ex.cold+0x5/0xa [ 291.304975][ T8939] should_failslab+0xc2/0x120 [ 291.304998][ T8939] __kmalloc_cache_noprof+0x91/0x6c0 [ 291.305016][ T8939] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 291.305052][ T8939] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 291.305080][ T8939] ? trace_contention_end+0x126/0x160 [ 291.305105][ T8939] ? __mutex_lock+0x26d/0x1bd0 [ 291.305126][ T8939] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 291.305144][ T8939] ? __mutex_lock+0x26d/0x1bd0 [ 291.305192][ T8939] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 291.305217][ T8939] ? __pfx___mutex_lock+0x10/0x10 [ 291.305233][ T8939] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 291.305247][ T8939] ? snd_pcm_oss_ioctl+0x1a0a/0x3790 [ 291.305269][ T8939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.305291][ T8939] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 291.305312][ T8939] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 291.305329][ T8939] ? __fget_files+0x215/0x3d0 [ 291.305345][ T8939] ? hook_file_ioctl_common+0x140/0x440 [ 291.305364][ T8939] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 291.305382][ T8939] ? selinux_file_ioctl+0x13b/0x290 [ 291.305404][ T8939] ? selinux_file_ioctl+0xb6/0x290 [ 291.305427][ T8939] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 291.305443][ T8939] __x64_sys_ioctl+0x18e/0x210 [ 291.305479][ T8939] do_syscall_64+0x115/0x870 [ 291.305499][ T8939] ? clear_bhb_loop+0x70/0xc0 [ 291.305519][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.305536][ T8939] RIP: 0033:0x7fe8d699e0d9 [ 291.305553][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.305570][ T8939] RSP: 002b:00007fe8d777f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.305589][ T8939] RAX: ffffffffffffffda RBX: 00007fe8d6c26090 RCX: 00007fe8d699e0d9 [ 291.305600][ T8939] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 291.305609][ T8939] RBP: 00007fe8d777f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.305618][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.305628][ T8939] R13: 00007fe8d6c26128 R14: 00007fe8d6c26090 R15: 00007fff21190478 [ 291.305650][ T8939] [ 291.470001][ T5832] usb 6-1: USB disconnect, device number 36 [ 291.804908][ T8946] affs: No valid root block on device nullb0 [ 291.826603][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 291.833413][ T42] audit: type=1400 audit(1786972073.308:724): avc: denied { bind } for pid=8945 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.848255][ T42] audit: type=1400 audit(1786972073.328:725): avc: denied { setopt } for pid=8945 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.283855][ T5747] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 292.401525][ T8954] kAFS: unable to lookup cell '(,c' [ 292.536079][ T8964] ip_tables: iptables: counters copy to user failed while replacing table [ 292.925362][ T1351] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 293.110366][ T1351] usb 8-1: Using ep0 maxpacket: 16 [ 293.114654][ T1351] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.152484][ T1351] usb 8-1: config 0 has no interfaces? [ 293.196413][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.209799][ T1351] usb 8-1: Product: syz [ 293.217022][ T1351] usb 8-1: Manufacturer: syz [ 293.230164][ T1351] usb 8-1: SerialNumber: syz [ 293.311009][ T1351] usb 8-1: config 0 descriptor?? [ 293.914008][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 293.960388][ T8984] xt_connbytes: Forcing CT accounting to be enabled [ 293.963904][ T8984] set match dimension is over the limit! [ 294.470732][ T9002] netlink: 220 bytes leftover after parsing attributes in process `syz.0.979'. [ 294.871290][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 294.871327][ T42] audit: type=1400 audit(1786972076.338:734): avc: denied { create } for pid=9007 comm="syz.0.981" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 294.887816][ T9008] Invalid source name [ 294.918266][ T42] audit: type=1400 audit(1786972076.358:735): avc: denied { mounton } for pid=9007 comm="syz.0.981" path="/264/file0" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 294.942566][ T9008] UBIFS error (pid: 9008): cannot open "./file0", error -22 [ 295.004938][ T9006] kAFS: unable to lookup cell '(,c' [ 295.095664][ T42] audit: type=1400 audit(1786972076.568:736): avc: denied { map } for pid=9015 comm="syz.1.983" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.139621][ T42] audit: type=1400 audit(1786972076.568:737): avc: denied { execute } for pid=9015 comm="syz.1.983" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.517778][ T42] audit: type=1400 audit(1786972076.998:738): avc: denied { write } for pid=9019 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 295.608102][ T42] audit: type=1400 audit(1786972077.088:739): avc: denied { append } for pid=9019 comm="syz.0.984" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.644268][ T42] audit: type=1400 audit(1786972077.118:740): avc: denied { ioctl } for pid=9019 comm="syz.0.984" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.678965][ T42] audit: type=1400 audit(1786972077.158:741): avc: denied { setopt } for pid=9021 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 295.704324][ T24] usb 8-1: USB disconnect, device number 28 [ 295.708106][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 295.738528][ T42] audit: type=1400 audit(1786972077.178:742): avc: denied { open } for pid=9021 comm="syz.2.985" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 295.805904][ T9030] FAULT_INJECTION: forcing a failure. [ 295.805904][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 295.810993][ T42] audit: type=1400 audit(1786972077.178:743): avc: denied { ioctl } for pid=9021 comm="syz.2.985" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 295.826719][ T9030] CPU: 2 UID: 0 PID: 9030 Comm: syz.3.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.826752][ T9030] Tainted: [L]=SOFTLOCKUP [ 295.826759][ T9030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.826780][ T9030] Call Trace: [ 295.826795][ T9030] [ 295.826802][ T9030] dump_stack_lvl+0x100/0x190 [ 295.826849][ T9030] should_fail_ex.cold+0x5/0xa [ 295.826874][ T9030] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 295.826908][ T9030] should_failslab+0xc2/0x120 [ 295.826941][ T9030] kmem_cache_alloc_noprof+0x91/0x6a0 [ 295.826970][ T9030] ? skb_clone+0x190/0x400 [ 295.827103][ T9030] skb_clone+0x190/0x400 [ 295.827130][ T9030] netlink_deliver_tap+0xaed/0xcc0 [ 295.827167][ T9030] netlink_unicast+0x62b/0x850 [ 295.827190][ T9030] ? __pfx_netlink_unicast+0x10/0x10 [ 295.827216][ T9030] netlink_sendmsg+0x8b0/0xda0 [ 295.827240][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.827263][ T9030] ? selinux_socket_sendmsg+0x198/0x2f0 [ 295.827301][ T9030] ____sys_sendmsg+0xa4d/0xbe0 [ 295.827319][ T9030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.827340][ T9030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.827363][ T9030] ? __pfx_trace_clock_local+0x10/0x10 [ 295.827397][ T9030] ___sys_sendmsg+0x190/0x1e0 [ 295.827414][ T9030] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.827429][ T9030] ? __lock_acquire+0x49f/0x1a40 [ 295.827484][ T9030] __sys_sendmsg+0x160/0x210 [ 295.827508][ T9030] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.827542][ T9030] do_syscall_64+0x115/0x870 [ 295.827571][ T9030] ? clear_bhb_loop+0x70/0xc0 [ 295.827593][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.827611][ T9030] RIP: 0033:0x7fb98119e0d9 [ 295.827629][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.827647][ T9030] RSP: 002b:00007fb982134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.827675][ T9030] RAX: ffffffffffffffda RBX: 00007fb981425fa0 RCX: 00007fb98119e0d9 [ 295.827686][ T9030] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 295.827696][ T9030] RBP: 00007fb982134090 R08: 0000000000000000 R09: 0000000000000000 [ 295.827706][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.827716][ T9030] R13: 00007fb981426038 R14: 00007fb981425fa0 R15: 00007ffd5a52a6b8 [ 295.827741][ T9030] [ 295.932919][ T9034] syzkaller1: entered promiscuous mode [ 296.000726][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 296.011821][ T9034] syzkaller1: entered allmulticast mode [ 296.053431][ T9039] futex_wake_op: syz.2.991 tries to shift op by 32; fix this program [ 296.225254][ T9043] jffs2: notice: (9043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 296.810766][ T1351] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 296.979331][ T1351] usb 7-1: device descriptor read/64, error -71 [ 297.034396][ T9054] kAFS: unable to lookup cell '(,c' [ 297.238493][ T1351] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 297.426570][ T1351] usb 7-1: device descriptor read/64, error -71 [ 297.539681][ T1351] usb usb7-port1: attempt power cycle [ 297.632830][ T5814] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 297.823773][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 297.841297][ T5814] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.892829][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 297.946877][ T5855] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 297.961296][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.969394][ T5814] usb 6-1: Product: syz [ 297.972362][ T5814] usb 6-1: Manufacturer: syz [ 297.976964][ T5814] usb 6-1: SerialNumber: syz [ 297.993890][ T1351] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 298.013829][ T5814] usb 6-1: config 0 descriptor?? [ 298.023544][ T1351] usb 7-1: device descriptor read/8, error -71 [ 298.031396][ T5814] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.046932][ T5814] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 298.149755][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 298.171709][ T5855] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.180379][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 298.193065][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.219255][ T5855] usb 5-1: Product: syz [ 298.221125][ T5855] usb 5-1: Manufacturer: syz [ 298.223205][ T5855] usb 5-1: SerialNumber: syz [ 298.247604][ T5855] usb 5-1: config 0 descriptor?? [ 298.256755][ T5855] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 298.264386][ T5855] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 298.273334][ T1351] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 298.310643][ T1351] usb 7-1: device descriptor read/8, error -71 [ 298.423089][ T1351] usb usb7-port1: unable to enumerate USB device [ 298.635367][ T5814] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 298.782538][ T9078] input: syz0 as /devices/virtual/input/input41 [ 298.881018][ T5855] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 299.046584][ T5814] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 299.046969][ T9066] FAULT_INJECTION: forcing a failure. [ 299.046969][ T9066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.058817][ T5814] em28xx 6-1:0.0: board has no eeprom [ 299.079387][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.1.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.079422][ T9066] Tainted: [L]=SOFTLOCKUP [ 299.079428][ T9066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.079438][ T9066] Call Trace: [ 299.079446][ T9066] [ 299.079455][ T9066] dump_stack_lvl+0x100/0x190 [ 299.079581][ T9066] should_fail_ex.cold+0x5/0xa [ 299.079606][ T9066] _copy_from_user+0x2e/0xd0 [ 299.079636][ T9066] i2cdev_ioctl+0x10a/0x830 [ 299.079688][ T9066] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 299.079711][ T9066] ? selinux_file_ioctl+0x13b/0x290 [ 299.079736][ T9066] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 299.079758][ T9066] __x64_sys_ioctl+0x18e/0x210 [ 299.079797][ T9066] do_syscall_64+0x115/0x870 [ 299.079828][ T9066] ? clear_bhb_loop+0x70/0xc0 [ 299.079848][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.079864][ T9066] RIP: 0033:0x7fe45df9e0d9 [ 299.079880][ T9066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.079894][ T9066] RSP: 002b:00007fe45ef2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.079914][ T9066] RAX: ffffffffffffffda RBX: 00007fe45e225fa0 RCX: 00007fe45df9e0d9 [ 299.079925][ T9066] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 299.079935][ T9066] RBP: 00007fe45ef2a090 R08: 0000000000000000 R09: 0000000000000000 [ 299.079945][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.079957][ T9066] R13: 00007fe45e226038 R14: 00007fe45e225fa0 R15: 00007ffec817b498 [ 299.079982][ T9066] [ 299.134563][ T9081] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 299.309338][ T5814] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.312294][ T5814] em28xx 6-1:0.0: dvb set to bulk mode. [ 299.314637][ T5846] em28xx 6-1:0.0: Binding DVB extension [ 299.324479][ T5814] usb 6-1: USB disconnect, device number 37 [ 299.343496][ T5814] em28xx 6-1:0.0: Disconnecting em28xx [ 299.359033][ T5846] em28xx 6-1:0.0: Registering input extension [ 299.362498][ T5814] em28xx 6-1:0.0: Closing input extension [ 299.364642][ T5855] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 299.369581][ T5855] em28xx 5-1:0.0: board has no eeprom [ 299.389172][ T1351] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 299.411058][ T5814] em28xx 6-1:0.0: Freeing device [ 299.484570][ T9086] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 299.566529][ T5855] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.577836][ T5855] em28xx 5-1:0.0: dvb set to bulk mode. [ 299.585078][ T34] em28xx 5-1:0.0: Binding DVB extension [ 299.618770][ T1351] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 299.667076][ T1351] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 299.674272][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.716516][ T5855] usb 5-1: USB disconnect, device number 23 [ 299.746185][ T5855] em28xx 5-1:0.0: Disconnecting em28xx [ 299.767742][ T34] em28xx 5-1:0.0: Registering input extension [ 299.775431][ T5855] em28xx 5-1:0.0: Closing input extension [ 299.822000][ T5855] em28xx 5-1:0.0: Freeing device [ 300.027733][ T1351] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 300.150354][ T1351] wwan wwan0: port wwan0qmi0 attached [ 300.223740][ T9081] team0: No ports can be present during mode change [ 300.230527][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 300.230553][ T42] audit: type=1400 audit(1786972081.698:750): avc: denied { read write } for pid=9080 comm="syz.3.1004" name="cdc-wdm0" dev="devtmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 300.248516][ T9103] jffs2: notice: (9103) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 300.279424][ T42] audit: type=1400 audit(1786972081.698:751): avc: denied { open } for pid=9080 comm="syz.3.1004" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 300.280510][ T9100] kAFS: unable to lookup cell '(,c' [ 300.311122][ T42] audit: type=1400 audit(1786972081.798:752): avc: denied { create } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.321268][ T42] audit: type=1400 audit(1786972081.798:753): avc: denied { bind } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.333322][ T42] audit: type=1400 audit(1786972081.798:754): avc: denied { setopt } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.350791][ T42] audit: type=1400 audit(1786972081.798:755): avc: denied { accept } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.379367][ T42] audit: type=1400 audit(1786972081.798:756): avc: denied { write } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.399142][ T42] audit: type=1400 audit(1786972081.798:757): avc: denied { read } for pid=9101 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.425534][ T42] audit: type=1400 audit(1786972081.828:758): avc: denied { write } for pid=9098 comm="syz.2.1010" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.540617][ T9133] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 301.548753][ T9131] jffs2: notice: (9131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 301.630481][ T42] audit: type=1400 audit(1786972083.108:759): avc: denied { write } for pid=9130 comm="syz.1.1022" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.701963][ T5747] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 301.705962][ T5747] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 302.177354][ T1351] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, e6:bc:98:00:ff:d6 [ 302.183589][ T1351] usb 8-1: USB disconnect, device number 29 [ 302.203948][ T1351] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 302.301705][ T5814] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 302.472507][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 302.478983][ T5814] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.505427][ T5814] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 302.514723][ T1351] wwan wwan0: port wwan0qmi0 disconnected [ 302.525822][ T5814] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.525853][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.525875][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.525895][ T5814] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.525933][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.647617][ T9145] FAULT_INJECTION: forcing a failure. [ 302.647617][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 302.663144][ T9145] CPU: 2 UID: 0 PID: 9145 Comm: syz.2.1027 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.663176][ T9145] Tainted: [L]=SOFTLOCKUP [ 302.663202][ T9145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.663215][ T9145] Call Trace: [ 302.663224][ T9145] [ 302.663233][ T9145] dump_stack_lvl+0x100/0x190 [ 302.663265][ T9145] should_fail_ex.cold+0x5/0xa [ 302.663289][ T9145] should_failslab+0xc2/0x120 [ 302.663315][ T9145] __kvmalloc_node_noprof+0x116/0x970 [ 302.663342][ T9145] ? bpf_test_run_xdp_live+0x16f/0x760 [ 302.663376][ T9145] bpf_test_run_xdp_live+0x16f/0x760 [ 302.663407][ T9145] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 302.663434][ T9145] ? __mutex_unlock_slowpath+0x35d/0x930 [ 302.663461][ T9145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.663482][ T9145] ? find_held_lock+0x2b/0x80 [ 302.663504][ T9145] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 302.663532][ T9145] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 302.663588][ T9145] ? 0xffffffffa0206200 [ 302.663606][ T9145] ? 0xffffffffa0206200 [ 302.663622][ T9145] ? 0xffffffffa0206200 [ 302.663636][ T9145] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 302.663663][ T9145] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 302.663692][ T9145] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 302.663719][ T9145] ? fput+0x79/0x100 [ 302.663742][ T9145] ? __bpf_prog_get+0x97/0x2a0 [ 302.663776][ T9145] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 302.663794][ T9145] __sys_bpf+0x2a12/0x4e80 [ 302.663812][ T9145] ? __pfx_check_buffer+0x10/0x10 [ 302.663834][ T9145] ? __pfx___sys_bpf+0x10/0x10 [ 302.663853][ T9145] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 302.663880][ T9145] ? ring_buffer_lock_reserve+0x48b/0x11c0 [ 302.663902][ T9145] ? rb_commit+0x129/0x9d0 [ 302.663942][ T9145] ? trace_event_buffer_commit+0x20a/0xa80 [ 302.663971][ T9145] ? __x64_sys_bpf+0xce/0x140 [ 302.663987][ T9145] __x64_sys_bpf+0xce/0x140 [ 302.664005][ T9145] ? rcu_is_watching+0x12/0xc0 [ 302.664034][ T9145] do_syscall_64+0x115/0x870 [ 302.664051][ T9145] ? clear_bhb_loop+0x70/0xc0 [ 302.664071][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.664086][ T9145] RIP: 0033:0x7fd5e459e0d9 [ 302.664101][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.664117][ T9145] RSP: 002b:00007fd5e550a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.664135][ T9145] RAX: ffffffffffffffda RBX: 00007fd5e4825fa0 RCX: 00007fd5e459e0d9 [ 302.664145][ T9145] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 302.664155][ T9145] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 302.664164][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.664173][ T9145] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 302.664195][ T9145] [ 302.769313][ T5855] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 302.870493][ T5814] usb 5-1: usb_control_msg returned -32 [ 302.958276][ T5814] usbtmc 5-1:16.0: can't read capabilities [ 303.046304][ T9166] FAULT_INJECTION: forcing a failure. [ 303.046304][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 303.067770][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.067801][ T9166] Tainted: [L]=SOFTLOCKUP [ 303.067808][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.067818][ T9166] Call Trace: [ 303.067826][ T9166] [ 303.067834][ T9166] dump_stack_lvl+0x100/0x190 [ 303.067887][ T9166] should_fail_ex.cold+0x5/0xa [ 303.067905][ T9166] ? __skb_get_hash_net+0x153/0x560 [ 303.067923][ T9166] should_failslab+0xc2/0x120 [ 303.067944][ T9166] kmem_cache_alloc_noprof+0x91/0x6a0 [ 303.067963][ T9166] ? lock_acquire+0x1b9/0x370 [ 303.067983][ T9166] ? skb_clone+0x190/0x400 [ 303.068005][ T9166] skb_clone+0x190/0x400 [ 303.068026][ T9166] dev_queue_xmit_nit+0x255/0xa60 [ 303.068054][ T9166] dev_hard_start_xmit+0x2f5/0x760 [ 303.068074][ T9166] __dev_queue_xmit+0x1bbf/0x4970 [ 303.068098][ T9166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.068124][ T9166] ? rcu_is_watching+0x12/0xc0 [ 303.068148][ T9166] ? trace_kmem_cache_alloc+0xdd/0x100 [ 303.068167][ T9166] ? __kasan_slab_alloc+0x89/0x90 [ 303.068187][ T9166] ? __asan_memcpy+0x3c/0x60 [ 303.068203][ T9166] ? __asan_memcpy+0x3c/0x60 [ 303.068218][ T9166] ? __skb_clone+0x570/0x760 [ 303.068240][ T9166] netlink_deliver_tap+0xa4d/0xcc0 [ 303.068261][ T9166] netlink_unicast+0x62b/0x850 [ 303.068282][ T9166] ? __pfx_netlink_unicast+0x10/0x10 [ 303.068299][ T9166] ? __pfx_sock_has_perm+0x10/0x10 [ 303.068324][ T9166] netlink_sendmsg+0x8b0/0xda0 [ 303.068344][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.068362][ T9166] ? selinux_socket_sendmsg+0x198/0x2f0 [ 303.068386][ T9166] ____sys_sendmsg+0xa4d/0xbe0 [ 303.068400][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.068417][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.068437][ T9166] ? __pfx_trace_clock_local+0x10/0x10 [ 303.068461][ T9166] ___sys_sendmsg+0x190/0x1e0 [ 303.068478][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.068491][ T9166] ? __lock_acquire+0x49f/0x1a40 [ 303.068536][ T9166] __sys_sendmsg+0x160/0x210 [ 303.068559][ T9166] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.068590][ T9166] do_syscall_64+0x115/0x870 [ 303.068609][ T9166] ? clear_bhb_loop+0x70/0xc0 [ 303.068630][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.068647][ T9166] RIP: 0033:0x7fb98119e0d9 [ 303.068664][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.068680][ T9166] RSP: 002b:00007fb982113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.068702][ T9166] RAX: ffffffffffffffda RBX: 00007fb981426090 RCX: 00007fb98119e0d9 [ 303.068715][ T9166] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 303.068724][ T9166] RBP: 00007fb982113090 R08: 0000000000000000 R09: 0000000000000000 [ 303.068734][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.068743][ T9166] R13: 00007fb981426128 R14: 00007fb981426090 R15: 00007ffd5a52a6b8 [ 303.068766][ T9166] [ 303.120065][ T5855] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 303.121133][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.312773][ T9171] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 303.318524][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.318562][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 303.318587][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.321141][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.344515][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.345495][ T5855] usb 6-1: Product: syz [ 303.345516][ T5855] usb 6-1: Manufacturer: syz [ 303.345528][ T5855] usb 6-1: SerialNumber: syz [ 303.347810][ T5855] usb 6-1: config 0 descriptor?? [ 303.348805][ T9152] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 303.362194][ T5855] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input44 [ 303.388642][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.392080][ T5832] usb 5-1: USB disconnect, device number 24 [ 303.562225][ T9152] FAULT_INJECTION: forcing a failure. [ 303.562225][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 303.588711][ T9152] CPU: 3 UID: 0 PID: 9152 Comm: syz.1.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.588744][ T9152] Tainted: [L]=SOFTLOCKUP [ 303.588751][ T9152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.588760][ T9152] Call Trace: [ 303.588767][ T9152] [ 303.588774][ T9152] dump_stack_lvl+0x100/0x190 [ 303.588815][ T9152] should_fail_ex.cold+0x5/0xa [ 303.588838][ T9152] should_failslab+0xc2/0x120 [ 303.588863][ T9152] __kmalloc_noprof+0xfc/0x820 [ 303.588884][ T9152] ? rcu_is_watching+0x12/0xc0 [ 303.588911][ T9152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 303.588933][ T9152] tomoyo_realpath_from_path+0xb6/0x690 [ 303.588955][ T9152] tomoyo_check_open_permission+0x2af/0x3c0 [ 303.588980][ T9152] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 303.589012][ T9152] ? hook_file_open+0x24f/0x8f0 [ 303.589080][ T9152] ? path_get+0x61/0x80 [ 303.589108][ T9152] tomoyo_file_open+0x6b/0x90 [ 303.589129][ T9152] security_file_open+0xb5/0x1e0 [ 303.589148][ T9152] do_dentry_open+0x588/0x14d0 [ 303.589172][ T9152] vfs_open+0x82/0x3f0 [ 303.589196][ T9152] path_openat+0x2873/0x4280 [ 303.589226][ T9152] ? __pfx_path_openat+0x10/0x10 [ 303.589251][ T9152] do_file_open+0x20e/0x430 [ 303.589272][ T9152] ? __pfx_do_file_open+0x10/0x10 [ 303.589326][ T9152] ? alloc_fd+0x471/0x7a0 [ 303.589349][ T9152] ? do_getname+0x191/0x390 [ 303.589372][ T9152] do_sys_openat2+0x10f/0x1e0 [ 303.589394][ T9152] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.589417][ T9152] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 303.589449][ T9152] __x64_sys_openat+0x12d/0x210 [ 303.589473][ T9152] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.589493][ T9152] ? find_held_lock+0x2b/0x80 [ 303.589510][ T9152] ? trace_syscall_enter+0xd9/0x110 [ 303.589560][ T9152] do_syscall_64+0x115/0x870 [ 303.589581][ T9152] ? clear_bhb_loop+0x70/0xc0 [ 303.589602][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.589619][ T9152] RIP: 0033:0x7fe45df9e0d9 [ 303.589636][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.589652][ T9152] RSP: 002b:00007fe45ef2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.589671][ T9152] RAX: ffffffffffffffda RBX: 00007fe45e225fa0 RCX: 00007fe45df9e0d9 [ 303.589683][ T9152] RDX: 0000000000004040 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 303.589695][ T9152] RBP: 00007fe45ef2a090 R08: 0000000000000000 R09: 0000000000000000 [ 303.589704][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.589713][ T9152] R13: 00007fe45e226038 R14: 00007fe45e225fa0 R15: 00007ffec817b498 [ 303.589736][ T9152] [ 303.826596][ T9152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.921411][ T24] usb 6-1: USB disconnect, device number 38 [ 304.099457][ T9180] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 304.589775][ T9185] No source specified [ 305.046695][ T9198] overlay: Unknown parameter 'uid' [ 305.150713][ T9202] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.239451][ T9206] FAULT_INJECTION: forcing a failure. [ 305.239451][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 305.282883][ T9206] CPU: 2 UID: 0 PID: 9206 Comm: syz.1.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.282921][ T9206] Tainted: [L]=SOFTLOCKUP [ 305.282929][ T9206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.282942][ T9206] Call Trace: [ 305.282951][ T9206] [ 305.282960][ T9206] dump_stack_lvl+0x100/0x190 [ 305.282991][ T9206] should_fail_ex.cold+0x5/0xa [ 305.283013][ T9206] should_failslab+0xc2/0x120 [ 305.283039][ T9206] __kmalloc_noprof+0xfc/0x820 [ 305.283060][ T9206] ? kasan_save_track+0x14/0x30 [ 305.283083][ T9206] ? __kasan_kmalloc+0xaa/0xb0 [ 305.283104][ T9206] ? drm_atomic_commit_init+0xf4/0x490 [ 305.283154][ T9206] drm_atomic_commit_init+0xf4/0x490 [ 305.283180][ T9206] drm_atomic_commit_alloc+0xd3/0x120 [ 305.283203][ T9206] drm_atomic_helper_page_flip+0x6e/0x180 [ 305.283230][ T9206] drm_mode_page_flip_ioctl+0x1095/0x14a0 [ 305.283268][ T9206] ? __pfx_drm_mode_page_flip_ioctl+0x10/0x10 [ 305.283310][ T9206] ? drm_is_current_master+0x2c/0x40 [ 305.283333][ T9206] ? drm_is_current_master+0x2c/0x40 [ 305.283357][ T9206] ? do_raw_spin_unlock+0x145/0x1e0 [ 305.283387][ T9206] drm_ioctl_kernel+0x1f3/0x3e0 [ 305.283408][ T9206] ? __pfx_drm_mode_page_flip_ioctl+0x10/0x10 [ 305.283435][ T9206] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 305.283465][ T9206] drm_ioctl+0x5e6/0xc60 [ 305.283489][ T9206] ? __pfx_drm_mode_page_flip_ioctl+0x10/0x10 [ 305.283515][ T9206] ? __pfx_drm_ioctl+0x10/0x10 [ 305.283548][ T9206] ? selinux_file_ioctl+0x13b/0x290 [ 305.283574][ T9206] ? selinux_file_ioctl+0xb6/0x290 [ 305.283604][ T9206] ? __pfx_drm_ioctl+0x10/0x10 [ 305.283625][ T9206] __x64_sys_ioctl+0x18e/0x210 [ 305.283656][ T9206] do_syscall_64+0x115/0x870 [ 305.283677][ T9206] ? clear_bhb_loop+0x70/0xc0 [ 305.283699][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.283726][ T9206] RIP: 0033:0x7fe45df9e0d9 [ 305.283744][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.283762][ T9206] RSP: 002b:00007fe45ef2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.283784][ T9206] RAX: ffffffffffffffda RBX: 00007fe45e225fa0 RCX: 00007fe45df9e0d9 [ 305.283796][ T9206] RDX: 0000200000000100 RSI: 00000000c01864b0 RDI: 0000000000000003 [ 305.283808][ T9206] RBP: 00007fe45ef2a090 R08: 0000000000000000 R09: 0000000000000000 [ 305.283819][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.283830][ T9206] R13: 00007fe45e226038 R14: 00007fe45e225fa0 R15: 00007ffec817b498 [ 305.283857][ T9206] [ 305.726766][ T9213] No source specified [ 305.893587][ T5832] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 305.939639][ T9223] batman_adv: batadv0: Adding interface: veth0 [ 305.947671][ T9223] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.964539][ T9223] batman_adv: batadv0: Interface activated: veth0 [ 305.977571][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.981161][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.007960][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.027865][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.049298][ T5832] usb 6-1: device descriptor read/64, error -71 [ 306.055043][ T9223] batman_adv: batadv0: Interface deactivated: veth0 [ 306.060365][ T9223] batman_adv: batadv0: Removing interface: veth0 [ 306.102012][ T9229] binder: Unknown parameter 'sats' [ 306.339321][ T5832] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 306.474273][ T9232] evm: overlay not supported [ 306.497544][ T9234] FAULT_INJECTION: forcing a failure. [ 306.497544][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 306.504054][ T9234] CPU: 3 UID: 0 PID: 9234 Comm: syz.3.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.504087][ T9234] Tainted: [L]=SOFTLOCKUP [ 306.504095][ T9234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.504108][ T9234] Call Trace: [ 306.504117][ T9234] [ 306.504126][ T9234] dump_stack_lvl+0x100/0x190 [ 306.504160][ T9234] should_fail_ex.cold+0x5/0xa [ 306.504181][ T9234] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 306.504213][ T9234] should_failslab+0xc2/0x120 [ 306.504248][ T9234] kmem_cache_alloc_noprof+0x91/0x6a0 [ 306.504274][ T9234] ? skb_clone+0x190/0x400 [ 306.504304][ T9234] skb_clone+0x190/0x400 [ 306.504327][ T9234] netlink_deliver_tap+0xaed/0xcc0 [ 306.504347][ T9234] netlink_unicast+0x62b/0x850 [ 306.504367][ T9234] ? __pfx_netlink_unicast+0x10/0x10 [ 306.504394][ T9234] netlink_sendmsg+0x8b0/0xda0 [ 306.504420][ T9234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.504444][ T9234] ? selinux_socket_sendmsg+0x198/0x2f0 [ 306.504478][ T9234] ____sys_sendmsg+0xa4d/0xbe0 [ 306.504496][ T9234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.504519][ T9234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.504539][ T9234] ? __pfx_trace_clock_local+0x10/0x10 [ 306.504563][ T9234] ___sys_sendmsg+0x190/0x1e0 [ 306.504579][ T9234] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.504593][ T9234] ? __lock_acquire+0x49f/0x1a40 [ 306.504648][ T9234] __sys_sendmsg+0x160/0x210 [ 306.504676][ T9234] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.504711][ T9234] do_syscall_64+0x115/0x870 [ 306.504732][ T9234] ? clear_bhb_loop+0x70/0xc0 [ 306.504753][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.504773][ T9234] RIP: 0033:0x7fb98119e0d9 [ 306.504790][ T9234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.504808][ T9234] RSP: 002b:00007fb982134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.504831][ T9234] RAX: ffffffffffffffda RBX: 00007fb981425fa0 RCX: 00007fb98119e0d9 [ 306.504843][ T9234] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 306.504854][ T9234] RBP: 00007fb982134090 R08: 0000000000000000 R09: 0000000000000000 [ 306.506030][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.506042][ T9234] R13: 00007fb981426038 R14: 00007fb981425fa0 R15: 00007ffd5a52a6b8 [ 306.506099][ T9234] [ 306.522528][ T5832] usb 6-1: device descriptor read/64, error -71 [ 306.741040][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.746252][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.751440][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.777910][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.785966][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.794563][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.798593][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.804484][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.810850][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.818853][ T9234] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 306.839880][ T5832] usb usb6-port1: attempt power cycle [ 306.946531][ T9245] FAULT_INJECTION: forcing a failure. [ 306.946531][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 306.955371][ T9245] CPU: 3 UID: 0 PID: 9245 Comm: syz.2.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.955410][ T9245] Tainted: [L]=SOFTLOCKUP [ 306.955418][ T9245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.955470][ T9245] Call Trace: [ 306.955479][ T9245] [ 306.955489][ T9245] dump_stack_lvl+0x100/0x190 [ 306.955524][ T9245] should_fail_ex.cold+0x5/0xa [ 306.955552][ T9245] should_failslab+0xc2/0x120 [ 306.955579][ T9245] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 306.955606][ T9245] ? __alloc_skb+0x140/0x710 [ 306.955637][ T9245] __alloc_skb+0x140/0x710 [ 306.955662][ T9245] ? __pfx___alloc_skb+0x10/0x10 [ 306.955687][ T9245] ? __pfx_tcp_fastopen_active_should_disable+0x10/0x10 [ 306.955752][ T9245] tcp_stream_alloc_skb+0x34/0x660 [ 306.955796][ T9245] tcp_connect+0x2192/0x5510 [ 306.955832][ T9245] ? __pfx_tcp_connect+0x10/0x10 [ 306.955857][ T9245] ? kasan_save_track+0x14/0x30 [ 306.955885][ T9245] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 306.955908][ T9245] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 306.955943][ T9245] tcp_sendmsg_fastopen+0x4f6/0x750 [ 306.955979][ T9245] tcp_sendmsg_locked+0x276d/0x44d0 [ 306.956005][ T9245] ? __lock_acquire+0x49f/0x1a40 [ 306.956030][ T9245] ? __lock_acquire+0x49f/0x1a40 [ 306.956056][ T9245] ? sock_has_perm+0x25a/0x2f0 [ 306.956083][ T9245] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 306.956104][ T9245] ? do_raw_spin_lock+0x128/0x260 [ 306.956133][ T9245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.956168][ T9245] ? __local_bh_enable_ip+0x9e/0x120 [ 306.956213][ T9245] tcp_sendmsg+0x2e/0x50 [ 306.956228][ T9245] ? __pfx_tcp_sendmsg+0x10/0x10 [ 306.956245][ T9245] inet6_sendmsg+0xb9/0x140 [ 306.956289][ T9245] ____sys_sendmsg+0x704/0xbe0 [ 306.956312][ T9245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.956337][ T9245] ? __pfx__kstrtoull+0x10/0x10 [ 306.956357][ T9245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.956396][ T9245] ___sys_sendmsg+0x190/0x1e0 [ 306.956421][ T9245] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.956456][ T9245] ? find_held_lock+0x2b/0x80 [ 306.956493][ T9245] __sys_sendmmsg+0x20c/0x440 [ 306.956524][ T9245] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.956576][ T9245] ? find_held_lock+0x2b/0x80 [ 306.956595][ T9245] ? trace_syscall_enter+0xd9/0x110 [ 306.956623][ T9245] ? trace_syscall_enter+0xd9/0x110 [ 306.956653][ T9245] __x64_sys_sendmmsg+0x9c/0x100 [ 306.956679][ T9245] ? trace_syscall_enter+0xe3/0x110 [ 306.956713][ T9245] do_syscall_64+0x115/0x870 [ 306.956737][ T9245] ? clear_bhb_loop+0x70/0xc0 [ 306.956764][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.956785][ T9245] RIP: 0033:0x7fd5e459e0d9 [ 306.956807][ T9245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.956827][ T9245] RSP: 002b:00007fd5e550a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.956852][ T9245] RAX: ffffffffffffffda RBX: 00007fd5e4825fa0 RCX: 00007fd5e459e0d9 [ 306.956864][ T9245] RDX: 0000000000000001 RSI: 0000200000001940 RDI: 0000000000000003 [ 306.956876][ T9245] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 306.956888][ T9245] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 306.956900][ T9245] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 306.956929][ T9245] [ 307.270603][ T5832] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 307.331466][ T5832] usb 6-1: device descriptor read/8, error -71 [ 307.495777][ T9253] tap0: tun_chr_ioctl cmd 1074025675 [ 307.498725][ T9253] tap0: persist disabled [ 307.528116][ T9253] tap0: tun_chr_ioctl cmd 1074025675 [ 307.578225][ T9253] tap0: persist disabled [ 307.609316][ T5832] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 307.656074][ T5832] usb 6-1: device descriptor read/8, error -71 [ 307.665372][ T9259] tmpfs: Bad value for 'mpol' [ 307.794583][ T5832] usb usb6-port1: unable to enumerate USB device [ 308.060330][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 308.239282][ T9274] FAULT_INJECTION: forcing a failure. [ 308.239282][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 308.244929][ T9274] CPU: 1 UID: 0 PID: 9274 Comm: syz.2.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.244962][ T9274] Tainted: [L]=SOFTLOCKUP [ 308.244969][ T9274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 308.244979][ T9274] Call Trace: [ 308.244989][ T9274] [ 308.244999][ T9274] dump_stack_lvl+0x100/0x190 [ 308.245030][ T9274] should_fail_ex.cold+0x5/0xa [ 308.245050][ T9274] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 308.245084][ T9274] should_failslab+0xc2/0x120 [ 308.245109][ T9274] kmem_cache_alloc_noprof+0x91/0x6a0 [ 308.245132][ T9274] ? skb_clone+0x190/0x400 [ 308.245161][ T9274] skb_clone+0x190/0x400 [ 308.245185][ T9274] netlink_deliver_tap+0xaed/0xcc0 [ 308.245211][ T9274] netlink_unicast+0x62b/0x850 [ 308.245235][ T9274] ? __pfx_netlink_unicast+0x10/0x10 [ 308.245262][ T9274] netlink_sendmsg+0x8b0/0xda0 [ 308.245287][ T9274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.245308][ T9274] ? selinux_socket_sendmsg+0x198/0x2f0 [ 308.245338][ T9274] ____sys_sendmsg+0xa4d/0xbe0 [ 308.245353][ T9274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.245373][ T9274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.245395][ T9274] ? __pfx_trace_clock_local+0x10/0x10 [ 308.245422][ T9274] ___sys_sendmsg+0x190/0x1e0 [ 308.245442][ T9274] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.245459][ T9274] ? __lock_acquire+0x49f/0x1a40 [ 308.245512][ T9274] __sys_sendmsg+0x160/0x210 [ 308.245535][ T9274] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.245570][ T9274] do_syscall_64+0x115/0x870 [ 308.245590][ T9274] ? clear_bhb_loop+0x70/0xc0 [ 308.245611][ T9274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.245629][ T9274] RIP: 0033:0x7fd5e459e0d9 [ 308.245648][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.245664][ T9274] RSP: 002b:00007fd5e550a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.245683][ T9274] RAX: ffffffffffffffda RBX: 00007fd5e4825fa0 RCX: 00007fd5e459e0d9 [ 308.245692][ T9274] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 308.245701][ T9274] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 308.245709][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.245717][ T9274] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 308.245741][ T9274] [ 308.535033][ T9278] autofs: Unknown parameter '(yj+UeS' [ 308.619168][ T9283] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 308.625753][ T9283] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 308.630699][ T9283] udc dummy_udc.0: failed to start g1: -22 [ 308.633783][ T9283] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 308.648681][ T9283] UDC core: g1: couldn't find an available UDC or it's busy [ 308.836755][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1075'. [ 308.845499][ T9292] tmpfs: Unknown parameter 'EԁRl[0x00000000ffffffff' [ 308.927502][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 308.927525][ T42] audit: type=1400 audit(1786972090.408:764): avc: denied { watch } for pid=9291 comm="syz.1.1076" path="/245/file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.998513][ T42] audit: type=1400 audit(1786972090.408:765): avc: denied { watch_sb watch_reads } for pid=9291 comm="syz.1.1076" path="/245/file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.031840][ T5747] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 309.035067][ T5747] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 309.409264][ T9309] FAULT_INJECTION: forcing a failure. [ 309.409264][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 309.423869][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.2.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.423902][ T9309] Tainted: [L]=SOFTLOCKUP [ 309.423909][ T9309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.423919][ T9309] Call Trace: [ 309.423926][ T9309] [ 309.423934][ T9309] dump_stack_lvl+0x100/0x190 [ 309.423964][ T9309] should_fail_ex.cold+0x5/0xa [ 309.423983][ T9309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 309.424012][ T9309] should_failslab+0xc2/0x120 [ 309.424035][ T9309] kmem_cache_alloc_noprof+0x91/0x6a0 [ 309.424058][ T9309] ? skb_clone+0x190/0x400 [ 309.424087][ T9309] skb_clone+0x190/0x400 [ 309.424109][ T9309] netlink_deliver_tap+0xaed/0xcc0 [ 309.424132][ T9309] netlink_unicast+0x62b/0x850 [ 309.424155][ T9309] ? __pfx_netlink_unicast+0x10/0x10 [ 309.424180][ T9309] netlink_sendmsg+0x8b0/0xda0 [ 309.424203][ T9309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.424224][ T9309] ? selinux_socket_sendmsg+0x198/0x2f0 [ 309.424253][ T9309] ____sys_sendmsg+0xa4d/0xbe0 [ 309.424270][ T9309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.424291][ T9309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.424316][ T9309] ? __pfx_trace_clock_local+0x10/0x10 [ 309.424343][ T9309] ___sys_sendmsg+0x190/0x1e0 [ 309.424364][ T9309] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.424381][ T9309] ? __lock_acquire+0x49f/0x1a40 [ 309.426004][ T9309] __sys_sendmsg+0x160/0x210 [ 309.426084][ T9309] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.426120][ T9309] do_syscall_64+0x115/0x870 [ 309.426141][ T9309] ? clear_bhb_loop+0x70/0xc0 [ 309.426162][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.426180][ T9309] RIP: 0033:0x7fd5e459e0d9 [ 309.426197][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.426214][ T9309] RSP: 002b:00007fd5e550a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.426235][ T9309] RAX: ffffffffffffffda RBX: 00007fd5e4825fa0 RCX: 00007fd5e459e0d9 [ 309.426246][ T9309] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 309.426257][ T9309] RBP: 00007fd5e550a090 R08: 0000000000000000 R09: 0000000000000000 [ 309.426267][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.426277][ T9309] R13: 00007fd5e4826038 R14: 00007fd5e4825fa0 R15: 00007ffe61488708 [ 309.426300][ T9309] [ 309.621858][ T9309] vlan2: entered allmulticast mode [ 309.672894][ T9309] bond0: entered allmulticast mode [ 309.676085][ T9309] bond_slave_0: entered allmulticast mode [ 309.683334][ T9309] bond_slave_1: entered allmulticast mode [ 309.701956][ T9309] bridge0: port 3(vlan2) entered blocking state [ 309.719926][ T9309] bridge0: port 3(vlan2) entered disabled state [ 309.746150][ T9309] vlan2: entered promiscuous mode [ 309.762953][ T9309] bond0: entered promiscuous mode [ 309.773985][ T9309] bond_slave_0: entered promiscuous mode [ 309.777030][ T9309] bond_slave_1: entered promiscuous mode [ 309.781510][ T9309] bridge0: port 3(vlan2) entered blocking state [ 309.787269][ T9309] bridge0: port 3(vlan2) entered forwarding state [ 309.927110][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1084'. [ 310.000816][ T42] audit: type=1400 audit(1786972091.478:766): avc: denied { write } for pid=9315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.038178][ T9323] vlan2: entered allmulticast mode [ 310.038210][ T9323] bond0: entered allmulticast mode [ 310.100476][ T9323] bond_slave_0: entered allmulticast mode [ 310.100512][ T9323] bond_slave_1: entered allmulticast mode [ 310.129974][ T9323] bridge0: port 3(vlan2) entered blocking state [ 310.130155][ T9323] bridge0: port 3(vlan2) entered disabled state [ 310.141716][ T42] audit: type=1400 audit(1786972091.618:767): avc: denied { write } for pid=9325 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.229315][ T9323] vlan2: entered promiscuous mode [ 310.229344][ T9323] bond0: entered promiscuous mode [ 310.229357][ T9323] bond_slave_0: entered promiscuous mode [ 310.229582][ T9323] bond_slave_1: entered promiscuous mode [ 310.236383][ T9323] bridge0: port 3(vlan2) entered blocking state [ 310.236461][ T9323] bridge0: port 3(vlan2) entered forwarding state [ 310.324824][ T5435] veth0_vlan: left promiscuous mode [ 310.427766][ T9319] ================================================================== [ 310.427803][ T9319] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 310.427837][ T9319] Write of size 8 at addr ffffc90004d39180 by task syz.0.1083/9319 [ 310.427850][ T9319] [ 310.427863][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.0.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.427889][ T9319] Tainted: [L]=SOFTLOCKUP [ 310.427897][ T9319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.427910][ T9319] Call Trace: [ 310.427918][ T9319] [ 310.427927][ T9319] dump_stack_lvl+0x100/0x190 [ 310.427953][ T9319] print_report+0x13d/0x4b0 [ 310.427987][ T9319] ? _raw_spin_lock_irqsave+0x52/0x60 [ 310.428008][ T9319] ? sys_imageblit+0x19fb/0x1d60 [ 310.428028][ T9319] kasan_report+0xdf/0x1c0 [ 310.428054][ T9319] ? sys_imageblit+0x19fb/0x1d60 [ 310.428078][ T9319] sys_imageblit+0x19fb/0x1d60 [ 310.428098][ T9319] ? __pfx_sys_imageblit+0x10/0x10 [ 310.428119][ T9319] ? prb_read_valid+0x78/0xa0 [ 310.428146][ T9319] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 310.428177][ T9319] soft_cursor+0x524/0xa10 [ 310.428197][ T9319] ? atomic_notifier_call_chain+0x10/0x1c0 [ 310.428216][ T9319] ? fb_get_color_depth+0x120/0x250 [ 310.428239][ T9319] bit_cursor+0xd3a/0x14e0 [ 310.428259][ T9319] ? __pfx_bit_cursor+0x10/0x10 [ 310.428280][ T9319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.428303][ T9319] ? get_color+0x1da/0x450 [ 310.428327][ T9319] ? __pfx_bit_cursor+0x10/0x10 [ 310.428343][ T9319] fbcon_cursor+0x43c/0x5e0 [ 310.428364][ T9319] ? add_softcursor+0x230/0x290 [ 310.428385][ T9319] set_cursor+0x1db/0x250 [ 310.428403][ T9319] con_write+0x89/0xb0 [ 310.428424][ T9319] n_tty_write+0x431/0x1160 [ 310.428456][ T9319] ? __pfx_n_tty_write+0x10/0x10 [ 310.428480][ T9319] ? __pfx_woken_wake_function+0x10/0x10 [ 310.428514][ T9319] ? __pfx___might_resched+0x10/0x10 [ 310.428536][ T9319] ? kfree+0x1e5/0x6c0 [ 310.428554][ T9319] ? __pfx_n_tty_write+0x10/0x10 [ 310.428579][ T9319] file_tty_write.isra.0+0x4d2/0x890 [ 310.428604][ T9319] vfs_write+0x6ac/0x1050 [ 310.428620][ T9319] ? __pfx_tty_write+0x10/0x10 [ 310.428641][ T9319] ? __pfx_vfs_write+0x10/0x10 [ 310.428655][ T9319] ? find_held_lock+0x2b/0x80 [ 310.428680][ T9319] ksys_write+0x12a/0x250 [ 310.428697][ T9319] ? __pfx_ksys_write+0x10/0x10 [ 310.428719][ T9319] ? trace_syscall_enter+0xd9/0x110 [ 310.428743][ T9319] do_syscall_64+0x115/0x870 [ 310.428762][ T9319] ? clear_bhb_loop+0x70/0xc0 [ 310.428806][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.428825][ T9319] RIP: 0033:0x7fe8d699e0d9 [ 310.428841][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.428861][ T9319] RSP: 002b:00007fe8d777f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.428878][ T9319] RAX: ffffffffffffffda RBX: 00007fe8d6c26090 RCX: 00007fe8d699e0d9 [ 310.428889][ T9319] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 310.428901][ T9319] RBP: 00007fe8d6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 310.428912][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.428923][ T9319] R13: 00007fe8d6c26128 R14: 00007fe8d6c26090 R15: 00007fff21190478 [ 310.428941][ T9319] [ 310.428948][ T9319] [ 310.428954][ T9319] The buggy address belongs to a vmalloc virtual mapping [ 310.428969][ T9319] Memory state around the buggy address: [ 310.428980][ T9319] ffffc90004d39080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.428992][ T9319] ffffc90004d39100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.429002][ T9319] >ffffc90004d39180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.429011][ T9319] ^ [ 310.429020][ T9319] ffffc90004d39200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.429034][ T9319] ffffc90004d39280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.429044][ T9319] ================================================================== [ 310.430903][ T9319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.430928][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.0.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.430957][ T9319] Tainted: [L]=SOFTLOCKUP [ 310.430964][ T9319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.430974][ T9319] Call Trace: [ 310.430980][ T9319] [ 310.430988][ T9319] dump_stack_lvl+0x100/0x190 [ 310.431019][ T9319] vpanic+0x552/0x970 [ 310.431039][ T9319] ? __pfx_vpanic+0x10/0x10 [ 310.431056][ T9319] ? mark_held_locks+0x40/0x70 [ 310.431081][ T9319] ? sys_imageblit+0x19fb/0x1d60 [ 310.431101][ T9319] panic+0xd1/0xe0 [ 310.431114][ T9319] ? __pfx_panic+0x10/0x10 [ 310.431131][ T9319] ? sys_imageblit+0x19fb/0x1d60 [ 310.431152][ T9319] ? preempt_schedule_common+0x42/0xc0 [ 310.431176][ T9319] check_panic_on_warn.cold+0x19/0x34 [ 310.431196][ T9319] end_report.part.0+0x3a/0x90 [ 310.431221][ T9319] kasan_report.cold+0xe/0x18 [ 310.431245][ T9319] ? sys_imageblit+0x19fb/0x1d60 [ 310.431266][ T9319] sys_imageblit+0x19fb/0x1d60 [ 310.431292][ T9319] ? __pfx_sys_imageblit+0x10/0x10 [ 310.431316][ T9319] ? prb_read_valid+0x78/0xa0 [ 310.431342][ T9319] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 310.431373][ T9319] soft_cursor+0x524/0xa10 [ 310.431390][ T9319] ? atomic_notifier_call_chain+0x10/0x1c0 [ 310.431411][ T9319] ? fb_get_color_depth+0x120/0x250 [ 310.431438][ T9319] bit_cursor+0xd3a/0x14e0 [ 310.431458][ T9319] ? __pfx_bit_cursor+0x10/0x10 [ 310.431479][ T9319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.431520][ T9319] ? get_color+0x1da/0x450 [ 310.431545][ T9319] ? __pfx_bit_cursor+0x10/0x10 [ 310.431561][ T9319] fbcon_cursor+0x43c/0x5e0 [ 310.431587][ T9319] ? add_softcursor+0x230/0x290 [ 310.431608][ T9319] set_cursor+0x1db/0x250 [ 310.431625][ T9319] con_write+0x89/0xb0 [ 310.431645][ T9319] n_tty_write+0x431/0x1160 [ 310.431677][ T9319] ? __pfx_n_tty_write+0x10/0x10 [ 310.431708][ T9319] ? __pfx_woken_wake_function+0x10/0x10 [ 310.431736][ T9319] ? __pfx___might_resched+0x10/0x10 [ 310.431755][ T9319] ? kfree+0x1e5/0x6c0 [ 310.431771][ T9319] ? __pfx_n_tty_write+0x10/0x10 [ 310.431797][ T9319] file_tty_write.isra.0+0x4d2/0x890 [ 310.431822][ T9319] vfs_write+0x6ac/0x1050 [ 310.431841][ T9319] ? __pfx_tty_write+0x10/0x10 [ 310.431863][ T9319] ? __pfx_vfs_write+0x10/0x10 [ 310.431877][ T9319] ? find_held_lock+0x2b/0x80 [ 310.431897][ T9319] ksys_write+0x12a/0x250 [ 310.431913][ T9319] ? __pfx_ksys_write+0x10/0x10 [ 310.431960][ T9319] ? trace_syscall_enter+0xd9/0x110 [ 310.431990][ T9319] do_syscall_64+0x115/0x870 [ 310.432011][ T9319] ? clear_bhb_loop+0x70/0xc0 [ 310.432028][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.432046][ T9319] RIP: 0033:0x7fe8d699e0d9 [ 310.432062][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.432081][ T9319] RSP: 002b:00007fe8d777f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.432103][ T9319] RAX: ffffffffffffffda RBX: 00007fe8d6c26090 RCX: 00007fe8d699e0d9 [ 310.432116][ T9319] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 310.432128][ T9319] RBP: 00007fe8d6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 310.432139][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.432148][ T9319] R13: 00007fe8d6c26128 R14: 00007fe8d6c26090 R15: 00007fff21190478 [ 310.432163][ T9319] [ 310.450875][ T9319] Kernel Offset: disabled VM DIAGNOSIS: 13:08:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a350b5 RDI=ffffffff9bc05ec0 RBP=ffffffff9bc05e80 RSP=ffffc9000358f1c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b8f8223 R15=ffffffff85a35050 RIP=ffffffff85a350df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe8d777f6c0 ffffffff 00c00000 GS =0000 ffff8880d5bde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb981427dac CR3=000000002d537000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d775d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21190966 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21190966 00007fff2119096c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6bf2600 00007fe8d6bf25e0 00007fe8d6bf25e8 00007fe8d6bf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8d6bf25f8 00007fe8d6bf25c8 00007fe8d6bf2600 00007fe8d6bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea3759a047f98df8 cbddc8f87797588b 41381ec17f32cc79 13175326fea6312b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64411a61524be00e 9d8290f081efa868 2f7ef3a18fb13b55 a4fba569421901ed ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2661310d45260d 9b3bccaca6bd3917 5fdd65b6036fa533 ee86526513b3eaa4 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9c6abc59ba4f653 63125c286998b3e3 256553adc02ce208 b28c706748d9fb08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff8880345aca80 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe45ef2a6c0 ffffffff 00c00000 GS =0000 ffff8880d5cde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb981f55690 CR3=0000000035ad4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0fec4 Opmask01=000000000000007f Opmask02=00000000feff7f7f Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555d5087add0 0000555d5087add0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555d50864fd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1609f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464313934063fd4 6464313934eeaaa4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464313934eeaaac 6464313934eeaaac ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f646e65760027 7325272065636976 6564206973637320 64696c61766e6900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a414b40530002 5600020540464c53 4041054c56465605 414c4944534b4c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68637461772e6575 6575716b726f7720 35353d6873657268 745f676f64686374 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004c 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000010101 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88801f6c0000 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc90000648e38 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000b36000 CR3=0000000035b56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e535d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe61488bf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe61488bf6 00007ffe61488bfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e4635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e4635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e46357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e4635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e47f2600 00007fd5e47f25e0 00007fd5e47f25e8 00007fd5e47f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e535d020 00007fd5e47f25c0 00007fd5e47f25d0 00007fd5e47f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e47f25f8 00007fd5e47f25c8 00007fd5e47f2600 00007fd5e47f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff888024554a80 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ede000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558b10f2dda8 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31656c69662f3165 6c69662f3435322f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a52aba6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a52aba6 00007ffd5a52abac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb981235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb981235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9812357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb981235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000