last executing test programs: 5m6.953378727s ago: executing program 0 (id=24): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="153ea7996702", 0x0, 0x3, 0x0, 0x6, 0x0}) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 'dvmrp1\x00'}}) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x80, 0x0, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wf\x00no=', @ANYRESHEX=r5, @ANYBLOB=',k']) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002907800000b00e000000211009078e000f5010000000201000000000000004c2ea6b7eec6d781ea6844a6cbb88e8134f44c87fba12aeb637577a295f87a9956d832e4753e975b0598780885d28aff"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r11, r12, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32=r12, @ANYBLOB="2f0000001800000004000000", @ANYBLOB="e2c703b502"], 0x20) close(r1) 5m6.363168316s ago: executing program 0 (id=26): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADMODE1(r3, 0x530d, &(0x7f0000001bc0)={0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) memfd_secret(0x80000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0x163}, {&(0x7f0000002180)="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", 0xdf8}], 0x2}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r7, &(0x7f00000001c0)=""/200, 0xc8, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x3, @empty, 'lo\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="f3b81f67d890ce56692cf3172201b160a656ac43f67e2d1329ddf33babd6f3e87b5ecb72dd2c697b43efd77e8bcf2320a4c9fbcb6ff609c0a743cf2104fcdd35544256cc223faf77f4d12f4e51c703e1eec6f2400f23d70c514a121e1d6cb9a20a79ae74e0ef971c026e880b4c33502654f92307d9ddfd03957b1639499125b9c341b841fe871d260d26aa60a17425380d9c19388d69119beffbed2b4b9b62c0aea9bb0d3788db7728d88f059bb68592130ccedc37b3a32cb190d8b7ba0a70f9b00115f6b688470e9ad5514fe9a459a89309f8855500d7c4564180498d6f2c72b2bcaf7220b43774b03c0be12b59bbe7de2bef1eefd428a1", 0xf8}, {&(0x7f0000000780)="343a99aaa1d60d4f5edd8867a75321dda46d560923e108ab0ad79b7ec809808a02840b88377dafdf7c9ca00f004d7c7ef68d900ab2a5e375741d55d0675cd80dd3245527ed3bf597898405eb9d9b08a126439ddf4fe0873bdb8446273f10a920a12853576c37bbb1f2e8a1a9e8b18ed73e4bd32b48471301e9c120d6fe929b4b38bc8cf58c550a586b9f5ea812752112c22856b8bb0f5deaf324c07c0a166ba1157311553c1687658ad011015a0d20e880306c32f070805121fcdf8f11193e5a08f2e0a2ad42638cbfb300"/217, 0xd9}, {&(0x7f0000000880)="2c811e3ffd833a9ea79cf572c9489901bfe6ed2c383eb0ce074c1719a547aa06b6ac9f861eddc862b56ea564b750f75c07b9333bd0ed405fd539e14f6368ad55bd0ffb360e8f01b54342d2b39d8de9ba2f09c90dd786507471bb73a5ebabcbcd88ae618c059483bac8955182659e207e2a2120a9a29b1406cdecfb1102ddbfcaa06e2fbdf23def1fe1f415ff6214d34106c8fbb948444e3ff536337fd102733a68ed9c5b4dfe4740e7958724d0150a252ca0", 0xb2}, {&(0x7f0000000940)="08e0ad995551d6c762a81f4f55444217be058b0dfe662a0c32d33870dc45baf2dd76f2430309c874aea71e52a5203e06ede90f3d691ef5321094fc9280a24aa63b4207f7a6666a659db01539d10197c0981cb2d7dbb1bcef75e145c0532b7ee072a872ac43b52d00335a34f0bad31877d4a1717cb10824512d22222e8f3ba421d4635b76c13c819c6bf3230d9792ebf6da5d390fd74fd806ebb0bbf092604b1fb2e9aa484d3b57099d65ad11718a129b46b2c2262e6be5c6a0e3407ec5b943b75f4f6b98f3846f7139c7", 0xca}], 0x20000000000001a4}}], 0x1, 0xa00) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) 5m4.986670416s ago: executing program 0 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)=0x40) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, 0x0, 0x0) listen(r4, 0x50) listen(r4, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0xfffffffffffffffb}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f00000006c0)="5f1b3a0d531c4c51c0b2b57960b5402d9d33a2b615776f10be81b7f1ddf8a821d3b8e6087db71744b6680305a9cd2ba3617b7e3d8e20499f7045124a7bcf7a1407bbb20b88bfbc535467759d7c6891e5eda4b35457d8be5d3261ee592e8a0bb66ff2a39a57199d5c5e91a8a26e549beaeff5e49ba5eea2868756323caf3e8a", 0x7f}], 0x2}}], 0x1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x1ff, 0x1, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x7f000, 0x75b1], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)=0x40) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x2, 0x0, 0x0) (async) listen(r4, 0x50) (async) listen(r4, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0xfffffffffffffffb}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmmsg$inet(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f00000006c0)="5f1b3a0d531c4c51c0b2b57960b5402d9d33a2b615776f10be81b7f1ddf8a821d3b8e6087db71744b6680305a9cd2ba3617b7e3d8e20499f7045124a7bcf7a1407bbb20b88bfbc535467759d7c6891e5eda4b35457d8be5d3261ee592e8a0bb66ff2a39a57199d5c5e91a8a26e549beaeff5e49ba5eea2868756323caf3e8a", 0x7f}], 0x2}}], 0x1, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x1ff, 0x1, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x7f000, 0x75b1], 0x0, 0x200}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 5m4.733403467s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x800, &(0x7f00000002c0)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x2005, 0x0, 0x7}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) get_robust_list(r5, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}]}, 0x28}}, 0x0) 5m3.910283474s ago: executing program 0 (id=48): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x80}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) syz_io_uring_setup(0x7f01, &(0x7f0000000300)={0x0, 0x5885, 0x20000}, &(0x7f0000000000), &(0x7f0000000280)) (async) pipe2$9p(&(0x7f0000000040), 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095", @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20000840) (async) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 5m3.583647728s ago: executing program 0 (id=53): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000001400)={0x0, 0xd73c, 0x2, 0x0, 0x38f}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x2e3f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x2cb, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x1378, 0xffffffff, 0xec, 0xec, 0x11e4, 0xfeffffff, 0xffffffff, 0x12b0, 0x12b0, 0x12b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {0xbf820dc36854cbc6}, 0x6, 0x9, 0x2, 0x1}, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x6, 0x4}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10d4, 0x10f8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x10, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xfffd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x13d4) 5m3.564162047s ago: executing program 32 (id=53): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000001400)={0x0, 0xd73c, 0x2, 0x0, 0x38f}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x2e3f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x2cb, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x1378, 0xffffffff, 0xec, 0xec, 0x11e4, 0xfeffffff, 0xffffffff, 0x12b0, 0x12b0, 0x12b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {0xbf820dc36854cbc6}, 0x6, 0x9, 0x2, 0x1}, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x6, 0x4}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10d4, 0x10f8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x10, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xfffd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x13d4) 2.660954526s ago: executing program 1 (id=2170): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bind$l2tp6(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.660655032s ago: executing program 1 (id=2171): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000e00), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @pic={0x2, 0x2, 0x8, 0x3, 0x5, 0x1, 0x8, 0x8, 0x4, 0x0, 0x8, 0x0, 0xa, 0xd, 0x3, 0xff}}) 2.564882198s ago: executing program 1 (id=2173): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x81) ppoll(&(0x7f00000049c0)=[{r0}, {r0, 0x4400}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x82, 0x40000009, 'syz1\x00', 0xf26b}, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1.660424607s ago: executing program 1 (id=2183): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}], 0x484, 0x24048084) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}, 0xffffff00}], 0x1, 0x40000000, 0x0) 1.660232573s ago: executing program 1 (id=2184): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x8e62ce024c776f58, &(0x7f0000000080)={0x11, 0x888e, r1, 0x1, 0x7, 0x6, @local}, 0x14) 1.581113446s ago: executing program 1 (id=2186): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) 1.520967261s ago: executing program 3 (id=2189): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 1.520612165s ago: executing program 3 (id=2190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) 1.460488786s ago: executing program 3 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x20000014) 1.391136614s ago: executing program 3 (id=2192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7f, 0x0, 0x1}], @ipv6=@generic={0x7, 0x6, "fb3f42", 0x0, 0x2e, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}}}, 0x46) 1.290472449s ago: executing program 3 (id=2193): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b323b6d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 1.237095387s ago: executing program 3 (id=2194): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000000b00"], 0x18}, 0x0) 800.894682ms ago: executing program 4 (id=2201): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x23, 0x9, 0x0, 0x0) 736.68807ms ago: executing program 4 (id=2202): unshare(0x22020600) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) 736.549651ms ago: executing program 4 (id=2203): r0 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x97c3, 0x0, 0x0, 0x1bf}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000200)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) close_range(r0, 0xffffffffffffffff, 0x0) 669.632056ms ago: executing program 4 (id=2204): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0xfc, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x9, 0x3, 0x20, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x3, 0xb3, 0x0, 0x3, 0x8, 0x80, 0xf6, 0x4}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 484.601643ms ago: executing program 4 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) 430.888209ms ago: executing program 4 (id=2211): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 250.781046ms ago: executing program 2 (id=2214): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0xfffffff9, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54", 0xe) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 170.953037ms ago: executing program 2 (id=2215): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 170.539201ms ago: executing program 2 (id=2216): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket(0x1e, 0x0, 0x7f) r1 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000003, 0x1010, r1, 0x12206000) 120.411868ms ago: executing program 2 (id=2217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0xfc, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x9, 0x3, 0x20, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x3, 0xb3, 0x0, 0x3, 0x8, 0x80, 0xf6, 0x4}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 192.118µs ago: executing program 2 (id=2218): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000300)=[{r2, 0xe000}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 0s ago: executing program 2 (id=2219): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) kernel console output (not intermixed with test programs): or 9-1: config 0 descriptor?? [ 230.243719][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.246387][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.256009][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.258938][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.273732][ T57] r8152-cfgselector 9-1: Unknown version 0x0000 [ 230.275752][ T57] r8152-cfgselector 9-1: bad CDC descriptors [ 230.287115][ T57] r8152-cfgselector 9-1: USB disconnect, device number 25 [ 230.806274][T10621] 9pnet_fd: Insufficient options for proto=fd [ 230.837037][T10621] No control pipe specified [ 231.026979][T10623] program syz.2.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.236585][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 231.755731][ T6295] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 231.925066][ T6295] usb 8-1: Using ep0 maxpacket: 16 [ 231.935391][ T6295] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 231.949674][ T6295] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 231.952406][ T6295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.954645][ T6295] usb 8-1: Product: syz [ 231.956352][ T6295] usb 8-1: Manufacturer: syz [ 231.957986][ T6295] usb 8-1: SerialNumber: syz [ 231.960507][ T6295] usb 8-1: config 0 descriptor?? [ 231.963216][ T6295] hub 8-1:0.0: bad descriptor, ignoring hub [ 231.964908][ T6295] hub 8-1:0.0: probe with driver hub failed with error -5 [ 231.968279][ T6295] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input29 [ 232.185100][ T30] usb 8-1: USB disconnect, device number 27 [ 232.225825][T10631] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 232.268588][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 232.268599][ T39] audit: type=1326 audit(232.167:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10653 comm="syz.2.1236" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 232.329371][T10657] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 232.444293][T10659] 9pnet_virtio: no channels available for device syz [ 232.458596][T10659] ntfs3(sr0): Primary boot signature is not NTFS. [ 232.462647][T10659] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 232.506464][T10659] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 232.996210][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 233.258062][T10679] program syz.4.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.327819][ T39] audit: type=1326 audit(233.227:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.3.1245" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 234.073960][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 234.405403][ T66] Bluetooth: hci1: command 0x0419 tx timeout [ 234.988198][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 235.684273][T10760] 9pnet_fd: Insufficient options for proto=fd [ 237.255854][T10698] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 237.373568][T10793] netlink: 'syz.1.1276': attribute type 12 has an invalid length. [ 238.421290][T10822] ipt_REJECT: TCP_RESET invalid for non-tcp [ 238.784782][ T56] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 238.911919][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 238.974829][ T56] usb 9-1: Using ep0 maxpacket: 16 [ 238.978185][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 238.982664][ T56] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 238.985274][ T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.988607][ T56] usb 9-1: Product: syz [ 238.991002][ T56] usb 9-1: Manufacturer: syz [ 238.992337][ T56] usb 9-1: SerialNumber: syz [ 238.996121][ T56] usb 9-1: config 0 descriptor?? [ 238.999900][ T56] hub 9-1:0.0: bad descriptor, ignoring hub [ 239.001553][ T56] hub 9-1:0.0: probe with driver hub failed with error -5 [ 239.007109][ T56] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input30 [ 239.024038][T10835] 9pnet_fd: Insufficient options for proto=fd [ 239.227090][ T833] usb 9-1: USB disconnect, device number 26 [ 239.246731][T10814] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 239.362323][T10852] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 239.508557][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 239.618272][T10864] 9pnet_fd: Insufficient options for proto=fd [ 239.658534][T10869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1297'. [ 240.408113][T10891] random: crng reseeded on system resumption [ 240.825348][T10360] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 240.924233][T10910] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.978232][T10360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.981607][T10360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.110421][T10360] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 241.113773][T10360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.122898][T10360] usb 8-1: config 0 descriptor?? [ 241.529284][T10360] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 241.532008][T10360] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 241.542277][T10360] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.000D/input/input31 [ 241.550646][T10360] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 241.635148][ T35] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 241.730347][T10901] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 241.733530][T10360] usb 8-1: USB disconnect, device number 28 [ 241.785319][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 241.790204][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 241.807211][ T35] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 241.810573][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.813474][ T35] usb 9-1: Product: syz [ 241.815834][ T35] usb 9-1: Manufacturer: syz [ 241.817589][ T35] usb 9-1: SerialNumber: syz [ 241.820648][ T35] usb 9-1: config 0 descriptor?? [ 241.823305][ T35] hub 9-1:0.0: bad descriptor, ignoring hub [ 241.827765][ T35] hub 9-1:0.0: probe with driver hub failed with error -5 [ 241.832136][ T35] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input32 [ 242.125694][T10911] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 242.185030][ T30] usb 9-1: USB disconnect, device number 27 [ 242.880213][T10942] program syz.1.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.894776][T10951] FAULT_INJECTION: forcing a failure. [ 242.894776][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.898788][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.4.1318 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 242.898812][T10951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.898819][T10951] Call Trace: [ 242.898840][T10951] [ 242.898845][T10951] dump_stack_lvl+0x16c/0x1f0 [ 242.898882][T10951] should_fail_ex+0x50a/0x650 [ 242.898915][T10951] _copy_from_user+0x2e/0xd0 [ 242.898953][T10951] get_compat_msghdr+0xa8/0x170 [ 242.898988][T10951] ? __pfx_get_compat_msghdr+0x10/0x10 [ 242.899005][T10951] ___sys_sendmsg+0x1b0/0x1e0 [ 242.899032][T10951] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.899047][T10951] ? __pfx_lock_release+0x10/0x10 [ 242.899062][T10951] ? trace_lock_acquire+0x14e/0x1f0 [ 242.899075][T10951] ? __fget_files+0x206/0x3a0 [ 242.899091][T10951] __sys_sendmsg+0x16e/0x220 [ 242.899102][T10951] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.899120][T10951] __do_fast_syscall_32+0x73/0x120 [ 242.899131][T10951] do_fast_syscall_32+0x32/0x80 [ 242.899141][T10951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.899158][T10951] RIP: 0023:0xf749e579 [ 242.899167][T10951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.899176][T10951] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 242.899196][T10951] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 242.899202][T10951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.899207][T10951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.899213][T10951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.899218][T10951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.899229][T10951] [ 243.148515][T10955] blktrace: Concurrent blktraces are not allowed on nullb0 [ 243.431231][T10967] 9pnet_virtio: no channels available for device syz [ 243.875257][ T35] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 244.026776][ T35] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 244.029458][ T35] usb 8-1: can't read configurations, error -61 [ 244.089862][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.092528][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.098069][T10988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.101006][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.155309][ T35] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 244.307219][ T35] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 244.309885][ T35] usb 8-1: can't read configurations, error -61 [ 244.312017][ T35] usb usb8-port1: attempt power cycle [ 244.645199][ T35] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 244.667971][ T35] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 244.670665][ T35] usb 8-1: can't read configurations, error -61 [ 244.795173][ T35] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 244.817418][ T35] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 244.819612][ T35] usb 8-1: can't read configurations, error -61 [ 244.822028][ T35] usb usb8-port1: unable to enumerate USB device [ 245.236109][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 245.282673][T11011] FAULT_INJECTION: forcing a failure. [ 245.282673][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 245.286534][T11011] CPU: 3 UID: 0 PID: 11011 Comm: syz.1.1338 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 245.286548][T11011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.286554][T11011] Call Trace: [ 245.286558][T11011] [ 245.286562][T11011] dump_stack_lvl+0x16c/0x1f0 [ 245.286584][T11011] should_fail_ex+0x50a/0x650 [ 245.286601][T11011] ? tipc_dest_push+0x148/0x310 [ 245.286663][T11011] should_failslab+0xc2/0x120 [ 245.286678][T11011] __kmalloc_cache_noprof+0x68/0x420 [ 245.286689][T11011] ? do_raw_spin_lock+0x12d/0x2c0 [ 245.286707][T11011] tipc_dest_push+0x148/0x310 [ 245.286717][T11011] tipc_nametbl_lookup_group+0x321/0x7e0 [ 245.286731][T11011] tipc_send_group_anycast+0x398/0x850 [ 245.286778][T11011] ? __pfx_mark_lock+0x10/0x10 [ 245.286790][T11011] ? __pfx_tipc_send_group_anycast+0x10/0x10 [ 245.286805][T11011] ? __pfx_mark_lock+0x10/0x10 [ 245.286818][T11011] ? __pfx_mark_lock+0x10/0x10 [ 245.286830][T11011] ? mark_lock+0xb5/0xc60 [ 245.286841][T11011] ? hlock_class+0x4e/0x130 [ 245.286856][T11011] ? aa_label_sk_perm+0x19d/0x5a0 [ 245.286882][T11011] ? __pfx_mark_lock+0x10/0x10 [ 245.286893][T11011] ? hlock_class+0x4e/0x130 [ 245.286931][T11011] ? __lock_acquire+0x15a9/0x3c40 [ 245.286947][T11011] __tipc_sendmsg+0x127e/0x1990 [ 245.286963][T11011] ? __pfx___tipc_sendmsg+0x10/0x10 [ 245.286975][T11011] ? __pfx_mark_lock+0x10/0x10 [ 245.286986][T11011] ? lock_acquire.part.0+0x11b/0x380 [ 245.287000][T11011] ? find_held_lock+0x2d/0x110 [ 245.287019][T11011] ? mark_held_locks+0x9f/0xe0 [ 245.287031][T11011] ? __local_bh_enable_ip+0xa4/0x120 [ 245.287047][T11011] tipc_sendmsg+0x4f/0x70 [ 245.287059][T11011] ____sys_sendmsg+0x9ae/0xb40 [ 245.287076][T11011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.287089][T11011] ? get_compat_msghdr+0x11b/0x170 [ 245.287110][T11011] ___sys_sendmsg+0x135/0x1e0 [ 245.287121][T11011] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.287137][T11011] ? __pfx_lock_release+0x10/0x10 [ 245.287148][T11011] ? trace_lock_acquire+0x14e/0x1f0 [ 245.287161][T11011] ? __fget_files+0x206/0x3a0 [ 245.287176][T11011] __sys_sendmsg+0x16e/0x220 [ 245.287186][T11011] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.287204][T11011] __do_fast_syscall_32+0x73/0x120 [ 245.287216][T11011] do_fast_syscall_32+0x32/0x80 [ 245.287226][T11011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.287247][T11011] RIP: 0023:0xf7fef579 [ 245.287256][T11011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.287265][T11011] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 245.287275][T11011] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 245.287280][T11011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.287286][T11011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.287291][T11011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.287296][T11011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.287308][T11011] [ 245.347389][T11015] 9pnet_fd: Insufficient options for proto=fd [ 245.379228][T11009] program syz.4.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.196790][T11023] blktrace: Concurrent blktraces are not allowed on nullb0 [ 246.214064][ T5959] Bluetooth: hci2: Malformed LE Event: 0x02 [ 247.761863][T11063] blktrace: Concurrent blktraces are not allowed on nullb0 [ 247.868380][T11069] 9pnet_fd: Insufficient options for proto=fd [ 248.810289][T11091] bridge0: port 3(netdevsim0) entered blocking state [ 248.813012][T11091] bridge0: port 3(netdevsim0) entered disabled state [ 248.821048][T11091] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 248.824655][T11091] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 248.827974][T11091] bridge0: port 3(netdevsim0) entered blocking state [ 248.830673][T11091] bridge0: port 3(netdevsim0) entered forwarding state [ 248.847993][T11091] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 248.850200][T11091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1359'. [ 249.194614][T11097] /dev/nullb0: Can't open blockdev [ 249.206763][T11097] ./file0: Can't lookup blockdev [ 249.443608][T11110] blktrace: Concurrent blktraces are not allowed on nullb0 [ 249.458207][ T5959] Bluetooth: hci3: Malformed LE Event: 0x02 [ 249.492243][T11114] 9pnet_fd: Insufficient options for proto=fd [ 249.904923][ T25] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 250.008218][ T39] audit: type=1326 audit(249.907:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.2.1370" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 250.058728][ T25] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 250.061527][ T25] usb 9-1: can't read configurations, error -61 [ 250.184847][ T25] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 250.346647][ T25] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 250.349060][ T25] usb 9-1: can't read configurations, error -61 [ 250.351207][ T25] usb usb9-port1: attempt power cycle [ 250.687104][ T25] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 250.740461][ T25] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 250.742665][ T25] usb 9-1: can't read configurations, error -61 [ 250.883770][ T25] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 250.911218][ T25] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 250.913526][ T25] usb 9-1: can't read configurations, error -61 [ 250.924052][ T25] usb usb9-port1: unable to enumerate USB device [ 252.392375][T11151] FAULT_INJECTION: forcing a failure. [ 252.392375][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 252.396051][T11151] CPU: 2 UID: 0 PID: 11151 Comm: syz.2.1378 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 252.396064][T11151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.396072][T11151] Call Trace: [ 252.396093][T11151] [ 252.396098][T11151] dump_stack_lvl+0x16c/0x1f0 [ 252.396327][T11151] should_fail_ex+0x50a/0x650 [ 252.396471][T11151] ? tipc_dest_push+0x148/0x310 [ 252.396531][T11151] should_failslab+0xc2/0x120 [ 252.396608][T11151] __kmalloc_cache_noprof+0x68/0x420 [ 252.396620][T11151] ? do_raw_spin_lock+0x12d/0x2c0 [ 252.396673][T11151] tipc_dest_push+0x148/0x310 [ 252.396683][T11151] tipc_nametbl_lookup_group+0x321/0x7e0 [ 252.396698][T11151] tipc_send_group_anycast+0x398/0x850 [ 252.396733][T11151] ? __pfx_mark_lock+0x10/0x10 [ 252.396744][T11151] ? __pfx_tipc_send_group_anycast+0x10/0x10 [ 252.396759][T11151] ? __pfx_mark_lock+0x10/0x10 [ 252.396771][T11151] ? __pfx_mark_lock+0x10/0x10 [ 252.396783][T11151] ? mark_lock+0xb5/0xc60 [ 252.396794][T11151] ? hlock_class+0x4e/0x130 [ 252.396809][T11151] ? aa_label_sk_perm+0x19d/0x5a0 [ 252.396860][T11151] ? __pfx_mark_lock+0x10/0x10 [ 252.396873][T11151] ? hlock_class+0x4e/0x130 [ 252.396892][T11151] ? __lock_acquire+0x15a9/0x3c40 [ 252.396911][T11151] __tipc_sendmsg+0x127e/0x1990 [ 252.396934][T11151] ? __pfx___tipc_sendmsg+0x10/0x10 [ 252.396953][T11151] ? __pfx_mark_lock+0x10/0x10 [ 252.396969][T11151] ? lock_acquire.part.0+0x11b/0x380 [ 252.396988][T11151] ? find_held_lock+0x2d/0x110 [ 252.397015][T11151] ? mark_held_locks+0x9f/0xe0 [ 252.397032][T11151] ? __local_bh_enable_ip+0xa4/0x120 [ 252.397055][T11151] tipc_sendmsg+0x4f/0x70 [ 252.397071][T11151] ____sys_sendmsg+0x9ae/0xb40 [ 252.397198][T11151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.397211][T11151] ? get_compat_msghdr+0x11b/0x170 [ 252.397245][T11151] ___sys_sendmsg+0x135/0x1e0 [ 252.397257][T11151] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.397273][T11151] ? __pfx_lock_release+0x10/0x10 [ 252.397284][T11151] ? trace_lock_acquire+0x14e/0x1f0 [ 252.397298][T11151] ? __fget_files+0x206/0x3a0 [ 252.397313][T11151] __sys_sendmsg+0x16e/0x220 [ 252.397324][T11151] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.397343][T11151] __do_fast_syscall_32+0x73/0x120 [ 252.397355][T11151] do_fast_syscall_32+0x32/0x80 [ 252.397364][T11151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.397394][T11151] RIP: 0023:0xf749e579 [ 252.397403][T11151] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 252.397412][T11151] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 252.397445][T11151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540 [ 252.397450][T11151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.397456][T11151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.397461][T11151] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 252.397466][T11151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.397478][T11151] [ 252.620595][T11160] 9pnet_fd: Insufficient options for proto=fd [ 252.623677][T11159] blktrace: Concurrent blktraces are not allowed on nullb0 [ 253.857967][ T39] audit: type=1326 audit(253.757:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.4.1387" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 253.895298][ T35] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 254.045358][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 254.049632][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.056925][ T35] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 254.060524][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.064072][ T35] usb 7-1: Product: syz [ 254.065798][ T35] usb 7-1: Manufacturer: syz [ 254.067154][ T35] usb 7-1: SerialNumber: syz [ 254.072007][ T35] usb 7-1: config 0 descriptor?? [ 254.075807][ T35] hub 7-1:0.0: bad descriptor, ignoring hub [ 254.077993][ T35] hub 7-1:0.0: probe with driver hub failed with error -5 [ 254.083695][ T35] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input33 [ 254.335696][T11170] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 254.406279][ T30] usb 7-1: USB disconnect, device number 29 [ 254.865866][T11196] 9pnet_fd: Insufficient options for proto=fd [ 254.891915][T11198] FAULT_INJECTION: forcing a failure. [ 254.891915][T11198] name failslab, interval 1, probability 0, space 0, times 0 [ 254.896471][T11198] CPU: 0 UID: 0 PID: 11198 Comm: syz.2.1393 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 254.896484][T11198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.896491][T11198] Call Trace: [ 254.896495][T11198] [ 254.896500][T11198] dump_stack_lvl+0x16c/0x1f0 [ 254.896523][T11198] should_fail_ex+0x50a/0x650 [ 254.896537][T11198] ? fs_reclaim_acquire+0xae/0x150 [ 254.896555][T11198] should_failslab+0xc2/0x120 [ 254.896569][T11198] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 254.896581][T11198] ? __pfx___might_resched+0x10/0x10 [ 254.896596][T11198] ? alloc_vmap_area+0x636/0x2a60 [ 254.896612][T11198] alloc_vmap_area+0x636/0x2a60 [ 254.896632][T11198] ? __pfx_alloc_vmap_area+0x10/0x10 [ 254.896651][T11198] __get_vm_area_node+0x19e/0x2f0 [ 254.896669][T11198] __vmalloc_node_range_noprof+0x26a/0x1530 [ 254.896680][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 254.896695][T11198] ? __pfx___mutex_trylock_common+0x10/0x10 [ 254.896708][T11198] ? translate_compat_table+0x1b0/0x18c0 [ 254.896749][T11198] ? trace_contention_end+0xee/0x140 [ 254.896761][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 254.896775][T11198] ? kasan_save_stack+0x42/0x60 [ 254.896786][T11198] ? translate_compat_table+0x1b0/0x18c0 [ 254.896799][T11198] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.896809][T11198] ? __pfx___mutex_lock+0x10/0x10 [ 254.896827][T11198] ? __lock_acquire+0x15a9/0x3c40 [ 254.896840][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 254.896853][T11198] vmalloc_noprof+0x6b/0x90 [ 254.896863][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 254.896876][T11198] xt_compat_init_offsets+0xe1/0x1f0 [ 254.896890][T11198] translate_compat_table+0x1f0/0x18c0 [ 254.896909][T11198] ? __pfx_translate_compat_table+0x10/0x10 [ 254.896922][T11198] ? __might_fault+0x13b/0x190 [ 254.896937][T11198] ? trace_lock_acquire+0x14e/0x1f0 [ 254.896953][T11198] compat_do_replace+0x35d/0x500 [ 254.896967][T11198] ? __pfx_compat_do_replace+0x10/0x10 [ 254.896980][T11198] ? aa_get_newest_label+0x376/0x680 [ 254.896997][T11198] ? __pfx_aa_get_newest_label+0x10/0x10 [ 254.897017][T11198] ? bpf_lsm_capable+0x9/0x10 [ 254.897031][T11198] ? security_capable+0x7e/0x260 [ 254.897056][T11198] do_ipt_set_ctl+0x686/0xc10 [ 254.897070][T11198] ? __mutex_lock+0x1cc/0xb10 [ 254.897080][T11198] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 254.897093][T11198] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 254.897109][T11198] ? sockopt_release_sock+0x52/0x60 [ 254.897121][T11198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.897138][T11198] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 254.897178][T11198] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 254.897216][T11198] nf_setsockopt+0x8a/0xf0 [ 254.897230][T11198] ip_setsockopt+0xcb/0xf0 [ 254.897246][T11198] raw_setsockopt+0xb8/0x290 [ 254.897263][T11198] ? __pfx_raw_setsockopt+0x10/0x10 [ 254.897278][T11198] ? sock_common_setsockopt+0x2e/0xf0 [ 254.897292][T11198] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 254.897305][T11198] do_sock_setsockopt+0x222/0x480 [ 254.897318][T11198] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 254.897331][T11198] ? lock_acquire+0x2f/0xb0 [ 254.897348][T11198] __sys_setsockopt+0x1a0/0x230 [ 254.897360][T11198] __ia32_sys_setsockopt+0xbc/0x160 [ 254.897369][T11198] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.897384][T11198] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 254.897400][T11198] __do_fast_syscall_32+0x73/0x120 [ 254.897411][T11198] do_fast_syscall_32+0x32/0x80 [ 254.897420][T11198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.897438][T11198] RIP: 0023:0xf749e579 [ 254.897447][T11198] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.897456][T11198] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 254.897466][T11198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 254.897471][T11198] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000278 [ 254.897477][T11198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.897482][T11198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 254.897488][T11198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.897499][T11198] [ 254.897565][T11198] warn_alloc: 2 callbacks suppressed [ 254.897570][T11198] syz.2.1393: vmalloc error: size 24, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.025345][T11198] CPU: 2 UID: 0 PID: 11198 Comm: syz.2.1393 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 255.025366][T11198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.025376][T11198] Call Trace: [ 255.025382][T11198] [ 255.025389][T11198] dump_stack_lvl+0x16c/0x1f0 [ 255.025421][T11198] warn_alloc+0x24d/0x3a0 [ 255.025441][T11198] ? __pfx_warn_alloc+0x10/0x10 [ 255.025462][T11198] ? kfree+0x2c4/0x4d0 [ 255.025482][T11198] ? __get_vm_area_node+0x1dc/0x2f0 [ 255.025511][T11198] __vmalloc_node_range_noprof+0xd24/0x1530 [ 255.025526][T11198] ? __pfx___mutex_trylock_common+0x10/0x10 [ 255.025548][T11198] ? translate_compat_table+0x1b0/0x18c0 [ 255.025575][T11198] ? trace_contention_end+0xee/0x140 [ 255.025596][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 255.025619][T11198] ? kasan_save_stack+0x42/0x60 [ 255.025636][T11198] ? translate_compat_table+0x1b0/0x18c0 [ 255.025656][T11198] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.025671][T11198] ? __pfx___mutex_lock+0x10/0x10 [ 255.025695][T11198] ? __lock_acquire+0x15a9/0x3c40 [ 255.025715][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 255.025738][T11198] vmalloc_noprof+0x6b/0x90 [ 255.025753][T11198] ? xt_compat_init_offsets+0xe1/0x1f0 [ 255.025772][T11198] xt_compat_init_offsets+0xe1/0x1f0 [ 255.025790][T11198] translate_compat_table+0x1f0/0x18c0 [ 255.025821][T11198] ? __pfx_translate_compat_table+0x10/0x10 [ 255.025842][T11198] ? __might_fault+0x13b/0x190 [ 255.025864][T11198] ? trace_lock_acquire+0x14e/0x1f0 [ 255.025890][T11198] compat_do_replace+0x35d/0x500 [ 255.025908][T11198] ? __pfx_compat_do_replace+0x10/0x10 [ 255.025922][T11198] ? aa_get_newest_label+0x376/0x680 [ 255.025939][T11198] ? __pfx_aa_get_newest_label+0x10/0x10 [ 255.025959][T11198] ? bpf_lsm_capable+0x9/0x10 [ 255.025973][T11198] ? security_capable+0x7e/0x260 [ 255.025991][T11198] do_ipt_set_ctl+0x686/0xc10 [ 255.026005][T11198] ? __mutex_lock+0x1cc/0xb10 [ 255.026015][T11198] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 255.026028][T11198] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 255.026044][T11198] ? sockopt_release_sock+0x52/0x60 [ 255.026056][T11198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.026074][T11198] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 255.026093][T11198] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 255.026111][T11198] nf_setsockopt+0x8a/0xf0 [ 255.026126][T11198] ip_setsockopt+0xcb/0xf0 [ 255.026146][T11198] raw_setsockopt+0xb8/0x290 [ 255.026162][T11198] ? __pfx_raw_setsockopt+0x10/0x10 [ 255.026178][T11198] ? sock_common_setsockopt+0x2e/0xf0 [ 255.026192][T11198] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 255.026205][T11198] do_sock_setsockopt+0x222/0x480 [ 255.026218][T11198] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 255.026230][T11198] ? lock_acquire+0x2f/0xb0 [ 255.026248][T11198] __sys_setsockopt+0x1a0/0x230 [ 255.026260][T11198] __ia32_sys_setsockopt+0xbc/0x160 [ 255.026269][T11198] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.026284][T11198] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 255.026300][T11198] __do_fast_syscall_32+0x73/0x120 [ 255.026311][T11198] do_fast_syscall_32+0x32/0x80 [ 255.026320][T11198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.026337][T11198] RIP: 0023:0xf749e579 [ 255.026345][T11198] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 255.026355][T11198] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 255.026365][T11198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 255.026371][T11198] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000278 [ 255.026376][T11198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.026382][T11198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 255.026387][T11198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.026399][T11198] [ 255.026403][T11198] Mem-Info: [ 255.074853][ T6295] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 255.075786][T11198] active_anon:13675 inactive_anon:250 isolated_anon:0 [ 255.075786][T11198] active_file:8742 inactive_file:20500 isolated_file:0 [ 255.075786][T11198] unevictable:1768 dirty:308 writeback:0 [ 255.075786][T11198] slab_reclaimable:6151 slab_unreclaimable:59894 [ 255.075786][T11198] mapped:24742 shmem:9299 pagetables:1435 [ 255.075786][T11198] sec_pagetables:313 bounce:0 [ 255.075786][T11198] kernel_misc_reclaimable:0 [ 255.075786][T11198] free:47104 free_pcp:4287 free_cma:0 [ 255.161482][T11198] Node 0 active_anon:1408kB inactive_anon:100kB active_file:1668kB inactive_file:108kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1648kB dirty:20kB writeback:0kB shmem:3852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9552kB pagetables:1904kB sec_pagetables:1156kB all_unreclaimable? yes [ 255.170498][T11198] Node 1 active_anon:53292kB inactive_anon:900kB active_file:33300kB inactive_file:81892kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97320kB dirty:1212kB writeback:0kB shmem:33344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:3672kB pagetables:3836kB sec_pagetables:96kB all_unreclaimable? no [ 255.181346][T11198] Node 0 DMA free:1756kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:412kB local_pcp:160kB free_cma:0kB [ 255.191542][T11198] lowmem_reserve[]: 0 297 0 0 0 [ 255.192973][T11198] Node 0 DMA32 free:24368kB boost:6144kB min:19816kB low:23232kB high:26648kB reserved_highatomic:4096KB active_anon:1408kB inactive_anon:100kB active_file:1668kB inactive_file:108kB unevictable:3536kB writepending:20kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:3964kB local_pcp:24kB free_cma:0kB [ 255.201474][T11198] lowmem_reserve[]: 0 0 0 0 0 [ 255.202909][T11198] Node 1 DMA32 free:173580kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:53292kB inactive_anon:900kB active_file:33300kB inactive_file:81892kB unevictable:3536kB writepending:1212kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:1168kB local_pcp:172kB free_cma:0kB [ 255.211440][T11198] lowmem_reserve[]: 0 0 0 0 0 [ 255.212830][T11198] Node 0 DMA: 47*4kB (U) 50*8kB (U) 23*16kB (U) 9*32kB (U) 4*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1756kB [ 255.217066][T11198] Node 0 DMA32: 120*4kB (UMEH) 84*8kB (UMEH) 51*16kB (UMEH) 142*32kB (UMEH) 83*64kB (UMEH) 30*128kB (UME) 16*256kB (UMEH) 7*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 24368kB [ 255.222311][T11198] Node 1 DMA32: 763*4kB (UME) 637*8kB (UME) 346*16kB (UME) 342*32kB (UME) 336*64kB (UME) 122*128kB (UME) 40*256kB (UME) 39*512kB (UM) 26*1024kB (UM) 9*2048kB (UM) 9*4096kB (UM) = 173876kB [ 255.227702][T11198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.230328][T11198] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 255.232916][T11198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.234849][ T6295] usb 9-1: Using ep0 maxpacket: 32 [ 255.235673][T11198] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.238631][ T6295] usb 9-1: unable to get BOS descriptor or descriptor too short [ 255.239706][T11198] 38956 total pagecache pages [ 255.239713][T11198] 415 pages in swap cache [ 255.242703][ T6295] usb 9-1: config 255 has an invalid interface number: 81 but max is 0 [ 255.243379][T11198] Free swap = 120424kB [ 255.243387][T11198] Total swap = 124996kB [ 255.243393][T11198] 524155 pages RAM [ 255.243397][T11198] 0 pages HighMem/MovableOnly [ 255.243401][T11198] 206992 pages reserved [ 255.243404][T11198] 0 pages cma reserved [ 255.256059][ T6295] usb 9-1: config 255 has no interface number 0 [ 255.258351][ T6295] usb 9-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 255.262475][ T6295] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 150, changing to 7 [ 255.266907][ T6295] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8859, setting to 1024 [ 255.270947][ T6295] usb 9-1: config 255 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 255.275951][ T6295] usb 9-1: config 255 interface 81 has no altsetting 0 [ 255.281511][ T6295] usb 9-1: string descriptor 0 read error: -22 [ 255.283967][ T6295] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 255.286564][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 255.289874][ T6295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.289958][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.295932][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.299622][ T6295] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:255.81/input/input34 [ 255.567838][ T30] usb 9-1: USB disconnect, device number 32 [ 255.667282][T11216] vivid-007: disconnect [ 255.806112][T11219] vivid-007: reconnect [ 255.895018][ T6295] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 256.045427][ T6295] usb 7-1: Using ep0 maxpacket: 32 [ 256.051874][ T6295] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.055892][ T6295] usb 7-1: config 0 has no interfaces? [ 256.057884][ T6295] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 256.061051][ T6295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.065512][ T6295] usb 7-1: config 0 descriptor?? [ 256.349519][T11228] program syz.4.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.823404][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 256.990829][T11240] 9pnet_fd: Insufficient options for proto=fd [ 257.365361][T11244] program syz.4.1405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.907205][T11250] veth1_vlan: left allmulticast mode [ 257.912878][T11250] ipvlan1: left allmulticast mode [ 257.914866][T11250] veth0_vlan: left allmulticast mode [ 257.943882][T11250] batman_adv: batadv0: Interface deactivated: geneve2 [ 257.946515][T11250] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.949380][T11250] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.952514][T11250] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.955644][T11250] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.959173][T11250] geneve2: left promiscuous mode [ 257.960979][T11250] geneve2: left allmulticast mode [ 257.981015][T11250] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 257.984218][T11250] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 257.988024][T11250] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 257.991237][T11250] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 257.997567][T11250] macvlan0: left allmulticast mode [ 257.999247][T11250] vlan2: left allmulticast mode [ 258.016091][T11275] lo speed is unknown, defaulting to 1000 [ 258.219712][T11290] Invalid option length (1025206) for dns_resolver key [ 258.259575][T11290] lo speed is unknown, defaulting to 1000 [ 258.322062][T11288] program syz.3.1412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.616652][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 258.680619][ T6827] usb 7-1: USB disconnect, device number 30 [ 258.782002][T11306] 9pnet_fd: Insufficient options for proto=fd [ 260.211092][T11344] FAULT_INJECTION: forcing a failure. [ 260.211092][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.215173][T11344] CPU: 2 UID: 0 PID: 11344 Comm: syz.3.1431 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 260.215187][T11344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.215194][T11344] Call Trace: [ 260.215197][T11344] [ 260.215200][T11344] dump_stack_lvl+0x16c/0x1f0 [ 260.215223][T11344] should_fail_ex+0x50a/0x650 [ 260.215239][T11344] _copy_to_user+0x32/0xd0 [ 260.215255][T11344] simple_read_from_buffer+0xd0/0x160 [ 260.215273][T11344] proc_fail_nth_read+0x198/0x270 [ 260.215288][T11344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.215304][T11344] ? rw_verify_area+0xcf/0x680 [ 260.215319][T11344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.215333][T11344] vfs_read+0x1df/0xbf0 [ 260.215343][T11344] ? __fget_files+0x1fc/0x3a0 [ 260.215354][T11344] ? __pfx___mutex_lock+0x10/0x10 [ 260.215370][T11344] ? __pfx_vfs_read+0x10/0x10 [ 260.215383][T11344] ? __fget_files+0x206/0x3a0 [ 260.215397][T11344] ksys_read+0x12b/0x250 [ 260.215406][T11344] ? __pfx_ksys_read+0x10/0x10 [ 260.215419][T11344] __do_fast_syscall_32+0x73/0x120 [ 260.215430][T11344] do_fast_syscall_32+0x32/0x80 [ 260.215439][T11344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.215457][T11344] RIP: 0023:0xf741e579 [ 260.215464][T11344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.215474][T11344] RSP: 002b:00000000f50a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 260.215483][T11344] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50a6620 [ 260.215489][T11344] RDX: 000000000000000f RSI: 00000000f740cff4 RDI: 0000000000000000 [ 260.215495][T11344] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 260.215500][T11344] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 260.215505][T11344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.215517][T11344] [ 260.554889][T10360] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 260.705110][T10360] usb 8-1: Using ep0 maxpacket: 32 [ 260.708280][T10360] usb 8-1: unable to get BOS descriptor or descriptor too short [ 260.711264][T10360] usb 8-1: config 255 has an invalid interface number: 81 but max is 0 [ 260.713645][T10360] usb 8-1: config 255 has no interface number 0 [ 260.715909][T10360] usb 8-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 260.719142][T10360] usb 8-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 150, changing to 7 [ 260.722338][T10360] usb 8-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8859, setting to 1024 [ 260.725926][T10360] usb 8-1: config 255 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.729707][T10360] usb 8-1: config 255 interface 81 has no altsetting 0 [ 260.733820][T10360] usb 8-1: string descriptor 0 read error: -22 [ 260.736212][T10360] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 260.738758][T10360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.746562][T10360] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:255.81/input/input35 [ 261.023916][ T6295] usb 8-1: USB disconnect, device number 33 [ 261.299447][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 261.430083][ T39] audit: type=1326 audit(261.327:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.2.1436" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 261.469482][T11357] 9pnet_fd: Insufficient options for proto=fd [ 262.266321][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 262.357824][T11380] blktrace: Concurrent blktraces are not allowed on nullb0 [ 262.388107][ T5959] Bluetooth: hci2: Malformed LE Event: 0x02 [ 262.409264][T11383] FAULT_INJECTION: forcing a failure. [ 262.409264][T11383] name failslab, interval 1, probability 0, space 0, times 0 [ 262.414060][T11383] CPU: 1 UID: 0 PID: 11383 Comm: syz.4.1444 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 262.414081][T11383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.414090][T11383] Call Trace: [ 262.414095][T11383] [ 262.414102][T11383] dump_stack_lvl+0x16c/0x1f0 [ 262.414133][T11383] should_fail_ex+0x50a/0x650 [ 262.414153][T11383] ? fs_reclaim_acquire+0xae/0x150 [ 262.414178][T11383] ? alloc_pipe_info+0x10e/0x590 [ 262.414194][T11383] should_failslab+0xc2/0x120 [ 262.414213][T11383] __kmalloc_cache_noprof+0x68/0x420 [ 262.414227][T11383] ? trace_lock_acquire+0x14e/0x1f0 [ 262.414247][T11383] alloc_pipe_info+0x10e/0x590 [ 262.414266][T11383] splice_direct_to_actor+0x793/0xa40 [ 262.414292][T11383] ? get_pid_task+0xfc/0x250 [ 262.414306][T11383] ? __pfx_direct_splice_actor+0x10/0x10 [ 262.414329][T11383] ? __pfx_aa_file_perm+0x10/0x10 [ 262.414349][T11383] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 262.414373][T11383] ? __fget_files+0x1fc/0x3a0 [ 262.414391][T11383] do_splice_direct+0x178/0x250 [ 262.414414][T11383] ? __pfx_do_splice_direct+0x10/0x10 [ 262.414436][T11383] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 262.414461][T11383] ? rw_verify_area+0xcf/0x680 [ 262.414485][T11383] do_sendfile+0xafb/0xe40 [ 262.414503][T11383] ? __pfx_do_sendfile+0x10/0x10 [ 262.414516][T11383] ? __fget_files+0x206/0x3a0 [ 262.414537][T11383] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 262.414555][T11383] ? ksys_write+0x1ba/0x250 [ 262.414568][T11383] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 262.414594][T11383] __do_fast_syscall_32+0x73/0x120 [ 262.414610][T11383] do_fast_syscall_32+0x32/0x80 [ 262.414623][T11383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.414648][T11383] RIP: 0023:0xf749e579 [ 262.414660][T11383] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.414675][T11383] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 262.414714][T11383] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 262.414723][T11383] RDX: 0000000000000000 RSI: 0000000000000c92 RDI: 0000000000000000 [ 262.414731][T11383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.414739][T11383] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.414773][T11383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.414793][T11383] [ 263.144872][ T25] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 263.304448][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 263.307338][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 263.316764][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 263.319954][ T25] usb 8-1: config 255 has an invalid interface number: 81 but max is 0 [ 263.322390][ T25] usb 8-1: config 255 has no interface number 0 [ 263.324174][ T25] usb 8-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 263.327874][ T25] usb 8-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 150, changing to 7 [ 263.331702][ T25] usb 8-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8859, setting to 1024 [ 263.335181][ T25] usb 8-1: config 255 interface 81 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.339576][ T25] usb 8-1: config 255 interface 81 has no altsetting 0 [ 263.344320][ T25] usb 8-1: string descriptor 0 read error: -22 [ 263.346317][ T25] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 263.348968][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.355734][ T25] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:255.81/input/input36 [ 263.420008][T11402] 9pnet_fd: Insufficient options for proto=fd [ 263.518161][ T39] audit: type=1326 audit(263.417:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11407 comm="syz.1.1451" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 263.620818][ T25] usb 8-1: USB disconnect, device number 34 [ 263.760890][T11425] blktrace: Concurrent blktraces are not allowed on nullb0 [ 263.771065][ T5959] Bluetooth: hci1: Malformed LE Event: 0x02 [ 263.873640][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 263.990127][T11433] 9pnet_fd: Insufficient options for proto=fd [ 264.132517][T11436] 9pnet_fd: Insufficient options for proto=fd [ 264.501087][T11454] sp0: Synchronizing with TNC [ 264.852579][T11469] blktrace: Concurrent blktraces are not allowed on nullb0 [ 264.912979][ T5959] Bluetooth: hci1: Malformed LE Event: 0x02 [ 264.998705][ T39] audit: type=1326 audit(264.897:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1470" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 265.856864][T11486] program syz.3.1475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.904951][T11492] blktrace: Concurrent blktraces are not allowed on nullb0 [ 265.940851][ T5959] Bluetooth: hci3: Malformed LE Event: 0x02 [ 266.004482][T11495] 9pnet_fd: Insufficient options for proto=fd [ 267.006097][ T6295] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 267.070014][T11509] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 267.134833][ T6295] usb 7-1: device descriptor read/64, error -71 [ 267.182513][T11517] FAULT_INJECTION: forcing a failure. [ 267.182513][T11517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.187453][T11517] CPU: 3 UID: 0 PID: 11517 Comm: syz.3.1486 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 267.187468][T11517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.187475][T11517] Call Trace: [ 267.187499][T11517] [ 267.187503][T11517] dump_stack_lvl+0x16c/0x1f0 [ 267.187756][T11517] should_fail_ex+0x50a/0x650 [ 267.187892][T11517] ? __pfx___might_resched+0x10/0x10 [ 267.187964][T11517] should_fail_alloc_page+0xe7/0x130 [ 267.188033][T11517] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 267.188053][T11517] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 267.188067][T11517] ? stack_trace_save+0x95/0xd0 [ 267.188078][T11517] ? __pfx_stack_trace_save+0x10/0x10 [ 267.188087][T11517] ? stack_depot_save_flags+0x28/0x9e0 [ 267.188102][T11517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.188114][T11517] ? kasan_save_stack+0x42/0x60 [ 267.188125][T11517] ? kasan_save_track+0x14/0x30 [ 267.188135][T11517] ? __kmalloc_noprof+0x21a/0x4f0 [ 267.188145][T11517] ? copy_splice_read+0x1a8/0xb80 [ 267.188162][T11517] ? do_splice_read+0x282/0x370 [ 267.188175][T11517] ? splice_direct_to_actor+0x2a4/0xa40 [ 267.188189][T11517] ? do_splice_direct+0x178/0x250 [ 267.188203][T11517] ? do_sendfile+0xafb/0xe40 [ 267.188212][T11517] ? __ia32_compat_sys_sendfile+0x1e7/0x230 [ 267.188233][T11517] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 267.188248][T11517] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 267.188263][T11517] ? trace_kmalloc+0x2d/0xd0 [ 267.188277][T11517] ? __kmalloc_noprof+0x23b/0x4f0 [ 267.188288][T11517] ? copy_splice_read+0x1a8/0xb80 [ 267.188304][T11517] copy_splice_read+0x1e0/0xb80 [ 267.188319][T11517] ? look_up_lock_class+0x59/0x150 [ 267.188360][T11517] ? __pfx_copy_splice_read+0x10/0x10 [ 267.188376][T11517] ? __pfx_register_lock_class+0x10/0x10 [ 267.188394][T11517] ? __pfx_copy_splice_read+0x10/0x10 [ 267.188409][T11517] do_splice_read+0x282/0x370 [ 267.188425][T11517] splice_direct_to_actor+0x2a4/0xa40 [ 267.188441][T11517] ? __pfx_direct_splice_actor+0x10/0x10 [ 267.188459][T11517] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 267.188475][T11517] ? __fget_files+0x1fc/0x3a0 [ 267.188488][T11517] do_splice_direct+0x178/0x250 [ 267.188503][T11517] ? __pfx_do_splice_direct+0x10/0x10 [ 267.188518][T11517] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 267.188535][T11517] ? rw_verify_area+0xcf/0x680 [ 267.188550][T11517] do_sendfile+0xafb/0xe40 [ 267.188561][T11517] ? __pfx_do_sendfile+0x10/0x10 [ 267.188570][T11517] ? __fget_files+0x206/0x3a0 [ 267.188583][T11517] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 267.188595][T11517] ? ksys_write+0x1ba/0x250 [ 267.188604][T11517] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 267.188621][T11517] __do_fast_syscall_32+0x73/0x120 [ 267.188632][T11517] do_fast_syscall_32+0x32/0x80 [ 267.188641][T11517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.188673][T11517] RIP: 0023:0xf741e579 [ 267.188681][T11517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 267.188690][T11517] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 267.188725][T11517] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 267.188731][T11517] RDX: 0000000000000000 RSI: 0000000000000c92 RDI: 0000000000000000 [ 267.188736][T11517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.188741][T11517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 267.188747][T11517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.188758][T11517] [ 267.387084][ T6295] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 267.483252][T11523] blktrace: Concurrent blktraces are not allowed on nullb0 [ 268.014980][ T6295] usb 7-1: device descriptor read/64, error -71 [ 268.125845][ T6295] usb usb7-port1: attempt power cycle [ 268.321435][T11530] netlink: 'syz.4.1483': attribute type 13 has an invalid length. [ 268.474814][ T6295] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 268.505134][ T6295] usb 7-1: device descriptor read/8, error -71 [ 268.717919][T11533] blktrace: Concurrent blktraces are not allowed on nullb0 [ 268.744934][ T6295] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 268.765892][ T6295] usb 7-1: device descriptor read/8, error -71 [ 268.785460][ T5959] Bluetooth: hci1: Malformed LE Event: 0x02 [ 268.886168][ T6295] usb usb7-port1: unable to enumerate USB device [ 269.122484][T11543] ucma_write: process 1276 (syz.1.1492) changed security contexts after opening file descriptor, this is not allowed. [ 269.716693][T11551] 9pnet_fd: Insufficient options for proto=fd [ 269.750382][ T39] audit: type=1326 audit(269.647:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.4.1497" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 269.820493][T11556] program syz.3.1498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.679161][T11574] blktrace: Concurrent blktraces are not allowed on nullb0 [ 270.698136][ T5959] Bluetooth: hci1: Malformed LE Event: 0x02 [ 270.845408][T11583] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 271.135390][ T35] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 271.265229][ T35] usb 8-1: device descriptor read/64, error -71 [ 271.505592][ T35] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 271.635175][ T35] usb 8-1: device descriptor read/64, error -71 [ 271.702495][T11595] macvlan0: entered allmulticast mode [ 271.704154][T11595] bridge0: entered allmulticast mode [ 271.707868][T11595] macvlan0: left allmulticast mode [ 271.709525][T11595] bridge0: left allmulticast mode [ 271.745654][ T35] usb usb8-port1: attempt power cycle [ 271.852729][ T39] audit: type=1326 audit(271.747:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11599 comm="syz.4.1511" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 271.908152][T11597] program syz.2.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.085200][ T35] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 272.106982][ T35] usb 8-1: device descriptor read/8, error -71 [ 272.336784][T11545] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 272.345223][ T35] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 272.366042][ T35] usb 8-1: device descriptor read/8, error -71 [ 272.477461][ T35] usb usb8-port1: unable to enumerate USB device [ 272.972377][T11619] blktrace: Concurrent blktraces are not allowed on nullb0 [ 273.920210][ T39] audit: type=1326 audit(273.817:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.4.1521" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 274.095048][T11642] program syz.3.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.109858][T11644] program syz.2.1523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.176948][T11671] blktrace: Concurrent blktraces are not allowed on nullb0 [ 275.815808][ T6295] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 275.955326][ T6295] usb 8-1: device descriptor read/64, error -71 [ 276.097024][ T39] audit: type=1326 audit(275.997:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11695 comm="syz.2.1535" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 276.312390][ T6295] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 276.444816][ T6295] usb 8-1: device descriptor read/64, error -71 [ 276.555046][ T6295] usb usb8-port1: attempt power cycle [ 276.914991][ T6295] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 276.948752][ T6295] usb 8-1: device descriptor read/8, error -71 [ 277.194905][ T6295] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 277.215806][ T6295] usb 8-1: device descriptor read/8, error -71 [ 277.234887][ T1993] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 277.325352][ T6295] usb usb8-port1: unable to enumerate USB device [ 277.386494][ T1993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.390456][ T1993] usb 7-1: config 0 has no interfaces? [ 277.393641][ T1993] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 277.396945][ T1993] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 277.399635][ T1993] usb 7-1: Manufacturer: syz [ 277.404499][ T1993] usb 7-1: config 0 descriptor?? [ 277.462595][T11724] blktrace: Concurrent blktraces are not allowed on nullb0 [ 277.550849][T11727] 9pnet_virtio: no channels available for device syz [ 278.377407][T11748] x_tables: duplicate underflow at hook 2 [ 279.034433][T11804] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 279.037928][ T39] audit: type=1326 audit(278.937:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.045992][ T39] audit: type=1326 audit(278.937:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.053473][ T39] audit: type=1326 audit(278.937:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.059625][ T39] audit: type=1326 audit(278.937:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.067791][ T39] audit: type=1326 audit(278.937:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.076718][ T39] audit: type=1326 audit(278.937:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.082521][ T39] audit: type=1326 audit(278.937:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.088506][ T39] audit: type=1326 audit(278.937:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.088527][ T39] audit: type=1326 audit(278.937:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 279.775169][ T35] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 279.926455][ T35] usb 9-1: config 0 has no interfaces? [ 279.928027][ T35] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 279.930526][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.935296][ T35] usb 9-1: config 0 descriptor?? [ 279.959615][ T30] usb 7-1: USB disconnect, device number 35 [ 280.145399][T11816] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1569'. [ 280.196965][ T35] usb 9-1: USB disconnect, device number 33 [ 280.563026][T11832] FAULT_INJECTION: forcing a failure. [ 280.563026][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 280.567468][T11832] CPU: 3 UID: 0 PID: 11832 Comm: syz.4.1573 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 280.567482][T11832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.567489][T11832] Call Trace: [ 280.567492][T11832] [ 280.567496][T11832] dump_stack_lvl+0x16c/0x1f0 [ 280.567518][T11832] should_fail_ex+0x50a/0x650 [ 280.567533][T11832] ? fs_reclaim_acquire+0xae/0x150 [ 280.567551][T11832] should_failslab+0xc2/0x120 [ 280.567565][T11832] __kmalloc_noprof+0xce/0x4f0 [ 280.567576][T11832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 280.567590][T11832] ? tomoyo_realpath_from_path+0xbf/0x710 [ 280.567628][T11832] tomoyo_realpath_from_path+0xbf/0x710 [ 280.567642][T11832] ? tomoyo_path_number_perm+0x235/0x5b0 [ 280.567658][T11832] tomoyo_path_number_perm+0x248/0x5b0 [ 280.567668][T11832] ? tomoyo_path_number_perm+0x235/0x5b0 [ 280.567679][T11832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.567701][T11832] ? __pfx_lock_release+0x10/0x10 [ 280.567712][T11832] ? trace_lock_acquire+0x14e/0x1f0 [ 280.567722][T11832] ? lock_acquire+0x2f/0xb0 [ 280.567733][T11832] ? __fget_files+0x40/0x3a0 [ 280.567746][T11832] ? __fget_files+0x206/0x3a0 [ 280.567758][T11832] security_file_ioctl_compat+0x9b/0x240 [ 280.567773][T11832] __do_compat_sys_ioctl+0x4e/0x2c0 [ 280.567789][T11832] __do_fast_syscall_32+0x73/0x120 [ 280.567800][T11832] do_fast_syscall_32+0x32/0x80 [ 280.567809][T11832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.567826][T11832] RIP: 0023:0xf749e579 [ 280.567834][T11832] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.567843][T11832] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 280.567852][T11832] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048aecb [ 280.567858][T11832] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.567863][T11832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.567869][T11832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 280.567874][T11832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.567885][T11832] [ 280.567890][T11832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.965349][ T66] Bluetooth: hci1: command 0x0419 tx timeout [ 281.294329][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1577'. [ 281.350044][T11844] lo speed is unknown, defaulting to 1000 [ 281.382163][T11844] geneve2: entered promiscuous mode [ 281.383727][T11844] geneve2: entered allmulticast mode [ 281.574902][ T1993] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 281.665257][ T30] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 281.746362][ T1993] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.749369][ T1993] usb 8-1: config 0 has no interfaces? [ 281.751709][ T1993] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 281.754209][ T1993] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 281.757360][ T1993] usb 8-1: Manufacturer: syz [ 281.759842][ T1993] usb 8-1: config 0 descriptor?? [ 281.876075][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.880071][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.883007][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.885796][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.896158][T11853] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 281.909845][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.770842][T11868] program syz.4.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.668268][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 284.295700][ T1993] usb 8-1: USB disconnect, device number 43 [ 284.442073][ T30] usb 7-1: USB disconnect, device number 36 [ 284.540654][T11904] blktrace: Concurrent blktraces are not allowed on nullb0 [ 284.615514][T11902] hub 6-0:1.0: USB hub found [ 284.618606][T11902] hub 6-0:1.0: 1 port detected [ 285.317514][T11910] FAULT_INJECTION: forcing a failure. [ 285.317514][T11910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.323341][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.1.1592 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 285.323363][T11910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.323372][T11910] Call Trace: [ 285.323377][T11910] [ 285.323384][T11910] dump_stack_lvl+0x16c/0x1f0 [ 285.323415][T11910] should_fail_ex+0x50a/0x650 [ 285.323433][T11910] _copy_to_user+0x32/0xd0 [ 285.323450][T11910] simple_read_from_buffer+0xd0/0x160 [ 285.323468][T11910] proc_fail_nth_read+0x198/0x270 [ 285.323484][T11910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.323499][T11910] ? rw_verify_area+0xcf/0x680 [ 285.323514][T11910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.323528][T11910] vfs_read+0x1df/0xbf0 [ 285.323538][T11910] ? __fget_files+0x1fc/0x3a0 [ 285.323548][T11910] ? __pfx___mutex_lock+0x10/0x10 [ 285.323565][T11910] ? __pfx_vfs_read+0x10/0x10 [ 285.323578][T11910] ? __fget_files+0x206/0x3a0 [ 285.323593][T11910] ksys_read+0x12b/0x250 [ 285.323602][T11910] ? __pfx_ksys_read+0x10/0x10 [ 285.323616][T11910] __do_fast_syscall_32+0x73/0x120 [ 285.323626][T11910] do_fast_syscall_32+0x32/0x80 [ 285.323636][T11910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.323653][T11910] RIP: 0023:0xf7fef579 [ 285.323661][T11910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.323670][T11910] RSP: 002b:00000000f5116590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 285.323681][T11910] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5116620 [ 285.323687][T11910] RDX: 000000000000000f RSI: 00000000f747cff4 RDI: 0000000000000000 [ 285.323692][T11910] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 285.323698][T11910] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 285.323703][T11910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.323714][T11910] [ 285.715521][ T6827] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 285.734852][ T6295] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 285.774965][ T30] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 285.864808][ T6827] usb 8-1: Using ep0 maxpacket: 32 [ 285.868384][ T6827] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.871341][ T6827] usb 8-1: config 0 has no interfaces? [ 285.873098][ T6827] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 285.878076][ T6827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.911730][ T6827] usb 8-1: config 0 descriptor?? [ 285.931982][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 285.938283][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 285.943580][ T30] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 285.947428][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.949890][ T30] usb 7-1: Product: syz [ 285.951398][ T30] usb 7-1: Manufacturer: syz [ 285.953010][ T30] usb 7-1: SerialNumber: syz [ 285.961793][ T30] usb 7-1: config 0 descriptor?? [ 285.967186][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 285.969115][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 285.977375][ T30] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input38 [ 286.086829][ T6295] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.089804][ T6295] usb 9-1: config 0 has no interfaces? [ 286.092290][ T6295] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 286.095067][ T6295] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 286.097377][ T6295] usb 9-1: Manufacturer: syz [ 286.100332][ T6295] usb 9-1: config 0 descriptor?? [ 286.245988][T11912] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 286.275074][ T30] usb 7-1: USB disconnect, device number 37 [ 286.590838][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 286.593647][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 286.613377][T11935] vlan0: entered promiscuous mode [ 286.620604][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 286.731079][T11935] team0 (unregistering): left allmulticast mode [ 286.732880][T11935] team0 (unregistering): left promiscuous mode [ 286.734770][T11935] bridge0: port 1(team0) entered disabled state [ 286.999033][T11940] blktrace: Concurrent blktraces are not allowed on nullb0 [ 287.931279][T11950] lo speed is unknown, defaulting to 1000 [ 288.018138][T11952] program syz.2.1605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.249493][T11964] sp0: Synchronizing with TNC [ 288.351281][T10360] usb 8-1: USB disconnect, device number 44 [ 288.466096][ T57] usb 9-1: USB disconnect, device number 34 [ 288.468613][T11970] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1608'. [ 288.605848][ T6295] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.795349][ T6295] usb 6-1: Using ep0 maxpacket: 32 [ 288.813338][ T6295] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 288.816692][ T6295] usb 6-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 288.819463][ T6295] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 288.822813][T11983] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1613'. [ 288.824847][ T6295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.851960][T11977] can0: slcan on ttyS3. [ 289.385201][T10360] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 289.397229][T11968] can0 (unregistered): slcan off ttyS3. [ 289.456167][T11968] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 289.536462][T10360] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.539638][T10360] usb 7-1: config 0 has no interfaces? [ 289.542369][T10360] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 289.545734][T10360] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 289.548119][T10360] usb 7-1: Manufacturer: syz [ 289.551247][T10360] usb 7-1: config 0 descriptor?? [ 290.785862][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 291.175422][T10360] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 291.325134][T10360] usb 8-1: Using ep0 maxpacket: 8 [ 291.328098][T10360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.331200][T10360] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.333759][T10360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.338812][T10360] usb 8-1: config 0 descriptor?? [ 291.364939][ T6827] usb 6-1: USB disconnect, device number 14 [ 291.545787][T10360] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 291.669762][T12035] program syz.1.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.959668][ T30] usb 8-1: USB disconnect, device number 45 [ 292.114160][ T833] usb 7-1: USB disconnect, device number 38 [ 292.164096][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 292.421010][T12071] Invalid ELF header magic: != ELF [ 292.784860][ T57] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 292.877135][ T6827] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 292.976470][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.979313][ T57] usb 8-1: config 0 has no interfaces? [ 292.985903][ T57] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 292.988475][ T57] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 292.990715][ T57] usb 8-1: Manufacturer: syz [ 293.003330][ T57] usb 8-1: config 0 descriptor?? [ 293.039651][ T6827] usb 6-1: config 1 interface 0 has no altsetting 0 [ 293.044385][ T6827] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.048936][ T6827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.052280][ T6827] usb 6-1: Product: syz [ 293.054186][ T6827] usb 6-1: Manufacturer: syz [ 293.057165][ T6827] usb 6-1: SerialNumber: syz [ 293.278297][T12076] wireguard0: entered promiscuous mode [ 293.280233][T12076] wireguard0: entered allmulticast mode [ 293.331995][T12083] program syz.4.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.541797][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 294.022174][T12109] blktrace: Concurrent blktraces are not allowed on nullb0 [ 294.043493][ T66] Bluetooth: hci2: Malformed LE Event: 0x02 [ 295.109550][T12128] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1654'. [ 295.508663][T10360] usb 8-1: USB disconnect, device number 46 [ 295.607960][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 295.741868][ T6827] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 295.754639][ T6827] usb 6-1: USB disconnect, device number 15 [ 295.772390][ T6827] usblp0: removed [ 296.035643][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 296.035655][ T39] audit: type=1326 audit(295.927:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.037785][T12147] cgroup: Need name or subsystem set [ 296.039969][ T39] audit: type=1326 audit(295.937:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.057870][ T39] audit: type=1326 audit(295.937:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.069154][ T39] audit: type=1326 audit(295.937:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.075465][ T39] audit: type=1326 audit(295.937:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.080181][T12148] blktrace: Concurrent blktraces are not allowed on nullb0 [ 296.081312][ T39] audit: type=1326 audit(295.937:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.095790][ T39] audit: type=1326 audit(295.937:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.108576][ T39] audit: type=1326 audit(295.937:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.114529][ T39] audit: type=1326 audit(295.937:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.125745][ T39] audit: type=1326 audit(295.937:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.1.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7fc00000 [ 296.148289][ T66] Bluetooth: hci2: Malformed LE Event: 0x02 [ 297.334928][ T57] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 297.443376][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 297.506941][ T57] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.510916][ T57] usb 9-1: config 0 has no interfaces? [ 297.514094][ T57] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 297.518316][ T57] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 297.521513][ T57] usb 9-1: Manufacturer: syz [ 297.527316][ T57] usb 9-1: config 0 descriptor?? [ 298.394145][T12197] blktrace: Concurrent blktraces are not allowed on nullb0 [ 298.507813][T12207] lo speed is unknown, defaulting to 1000 [ 298.838290][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 299.244824][ T1993] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 299.418456][ T1993] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.421670][ T1993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.424149][ T1993] usb 7-1: Product: syz [ 299.425441][ T1993] usb 7-1: Manufacturer: syz [ 299.426838][ T1993] usb 7-1: SerialNumber: syz [ 299.431887][ T1993] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 299.497394][ T1993] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.594894][ T57] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 299.775178][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 299.778353][ T57] usb 8-1: config 135 has an invalid interface number: 230 but max is 0 [ 299.780841][ T57] usb 8-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 299.783803][ T57] usb 8-1: config 135 has no interface number 0 [ 299.785641][ T57] usb 8-1: config 135 interface 230 has no altsetting 0 [ 299.789667][ T57] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 299.792307][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.794571][ T57] usb 8-1: Product: syz [ 299.795831][ T57] usb 8-1: Manufacturer: syz [ 299.797186][ T57] usb 8-1: SerialNumber: syz [ 300.060715][ T35] usb 9-1: USB disconnect, device number 35 [ 300.544871][ T833] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 300.574828][ T1993] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 300.577361][ T1993] ath9k_htc: Failed to initialize the device [ 300.596481][ T1993] usb 7-1: ath9k_htc: USB layer deinitialized [ 300.606703][ T57] usb 7-1: USB disconnect, device number 39 [ 300.714976][ T833] usb 6-1: Using ep0 maxpacket: 32 [ 300.720589][ T833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.726280][ T833] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 300.728981][ T833] usb 6-1: config 255 has no interface number 0 [ 300.731223][ T833] usb 6-1: config 255 interface 81 has no altsetting 0 [ 300.739903][ T833] usb 6-1: string descriptor 0 read error: -22 [ 300.742334][ T833] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 300.745448][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.017854][T10360] usb 6-1: USB disconnect, device number 16 [ 301.085162][T12246] blktrace: Concurrent blktraces are not allowed on nullb0 [ 301.755857][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 302.024955][ T30] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 302.122500][T12265] blktrace: Concurrent blktraces are not allowed on nullb0 [ 302.134821][ T66] Bluetooth: hci1: Malformed LE Event: 0x02 [ 302.195174][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 302.199242][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 302.203534][ T30] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 302.205933][ T30] usb 6-1: config 255 has no interface number 0 [ 302.207722][ T30] usb 6-1: config 255 interface 81 has no altsetting 0 [ 302.213899][ T30] usb 6-1: string descriptor 0 read error: -22 [ 302.215861][ T30] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 302.218467][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.303008][T12270] overlay: Unknown parameter 'uid<00000000000000000000' [ 302.501036][ T57] usb 6-1: USB disconnect, device number 17 [ 302.680032][ T30] usb 8-1: USB disconnect, device number 47 [ 302.829588][T12273] lo speed is unknown, defaulting to 1000 [ 303.534666][T12285] blktrace: Concurrent blktraces are not allowed on nullb0 [ 303.560373][ T66] Bluetooth: hci3: Malformed LE Event: 0x02 [ 303.847476][ T30] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 303.900376][T12301] sctp: [Deprecated]: syz.4.1696 (pid 12301) Use of int in maxseg socket option. [ 303.900376][T12301] Use struct sctp_assoc_value instead [ 303.911198][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 303.994911][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 304.002199][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 304.009413][ T30] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 304.012157][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.014510][ T30] usb 7-1: Product: syz [ 304.015858][ T30] usb 7-1: Manufacturer: syz [ 304.017526][ T30] usb 7-1: SerialNumber: syz [ 304.020263][ T30] usb 7-1: config 0 descriptor?? [ 304.027406][ T30] hub 7-1:0.0: bad descriptor, ignoring hub [ 304.030121][ T30] hub 7-1:0.0: probe with driver hub failed with error -5 [ 304.036579][ T30] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input39 [ 304.255204][ T30] usb 7-1: USB disconnect, device number 40 [ 304.285941][T12275] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 304.817778][T12311] sctp: [Deprecated]: syz.4.1698 (pid 12311) Use of int in maxseg socket option. [ 304.817778][T12311] Use struct sctp_assoc_value instead [ 304.823204][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 305.174572][ T30] libceph: connect (1)[c::]:6789 error -101 [ 305.178282][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 305.250238][T12320] ceph: No mds server is up or the cluster is laggy [ 305.566725][T12343] sctp: [Deprecated]: syz.2.1706 (pid 12343) Use of int in maxseg socket option. [ 305.566725][T12343] Use struct sctp_assoc_value instead [ 305.576345][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 306.193335][T12364] lo speed is unknown, defaulting to 1000 [ 306.344583][T12367] lo speed is unknown, defaulting to 1000 [ 306.434915][ T1993] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 306.517340][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 306.520019][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 306.523273][T12374] bond0: left promiscuous mode [ 306.524747][T12374] bond0: left allmulticast mode [ 306.606443][ T1993] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.609253][ T1993] usb 9-1: config 0 has no interfaces? [ 306.611592][ T1993] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.614001][ T1993] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.616244][ T1993] usb 9-1: Manufacturer: syz [ 306.619356][ T1993] usb 9-1: config 0 descriptor?? [ 307.038986][T12385] netlink: 'syz.1.1720': attribute type 3 has an invalid length. [ 307.271921][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1726'. [ 307.277781][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 307.281944][T12405] fuse: Unknown parameter 'ft[‡Ã°ôæ!¸›tY™dR0x0000000000000003' [ 307.435187][ T35] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 307.586944][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.592747][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.595923][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.598485][ T35] usb 7-1: Product: syz [ 307.599674][ T35] usb 7-1: Manufacturer: syz [ 307.601096][ T35] usb 7-1: SerialNumber: syz [ 307.820388][ T35] usb 7-1: USB disconnect, device number 41 [ 307.883398][ T1993] usb 9-1: USB disconnect, device number 36 [ 308.518038][ T39] kauditd_printk_skb: 649 callbacks suppressed [ 308.518048][ T39] audit: type=1326 audit(308.417:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.2.1732" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 309.517342][T12465] blktrace: Concurrent blktraces are not allowed on nullb0 [ 309.589996][ T66] Bluetooth: hci3: Malformed LE Event: 0x02 [ 310.460165][ T39] audit: type=1326 audit(310.357:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12488 comm="syz.2.1750" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 310.491820][T12485] program syz.1.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.799046][T12500] fuse: Bad value for 'fd' [ 310.803196][T12500] 9pnet_fd: Insufficient options for proto=fd [ 311.795004][ T57] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 311.955364][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 311.958821][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 311.963293][ T57] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 311.965921][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.968571][ T57] usb 8-1: Product: syz [ 311.970156][ T57] usb 8-1: Manufacturer: syz [ 311.971923][ T57] usb 8-1: SerialNumber: syz [ 311.975411][ T57] usb 8-1: config 0 descriptor?? [ 311.978405][ T57] hub 8-1:0.0: bad descriptor, ignoring hub [ 311.980193][ T57] hub 8-1:0.0: probe with driver hub failed with error -5 [ 311.983189][ T57] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input40 [ 312.366319][T12512] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 312.434973][ T30] usb 8-1: USB disconnect, device number 48 [ 312.604988][ T57] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 312.776237][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.779083][ T57] usb 7-1: config 0 has no interfaces? [ 312.781557][ T57] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 312.784077][ T57] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 312.786554][ T57] usb 7-1: Manufacturer: syz [ 312.788786][ T57] usb 7-1: config 0 descriptor?? [ 312.862855][T12552] blktrace: Concurrent blktraces are not allowed on nullb0 [ 312.879720][ T66] Bluetooth: hci3: Malformed LE Event: 0x02 [ 312.913859][T12549] program syz.4.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.937796][T12575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.941183][T12575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.320990][ T30] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 314.383986][T12590] FAULT_INJECTION: forcing a failure. [ 314.383986][T12590] name failslab, interval 1, probability 0, space 0, times 0 [ 314.387681][T12590] CPU: 2 UID: 0 PID: 12590 Comm: syz.3.1779 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 314.387695][T12590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.387702][T12590] Call Trace: [ 314.387723][T12590] [ 314.387728][T12590] dump_stack_lvl+0x16c/0x1f0 [ 314.387997][T12590] should_fail_ex+0x50a/0x650 [ 314.388121][T12590] ? fs_reclaim_acquire+0xae/0x150 [ 314.388185][T12590] should_failslab+0xc2/0x120 [ 314.388210][T12590] __kmalloc_noprof+0xce/0x4f0 [ 314.388222][T12590] ? tomoyo_encode2+0x100/0x3e0 [ 314.388278][T12590] tomoyo_encode2+0x100/0x3e0 [ 314.388291][T12590] tomoyo_realpath_from_path+0x1a7/0x710 [ 314.388304][T12590] ? tomoyo_path_number_perm+0x235/0x5b0 [ 314.388316][T12590] tomoyo_path_number_perm+0x248/0x5b0 [ 314.388326][T12590] ? tomoyo_path_number_perm+0x235/0x5b0 [ 314.388337][T12590] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.388359][T12590] ? __pfx_lock_release+0x10/0x10 [ 314.388400][T12590] ? trace_lock_acquire+0x14e/0x1f0 [ 314.388411][T12590] ? lock_acquire+0x2f/0xb0 [ 314.388422][T12590] ? __fget_files+0x40/0x3a0 [ 314.388435][T12590] ? __fget_files+0x206/0x3a0 [ 314.388447][T12590] security_file_ioctl_compat+0x9b/0x240 [ 314.388462][T12590] __do_compat_sys_ioctl+0x4e/0x2c0 [ 314.388479][T12590] __do_fast_syscall_32+0x73/0x120 [ 314.388490][T12590] do_fast_syscall_32+0x32/0x80 [ 314.388500][T12590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.388529][T12590] RIP: 0023:0xf741e579 [ 314.388537][T12590] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.388546][T12590] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 314.388578][T12590] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048aecb [ 314.388584][T12590] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.388589][T12590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.388594][T12590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 314.388600][T12590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.388611][T12590] [ 314.388623][T12590] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.484813][ T30] usb 9-1: Using ep0 maxpacket: 16 [ 314.488852][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 314.494608][ T30] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 314.498510][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.501570][ T30] usb 9-1: Product: syz [ 314.503638][ T30] usb 9-1: Manufacturer: syz [ 314.505839][ T30] usb 9-1: SerialNumber: syz [ 314.523219][ T30] usb 9-1: config 0 descriptor?? [ 314.529238][ T30] hub 9-1:0.0: bad descriptor, ignoring hub [ 314.531682][ T30] hub 9-1:0.0: probe with driver hub failed with error -5 [ 314.538460][ T30] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input41 [ 314.677332][T12594] program syz.3.1781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.699565][ T39] audit: type=1326 audit(314.597:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.1.1783" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 314.826491][T12572] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 314.886501][ T30] usb 9-1: USB disconnect, device number 37 [ 315.355178][ T57] usb 7-1: USB disconnect, device number 42 [ 315.577777][T12616] lo speed is unknown, defaulting to 1000 [ 316.732138][T12640] program syz.3.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.736979][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.739161][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.806164][T12671] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 317.839424][T12673] lo speed is unknown, defaulting to 1000 [ 317.855090][T12671] CIFS mount error: No usable UNC path provided in device string! [ 317.855090][T12671] [ 317.858139][T12671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 318.399453][T12691] program syz.1.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.635174][T12704] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 318.712416][T12711] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1811'. [ 318.717481][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 319.015001][ T1993] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 319.112441][T12731] blktrace: Concurrent blktraces are not allowed on nullb0 [ 319.128137][ T66] Bluetooth: hci1: Malformed LE Event: 0x02 [ 319.174816][ T1993] usb 7-1: Using ep0 maxpacket: 32 [ 319.177732][ T1993] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 319.180573][ T1993] usb 7-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 319.184160][ T1993] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 319.187305][ T1993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.196825][ T1993] usbhid 7-1:32.0: couldn't find an input interrupt endpoint [ 320.170179][T12760] can0: slcan on ttyS3. [ 320.185373][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1823'. [ 320.884394][T12777] sctp: [Deprecated]: syz.3.1829 (pid 12777) Use of int in maxseg socket option. [ 320.884394][T12777] Use struct sctp_assoc_value instead [ 320.894419][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 321.075745][T12750] can0 (unregistered): slcan off ttyS3. [ 321.252238][T12785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1830'. [ 321.259154][T12785] loop9: detected capacity change from 0 to 8 [ 321.266598][T12785] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 321.268431][T12785] loop9: partition table partially beyond EOD, truncated [ 321.271896][T12785] loop9: p1 size 81768186 extends beyond EOD, truncated [ 321.288776][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 321.417389][T12788] program syz.1.1831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.755211][ T57] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 321.787913][ T30] usb 7-1: USB disconnect, device number 43 [ 321.927521][ T57] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.931015][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 321.934060][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 321.937201][ T57] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.940843][ T57] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.944311][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.948152][ T57] usb 9-1: config 0 descriptor?? [ 322.128345][T12807] sctp: [Deprecated]: syz.2.1834 (pid 12807) Use of int in maxseg socket option. [ 322.128345][T12807] Use struct sctp_assoc_value instead [ 322.137515][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 322.617661][ T57] usbhid 9-1:0.0: can't add hid device: -71 [ 322.619433][ T57] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 322.634923][ T57] usb 9-1: USB disconnect, device number 38 [ 322.697573][ T39] audit: type=1326 audit(322.597:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1838" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 322.964881][ T30] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 323.151531][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 323.156198][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.159156][ T30] usb 7-1: config 0 has no interfaces? [ 323.160827][ T30] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 323.163655][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.167151][ T30] usb 7-1: config 0 descriptor?? [ 323.207046][T12827] sctp: [Deprecated]: syz.4.1841 (pid 12827) Use of int in maxseg socket option. [ 323.207046][T12827] Use struct sctp_assoc_value instead [ 323.213755][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 323.804778][ T57] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 323.886117][ T30] usb 7-1: USB disconnect, device number 44 [ 323.964768][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 323.971925][ T57] usb 8-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 323.979848][ T57] usb 8-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 323.995731][ T57] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 324.002728][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.008813][ T57] usbhid 8-1:32.0: couldn't find an input interrupt endpoint [ 324.170784][T12840] lo speed is unknown, defaulting to 1000 [ 324.221226][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 324.446652][T12843] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1845'. [ 324.506551][ T8] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 324.678264][ T8] usb 9-1: config index 0 descriptor too short (expected 35364, got 36) [ 324.682437][ T8] usb 9-1: config 154 has an invalid descriptor of length 43, skipping remainder of the config [ 324.687138][ T8] usb 9-1: config 154 has 0 interfaces, different from the descriptor's value: 31 [ 324.694883][ T8] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 324.697629][ T8] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 324.700182][ T8] usb 9-1: Manufacturer: syz [ 324.804844][ T5959] Bluetooth: hci1: command 0x0419 tx timeout [ 324.920330][ T8] usb 9-1: USB disconnect, device number 39 [ 325.632179][T12855] blktrace: Concurrent blktraces are not allowed on nullb0 [ 325.900779][ T39] audit: type=1326 audit(325.797:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.2.1850" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 326.406919][T12870] sctp: [Deprecated]: syz.4.1852 (pid 12870) Use of int in maxseg socket option. [ 326.406919][T12870] Use struct sctp_assoc_value instead [ 326.418999][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1852'. [ 326.576787][ T30] usb 8-1: USB disconnect, device number 49 [ 327.266168][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 327.269398][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 327.272603][T12897] netlink: 'syz.2.1859': attribute type 13 has an invalid length. [ 327.275842][T12897] netlink: 'syz.2.1859': attribute type 12 has an invalid length. [ 327.864929][ T8] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 328.033852][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 328.042806][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 328.058483][ T8] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 328.064321][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.067622][ T8] usb 7-1: Product: syz [ 328.069560][ T8] usb 7-1: Manufacturer: syz [ 328.071597][ T8] usb 7-1: SerialNumber: syz [ 328.091327][ T8] usb 7-1: config 0 descriptor?? [ 328.095459][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 328.097232][ T8] hub 7-1:0.0: probe with driver hub failed with error -5 [ 328.105931][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input43 [ 328.241696][T12939] sctp: [Deprecated]: syz.1.1868 (pid 12939) Use of int in maxseg socket option. [ 328.241696][T12939] Use struct sctp_assoc_value instead [ 328.249211][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1868'. [ 328.325460][ T35] usb 7-1: USB disconnect, device number 45 [ 328.355888][T12910] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 328.536119][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.013492][T12949] block device autoloading is deprecated and will be removed. [ 329.037267][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 329.057356][T12960] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1875'. [ 329.060876][T12960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.249771][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 329.444164][T12974] lo speed is unknown, defaulting to 1000 [ 329.907926][ T1135] Bluetooth: Error in BCSP hdr checksum [ 329.989729][T12985] sctp: [Deprecated]: syz.3.1880 (pid 12985) Use of int in maxseg socket option. [ 329.989729][T12985] Use struct sctp_assoc_value instead [ 329.997054][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 330.123087][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 330.171620][ T39] audit: type=1326 audit(330.067:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12994 comm="syz.2.1884" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 331.255423][T10360] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 331.405163][T10360] usb 7-1: Using ep0 maxpacket: 32 [ 331.469637][T10360] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.476110][T10360] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 331.478356][T10360] usb 7-1: can't read configurations, error -71 [ 331.685422][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 331.688483][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.893918][T13020] lo speed is unknown, defaulting to 1000 [ 332.254374][T13031] sctp: [Deprecated]: syz.2.1896 (pid 13031) Use of int in maxseg socket option. [ 332.254374][T13031] Use struct sctp_assoc_value instead [ 332.259905][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 332.762466][ T39] audit: type=1326 audit(332.657:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.4.1897" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 333.524992][ T8] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 333.675197][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 333.679557][ T8] usb 7-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 333.683548][ T8] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 333.686507][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.691152][ T66] Bluetooth: hci1: Malformed LE Event: 0x02 [ 333.696314][ T8] usbhid 7-1:32.0: couldn't find an input interrupt endpoint [ 333.780611][T13060] lo speed is unknown, defaulting to 1000 [ 333.885276][ T35] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 334.035111][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 334.099107][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 334.101894][ T35] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 334.104160][ T35] usb 8-1: can't read configurations, error -71 [ 334.625742][T13070] netlink: 'syz.1.1908': attribute type 58 has an invalid length. [ 334.629251][T13071] netlink: 'syz.1.1908': attribute type 58 has an invalid length. [ 334.632297][T13071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'. [ 334.632584][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'. [ 334.760623][ T39] audit: type=1326 audit(334.657:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.1911" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 334.774863][T13077] sctp: [Deprecated]: syz.4.1907 (pid 13077) Use of int in maxseg socket option. [ 334.774863][T13077] Use struct sctp_assoc_value instead [ 334.780316][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 336.017084][T13102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1916'. [ 336.190361][T13105] lo speed is unknown, defaulting to 1000 [ 336.272625][T13107] can0: slcan on ttyS3. [ 336.307662][ T56] usb 7-1: USB disconnect, device number 48 [ 336.693312][T13123] sctp: [Deprecated]: syz.2.1922 (pid 13123) Use of int in maxseg socket option. [ 336.693312][T13123] Use struct sctp_assoc_value instead [ 336.700216][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 336.875753][T13101] can0 (unregistered): slcan off ttyS3. [ 336.976147][T13101] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 337.422514][T13134] fuse: Bad value for 'user_id' [ 337.423987][T13134] fuse: Bad value for 'user_id' [ 338.492644][T13172] siw: device registration error -23 [ 338.679901][T13172] lo speed is unknown, defaulting to 1000 [ 339.009473][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 339.047540][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 339.065275][T13173] sctp: [Deprecated]: syz.4.1935 (pid 13173) Use of int in maxseg socket option. [ 339.065275][T13173] Use struct sctp_assoc_value instead [ 339.071806][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'. [ 339.429661][T13191] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1940'. [ 340.338959][T13205] FAULT_INJECTION: forcing a failure. [ 340.338959][T13205] name failslab, interval 1, probability 0, space 0, times 0 [ 340.342494][T13205] CPU: 2 UID: 0 PID: 13205 Comm: syz.4.1945 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 340.342507][T13205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 340.342514][T13205] Call Trace: [ 340.342539][T13205] [ 340.342543][T13205] dump_stack_lvl+0x16c/0x1f0 [ 340.342585][T13205] should_fail_ex+0x50a/0x650 [ 340.342618][T13205] ? fs_reclaim_acquire+0xae/0x150 [ 340.342637][T13205] should_failslab+0xc2/0x120 [ 340.342651][T13205] __kmalloc_noprof+0xce/0x4f0 [ 340.342663][T13205] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 340.342678][T13205] ? tomoyo_realpath_from_path+0xbf/0x710 [ 340.342711][T13205] tomoyo_realpath_from_path+0xbf/0x710 [ 340.342725][T13205] ? tomoyo_path_number_perm+0x235/0x5b0 [ 340.342736][T13205] tomoyo_path_number_perm+0x248/0x5b0 [ 340.342746][T13205] ? tomoyo_path_number_perm+0x235/0x5b0 [ 340.342757][T13205] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.342779][T13205] ? __pfx_lock_release+0x10/0x10 [ 340.342790][T13205] ? trace_lock_acquire+0x14e/0x1f0 [ 340.342801][T13205] ? lock_acquire+0x2f/0xb0 [ 340.342813][T13205] ? __fget_files+0x40/0x3a0 [ 340.342827][T13205] ? __fget_files+0x206/0x3a0 [ 340.342839][T13205] security_file_ioctl_compat+0x9b/0x240 [ 340.342853][T13205] __do_compat_sys_ioctl+0x4e/0x2c0 [ 340.342870][T13205] __do_fast_syscall_32+0x73/0x120 [ 340.342881][T13205] do_fast_syscall_32+0x32/0x80 [ 340.342891][T13205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.342908][T13205] RIP: 0023:0xf749e579 [ 340.342916][T13205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.342926][T13205] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 340.342964][T13205] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 340.342969][T13205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.342975][T13205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.342980][T13205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 340.342985][T13205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.342997][T13205] [ 340.343001][T13205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.393017][T13208] blktrace: Concurrent blktraces are not allowed on nullb0 [ 340.558326][T13212] lo speed is unknown, defaulting to 1000 [ 341.775375][T13240] blktrace: Concurrent blktraces are not allowed on nullb0 [ 341.926649][T13248] uprobe: syz.3.1958:13248 failed to unregister, leaking uprobe [ 341.942089][T13250] lo speed is unknown, defaulting to 1000 [ 342.458598][T13265] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 342.836761][T13272] lo speed is unknown, defaulting to 1000 [ 344.295490][T10360] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 344.455331][T10360] usb 8-1: Using ep0 maxpacket: 16 [ 344.459221][T10360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 344.465298][T10360] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 344.468782][T10360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.471526][T10360] usb 8-1: Product: syz [ 344.472791][T10360] usb 8-1: Manufacturer: syz [ 344.474166][T10360] usb 8-1: SerialNumber: syz [ 344.480058][T10360] usb 8-1: config 0 descriptor?? [ 344.483967][T10360] hub 8-1:0.0: bad descriptor, ignoring hub [ 344.486894][T10360] hub 8-1:0.0: probe with driver hub failed with error -5 [ 344.492290][T10360] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input44 [ 344.725647][T13300] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 344.988611][T13319] blktrace: Concurrent blktraces are not allowed on nullb0 [ 345.501724][ T57] usb 8-1: USB disconnect, device number 52 [ 346.534931][ T56] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 346.704818][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 346.708452][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 346.714864][ T56] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 346.718262][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.721130][ T56] usb 7-1: Product: syz [ 346.722732][ T56] usb 7-1: Manufacturer: syz [ 346.724435][ T56] usb 7-1: SerialNumber: syz [ 346.730687][ T56] usb 7-1: config 0 descriptor?? [ 346.733645][ T56] hub 7-1:0.0: bad descriptor, ignoring hub [ 346.735381][ T56] hub 7-1:0.0: probe with driver hub failed with error -5 [ 346.738572][ T56] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input45 [ 346.794325][T13372] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 347.006056][T13359] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 347.064908][ T1993] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 347.249805][ T1993] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.253636][ T1993] usb 8-1: config 0 has no interfaces? [ 347.256965][ T1993] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 347.260354][ T1993] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 347.263271][ T1993] usb 8-1: Manufacturer: syz [ 347.269995][ T1993] usb 8-1: config 0 descriptor?? [ 347.717047][ T8] usb 7-1: USB disconnect, device number 49 [ 348.112259][T13402] program syz.2.2006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.804922][ T66] Bluetooth: hci0: command tx timeout [ 349.024842][ T1993] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 349.184808][ T1993] usb 9-1: Using ep0 maxpacket: 16 [ 349.188319][ T1993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.193496][ T1993] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 349.196901][ T1993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.199756][ T1993] usb 9-1: Product: syz [ 349.201310][ T1993] usb 9-1: Manufacturer: syz [ 349.203054][ T1993] usb 9-1: SerialNumber: syz [ 349.206444][ T1993] usb 9-1: config 0 descriptor?? [ 349.209071][ T1993] hub 9-1:0.0: bad descriptor, ignoring hub [ 349.210747][ T1993] hub 9-1:0.0: probe with driver hub failed with error -5 [ 349.214638][ T1993] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input46 [ 349.435273][ T56] usb 9-1: USB disconnect, device number 40 [ 349.516525][T13425] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 349.793836][ T8] usb 8-1: USB disconnect, device number 53 [ 350.156377][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 350.280163][T13444] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2016'. [ 350.486260][T13446] program syz.1.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.640177][T13519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.687866][T13524] loop2: detected capacity change from 0 to 7 [ 351.695491][T13524] Dev loop2: unable to read RDB block 7 [ 351.697287][T13524] loop2: unable to read partition table [ 351.698931][T13524] loop2: partition table beyond EOD, truncated [ 351.700677][T13524] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.798295][T13534] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 351.803297][T13534] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 351.995201][ T35] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 352.156692][ T35] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.160122][ T35] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.165535][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.168081][ T35] usb 7-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 352.171474][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.177215][ T35] usb 7-1: config 0 descriptor?? [ 352.585749][ T35] hid-rmi 0003:17EF:6085.000E: hidraw1: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 352.799405][ T35] usb 7-1: USB disconnect, device number 50 [ 352.936976][T13563] pim6reg: entered allmulticast mode [ 353.383835][T13570] loop9: detected capacity change from 0 to 1 [ 353.386968][T13570] Dev loop9: unable to read RDB block 1 [ 353.388498][T13570] loop9: unable to read partition table [ 353.390123][T13570] loop9: partition table beyond EOD, truncated [ 353.391886][T13570] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 354.028605][ T39] audit: type=1804 audit(353.927:1366): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2087" name="/newroot/511/file0" dev="tmpfs" ino=2754 res=1 errno=0 [ 354.033352][T13611] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 354.038760][T13611] ref_ctr increment failed for inode: 0xac2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801ec3da00 [ 354.182656][T13628] netlink: 'syz.3.2095': attribute type 2 has an invalid length. [ 354.366555][T13640] kvm: pic: non byte read [ 354.496453][T13645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.518264][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2103'. [ 354.626789][ T39] audit: type=1326 audit(354.527:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.632918][ T39] audit: type=1326 audit(354.527:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.644428][ T39] audit: type=1326 audit(354.527:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.655796][ T39] audit: type=1326 audit(354.527:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.662178][ T39] audit: type=1326 audit(354.527:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.663274][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 354.674821][ T39] audit: type=1326 audit(354.527:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.677227][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 354.681282][ T39] audit: type=1326 audit(354.527:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.690125][T13654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2106'. [ 354.690978][ T39] audit: type=1326 audit(354.527:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.2.2105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 354.692796][T13654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2106'. [ 354.972240][ T39] audit: type=1326 audit(354.867:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.4.2111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 355.561323][T13720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 355.802928][T13737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.890733][T13737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.938977][T13751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4206420977 (8412841954 ns) > initial count (7712346596 ns). Using initial count to start timer. [ 355.974076][T13737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.055186][ T56] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 356.074525][T13737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.153990][T13737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.159512][T13737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.164407][T13737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.171242][T13737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.204855][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 356.207829][ T56] usb 7-1: config 0 has no interfaces? [ 356.211647][ T56] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 356.214194][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 356.216734][ T56] usb 7-1: Product: syz [ 356.218257][ T56] usb 7-1: Manufacturer: syz [ 356.220215][ T56] usb 7-1: SerialNumber: syz [ 356.224517][ T56] usb 7-1: config 0 descriptor?? [ 356.234826][ T5990] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 356.407075][ T5990] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.410914][ T5990] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 356.414299][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.424498][ T5990] usb 8-1: config 0 descriptor?? [ 356.447138][ T1993] usb 7-1: USB disconnect, device number 51 [ 356.630461][ T5990] ath6kl: Failed to submit usb control message: -71 [ 356.632429][ T5990] ath6kl: unable to send the bmi data to the device: -71 [ 356.634488][ T5990] ath6kl: Unable to send get target info: -71 [ 356.638432][ T5990] ath6kl: Failed to init ath6kl core: -71 [ 356.650810][ T5990] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 356.658269][ T5990] usb 8-1: USB disconnect, device number 54 [ 357.753904][T13804] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2172'. [ 358.384868][ T56] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 358.554876][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 358.557754][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.561236][ T56] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 358.563874][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.566808][ T56] usb 7-1: Product: syz [ 358.568264][ T56] usb 7-1: Manufacturer: syz [ 358.569647][ T56] usb 7-1: SerialNumber: syz [ 358.572165][ T56] usb 7-1: config 0 descriptor?? [ 358.980634][ T56] gs_usb 7-1:0.0: Configuring for 197 interfaces [ 358.982515][ T56] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 358.984835][ T56] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 358.988077][T13848] syzkaller1: entered promiscuous mode [ 358.989725][T13848] syzkaller1: entered allmulticast mode [ 359.214062][ T56] usb 7-1: USB disconnect, device number 52 [ 359.361306][ T5959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.370323][ T5959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.375233][ T5959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.378545][ T5959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.380796][ T5959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.383096][ T5959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.402035][T13861] lo speed is unknown, defaulting to 1000 [ 359.543159][T13861] chnl_net:caif_netlink_parms(): no params data found [ 359.626216][T13861] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.628635][T13861] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.630775][T13861] bridge_slave_0: entered allmulticast mode [ 359.633042][T13861] bridge_slave_0: entered promiscuous mode [ 359.636768][T13861] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.638891][T13861] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.641068][T13861] bridge_slave_1: entered allmulticast mode [ 359.643262][T13861] bridge_slave_1: entered promiscuous mode [ 359.668350][T13861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.690486][T13861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.716517][T13861] team0: Port device team_slave_0 added [ 359.724797][T13861] team0: Port device team_slave_1 added [ 359.791288][T13861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.793295][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.803509][T13861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.810531][T13861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.812470][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.819936][T13861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.872722][T13861] hsr_slave_0: entered promiscuous mode [ 359.875783][T13861] hsr_slave_1: entered promiscuous mode [ 360.052819][T13904] bio_check_eod: 2 callbacks suppressed [ 360.052832][T13904] syz.2.2212: attempt to access beyond end of device [ 360.052832][T13904] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 360.067650][T13904] hpfs: hpfs_map_sector(): read error [ 360.475887][ T12] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 360.479049][ T12] ------------[ cut here ]------------ [ 360.480552][ T12] WARNING: CPU: 0 PID: 12 at net/core/dev.c:9824 unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.483556][ T12] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 360.485110][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 360.490514][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.493446][ T12] Workqueue: netns cleanup_net [ 360.495275][ T12] RIP: 0010:unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.497190][ T12] Code: e9 a9 e8 ff ff e8 df 0e 8f f8 31 f6 48 c7 c7 c0 ac ec 8f e8 a1 36 1e 02 48 8b 2d da 54 8e 11 e9 fc ec ff ff e8 c0 0e 8f f8 90 <0f> 0b 90 e9 fc f2 ff ff e8 b2 0e 8f f8 0f b6 1d 7a 9a 1e 07 31 ff [ 360.503211][ T12] RSP: 0018:ffffc900001e79f8 EFLAGS: 00010293 [ 360.504964][ T12] RAX: 0000000000000000 RBX: ffff888067fb0c30 RCX: ffffffff8929d2c9 [ 360.507143][ T12] RDX: ffff88801d294880 RSI: ffffffff8929dfd0 RDI: 0000000000000005 [ 360.509540][ T12] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 360.511637][ T12] R10: 00000000ffffffa1 R11: 0000000000000004 R12: ffffc900030ad000 [ 360.513761][ T12] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 360.515943][ T12] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 360.518347][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.520088][ T12] CR2: 000000002f81bff8 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 360.522227][ T12] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 000000000000000a [ 360.524308][ T12] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 360.526685][ T12] Call Trace: [ 360.527629][ T12] [ 360.528446][ T12] ? __warn+0xea/0x3c0 [ 360.529684][ T12] ? unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.531987][ T12] ? report_bug+0x3c0/0x580 [ 360.533894][ T12] ? handle_bug+0x54/0xa0 [ 360.535651][ T12] ? exc_invalid_op+0x17/0x50 [ 360.537349][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 360.539258][ T12] ? unregister_netdevice_many_notify+0xb69/0x1f30 [ 360.541459][ T12] ? unregister_netdevice_many_notify+0x1870/0x1f30 [ 360.543610][ T12] ? unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.546053][ T12] ? unregister_netdevice_many_notify+0x1870/0x1f30 [ 360.548339][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 360.550766][ T12] ? unregister_netdevice_queue+0x22f/0x3f0 [ 360.552789][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 360.555348][ T12] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 360.557501][ T12] ? mutex_is_locked+0x17/0x60 [ 360.559018][ T12] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 360.561299][ T12] cleanup_net+0x59b/0xbf0 [ 360.562884][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 360.564617][ T12] ? lock_acquire+0x2f/0xb0 [ 360.566351][ T12] ? process_one_work+0x8bb/0x1b30 [ 360.568170][ T12] process_one_work+0x958/0x1b30 [ 360.569741][ T12] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 360.571306][ T12] ? __pfx_process_one_work+0x10/0x10 [ 360.572708][ T12] ? assign_work+0x1a0/0x250 [ 360.574029][ T12] worker_thread+0x6c8/0xf00 [ 360.575373][ T12] ? __pfx_worker_thread+0x10/0x10 [ 360.576736][ T12] kthread+0x3af/0x750 [ 360.577826][ T12] ? __pfx_kthread+0x10/0x10 [ 360.579111][ T12] ? lock_acquire+0x2f/0xb0 [ 360.580329][ T12] ? __pfx_kthread+0x10/0x10 [ 360.581566][ T12] ret_from_fork+0x45/0x80 [ 360.582790][ T12] ? __pfx_kthread+0x10/0x10 [ 360.584057][ T12] ret_from_fork_asm+0x1a/0x30 [ 360.585950][ T12] [ 360.587088][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.589613][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 360.593334][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.596502][ T12] Workqueue: netns cleanup_net [ 360.597921][ T12] Call Trace: [ 360.599107][ T12] [ 360.600016][ T12] dump_stack_lvl+0x3d/0x1f0 [ 360.601379][ T12] panic+0x71d/0x800 [ 360.602520][ T12] ? __pfx_panic+0x10/0x10 [ 360.603779][ T12] ? show_trace_log_lvl+0x29d/0x3d0 [ 360.605267][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 360.606899][ T12] ? unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.609278][ T12] check_panic_on_warn+0xab/0xb0 [ 360.611017][ T12] __warn+0xf6/0x3c0 [ 360.612402][ T12] ? unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.614408][ T12] report_bug+0x3c0/0x580 [ 360.615586][ T12] handle_bug+0x54/0xa0 [ 360.617062][ T12] exc_invalid_op+0x17/0x50 [ 360.618656][ T12] asm_exc_invalid_op+0x1a/0x20 [ 360.620379][ T12] RIP: 0010:unregister_netdevice_many_notify+0x1871/0x1f30 [ 360.623011][ T12] Code: e9 a9 e8 ff ff e8 df 0e 8f f8 31 f6 48 c7 c7 c0 ac ec 8f e8 a1 36 1e 02 48 8b 2d da 54 8e 11 e9 fc ec ff ff e8 c0 0e 8f f8 90 <0f> 0b 90 e9 fc f2 ff ff e8 b2 0e 8f f8 0f b6 1d 7a 9a 1e 07 31 ff [ 360.629742][ T12] RSP: 0018:ffffc900001e79f8 EFLAGS: 00010293 [ 360.631764][ T12] RAX: 0000000000000000 RBX: ffff888067fb0c30 RCX: ffffffff8929d2c9 [ 360.633837][ T12] RDX: ffff88801d294880 RSI: ffffffff8929dfd0 RDI: 0000000000000005 [ 360.636261][ T12] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 360.638937][ T12] R10: 00000000ffffffa1 R11: 0000000000000004 R12: ffffc900030ad000 [ 360.641668][ T12] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 360.644438][ T12] ? unregister_netdevice_many_notify+0xb69/0x1f30 [ 360.646754][ T12] ? unregister_netdevice_many_notify+0x1870/0x1f30 [ 360.649031][ T12] ? unregister_netdevice_many_notify+0x1870/0x1f30 [ 360.651332][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 360.653644][ T12] ? unregister_netdevice_queue+0x22f/0x3f0 [ 360.655691][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 360.657879][ T12] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 360.660081][ T12] ? mutex_is_locked+0x17/0x60 [ 360.661873][ T12] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 360.663912][ T12] cleanup_net+0x59b/0xbf0 [ 360.665145][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 360.666525][ T12] ? lock_acquire+0x2f/0xb0 [ 360.667720][ T12] ? process_one_work+0x8bb/0x1b30 [ 360.669093][ T12] process_one_work+0x958/0x1b30 [ 360.670461][ T12] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 360.671952][ T12] ? __pfx_process_one_work+0x10/0x10 [ 360.673479][ T12] ? assign_work+0x1a0/0x250 [ 360.674739][ T12] worker_thread+0x6c8/0xf00 [ 360.676019][ T12] ? __pfx_worker_thread+0x10/0x10 [ 360.677377][ T12] kthread+0x3af/0x750 [ 360.678496][ T12] ? __pfx_kthread+0x10/0x10 [ 360.679806][ T12] ? lock_acquire+0x2f/0xb0 [ 360.681043][ T12] ? __pfx_kthread+0x10/0x10 [ 360.682303][ T12] ret_from_fork+0x45/0x80 [ 360.683556][ T12] ? __pfx_kthread+0x10/0x10 [ 360.684813][ T12] ret_from_fork_asm+0x1a/0x30 [ 360.686133][ T12] [ 360.687563][ T12] Kernel Offset: disabled [ 360.688884][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:47:27 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853880b5 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc900001e7378 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008 R12=0000000000000000 R13=000000000000003a R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff853880df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f81bff8 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000000 DR2=000000000000000a DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8b6ce880 RDI=ffffffff8bd2d3e0 RBP=0000000000000246 RSP=ffffc90006387a20 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905fe617 R11=0000000000000002 R12=0000000000000000 R13=ffffffff8e1bc140 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b46c5ec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a85d8 CR3=000000006a686000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2f92d660 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737392 7373737373434943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494349415c434943 4941071614011207 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22664b5872317c58 0000556d7961ffad 00000000000000b1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22664b5872317c58 0000556d79633d62 0000000000000041 0000000000000032 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c2a6d656d707c2a 6d63737c2a646275 7c2a003177617264 6968007761726469 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 6930382433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb7aff1b00 0000376238391b00 0000000000000001 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000708410f1b00 0000374b38371b00 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000021 RCX=ffffffff8195374e RDX=fffffbfff2dc4999 RSI=0000000000000008 RDI=ffffffff96e24cc0 RBP=ffffffff96e27bd8 RSP=ffffc9000e8577b8 R8 =0000000000000000 R9 =fffffbfff2dc4998 R10=ffffffff96e24cc7 R11=0000000000000005 R12=ffffed1004aa815d R13=ffff888025540000 R14=0000000000000003 R15=ffff888025540bb8 RIP=ffffffff8195374e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c250913 CR3=000000004c870000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000796e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffff11009c80e2e RBX=0000000000000000 RCX=ffffffff8202c622 RDX=ffff888025a38000 RSI=ffffffff8202c630 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90004ab7838 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000002 R12=0000000000000000 R13=00000000f0890000 R14=00000000f082e000 R15=dffffc0000000000 RIP=ffffffff8202c63e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f56e40 CR3=000000002690e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73ecff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000