last executing test programs: 12.391600343s ago: executing program 2 (id=1124): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "c801beb100000047", "f8f26ae06508255f4c930e80aedcd08e", "6d81108a", "c440238952152069"}, 0x28) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, &(0x7f0000000080)='./file0\x00', 0x8, 0x2) syz_open_pts(0xffffffffffffffff, 0x8182) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x42}, 0x57) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 11.356233734s ago: executing program 2 (id=1127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d468000"}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r2 = socket(0x3, 0x2, 0x5) fcntl$getownex(r2, 0x10, &(0x7f0000001080)={0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000040)) syz_open_procfs$namespace(r3, &(0x7f00000010c0)='ns/ipc\x00') ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000001040), 0x101, 0xa000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 8.034684735s ago: executing program 2 (id=1135): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x3) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)) 7.958539724s ago: executing program 2 (id=1136): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-3', 0x2}]) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x17f305, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040), 0x284b00, 0x0) close_range(r8, r0, 0x2) 5.787716297s ago: executing program 3 (id=1148): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.910896767s ago: executing program 1 (id=1150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f00000003c0)=@random={'btrfs.', '\'+\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xd, &(0x7f0000000080)={0x2, 0x8d}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x2) ftruncate(r2, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESHEX=r2]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x932, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r6, 0x933, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r7, r2, 0x0, 0x578410eb) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.275406843s ago: executing program 3 (id=1154): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2, r7}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000001c0)={r9, 0x80007, 0x2, r6}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0xd0, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000840), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r12, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r12, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0xa, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0xfffffffc, 0x4a, &(0x7f0000000300)=""/74, 0x41000, 0x60, '\x00', r11, @fallback=0x22, r12, 0x8, &(0x7f0000000a80)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x1, &(0x7f0000000ac0)=[r2, r2, r2, r2, r2], &(0x7f0000000b00)=[{0x2, 0x5, 0xf, 0xa}], 0x10, 0x59ee}, 0x94) preadv(r10, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.039578578s ago: executing program 2 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.554143552s ago: executing program 1 (id=1156): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.474361813s ago: executing program 1 (id=1157): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x1ff, 0x1, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000000) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x90) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) 3.427635261s ago: executing program 0 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) iopl(0xff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigaction(0x35, &(0x7f0000000380)={&(0x7f0000000300)="d36a090f68b6000000000f4d13c4e145dd17660f169800000080c4e2bd997900c4c3b942251e61367282c4c1fdd1eaf2d38d030000000f73f090", 0x2, &(0x7f0000000340)="dadec4c2e902f7c4c2959ad52e0fae50073e0f1af4c4e1275f41cbc4e3b95f3563000000bc0f380914c98fc978835a080f56dc", {[0x7, 0x3]}}, &(0x7f0000000500)={&(0x7f00000003c0)="0f1c9d65566666d079d0660f636ab3660f38065d08260fa4dccdc4e2d1969507000000c4c22d29d7c4c161655b00c4e27dbbab05000000c4c255a74ffb", 0x0, &(0x7f00000004c0)="c4e2cd965adb2ea7f2813c9879000000f0114ce6f6c4e1fc53c9040fc4c27d30ef0f3802bc9cd96c1caa0fe0303665f30fa7d8"}, 0x8, &(0x7f0000000540)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f00000001c0)=0xc, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001fff0000000000000100000014000480060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000000) syz_io_uring_submit(0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000040)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xffffffffffffff4d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000"], 0x44}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x4040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x9, 0x200, 0xcc31, 0x4}, &(0x7f0000000600)=0x10) r11 = getpgrp(0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0x80087601, &(0x7f00000170c0)) 3.35474406s ago: executing program 3 (id=1159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x270bd2c, 0x5, {0x5, 0x0, 0xb6}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, 0x0, 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4018, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffff0a010000008000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000018110000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.106603773s ago: executing program 0 (id=1160): socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(0x0, 0xa) setuid(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5, 0xa}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.264897602s ago: executing program 1 (id=1161): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0x8cc7, 0x0, 0x80007, 0x9, 0x100, 0x2, 0x81, 0x1db, 0x1, 0x6, 0x80000101, 0x5, 0x1a449, 0x3, 0x4001ffff, 0x2089, 0x6, 0xd27, 0x20001e5c, 0x7fff, 0xe69, 0x2c, 0x1, 0x6, 0x3, 0x1000000]}) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x2000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r2 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.181609436s ago: executing program 0 (id=1162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) 2.028315023s ago: executing program 1 (id=1163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x48}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}, @NFT_MSG_NEWSET={0x3c4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_DESC={0x388, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x21c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x63d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3abf}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xba8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x376}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16b8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x43e}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x129}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb017}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_USERDATA={0x26, 0xd, 0x1, 0x0, "41fff3ad21d7bc9477916f650cf70d2b982cbad78e3c2df7df8786f1d3cb7abc11bf"}]}, @NFT_MSG_DELSETELEM={0x13ec, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1390, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "e0906a0f54477a19b0125e904b2cd2ee1801"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x5d, 0x6, 0x1, 0x0, "a298397b23a2d497aeda9f0aea7168465fec428a032df081b4159b8ebb14ba1b21c1f92da6fed796de5bd6f9ab3b5396058a1bd09f2fff9e7bda360caadb882d1d8c32c049057683faff9d0d9de1ef7b301737741364f2693b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x10c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "3635e96921669f5957183dad3027c8304f818ccb491ccfad4770f35529d581aa6907b474afb547ee71a2433069f7c4454a05ba35c67bcf8f9a672900520a24701f39944beaa3d33c558f518e27b6"}, @NFTA_DATA_VALUE={0x3d, 0x1, "8caafafc24333c99cd351e6c6ab598ea595fc4b3d71b97b8cb5f8ec7f5f70d6bbc93040b27eb12d55093199125f1aac7ab657000546a14be1c"}, @NFTA_DATA_VALUE={0x73, 0x1, "4c00344b49c92f51156f377de07ef1d4788a4d60b078e8673f1dbca575b0394a5a690eca05b16303a97d1885d45d449bf6c270af3e6fb1d772f885822168e303dc56698d66f1257eede0f433123b8ae45ee082a319fef82c93bf1e9ccf57ed02366ccd0341cc45876fbbcd93ed7811"}]}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "88659c03018ebadf856b1145ec9094cb602461131f4eeeab569fafb45a6bd371e1e1543420d3e5307095f15140b359bddb742042be88fb27c622008e8f371c4fa6bf861eb51d904e14d2bd2552bb35ea18371a2b133a5c74dfabee148542b7b8d6729a8b2342836866fce2952a7306f0e4c1ab2341d237e3d31cc45e6fcb6f7b74c397b4f75e4170f47efd6ea743120f326db27456eb74d092b884f99fff2ff35f823f88de94dbca"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "2aef4952eaea79ea3bb697ec0f1e836d8990f28187"}, @NFTA_DATA_VALUE={0x1a, 0x1, "b9a429ccd4e86c69ab88b2034a0bf888bb987aae83be"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x10, 0x1, "8cf545176a6487797d2202b5"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x100c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x11, 0x7, 0x1, 0x0, "955c87f3e18771de54dc2e8bc5"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x4}}, 0x18fc}, 0x1, 0x0, 0x0, 0x4c899}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0xfdff, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a1", @ANYRES32=r8, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1092010, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000000380), 0x26) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="25b00000000802110000010802110000000802110000001000000002000000"], 0x1e) socket$inet_sctp(0x2, 0x1, 0x84) 1.951999709s ago: executing program 0 (id=1164): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100, 0x1000}, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1e, 0x0, 0x1d, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0x94}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) syz_usbip_server_init(0x4) 1.66408242s ago: executing program 3 (id=1165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x68000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) lseek(r7, 0xfffffffc, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x0, 0xa}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.203798378s ago: executing program 0 (id=1166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r6, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x30, 0x0, 0x200, [{0x6, 0x3fffffffc0000000, 0x2, 0x0, '^+'}]}, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0xc0) getdents64(r7, &(0x7f00000001c0)=""/135, 0x87) syz_fuse_handle_req(r4, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x30, 0x0, 0x1, [{0x5, 0x6, 0x3, 0x9, '%!}'}]}, 0x0, 0x0, 0x0, 0x0}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 581.69045ms ago: executing program 3 (id=1167): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 441.15523ms ago: executing program 1 (id=1168): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000006) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close(r2) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x7, @random="2b589166ae32", 'macvlan1\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa000004008362cb2f89bd79f14ff65774018ef107d4f5ad09d4f511da0b75c717e60575caceb40f00ef61b6162a801bcb13c4bb19ffe4cbc3e5d17d7d4185249096eae99ccb5f392c1e3e209357201709c9dfaca59239fe000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000000000002d58838068b91000000"], 0x4e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x4c) fcntl$addseals(r6, 0x409, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260014201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x80001) setsockopt$packet_int(r8, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000300)) write$char_usb(r7, 0x0, 0x0) 411.148239ms ago: executing program 3 (id=1169): mknod$loop(0x0, 0x10, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x0, {}, [{0x120, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xd8, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x91, 0x6, "ba5af7ceecbc5e3d5e9eb0edda01b5f967fd81f8d2ac74b8709058260aa888808a1d2ddf813c5b9af6ab1b1462df8b771d431f46a6abc875b70d58a99e723456ead3349512dd5197099303dec3c64f493234c5cca39f6faa8554d0169774108ccd117af5f66b64353ecefd51fb6f4264d3c72c368e0d5246fcfb8233e5094c9725ff5019df75158edacd31724b"}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sync() r7 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000180)={0x4}, 0x1) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffff8, @remote, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 198.310596ms ago: executing program 0 (id=1170): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x1ff, 0x1, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r4, 0xae80, 0xf0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=1171): socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xa) setuid(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5, 0xa}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000000000000000 [ 134.895734][ T7657] [ 135.372673][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 135.506087][ T7664] team0: Port device team_slave_0 removed [ 135.667275][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 135.704045][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 135.737703][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 135.804696][ T7683] $Hÿ: renamed from à [ 135.815256][ T7683] $Hÿ: entered promiscuous mode [ 135.817348][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 135.817712][ T7683] bond_slave_0: entered promiscuous mode [ 135.820625][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 135.821404][ T7683] bond_slave_1: entered promiscuous mode [ 135.824342][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 135.837223][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 135.841744][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 135.846262][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.854290][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 135.855047][ T7685] FAULT_INJECTION: forcing a failure. [ 135.855047][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 135.858338][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 135.864206][ T7685] CPU: 2 UID: 0 PID: 7685 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 135.864227][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.864234][ T7685] Call Trace: [ 135.864238][ T7685] [ 135.864242][ T7685] dump_stack_lvl+0x16c/0x1f0 [ 135.864261][ T7685] should_fail_ex+0x512/0x640 [ 135.864277][ T7685] ? fs_reclaim_acquire+0xae/0x150 [ 135.864294][ T7685] ? tomoyo_encode2+0x100/0x3e0 [ 135.864308][ T7685] should_failslab+0xc2/0x120 [ 135.864322][ T7685] __kmalloc_noprof+0xd2/0x510 [ 135.864338][ T7685] tomoyo_encode2+0x100/0x3e0 [ 135.864354][ T7685] tomoyo_encode+0x29/0x50 [ 135.864368][ T7685] tomoyo_realpath_from_path+0x18f/0x6e0 [ 135.864384][ T7685] ? tomoyo_profile+0x47/0x60 [ 135.864395][ T7685] tomoyo_path_number_perm+0x245/0x580 [ 135.864407][ T7685] ? tomoyo_path_number_perm+0x237/0x580 [ 135.864421][ T7685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 135.864447][ T7685] ? find_held_lock+0x2b/0x80 [ 135.864458][ T7685] ? hook_file_ioctl_common+0x145/0x410 [ 135.864475][ T7685] ? __fget_files+0x20e/0x3c0 [ 135.864489][ T7685] security_file_ioctl_compat+0x9b/0x240 [ 135.864504][ T7685] __ia32_compat_sys_ioctl+0xc3/0x370 [ 135.864523][ T7685] __do_fast_syscall_32+0x7c/0x3a0 [ 135.864538][ T7685] do_fast_syscall_32+0x32/0x80 [ 135.864553][ T7685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.864566][ T7685] RIP: 0023:0xf710e579 [ 135.864575][ T7685] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.864585][ T7685] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 135.864596][ T7685] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448e0 [ 135.864603][ T7685] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.864609][ T7685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.864614][ T7685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.864620][ T7685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.864632][ T7685] [ 135.864686][ T7685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.866692][ T34] usb 6-1: Product: syz [ 135.944957][ T34] usb 6-1: Manufacturer: syz [ 135.946789][ T34] usb 6-1: SerialNumber: syz [ 135.985548][ T34] usb 6-1: config 0 descriptor?? [ 136.040717][ T34] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 136.053622][ T34] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 136.246316][ T34] usb 6-1: USB disconnect, device number 5 [ 136.296058][ T34] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 136.829248][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 136.861993][ T7695] bridge0: entered allmulticast mode [ 137.138912][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 137.353589][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 138.431634][ T7711] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 139.550069][ T7733] FAULT_INJECTION: forcing a failure. [ 139.550069][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.554919][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.0.439 Not tainted syzkaller #0 PREEMPT(full) [ 139.554941][ T7733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.554947][ T7733] Call Trace: [ 139.554952][ T7733] [ 139.554957][ T7733] dump_stack_lvl+0x16c/0x1f0 [ 139.554976][ T7733] should_fail_ex+0x512/0x640 [ 139.554994][ T7733] _copy_to_iter+0x463/0x1710 [ 139.555008][ T7733] ? __pfx__copy_to_iter+0x10/0x10 [ 139.555018][ T7733] ? userfaultfd_show_fdinfo+0x17d/0x1d0 [ 139.555036][ T7733] ? fput+0x9b/0xd0 [ 139.555050][ T7733] ? __pfx_userfaultfd_show_fdinfo+0x10/0x10 [ 139.555066][ T7733] ? seq_show+0x574/0x8b0 [ 139.555080][ T7733] seq_read_iter+0xcf8/0x12c0 [ 139.555097][ T7733] seq_read+0x3a3/0x570 [ 139.555107][ T7733] ? __pfx_seq_read+0x10/0x10 [ 139.555124][ T7733] ? rw_verify_area+0xcf/0x6c0 [ 139.555135][ T7733] ? __pfx_seq_read+0x10/0x10 [ 139.555145][ T7733] vfs_read+0x1e4/0xcf0 [ 139.555159][ T7733] ? __pfx_vfs_read+0x10/0x10 [ 139.555170][ T7733] ? find_held_lock+0x2b/0x80 [ 139.555184][ T7733] ? __fget_files+0x20e/0x3c0 [ 139.555199][ T7733] ksys_read+0x12a/0x250 [ 139.555211][ T7733] ? __pfx_ksys_read+0x10/0x10 [ 139.555224][ T7733] ? rcu_is_watching+0x12/0xc0 [ 139.555237][ T7733] __do_fast_syscall_32+0x7c/0x3a0 [ 139.555253][ T7733] do_fast_syscall_32+0x32/0x80 [ 139.555280][ T7733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.555295][ T7733] RIP: 0023:0xf710e579 [ 139.555304][ T7733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.555314][ T7733] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 139.555324][ T7733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 139.555331][ T7733] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.555337][ T7733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.555342][ T7733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.555348][ T7733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.555361][ T7733] [ 139.640830][ T5982] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 139.706587][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 139.706603][ T40] audit: type=1326 audit(1756485094.912:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.3.440" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x0 [ 141.485899][ T7761] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 142.410052][ T7778] FAULT_INJECTION: forcing a failure. [ 142.410052][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.414310][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.2.450 Not tainted syzkaller #0 PREEMPT(full) [ 142.414329][ T7778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.414337][ T7778] Call Trace: [ 142.414343][ T7778] [ 142.414348][ T7778] dump_stack_lvl+0x16c/0x1f0 [ 142.414371][ T7778] should_fail_ex+0x512/0x640 [ 142.414391][ T7778] _copy_from_iter+0x29f/0x1720 [ 142.414411][ T7778] ? __alloc_skb+0x200/0x380 [ 142.414426][ T7778] ? __pfx__copy_from_iter+0x10/0x10 [ 142.414444][ T7778] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 142.414465][ T7778] netlink_sendmsg+0x829/0xdd0 [ 142.414482][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.414499][ T7778] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 142.414514][ T7778] ____sys_sendmsg+0xa95/0xc70 [ 142.414592][ T7778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.414607][ T7778] ? get_compat_msghdr+0x11a/0x170 [ 142.414626][ T7778] ___sys_sendmsg+0x134/0x1d0 [ 142.414642][ T7778] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.414663][ T7778] ? find_held_lock+0x2b/0x80 [ 142.414685][ T7778] __sys_sendmsg+0x16d/0x220 [ 142.414699][ T7778] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.414719][ T7778] ? rcu_is_watching+0x12/0xc0 [ 142.414732][ T7778] __do_fast_syscall_32+0x7c/0x3a0 [ 142.414750][ T7778] do_fast_syscall_32+0x32/0x80 [ 142.414764][ T7778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.414778][ T7778] RIP: 0023:0xf7f91579 [ 142.414788][ T7778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.414799][ T7778] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 142.414810][ T7778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 142.414819][ T7778] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.414826][ T7778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.414832][ T7778] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 142.414838][ T7778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.414850][ T7778] [ 142.670231][ T40] audit: type=1107 audit(1756485097.882:88): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='~¸…l(×|;ËïOAâ=]éB¾ŒÝ¼$GÍd¶ê^/°Hë âv÷‹ÚH7G‹9ºvú‘qÇOæ=4V÷ï¿œÿX«Aà•' [ 143.481391][ T7804] openvswitch: : Dropping previously announced user features [ 144.031206][ T7808] overlay: Unknown parameter 'audit' [ 144.221368][ T7815] binder: 7814:7815 ioctl c0306201 80000680 returned -14 [ 144.862523][ T7820] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 144.916520][ T7827] net_ratelimit: 166 callbacks suppressed [ 144.916540][ T7827] openvswitch: netlink: IP tunnel TTL not specified. [ 144.976705][ T7827] netlink: 47 bytes leftover after parsing attributes in process `syz.1.464'. [ 146.638723][ T40] audit: type=1326 audit(1756485101.852:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.672029][ T40] audit: type=1326 audit(1756485101.852:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.686113][ T40] audit: type=1326 audit(1756485101.852:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.696139][ T40] audit: type=1326 audit(1756485101.852:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.706113][ T40] audit: type=1326 audit(1756485101.852:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.714862][ T40] audit: type=1326 audit(1756485101.852:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.722760][ T40] audit: type=1326 audit(1756485101.852:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.729831][ T40] audit: type=1326 audit(1756485101.852:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.738204][ T40] audit: type=1326 audit(1756485101.852:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.746310][ T40] audit: type=1326 audit(1756485101.852:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7853 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 146.944216][ T5982] Bluetooth: hci3: command tx timeout [ 147.377522][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 147.385236][ T7872] bond_slave_0: entered promiscuous mode [ 147.387225][ T7872] bond_slave_1: entered promiscuous mode [ 147.389846][ T7872] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.406061][ T7872] bond_slave_0: left promiscuous mode [ 147.408145][ T7872] bond_slave_1: left promiscuous mode [ 147.437435][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 149.695913][ T7923] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 150.125003][ T7930] cgroup: noprefix used incorrectly [ 150.272664][ T7935] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 150.546114][ T7944] loop7: detected capacity change from 0 to 16384 [ 150.592790][ T7946] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 150.632961][ T7946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.668517][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 150.963769][ T7946] bond4 (unregistering): Released all slaves [ 151.019840][ T6062] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 151.191754][ T6062] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.196161][ T6062] usb 8-1: config 0 interface 0 has no altsetting 0 [ 151.202577][ T6062] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.206853][ T6062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.212933][ T6062] usb 8-1: Product: syz [ 151.214839][ T6062] usb 8-1: Manufacturer: syz [ 151.216977][ T6062] usb 8-1: SerialNumber: syz [ 151.221107][ T6062] usb 8-1: config 0 descriptor?? [ 151.232674][ T6062] usb 8-1: selecting invalid altsetting 0 [ 152.161092][ T7968] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 152.186228][ T7968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.206229][ T7968] vlan2: entered allmulticast mode [ 152.209734][ T7968] veth1: entered allmulticast mode [ 152.213464][ T7968] bond1: (slave vlan2): making interface the new active one [ 152.216849][ T7968] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 153.042222][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'. [ 153.070071][ T7975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.509'. [ 153.074395][ T7975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.509'. [ 153.367352][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.418222][ T7980] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 153.520817][ T6062] usb 8-1: USB disconnect, device number 11 [ 153.529348][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.535689][ T10] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 153.542198][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.546022][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.554946][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 153.563326][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.569167][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.572194][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.575320][ T10] usb 5-1: Product: syz [ 153.581850][ T10] usb 5-1: Manufacturer: syz [ 153.587490][ T7978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.592018][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 153.594389][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 153.595964][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 153.608882][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 153.610478][ T7982] bond_slave_0: entered promiscuous mode [ 153.613214][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 153.613318][ T7982] bond_slave_1: entered promiscuous mode [ 153.622165][ T7982] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 153.630759][ T7982] bond_slave_0: left promiscuous mode [ 153.633095][ T7982] bond_slave_1: left promiscuous mode [ 153.646903][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 153.798109][ T34] usb 5-1: USB disconnect, device number 7 [ 154.777443][ T7997] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 154.828429][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 154.836628][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 154.914313][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 154.924488][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 154.928934][ T8007] bond_slave_0: entered promiscuous mode [ 154.928959][ T8007] bond_slave_1: entered promiscuous mode [ 154.930259][ T8007] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.939398][ T8007] bond_slave_0: left promiscuous mode [ 154.941785][ T8007] bond_slave_1: left promiscuous mode [ 154.963636][ T8008] bond_slave_0: entered promiscuous mode [ 154.965782][ T8008] bond_slave_1: entered promiscuous mode [ 154.970869][ T8008] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.975814][ T8008] bond_slave_0: left promiscuous mode [ 154.978550][ T8008] bond_slave_1: left promiscuous mode [ 155.387327][ T6062] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 155.538824][ T6062] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.542023][ T6062] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 155.545998][ T6062] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.550709][ T6062] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.554586][ T6062] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.558393][ T6062] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.575741][ T6062] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.579092][ T6062] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.582128][ T6062] usb 8-1: Product: syz [ 155.583981][ T6062] usb 8-1: Manufacturer: syz [ 155.588950][ T8018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.593324][ T6062] cdc_wdm 8-1:1.0: skipping garbage [ 155.595114][ T6062] cdc_wdm 8-1:1.0: skipping garbage [ 155.597730][ T6062] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 155.600625][ T6062] cdc_wdm 8-1:1.0: Unknown control protocol [ 155.809406][ T6062] usb 8-1: USB disconnect, device number 12 [ 156.211129][ T8038] __nla_validate_parse: 2 callbacks suppressed [ 156.211142][ T8038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.528'. [ 156.223291][ T8038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.528'. [ 156.308741][ T8040] vlan1: entered promiscuous mode [ 156.310483][ T8040] vlan1: entered allmulticast mode [ 156.312422][ T8040] veth0_vlan: entered allmulticast mode [ 156.550660][ T8048] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 156.566165][ T8048] team0: Port device netdevsim0 added [ 157.172578][ T8057] /dev/sr0: Can't open blockdev [ 157.176880][ T8060] gfs2: gfs2 mount does not exist [ 157.226883][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'. [ 157.237280][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'. [ 157.285910][ T8070] devpts: Bad value for 'mode' [ 157.826622][ T8080] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.880894][ T8080] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.415878][ T8090] bridge_slave_0: left allmulticast mode [ 158.419005][ T8090] bridge_slave_0: left promiscuous mode [ 158.422844][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.807486][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 158.957257][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 158.961615][ T8090] bridge_slave_1: left allmulticast mode [ 158.963965][ T8090] bridge_slave_1: left promiscuous mode [ 158.966514][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.976154][ T54] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 158.979994][ T54] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 158.985338][ T54] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 159.000694][ T54] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 159.005881][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 159.010650][ T8090] bond0: (slave bond_slave_0): Releasing backup interface [ 159.017910][ T54] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 159.024559][ T54] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 159.029989][ T8090] bond0: (slave bond_slave_1): Releasing backup interface [ 159.033334][ T54] usb 8-1: Product: syz [ 159.035233][ T54] usb 8-1: Manufacturer: syz [ 159.044638][ T54] usb 8-1: SerialNumber: syz [ 159.050928][ T54] usb 8-1: config 0 descriptor?? [ 159.055144][ T8090] team0: Port device team_slave_0 removed [ 159.058751][ T54] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 159.063647][ T54] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 159.082683][ T8090] team0: Port device team_slave_1 removed [ 159.088227][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.091800][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.102163][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.105704][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.138446][ T8090] team0: Port device netdevsim0 removed [ 159.151828][ T8090] bond1: (slave vlan2): Releasing active interface [ 159.259478][ T54] usb 8-1: USB disconnect, device number 13 [ 159.264837][ T54] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 159.514981][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'. [ 159.523242][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'. [ 161.667623][ T8122] mkiss: ax0: crc mode is auto. [ 162.031734][ T8124] rdma_rxe: rxe_newlink: failed to add syz_tun [ 162.696701][ T8124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.725743][ T8127] binder: 8123:8127 unknown command 4130185499 [ 162.728134][ T8127] binder: 8123:8127 ioctl c0306201 80000080 returned -22 [ 162.786535][ T8124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.855592][ T8124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.867489][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.923607][ T8124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.012040][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.024799][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.034899][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.037247][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 163.044899][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.055666][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 163.061175][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.064685][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.070144][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.074714][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 163.096791][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.101144][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.104109][ T34] usb 6-1: Product: syz [ 163.105567][ T34] usb 6-1: Manufacturer: syz [ 163.108128][ T34] usb 6-1: SerialNumber: syz [ 163.110889][ T34] usb 6-1: config 0 descriptor?? [ 163.122148][ T34] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.126594][ T34] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 163.334681][ T1344] usb 6-1: USB disconnect, device number 6 [ 163.339655][ T1344] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 164.093400][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 164.152399][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 164.421814][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 164.427557][ T8158] 8021q: VLANs not supported on ip6tnl0 [ 164.433434][ T8158] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 164.436497][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.440232][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.445924][ T8154] binder: 8153:8154 ioctl 8008f512 80000340 returned -22 [ 164.451802][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.454452][ T8158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.457397][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.459837][ T8158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.466056][ T8158] bridge0: entered promiscuous mode [ 164.468857][ T8158] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 164.497491][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 164.503507][ T8152] bridge_slave_1: left allmulticast mode [ 164.506062][ T8152] bridge_slave_1: left promiscuous mode [ 164.508761][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.516277][ T8152] bridge_slave_0: left allmulticast mode [ 164.518733][ T8152] bridge_slave_0: left promiscuous mode [ 164.520946][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.526345][ T8161] netlink: 360 bytes leftover after parsing attributes in process `syz.3.566'. [ 164.538584][ T8152] $Hÿ: (slave bridge0): Releasing backup interface [ 164.541942][ T8152] bridge0 (unregistering): left promiscuous mode [ 165.368479][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.548396][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 165.573641][ T29] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 165.578970][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 165.583471][ T29] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 165.587773][ T29] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 165.593227][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.601822][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.703658][ T29] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.707626][ T29] usb 6-1: Product: syz [ 165.796155][ T29] usb 6-1: Manufacturer: syz [ 165.798221][ T29] usb 6-1: SerialNumber: syz [ 165.813172][ T29] usb 6-1: config 0 descriptor?? [ 165.854729][ T29] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.858122][ T6042] IPVS: starting estimator thread 0... [ 165.864935][ T29] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.947382][ T8179] IPVS: using max 42 ests per chain, 100800 per kthread [ 166.032343][ T841] usb 6-1: USB disconnect, device number 7 [ 166.036076][ T841] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 166.278446][ T8188] block nbd0: server does not support multiple connections per device. [ 166.283163][ T8188] block nbd0: shutting down sockets [ 166.816300][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 166.962462][ T8204] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.117288][ T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 167.271476][ T54] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.274338][ T54] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 167.277933][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.280801][ T54] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.284361][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 167.288600][ T54] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.297909][ T54] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.302580][ T54] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.306283][ T54] usb 8-1: Product: syz [ 167.308224][ T54] usb 8-1: Manufacturer: syz [ 167.322299][ T8201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.330628][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 167.332457][ T54] cdc_wdm 8-1:1.0: skipping garbage [ 167.340093][ T54] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 167.343281][ T54] cdc_wdm 8-1:1.0: Unknown control protocol [ 167.615575][ T10] usb 8-1: USB disconnect, device number 14 [ 169.063344][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 169.108736][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 169.577244][ T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 169.737286][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 169.743294][ T54] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 169.751533][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 169.755976][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.772161][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 169.776679][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.795137][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.801602][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.805412][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.021190][ T54] usb 8-1: GET_CAPABILITIES returned 0 [ 170.024099][ T54] usbtmc 8-1:16.0: can't read capabilities [ 170.232725][ T54] usb 8-1: USB disconnect, device number 15 [ 170.298240][ T5973] Bluetooth: hci2: command 0x0401 tx timeout [ 170.298256][ T5982] Bluetooth: hci1: command 0x0406 tx timeout [ 170.955118][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 170.965442][ T8265] bond_slave_0: entered promiscuous mode [ 170.967940][ T8265] bond_slave_1: entered promiscuous mode [ 170.971893][ T8265] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.976538][ T8265] bond_slave_0: left promiscuous mode [ 170.979284][ T8265] bond_slave_1: left promiscuous mode [ 171.008707][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 171.484829][ T8280] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 171.490225][ T8280] binder: 8279:8280 ioctl 4018620d 800000c0 returned -1 [ 171.543032][ T8283] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 171.546137][ T8283] binder: 8282:8283 ioctl 4018620d 800000c0 returned -1 [ 171.775944][ T8291] FAULT_INJECTION: forcing a failure. [ 171.775944][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 171.788124][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.0.610 Not tainted syzkaller #0 PREEMPT(full) [ 171.788150][ T8291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.788161][ T8291] Call Trace: [ 171.788167][ T8291] [ 171.788174][ T8291] dump_stack_lvl+0x16c/0x1f0 [ 171.788203][ T8291] should_fail_ex+0x512/0x640 [ 171.788224][ T8291] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 171.788246][ T8291] should_failslab+0xc2/0x120 [ 171.788266][ T8291] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 171.788293][ T8291] ? trace_kmem_cache_alloc+0x28/0xc0 [ 171.788317][ T8291] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 171.788338][ T8291] ? mas_alloc_nodes+0x18b/0x8b0 [ 171.788359][ T8291] ? mas_alloc_nodes+0x2f1/0x8b0 [ 171.788377][ T8291] mas_alloc_nodes+0x2f1/0x8b0 [ 171.788402][ T8291] mas_node_count_gfp+0x105/0x130 [ 171.788424][ T8291] mas_preallocate+0x7e0/0xde0 [ 171.788452][ T8291] ? __pfx_mas_preallocate+0x10/0x10 [ 171.788482][ T8291] ? anon_vma_name+0x81/0x2f0 [ 171.788509][ T8291] __split_vma+0x34a/0x1070 [ 171.788532][ T8291] ? __pfx___split_vma+0x10/0x10 [ 171.788559][ T8291] vma_modify+0x16dc/0x2030 [ 171.788580][ T8291] ? _kstrtoull+0x145/0x200 [ 171.788599][ T8291] ? __pfx_vma_modify+0x10/0x10 [ 171.788622][ T8291] vma_modify_flags+0x212/0x2d0 [ 171.788640][ T8291] ? __pfx_vma_modify_flags+0x10/0x10 [ 171.788667][ T8291] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 171.788695][ T8291] mlock_fixup+0x27c/0xe50 [ 171.788715][ T8291] ? mas_find+0x156/0x6d0 [ 171.788741][ T8291] apply_vma_lock_flags+0x261/0x390 [ 171.788764][ T8291] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 171.788784][ T8291] ? __pfx___might_resched+0x10/0x10 [ 171.788810][ T8291] ? __pfx_down_write_killable+0x10/0x10 [ 171.788838][ T8291] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 171.788864][ T8291] do_mlock+0x2ac/0x810 [ 171.788884][ T8291] ? __fget_files+0x20e/0x3c0 [ 171.788902][ T8291] ? handle_mm_fault+0x200/0xd10 [ 171.788918][ T8291] ? __pfx_do_mlock+0x10/0x10 [ 171.788938][ T8291] ? fput+0x9b/0xd0 [ 171.788962][ T8291] ? ksys_write+0x1ac/0x250 [ 171.788981][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 171.789007][ T8291] __ia32_sys_mlock+0x57/0x80 [ 171.789026][ T8291] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 171.789050][ T8291] __do_fast_syscall_32+0x7c/0x3a0 [ 171.789076][ T8291] do_fast_syscall_32+0x32/0x80 [ 171.789100][ T8291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.789122][ T8291] RIP: 0023:0xf710e579 [ 171.789138][ T8291] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 171.789154][ T8291] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 171.789173][ T8291] RAX: ffffffffffffffda RBX: 00000000805ab000 RCX: 0000000000003000 [ 171.789184][ T8291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.789194][ T8291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.789204][ T8291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 171.789214][ T8291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.789238][ T8291] [ 172.462747][ T8301] openvswitch: netlink: Message has 8 unknown bytes. [ 172.465266][ T8301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.662699][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 172.673142][ T8304] bond_slave_0: entered promiscuous mode [ 172.675353][ T8304] bond_slave_1: entered promiscuous mode [ 172.681947][ T8304] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 172.699020][ T8304] bond_slave_0: left promiscuous mode [ 172.701247][ T8304] bond_slave_1: left promiscuous mode [ 172.716982][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 172.746134][ T8306] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 172.992666][ T1149] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.010437][ T8319] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 173.014115][ T8319] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 173.019246][ T8319] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 173.022127][ T8319] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 174.412603][ T8338] netlink: 100 bytes leftover after parsing attributes in process `syz.0.620'. [ 174.419463][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 174.545961][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 174.601932][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 174.703508][ T8340] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 175.007370][ T5973] Bluetooth: hci4: command 0x1003 tx timeout [ 175.007441][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 176.143829][ T8378] FAULT_INJECTION: forcing a failure. [ 176.143829][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 176.154806][ T8378] CPU: 2 UID: 0 PID: 8378 Comm: syz.0.636 Not tainted syzkaller #0 PREEMPT(full) [ 176.154825][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.154835][ T8378] Call Trace: [ 176.154842][ T8378] [ 176.154849][ T8378] dump_stack_lvl+0x16c/0x1f0 [ 176.154875][ T8378] should_fail_ex+0x512/0x640 [ 176.154894][ T8378] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 176.154909][ T8378] should_failslab+0xc2/0x120 [ 176.154923][ T8378] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 176.154941][ T8378] ? getname_flags.part.0+0x4c/0x550 [ 176.154970][ T8378] getname_flags.part.0+0x4c/0x550 [ 176.155000][ T8378] getname_flags+0x93/0xf0 [ 176.155014][ T8378] do_sys_openat2+0xb8/0x1d0 [ 176.155034][ T8378] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.155086][ T8378] ? __fget_files+0x20e/0x3c0 [ 176.155108][ T8378] __ia32_compat_sys_openat+0x16d/0x210 [ 176.155124][ T8378] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 176.155135][ T8378] ? ksys_write+0x1ac/0x250 [ 176.155156][ T8378] ? rcu_is_watching+0x12/0xc0 [ 176.155176][ T8378] __do_fast_syscall_32+0x7c/0x3a0 [ 176.155200][ T8378] do_fast_syscall_32+0x32/0x80 [ 176.155222][ T8378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.155250][ T8378] RIP: 0023:0xf710e579 [ 176.155259][ T8378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.155340][ T8378] RSP: 002b:00000000f54fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 176.155356][ T8378] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 176.155367][ T8378] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.155376][ T8378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.155385][ T8378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.155394][ T8378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.155421][ T8378] [ 176.229800][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.379920][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 176.401276][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 176.648651][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 176.818559][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.823736][ T60] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 176.836527][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.864386][ T60] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.870547][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 176.874930][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.881686][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.885750][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.890216][ T60] usb 6-1: Product: syz [ 176.892607][ T60] usb 6-1: Manufacturer: syz [ 176.898960][ T8390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.909079][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 176.911729][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 177.065344][ T60] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 177.068614][ T60] cdc_wdm 6-1:1.0: Unknown control protocol [ 177.187534][ T8404] fuse: Bad value for 'fd' [ 177.324780][ T60] usb 6-1: USB disconnect, device number 8 [ 177.468525][ T8405] blktrace: Concurrent blktraces are not allowed on nbd3 [ 177.644850][ T8408] mkiss: ax0: crc mode is auto. [ 177.663579][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 178.147365][ T8417] FAULT_INJECTION: forcing a failure. [ 178.147365][ T8417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.151576][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.3.646 Not tainted syzkaller #0 PREEMPT(full) [ 178.151591][ T8417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.151598][ T8417] Call Trace: [ 178.151614][ T8417] [ 178.151621][ T8417] dump_stack_lvl+0x16c/0x1f0 [ 178.151641][ T8417] should_fail_ex+0x512/0x640 [ 178.151658][ T8417] _copy_from_user+0x2e/0xd0 [ 178.151676][ T8417] ucma_write+0x128/0x330 [ 178.151693][ T8417] ? __pfx_ucma_write+0x10/0x10 [ 178.151707][ T8417] ? bpf_lsm_file_permission+0x9/0x10 [ 178.151723][ T8417] ? security_file_permission+0x71/0x210 [ 178.151740][ T8417] ? rw_verify_area+0xcf/0x6c0 [ 178.151752][ T8417] ? __pfx_ucma_write+0x10/0x10 [ 178.151766][ T8417] vfs_write+0x2a0/0x11d0 [ 178.151780][ T8417] ? __pfx_vfs_write+0x10/0x10 [ 178.151791][ T8417] ? find_held_lock+0x2b/0x80 [ 178.151803][ T8417] ? __fget_files+0x204/0x3c0 [ 178.151817][ T8417] ? __fget_files+0x20e/0x3c0 [ 178.151827][ T8417] ? handle_mm_fault+0x200/0xd10 [ 178.151842][ T8417] ksys_write+0x1f8/0x250 [ 178.151854][ T8417] ? __pfx_ksys_write+0x10/0x10 [ 178.151866][ T8417] ? rcu_is_watching+0x12/0xc0 [ 178.151880][ T8417] __do_fast_syscall_32+0x7c/0x3a0 [ 178.151896][ T8417] do_fast_syscall_32+0x32/0x80 [ 178.151911][ T8417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.151924][ T8417] RIP: 0023:0xf703e579 [ 178.151933][ T8417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.151944][ T8417] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 178.151955][ T8417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 178.151962][ T8417] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.151968][ T8417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.151974][ T8417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.151979][ T8417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.151992][ T8417] [ 179.334738][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 179.486659][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 179.524747][ T8432] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 179.593982][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 180.793507][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 180.959100][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.961923][ T10] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 180.965156][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.970845][ T10] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.974782][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.978876][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.983707][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.987440][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.991117][ T10] usb 8-1: Product: syz [ 180.993031][ T10] usb 8-1: Manufacturer: syz [ 180.997760][ T8446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.001652][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 181.003394][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 181.006547][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 181.009018][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 181.224963][ T3247] usb 8-1: USB disconnect, device number 16 [ 182.013604][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 182.024200][ T8471] bond_slave_0: entered promiscuous mode [ 182.026276][ T8471] bond_slave_1: entered promiscuous mode [ 182.039985][ T8471] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 182.047054][ T8471] bond_slave_0: left promiscuous mode [ 182.049303][ T8471] bond_slave_1: left promiscuous mode [ 182.082567][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 182.990787][ T8481] [U]  [ 182.992549][ T8481] [U] K{‘ [ 182.993575][ T8481] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 182.996125][ T8481] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 183.001236][ T8481] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 183.005075][ T8481] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 183.018080][ T8481] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 183.025468][ T8481] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 183.030393][ T8481] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 183.036356][ T8481] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 183.071800][ T8481] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 183.085185][ T8481] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 183.092741][ T8481] [U] 22½“Æ©Ðû©x?0;3u± [ 183.094295][ T8481] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 183.104701][ T8481] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 183.106946][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 183.107963][ T8481] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 183.114420][ T8481] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 183.116582][ T8481] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 183.120857][ T8481] [U] ¹ ec [ 183.122132][ T8481] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 183.137653][ T8476] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 183.329488][ T8491] mkiss: ax0: crc mode is auto. [ 183.913526][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 183.929367][ T8506] bond_slave_0: entered promiscuous mode [ 183.931448][ T8506] bond_slave_1: entered promiscuous mode [ 183.938777][ T8506] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 183.948619][ T8506] bond_slave_0: left promiscuous mode [ 183.950766][ T8506] bond_slave_1: left promiscuous mode [ 183.972466][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 186.722092][ T8556] batadv_slave_1: entered promiscuous mode [ 186.748465][ T8556] netlink: 'syz.1.683': attribute type 21 has an invalid length. [ 186.765437][ T8556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.683'. [ 187.147689][ T8553] batadv_slave_1: left promiscuous mode [ 187.293144][ T8565] FAULT_INJECTION: forcing a failure. [ 187.293144][ T8565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.299224][ T8565] CPU: 2 UID: 0 PID: 8565 Comm: syz.3.687 Not tainted syzkaller #0 PREEMPT(full) [ 187.299242][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.299248][ T8565] Call Trace: [ 187.299252][ T8565] [ 187.299257][ T8565] dump_stack_lvl+0x16c/0x1f0 [ 187.299275][ T8565] should_fail_ex+0x512/0x640 [ 187.299294][ T8565] _copy_from_user+0x2e/0xd0 [ 187.299311][ T8565] get_compat_msghdr+0xa7/0x170 [ 187.299326][ T8565] ? __pfx_get_compat_msghdr+0x10/0x10 [ 187.299343][ T8565] ___sys_sendmsg+0x1ae/0x1d0 [ 187.299359][ T8565] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.299379][ T8565] ? find_held_lock+0x2b/0x80 [ 187.299399][ T8565] __sys_sendmsg+0x16d/0x220 [ 187.299413][ T8565] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.299432][ T8565] ? rcu_is_watching+0x12/0xc0 [ 187.299446][ T8565] __do_fast_syscall_32+0x7c/0x3a0 [ 187.299462][ T8565] do_fast_syscall_32+0x32/0x80 [ 187.299476][ T8565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.299489][ T8565] RIP: 0023:0xf703e579 [ 187.299498][ T8565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.299508][ T8565] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 187.299519][ T8565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 187.299526][ T8565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.299532][ T8565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.299538][ T8565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.299544][ T8565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.299557][ T8565] [ 187.373312][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.909957][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 187.912018][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 187.929975][ T8578] ceph: No mds server is up or the cluster is laggy [ 188.654197][ T8600] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 188.667596][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 188.671550][ T8600] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 188.674082][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 188.895520][ T8610] mkiss: ax0: crc mode is auto. [ 188.942739][ T8614] netlink: 96 bytes leftover after parsing attributes in process `syz.2.704'. [ 189.089652][ T8618] FAULT_INJECTION: forcing a failure. [ 189.089652][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 189.094766][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(full) [ 189.094803][ T8618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.094814][ T8618] Call Trace: [ 189.094820][ T8618] [ 189.094826][ T8618] dump_stack_lvl+0x16c/0x1f0 [ 189.094854][ T8618] should_fail_ex+0x512/0x640 [ 189.094875][ T8618] ? __kvmalloc_node_noprof+0x124/0x620 [ 189.094896][ T8618] should_failslab+0xc2/0x120 [ 189.094916][ T8618] __kvmalloc_node_noprof+0x137/0x620 [ 189.094958][ T8618] ? __pfx_css_rstat_updated+0x10/0x10 [ 189.094974][ T8618] ? bpf_test_run_xdp_live+0x13b/0x500 [ 189.095000][ T8618] ? bpf_test_run_xdp_live+0x13b/0x500 [ 189.095017][ T8618] ? find_held_lock+0x2b/0x80 [ 189.095032][ T8618] bpf_test_run_xdp_live+0x13b/0x500 [ 189.095053][ T8618] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 189.095075][ T8618] ? do_user_addr_fault+0x829/0x1370 [ 189.095105][ T8618] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 189.095146][ T8618] ? _copy_from_user+0x93/0xd0 [ 189.095170][ T8618] ? _copy_from_user+0x59/0xd0 [ 189.095194][ T8618] ? bpf_test_init.isra.0+0x6b/0x140 [ 189.095215][ T8618] bpf_prog_test_run_xdp+0x824/0x1590 [ 189.095244][ T8618] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.095267][ T8618] ? __might_fault+0x70/0x190 [ 189.095289][ T8618] ? fput+0x9b/0xd0 [ 189.095311][ T8618] ? __bpf_prog_get+0x97/0x2a0 [ 189.095324][ T8618] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.095338][ T8618] __sys_bpf+0x104d/0x4de0 [ 189.095358][ T8618] ? __pfx___sys_bpf+0x10/0x10 [ 189.095380][ T8618] ? ksys_write+0x190/0x250 [ 189.095401][ T8618] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 189.095442][ T8618] ? fput+0x9b/0xd0 [ 189.095462][ T8618] ? ksys_write+0x1ac/0x250 [ 189.095480][ T8618] ? __pfx_ksys_write+0x10/0x10 [ 189.095502][ T8618] __ia32_sys_bpf+0x76/0xe0 [ 189.095525][ T8618] __do_fast_syscall_32+0x7c/0x3a0 [ 189.095550][ T8618] do_fast_syscall_32+0x32/0x80 [ 189.095570][ T8618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.095590][ T8618] RIP: 0023:0xf7f91579 [ 189.095603][ T8618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.095619][ T8618] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 189.095636][ T8618] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 189.095646][ T8618] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.095656][ T8618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.095665][ T8618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.095674][ T8618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.095695][ T8618] [ 189.795681][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 189.795961][ T40] audit: type=1326 audit(1756485145.002:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.893414][ T40] audit: type=1326 audit(1756485145.002:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.943884][ T40] audit: type=1326 audit(1756485145.032:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.950881][ T40] audit: type=1326 audit(1756485145.032:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.965603][ T40] audit: type=1326 audit(1756485145.062:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.973230][ T40] audit: type=1326 audit(1756485145.062:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 189.980230][ T40] audit: type=1326 audit(1756485145.062:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 189.987657][ T40] audit: type=1326 audit(1756485145.062:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 189.994582][ T40] audit: type=1326 audit(1756485145.062:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 190.002038][ T40] audit: type=1326 audit(1756485145.072:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.708" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 190.288883][ T8634] openvswitch: : Dropping previously announced user features [ 190.298214][ T6014] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.450640][ T6014] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.453523][ T6014] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 190.456739][ T6014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.473756][ T6014] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.479123][ T6014] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 190.482960][ T6014] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.502209][ T6014] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.505282][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.507846][ T6014] usb 6-1: Product: syz [ 190.509287][ T6014] usb 6-1: Manufacturer: syz [ 190.514881][ T8631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.519435][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 190.521074][ T6014] cdc_wdm 6-1:1.0: skipping garbage [ 190.523312][ T6014] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 190.525140][ T6014] cdc_wdm 6-1:1.0: Unknown control protocol [ 190.726108][ T6014] usb 6-1: USB disconnect, device number 9 [ 190.934251][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 191.805849][ T8653] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 191.815816][ T8653] fuse: Bad value for 'group_id' [ 191.819091][ T8653] fuse: Bad value for 'group_id' [ 192.786314][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 192.796423][ T8667] bond_slave_0: entered promiscuous mode [ 192.798474][ T8667] bond_slave_1: entered promiscuous mode [ 192.801162][ T8667] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 192.809309][ T8667] bond_slave_0: left promiscuous mode [ 192.811673][ T8667] bond_slave_1: left promiscuous mode [ 192.851393][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 192.859385][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 192.865547][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 193.033871][ T8685] mkiss: ax0: crc mode is auto. [ 193.813818][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.816017][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.043884][ T8715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.221476][ T8715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.462107][ T8715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.540028][ T8715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.652011][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.658413][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.736522][ T1145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.741449][ T1145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.694190][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 197.205608][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 197.208775][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.838613][ T8772] tc_dump_action: action bad kind [ 198.873321][ T8780] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.757'. [ 198.916473][ T8785] loop3: detected capacity change from 0 to 1 [ 198.923329][ T8785] Dev loop3: unable to read RDB block 1 [ 198.925448][ T8785] loop3: unable to read partition table [ 198.928889][ T8785] loop3: partition table beyond EOD, truncated [ 198.931069][ T8785] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.434108][ T8778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.795323][ T8778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.976007][ T8778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.060059][ T8778] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.076137][ T8805] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 200.110129][ T8805] bond0: (slave gretap1): making interface the new active one [ 200.114938][ T8805] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 200.135887][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 200.142251][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.293673][ T8807] dlm: no local IP address has been set [ 200.296735][ T8807] dlm: cannot start dlm midcomms -107 [ 200.310536][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.834904][ T1149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.838471][ T1149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.850913][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.303182][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 202.312509][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 204.573204][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 205.546161][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 205.555466][ T8867] gretap1: entered promiscuous mode [ 205.559344][ T8867] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.564743][ T8867] gretap1: left promiscuous mode [ 205.605297][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 205.718551][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 206.958974][ T8889] FAULT_INJECTION: forcing a failure. [ 206.958974][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 206.964158][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(full) [ 206.964178][ T8889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.964186][ T8889] Call Trace: [ 206.964191][ T8889] [ 206.964197][ T8889] dump_stack_lvl+0x16c/0x1f0 [ 206.964218][ T8889] should_fail_ex+0x512/0x640 [ 206.964243][ T8889] ? __kvmalloc_node_noprof+0x124/0x620 [ 206.964259][ T8889] should_failslab+0xc2/0x120 [ 206.964276][ T8889] __kvmalloc_node_noprof+0x137/0x620 [ 206.964289][ T8889] ? css_rstat_updated+0x1c2/0x510 [ 206.964303][ T8889] ? io_pin_pages+0xbe/0x1e0 [ 206.964324][ T8889] ? io_pin_pages+0xbe/0x1e0 [ 206.964339][ T8889] io_pin_pages+0xbe/0x1e0 [ 206.964356][ T8889] io_sqe_buffer_register+0x16f/0x2010 [ 206.964382][ T8889] ? ___kmalloc_large_node+0x114/0x160 [ 206.964400][ T8889] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.964417][ T8889] ? rcu_is_watching+0x12/0xc0 [ 206.964431][ T8889] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 206.964449][ T8889] ? rcu_is_watching+0x12/0xc0 [ 206.964461][ T8889] ? trace_kmalloc+0x2b/0xd0 [ 206.964480][ T8889] ? iovec_from_user+0xbb/0x140 [ 206.964493][ T8889] io_sqe_buffers_register+0x1ed/0x860 [ 206.964517][ T8889] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 206.964538][ T8889] ? __mutex_trylock_common+0xe9/0x250 [ 206.964555][ T8889] ? __pfx___mutex_trylock_common+0x10/0x10 [ 206.964574][ T8889] __io_uring_register+0x21e2/0x23c0 [ 206.964592][ T8889] ? __pfx___io_uring_register+0x10/0x10 [ 206.964613][ T8889] ? __pfx___mutex_lock+0x10/0x10 [ 206.964633][ T8889] ? __fget_files+0x20e/0x3c0 [ 206.964651][ T8889] __ia32_sys_io_uring_register+0x169/0x280 [ 206.964670][ T8889] __do_fast_syscall_32+0x7c/0x3a0 [ 206.964688][ T8889] do_fast_syscall_32+0x32/0x80 [ 206.964705][ T8889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.964720][ T8889] RIP: 0023:0xf7f91579 [ 206.964730][ T8889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 206.964742][ T8889] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 00000000000001ab [ 206.964754][ T8889] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 206.964762][ T8889] RDX: 0000000080002300 RSI: 0000000000003100 RDI: 0000000000000000 [ 206.964768][ T8889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.964775][ T8889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 206.964782][ T8889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.964797][ T8889] [ 207.069713][ T8889] block nbd2: Attempted send on invalid socket [ 207.072372][ T8889] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.076000][ T8889] block nbd2: Attempted send on invalid socket [ 207.078173][ T8889] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.082654][ T8889] Mount JFS Failure: -5 [ 207.084708][ T8889] jfs_mount failed w/return code = -5 [ 207.663728][ T8895] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.424624][ T8911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 208.427931][ T8911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.451469][ T8911] vhci_hcd vhci_hcd.0: Device attached [ 208.798854][ T40] kauditd_printk_skb: 927 callbacks suppressed [ 208.798871][ T40] audit: type=1326 audit(1756485164.012:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.831440][ T40] audit: type=1326 audit(1756485164.012:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.847464][ T40] audit: type=1326 audit(1756485164.022:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.857514][ T40] audit: type=1326 audit(1756485164.022:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.864402][ T40] audit: type=1326 audit(1756485164.022:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.872919][ T40] audit: type=1326 audit(1756485164.022:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 208.880978][ T40] audit: type=1326 audit(1756485164.022:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 208.889541][ T40] audit: type=1326 audit(1756485164.022:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 208.896481][ T40] audit: type=1326 audit(1756485164.022:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 208.903188][ T40] audit: type=1326 audit(1756485164.022:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.798" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000 [ 208.959099][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 208.969140][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 209.043429][ T8912] vhci_hcd: connection closed [ 209.046251][ T46] vhci_hcd: stop threads [ 209.049326][ T46] vhci_hcd: release socket [ 209.053061][ T46] vhci_hcd: disconnect device [ 209.057249][ T29] usb 42-1: enqueue for inactive port 0 [ 209.459156][ T29] usb usb42-port1: attempt power cycle [ 209.636252][ T8935] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 210.197748][ T8946] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 210.218361][ T29] usb usb42-port1: unable to enumerate USB device [ 210.412390][ T8946] team0: Port device netdevsim0 added [ 213.905718][ T9003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.988489][ T9003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.071852][ T9003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.166874][ T9003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.286808][ T1149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.291792][ T1149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.294927][ T1149] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.298515][ T1149] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.406666][ T9017] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 214.441982][ T9018] Bluetooth: MGMT ver 1.23 [ 216.097215][ T6062] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 216.169650][ T9044] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 216.248836][ T6062] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.252639][ T6062] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 216.256397][ T6062] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.316155][ T6062] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.321339][ T6062] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.326255][ T6062] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.332592][ T6062] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.336098][ T6062] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.339813][ T6062] usb 8-1: Product: syz [ 216.341457][ T6062] usb 8-1: Manufacturer: syz [ 216.348176][ T9043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.352836][ T6062] cdc_wdm 8-1:1.0: skipping garbage [ 216.355332][ T6062] cdc_wdm 8-1:1.0: skipping garbage [ 216.359580][ T6062] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 216.362472][ T6062] cdc_wdm 8-1:1.0: Unknown control protocol [ 216.560496][ T1344] usb 8-1: USB disconnect, device number 17 [ 217.236095][ T9057] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 219.951312][ T34] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 219.981857][ T9092] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 220.149090][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.152277][ T34] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 220.155488][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.159469][ T34] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.165162][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.277282][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.315898][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.319150][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.322038][ T34] usb 8-1: Product: syz [ 220.323538][ T34] usb 8-1: Manufacturer: syz [ 220.332127][ T9091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.337585][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 220.339855][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 220.363765][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 220.366137][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 220.557781][ T6062] usb 8-1: USB disconnect, device number 18 [ 220.648030][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 220.651947][ T9108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.950103][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 220.968498][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.973444][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.807508][ T9132] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 225.960131][ T9148] serio: Serial port ptm0 [ 226.044774][ T9155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.051353][ T9155] netlink: 'syz.1.868': attribute type 19 has an invalid length. [ 228.119160][ T9161] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 228.836393][ T9176] random: crng reseeded on system resumption [ 229.454205][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 229.462743][ T9192] bond_slave_0: entered promiscuous mode [ 229.465526][ T9192] bond_slave_1: entered promiscuous mode [ 229.468948][ T9192] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 229.473858][ T9192] bond_slave_0: left promiscuous mode [ 229.476044][ T9192] bond_slave_1: left promiscuous mode [ 229.507631][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 229.535380][ T9195] FAULT_INJECTION: forcing a failure. [ 229.535380][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.541260][ T9195] CPU: 2 UID: 0 PID: 9195 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) [ 229.541284][ T9195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.541294][ T9195] Call Trace: [ 229.541302][ T9195] [ 229.541310][ T9195] dump_stack_lvl+0x16c/0x1f0 [ 229.541337][ T9195] should_fail_ex+0x512/0x640 [ 229.541363][ T9195] _copy_from_user+0x2e/0xd0 [ 229.541390][ T9195] move_addr_to_kernel+0x65/0x170 [ 229.541409][ T9195] __sys_sendto+0x1be/0x520 [ 229.541429][ T9195] ? __pfx___sys_sendto+0x10/0x10 [ 229.541455][ T9195] ? bpf_trace_run2+0x26b/0x590 [ 229.541488][ T9195] ? __might_fault+0xe3/0x190 [ 229.541506][ T9195] ? __might_fault+0x13b/0x190 [ 229.541529][ T9195] __ia32_sys_sendto+0xdd/0x1b0 [ 229.541548][ T9195] ? syscall_trace_enter+0xee/0x240 [ 229.541575][ T9195] __do_fast_syscall_32+0x7c/0x3a0 [ 229.541599][ T9195] do_fast_syscall_32+0x32/0x80 [ 229.541621][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.541641][ T9195] RIP: 0023:0xf7f87579 [ 229.541653][ T9195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.541670][ T9195] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 229.541685][ T9195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 229.541696][ T9195] RDX: 00000000000100a6 RSI: 0000000000000000 RDI: 0000000080000140 [ 229.541706][ T9195] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 229.541715][ T9195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.541724][ T9195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.541745][ T9195] [ 229.688747][ T60] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 229.711548][ T9200] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 229.843297][ T9207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.852103][ T60] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.856496][ T60] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 229.863021][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.867049][ T60] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.877196][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 229.880899][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.886474][ T60] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.890968][ T60] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.894109][ T60] usb 8-1: Product: syz [ 229.895457][ T60] usb 8-1: Manufacturer: syz [ 229.910613][ T9190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.917811][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 229.919742][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 229.927579][ T60] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 229.929839][ T60] cdc_wdm 8-1:1.0: Unknown control protocol [ 230.121442][ T60] usb 8-1: USB disconnect, device number 19 [ 230.191645][ T9214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 231.071494][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 231.082327][ T9222] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 231.132645][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 231.285647][ T9231] macvtap0: refused to change device tx_queue_len [ 231.587016][ T9236] 9p: Unknown uid 00000000004294967295 [ 231.605310][ T9234] tipc: Enabled bearer , priority 0 [ 231.619924][ T9233] tipc: Disabling bearer [ 231.695384][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.896'. [ 231.702626][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.896'. [ 232.860098][ T9256] 8021q: VLANs not supported on wg1 [ 233.117309][ T6014] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 233.281400][ T6014] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 233.284272][ T6014] usb 8-1: config 1 has no interface number 0 [ 233.286301][ T6014] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 233.290915][ T6014] usb 8-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.294918][ T6014] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 193, changing to 11 [ 233.302702][ T6014] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 233.305730][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.308885][ T6014] usb 8-1: Product: syz [ 233.310719][ T6014] usb 8-1: Manufacturer: syz [ 233.312574][ T6014] usb 8-1: SerialNumber: syz [ 233.316747][ T9256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.320693][ T9256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.324626][ T6014] usb 8-1: Expected 3 endpoints, found: 2 [ 233.437508][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 233.532278][ T6014] usb 8-1: USB disconnect, device number 20 [ 233.615749][ T60] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.622511][ T60] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 233.625808][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.633742][ T60] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.645026][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 233.662617][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.674856][ T60] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.682115][ T60] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.688942][ T60] usb 6-1: Product: syz [ 233.692217][ T60] usb 6-1: Manufacturer: syz [ 233.726580][ T9261] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 233.745503][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 233.747925][ T60] cdc_wdm 6-1:1.0: skipping garbage [ 233.759139][ T60] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 233.762607][ T60] cdc_wdm 6-1:1.0: Unknown control protocol [ 233.968506][ T6062] usb 6-1: USB disconnect, device number 10 [ 234.314250][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.910'. [ 234.318257][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.910'. [ 234.466933][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 234.480121][ T9284] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.486826][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 234.979457][ T40] kauditd_printk_skb: 458 callbacks suppressed [ 234.979471][ T40] audit: type=1326 audit(1756485190.192:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.000803][ T40] audit: type=1326 audit(1756485190.192:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f915a7 code=0x7fc00000 [ 235.008764][ T40] audit: type=1326 audit(1756485190.192:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.016494][ T40] audit: type=1326 audit(1756485190.192:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.025423][ T40] audit: type=1326 audit(1756485190.192:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.033121][ T40] audit: type=1326 audit(1756485190.192:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.045064][ T40] audit: type=1326 audit(1756485190.192:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.052520][ T40] audit: type=1326 audit(1756485190.192:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.061409][ T40] audit: type=1326 audit(1756485190.192:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.068869][ T40] audit: type=1326 audit(1756485190.192:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7fc00000 [ 235.172665][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.920'. [ 235.176600][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.920'. [ 235.210143][ T9308] FAULT_INJECTION: forcing a failure. [ 235.210143][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 235.214552][ T9308] CPU: 3 UID: 0 PID: 9308 Comm: syz.3.922 Not tainted syzkaller #0 PREEMPT(full) [ 235.214569][ T9308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.214577][ T9308] Call Trace: [ 235.214583][ T9308] [ 235.214592][ T9308] dump_stack_lvl+0x16c/0x1f0 [ 235.214630][ T9308] should_fail_ex+0x512/0x640 [ 235.214648][ T9308] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 235.214663][ T9308] should_failslab+0xc2/0x120 [ 235.214679][ T9308] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.214693][ T9308] ? getname_flags.part.0+0x4c/0x550 [ 235.214712][ T9308] getname_flags.part.0+0x4c/0x550 [ 235.214730][ T9308] __ia32_sys_rmdir+0xaf/0x110 [ 235.214744][ T9308] __do_fast_syscall_32+0x7c/0x3a0 [ 235.214761][ T9308] do_fast_syscall_32+0x32/0x80 [ 235.214775][ T9308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.214790][ T9308] RIP: 0023:0xf703e579 [ 235.214799][ T9308] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 235.214810][ T9308] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000028 [ 235.214822][ T9308] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 235.214828][ T9308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.214834][ T9308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.214840][ T9308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 235.214847][ T9308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.214859][ T9308] [ 235.308532][ T9310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.372108][ T9311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.923'. [ 235.560868][ T9318] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 235.571307][ T9318] CIFS mount error: No usable UNC path provided in device string! [ 235.571307][ T9318] [ 235.576193][ T9318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.976056][ T9328] netlink: 224 bytes leftover after parsing attributes in process `syz.0.927'. [ 238.334863][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 238.343358][ T9341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 238.395194][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 239.049858][ T9355] tipc: Enabling of bearer rejected, failed to enable media [ 242.107190][ T9407] block nbd2: Device being setup by another task [ 242.110056][ T9403] block nbd2: NBD_DISCONNECT [ 242.111723][ T9403] block nbd2: Send disconnect failed -22 [ 242.115305][ T9401] block nbd2: Disconnected due to user request. [ 242.118788][ T9401] block nbd2: shutting down sockets [ 243.768645][ T9454] overlayfs: upper fs does not support file handles, falling back to index=off. [ 243.773271][ T9450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.776709][ T9454] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 243.949679][ T9450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.962480][ T9446] ubi0: attaching mtd0 [ 243.966000][ T9446] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 244.012017][ T9450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.080002][ T9464] IPVS: length: 139 != 8 [ 244.089950][ T9450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.267990][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.301270][ T1145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.311934][ T1145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.324612][ T1145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.455538][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 244.471227][ T9469] bond_slave_0: entered promiscuous mode [ 244.473095][ T9469] bond_slave_1: entered promiscuous mode [ 244.475960][ T9469] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 244.513128][ T9469] bond_slave_0: left promiscuous mode [ 244.514605][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 244.515268][ T9469] bond_slave_1: left promiscuous mode [ 244.859556][ T9476] binder: 9475:9476 ioctl 40045566 14 returned -22 [ 245.333861][ T9489] IPVS: length: 139 != 8 [ 245.352144][ T9489] FAULT_INJECTION: forcing a failure. [ 245.352144][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 245.357978][ T9489] CPU: 3 UID: 0 PID: 9489 Comm: syz.3.972 Not tainted syzkaller #0 PREEMPT(full) [ 245.358010][ T9489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.358017][ T9489] Call Trace: [ 245.358022][ T9489] [ 245.358026][ T9489] dump_stack_lvl+0x16c/0x1f0 [ 245.358046][ T9489] should_fail_ex+0x512/0x640 [ 245.358062][ T9489] ? __kmalloc_noprof+0xbf/0x510 [ 245.358079][ T9489] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 245.358103][ T9489] should_failslab+0xc2/0x120 [ 245.358122][ T9489] __kmalloc_noprof+0xd2/0x510 [ 245.358138][ T9489] ? arch_stack_walk+0xa6/0x100 [ 245.358159][ T9489] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 245.358188][ T9489] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 245.358212][ T9489] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.358229][ T9489] ? rcu_is_watching+0x12/0xc0 [ 245.358262][ T9489] ? bpf_lsm_capable+0x9/0x10 [ 245.358273][ T9489] ? security_capable+0x7e/0x260 [ 245.358287][ T9489] genl_rcv_msg+0x55c/0x800 [ 245.358305][ T9489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.358322][ T9489] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 245.358342][ T9489] ? __lock_acquire+0x62e/0x1ce0 [ 245.358359][ T9489] netlink_rcv_skb+0x155/0x420 [ 245.358373][ T9489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.358390][ T9489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.358437][ T9489] ? netlink_deliver_tap+0x1ae/0xd30 [ 245.358455][ T9489] ? is_vmalloc_addr+0x86/0xa0 [ 245.358469][ T9489] genl_rcv+0x28/0x40 [ 245.358484][ T9489] netlink_unicast+0x5aa/0x870 [ 245.358501][ T9489] ? __pfx_netlink_unicast+0x10/0x10 [ 245.358518][ T9489] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 245.358543][ T9489] netlink_sendmsg+0x8d1/0xdd0 [ 245.358567][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.358589][ T9489] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 245.358609][ T9489] ____sys_sendmsg+0xa95/0xc70 [ 245.358632][ T9489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.358644][ T9489] ? get_compat_msghdr+0x11a/0x170 [ 245.358673][ T9489] ___sys_sendmsg+0x134/0x1d0 [ 245.358697][ T9489] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.358730][ T9489] ? find_held_lock+0x2b/0x80 [ 245.358761][ T9489] __sys_sendmsg+0x16d/0x220 [ 245.358784][ T9489] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.358816][ T9489] ? __secure_computing+0x21c/0x320 [ 245.358841][ T9489] __do_fast_syscall_32+0x7c/0x3a0 [ 245.358867][ T9489] do_fast_syscall_32+0x32/0x80 [ 245.358889][ T9489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.358910][ T9489] RIP: 0023:0xf703e579 [ 245.358924][ T9489] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.358940][ T9489] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 245.358956][ T9489] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040 [ 245.358967][ T9489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.358977][ T9489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.358986][ T9489] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.358995][ T9489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.359016][ T9489] [ 245.740979][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.974'. [ 245.755762][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 246.027630][ T9503] could not allocate digest TFM handle crc32-pclmul [ 247.654615][ T9539] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 248.155914][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.987'. [ 248.340552][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 248.652176][ T9579] random: crng reseeded on system resumption [ 249.191570][ T9588] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 250.738918][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 251.872885][ T9643] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 254.882606][ T9666] binder: 9665:9666 unknown command 0 [ 254.884547][ T9666] binder: 9665:9666 ioctl c0306201 800002c0 returned -22 [ 255.254026][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.256519][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.639958][ T9678] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 255.928274][ T9683] ubi31: attaching mtd0 [ 255.931206][ T9683] ubi31: scanning is finished [ 255.932809][ T9683] ubi31: empty MTD device detected [ 256.149155][ T9683] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 256.152108][ T9683] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 256.158354][ T9683] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 256.163427][ T9683] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 256.166576][ T9683] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 256.169007][ T9683] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 256.171661][ T9683] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 47195325 [ 256.174927][ T9683] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 256.180361][ T9687] ubi31: background thread "ubi_bgt31d" started, PID 9687 [ 256.321122][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 257.767527][ T9713] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 257.772710][ T9713] binder: 9712:9713 ioctl 4018620d 800000c0 returned -1 [ 258.588904][ T6062] e1000 0000:00:06.0 eth0: Reset adapter [ 258.647809][ T9721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 258.649933][ T9721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.653472][ T9721] vhci_hcd vhci_hcd.0: Device attached [ 258.756767][ T9732] Bluetooth: MGMT ver 1.23 [ 258.760069][ T9731] [U] ¹é [ 259.761205][ T9746] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0 [ 259.763773][ T9746] binder: 9745:9746 ioctl 4018620d 800000c0 returned -1 [ 260.770830][ T6040] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 261.617952][ T9726] vhci_hcd: connection closed [ 261.619389][ T12] vhci_hcd: stop threads [ 261.623552][ T12] vhci_hcd: release socket [ 261.625389][ T12] vhci_hcd: disconnect device [ 261.657429][ T6068] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 261.660571][ T6068] usb 39-1: enqueue for inactive port 0 [ 261.727511][ T6068] vhci_hcd: vhci_device speed not set [ 262.538135][ T9764] syzkaller1: entered promiscuous mode [ 262.545274][ T9764] syzkaller1: entered allmulticast mode [ 262.807564][ T9781] input: syz1 as /devices/virtual/input/input15 [ 262.894227][ T9785] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1053'. [ 263.820333][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 263.828734][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 264.647413][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 264.797405][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 264.802070][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.805815][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.809313][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.813334][ T34] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 264.816146][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.820556][ T34] usb 6-1: config 0 descriptor?? [ 265.228858][ T34] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 265.231111][ T34] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 265.233299][ T34] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 265.235707][ T34] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 265.239008][ T34] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 265.242921][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 265.255455][ T34] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 265.258373][ T34] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 265.327456][ T6061] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 265.427976][ T9815] FAULT_INJECTION: forcing a failure. [ 265.427976][ T9815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.432624][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.1.1060 Not tainted syzkaller #0 PREEMPT(full) [ 265.432642][ T9815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.432649][ T9815] Call Trace: [ 265.432655][ T9815] [ 265.432661][ T9815] dump_stack_lvl+0x16c/0x1f0 [ 265.432709][ T9815] should_fail_ex+0x512/0x640 [ 265.432734][ T9815] _copy_from_user+0x2e/0xd0 [ 265.432753][ T9815] get_compat_msghdr+0xa7/0x170 [ 265.432768][ T9815] ? __pfx_get_compat_msghdr+0x10/0x10 [ 265.432786][ T9815] ___sys_sendmsg+0x1ae/0x1d0 [ 265.432803][ T9815] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.432823][ T9815] ? find_held_lock+0x2b/0x80 [ 265.432843][ T9815] __sys_sendmsg+0x16d/0x220 [ 265.432857][ T9815] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.432877][ T9815] ? rcu_is_watching+0x12/0xc0 [ 265.432891][ T9815] __do_fast_syscall_32+0x7c/0x3a0 [ 265.432910][ T9815] do_fast_syscall_32+0x32/0x80 [ 265.432924][ T9815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.432938][ T9815] RIP: 0023:0xf7f87579 [ 265.432949][ T9815] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.432960][ T9815] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 265.432971][ T9815] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000680 [ 265.432978][ T9815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.432984][ T9815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.432990][ T9815] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.432996][ T9815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.433008][ T9815] [ 265.434353][ T6045] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 265.434842][ T6068] usb 6-1: USB disconnect, device number 11 [ 265.438295][ T6045] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.500271][ T6061] usb 8-1: Using ep0 maxpacket: 16 [ 265.504630][ T6045] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.508208][ T6061] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.509354][ T6045] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.513927][ T6061] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.522202][ T6061] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.528274][ T6061] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 265.532533][ T6061] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.537224][ T6061] usb 8-1: config 0 descriptor?? [ 266.136019][ T6061] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 266.138914][ T6061] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 266.142204][ T6061] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 266.145311][ T6061] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 266.148386][ T6061] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 266.152069][ T6061] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 266.160685][ T6061] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 266.163540][ T6061] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 266.438462][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 266.438847][ T60] usb 8-1: USB disconnect, device number 21 [ 266.443294][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.443331][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.443360][ T6014] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 266.544558][ T9851] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 266.602575][ T9851] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 268.762279][ T9890] FAULT_INJECTION: forcing a failure. [ 268.762279][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 268.762350][ T9890] CPU: 3 UID: 0 PID: 9890 Comm: syz.1.1083 Not tainted syzkaller #0 PREEMPT(full) [ 268.762371][ T9890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.762389][ T9890] Call Trace: [ 268.762394][ T9890] [ 268.762401][ T9890] dump_stack_lvl+0x16c/0x1f0 [ 268.762431][ T9890] should_fail_ex+0x512/0x640 [ 268.762531][ T9890] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 268.762554][ T9890] should_failslab+0xc2/0x120 [ 268.762578][ T9890] __kmalloc_cache_noprof+0x6a/0x3e0 [ 268.762597][ T9890] ? drm_atomic_state_alloc+0xb8/0x120 [ 268.762621][ T9890] drm_atomic_state_alloc+0xb8/0x120 [ 268.762640][ T9890] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 268.762684][ T9890] ? __pfx___might_resched+0x10/0x10 [ 268.762714][ T9890] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 268.762733][ T9890] ? __mutex_lock+0x1c5/0x1060 [ 268.762777][ T9890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.762812][ T9890] drm_client_modeset_commit_locked+0x14d/0x580 [ 268.762837][ T9890] drm_fb_helper_pan_display+0x32d/0xa40 [ 268.762878][ T9890] fb_pan_display+0x47c/0x7d0 [ 268.762898][ T9890] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 268.762930][ T9890] bit_update_start+0x49/0x1f0 [ 268.762957][ T9890] fbcon_switch+0xbf8/0x14c0 [ 268.762989][ T9890] ? __pfx_fbcon_switch+0x10/0x10 [ 268.763026][ T9890] ? __msecs_to_jiffies+0x45/0x50 [ 268.763048][ T9890] ? fbcon_cursor+0x2ea/0x5f0 [ 268.763079][ T9890] csi_J+0x863/0xad0 [ 268.763108][ T9890] do_con_write+0x41d7/0x8280 [ 268.763131][ T9890] ? __pfx___might_resched+0x10/0x10 [ 268.763170][ T9890] ? __pfx_do_con_write+0x10/0x10 [ 268.763195][ T9890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.763234][ T9890] con_write+0x23/0xb0 [ 268.763259][ T9890] n_tty_write+0x41c/0x11e0 [ 268.763292][ T9890] ? __pfx_n_tty_write+0x10/0x10 [ 268.763311][ T9890] ? __pfx_woken_wake_function+0x10/0x10 [ 268.763348][ T9890] ? __pfx_n_tty_write+0x10/0x10 [ 268.763366][ T9890] file_tty_write.constprop.0+0x504/0x9b0 [ 268.763401][ T9890] vfs_write+0x7d0/0x11d0 [ 268.763437][ T9890] ? __pfx_tty_write+0x10/0x10 [ 268.763462][ T9890] ? __pfx_vfs_write+0x10/0x10 [ 268.763482][ T9890] ? find_held_lock+0x2b/0x80 [ 268.763520][ T9890] ksys_write+0x12a/0x250 [ 268.763541][ T9890] ? __pfx_ksys_write+0x10/0x10 [ 268.763564][ T9890] ? rcu_is_watching+0x12/0xc0 [ 268.763587][ T9890] __do_fast_syscall_32+0x7c/0x3a0 [ 268.763616][ T9890] do_fast_syscall_32+0x32/0x80 [ 268.763642][ T9890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.763663][ T9890] RIP: 0023:0xf7f87579 [ 268.763679][ T9890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 268.763695][ T9890] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 268.763713][ T9890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 268.763725][ T9890] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.763735][ T9890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.763745][ T9890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 268.763755][ T9890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.763781][ T9890] [ 270.794105][ T9907] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 271.241988][ T9915] syzkaller1: entered promiscuous mode [ 271.244689][ T9915] syzkaller1: entered allmulticast mode [ 271.755386][ T9928] usb 2-1: USB disconnect, device number 2 [ 271.801270][ T9926] FAULT_INJECTION: forcing a failure. [ 271.801270][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 271.819151][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.0.1093 Not tainted syzkaller #0 PREEMPT(full) [ 271.819190][ T9926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.819197][ T9926] Call Trace: [ 271.819201][ T9926] [ 271.819206][ T9926] dump_stack_lvl+0x16c/0x1f0 [ 271.819240][ T9926] should_fail_ex+0x512/0x640 [ 271.819257][ T9926] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 271.819273][ T9926] should_failslab+0xc2/0x120 [ 271.819291][ T9926] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 271.819307][ T9926] ? copy_process+0x4b6/0x7690 [ 271.819324][ T9926] copy_process+0x4b6/0x7690 [ 271.819344][ T9926] ? __pfx_copy_process+0x10/0x10 [ 271.819366][ T9926] kernel_clone+0xfc/0x930 [ 271.819381][ T9926] ? __pfx_kernel_clone+0x10/0x10 [ 271.819401][ T9926] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 271.819418][ T9926] __do_compat_sys_ia32_clone+0xcb/0x110 [ 271.819435][ T9926] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 271.819464][ T9926] ? ksys_write+0x1ac/0x250 [ 271.819478][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 271.819492][ T9926] ? rcu_is_watching+0x12/0xc0 [ 271.819507][ T9926] __do_fast_syscall_32+0x7c/0x3a0 [ 271.819524][ T9926] do_fast_syscall_32+0x32/0x80 [ 271.819539][ T9926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.819554][ T9926] RIP: 0023:0xf710e579 [ 271.819563][ T9926] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 271.819574][ T9926] RSP: 002b:00000000f54dd50c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 271.819586][ T9926] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 271.819593][ T9926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.819599][ T9926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.819606][ T9926] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 271.819612][ T9926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.819626][ T9926] [ 272.987748][ T9950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.085152][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 273.092394][ T9955] gretap1: entered promiscuous mode [ 273.095175][ T9955] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 273.099167][ T9955] gretap1: left promiscuous mode [ 273.146356][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 273.423370][ T9960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'. [ 274.123958][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'. [ 274.233733][ T9977] tmpfs: Bad value for 'mpol' [ 275.399446][ T9995] FAULT_INJECTION: forcing a failure. [ 275.399446][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 275.407336][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.1.1115 Not tainted syzkaller #0 PREEMPT(full) [ 275.407355][ T9995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 275.407374][ T9995] Call Trace: [ 275.407383][ T9995] [ 275.407392][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 275.407418][ T9995] should_fail_ex+0x512/0x640 [ 275.407439][ T9995] ? __kmalloc_noprof+0xbf/0x510 [ 275.407458][ T9995] ? io_cache_alloc_new+0x45/0xf0 [ 275.407476][ T9995] should_failslab+0xc2/0x120 [ 275.407491][ T9995] __kmalloc_noprof+0xd2/0x510 [ 275.407503][ T9995] ? mark_held_locks+0x49/0x80 [ 275.407520][ T9995] io_cache_alloc_new+0x45/0xf0 [ 275.407536][ T9995] io_msg_alloc_async+0x1c3/0x3a0 [ 275.407551][ T9995] io_bind_prep+0x1a3/0x260 [ 275.407567][ T9995] io_submit_sqes+0x853/0x25c0 [ 275.407588][ T9995] __do_sys_io_uring_enter+0xd6a/0x1630 [ 275.407605][ T9995] ? __fget_files+0x20e/0x3c0 [ 275.407620][ T9995] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 275.407640][ T9995] ? fput+0x9b/0xd0 [ 275.407662][ T9995] ? ksys_write+0x1ac/0x250 [ 275.407688][ T9995] ? __pfx_ksys_write+0x10/0x10 [ 275.407703][ T9995] ? rcu_is_watching+0x12/0xc0 [ 275.407716][ T9995] __do_fast_syscall_32+0x7c/0x3a0 [ 275.407732][ T9995] do_fast_syscall_32+0x32/0x80 [ 275.407747][ T9995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.407760][ T9995] RIP: 0023:0xf7f87579 [ 275.407769][ T9995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 275.407779][ T9995] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 275.407790][ T9995] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002d3e [ 275.407797][ T9995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.407803][ T9995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.407809][ T9995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 275.407814][ T9995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.407827][ T9995] [ 276.529141][T10013] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 277.184681][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 277.205979][T10021] gretap1: entered promiscuous mode [ 277.212843][T10021] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 277.224209][T10021] gretap1: left promiscuous mode [ 277.300178][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 277.387439][ T54] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 277.547255][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 277.555783][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.560293][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.572195][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 277.578692][ T54] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 277.581960][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.592952][ T54] usb 8-1: config 0 descriptor?? [ 278.705146][ T54] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 278.835122][ T54] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 278.838427][ T54] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 278.840584][ T54] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 278.843709][ T54] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 278.855523][ T54] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 278.875639][ T54] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 278.879419][ T54] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 279.013485][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 279.927522][ T8178] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 279.933877][ T8178] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 279.944723][ T8178] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 279.960975][ T8178] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 280.067240][ T54] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 280.224462][ T54] usb 8-1: device descriptor read/64, error -32 [ 280.497233][ T54] usb 8-1: reset high-speed USB device number 22 using dummy_hcd [ 280.627358][ T54] usb 8-1: device descriptor read/64, error -32 [ 281.307589][T10071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 281.310233][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 281.313718][T10071] vhci_hcd vhci_hcd.0: Device attached [ 281.530715][ T6068] vhci_hcd: vhci_device speed not set [ 281.557224][ T8178] usb 8-1: USB disconnect, device number 22 [ 281.588387][ T6068] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 281.701331][T10072] vhci_hcd: connection reset by peer [ 281.710221][ T1145] vhci_hcd: stop threads [ 281.712420][ T1145] vhci_hcd: release socket [ 281.714226][ T1145] vhci_hcd: disconnect device [ 282.217917][T10087] batadv_slave_1: entered promiscuous mode [ 282.309275][T10087] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 282.335556][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.338717][T10087] bond0: (slave wlan1): Opening slave failed [ 282.351695][T10086] batadv_slave_1: left promiscuous mode [ 282.560833][T10097] usb usb9: usbfs: process 10097 (syz.3.1138) did not claim interface 0 before use [ 282.773322][ T5982] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 282.778313][T10103] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 282.807891][T10105] openvswitch: : Dropping previously announced user features [ 284.178214][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 284.411115][T10138] FAULT_INJECTION: forcing a failure. [ 284.411115][T10138] name failslab, interval 1, probability 0, space 0, times 0 [ 284.415906][T10138] CPU: 3 UID: 0 PID: 10138 Comm: syz.3.1147 Not tainted syzkaller #0 PREEMPT(full) [ 284.415936][T10138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.415943][T10138] Call Trace: [ 284.415949][T10138] [ 284.415954][T10138] dump_stack_lvl+0x16c/0x1f0 [ 284.415973][T10138] should_fail_ex+0x512/0x640 [ 284.415989][T10138] ? fs_reclaim_acquire+0xae/0x150 [ 284.416007][T10138] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.416023][T10138] should_failslab+0xc2/0x120 [ 284.416037][T10138] __kmalloc_noprof+0xd2/0x510 [ 284.416050][T10138] ? trace_kmalloc+0x2b/0xd0 [ 284.416077][T10138] ? __kmalloc_noprof+0x242/0x510 [ 284.416091][T10138] tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.416108][T10138] ? tomoyo_fill_path_info+0x233/0x420 [ 284.416121][T10138] tomoyo_mount_acl+0x1ae/0x850 [ 284.416135][T10138] ? bpf_ksym_find+0x124/0x1c0 [ 284.416146][T10138] ? is_bpf_text_address+0x94/0x1a0 [ 284.416160][T10138] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 284.416173][T10138] ? __kernel_text_address+0xd/0x40 [ 284.416183][T10138] ? unwind_get_return_address+0x59/0xa0 [ 284.416195][T10138] ? arch_stack_walk+0xa6/0x100 [ 284.416220][T10138] ? tomoyo_domain+0xbb/0x150 [ 284.416229][T10138] ? tomoyo_profile+0x47/0x60 [ 284.416239][T10138] tomoyo_mount_permission+0x16d/0x420 [ 284.416253][T10138] ? tomoyo_mount_permission+0x14f/0x420 [ 284.416268][T10138] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 284.416290][T10138] security_sb_mount+0x9b/0x260 [ 284.416304][T10138] path_mount+0x15f/0x2000 [ 284.416323][T10138] ? __pfx_path_mount+0x10/0x10 [ 284.416337][T10138] ? kmem_cache_free+0x2d1/0x4d0 [ 284.416349][T10138] ? putname+0x154/0x1a0 [ 284.416363][T10138] ? getname_flags.part.0+0x1c5/0x550 [ 284.416383][T10138] ? __ia32_sys_mount+0x28b/0x310 [ 284.416396][T10138] __ia32_sys_mount+0x28b/0x310 [ 284.416410][T10138] ? __pfx___ia32_sys_mount+0x10/0x10 [ 284.416424][T10138] ? rcu_is_watching+0x12/0xc0 [ 284.416437][T10138] __do_fast_syscall_32+0x7c/0x3a0 [ 284.416453][T10138] do_fast_syscall_32+0x32/0x80 [ 284.416468][T10138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.416482][T10138] RIP: 0023:0xf703e579 [ 284.416491][T10138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 284.416501][T10138] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 284.416512][T10138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 284.416519][T10138] RDX: 0000000080000b80 RSI: 0000000000004008 RDI: 00000000800000c0 [ 284.416525][T10138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.416531][T10138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.416537][T10138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.416550][T10138] [ 284.416668][T10138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.712542][T10156] binder: 10155:10156 ioctl c018937b 80000240 returned -22 [ 285.720807][T10156] binder: 10155:10156 ioctl c0306201 80000680 returned -14 [ 286.677763][ T6068] vhci_hcd: vhci_device speed not set [ 286.937251][T10174] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 286.951484][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 286.976688][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 287.061471][T10175] gretap1: entered promiscuous mode [ 287.065809][T10175] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 287.072149][T10175] gretap1: left promiscuous mode [ 288.481509][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 288.486997][T10195] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 288.488064][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'. [ 288.490052][T10195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.499741][T10195] vhci_hcd vhci_hcd.0: Device attached [ 288.522538][T10197] vhci_hcd: connection closed [ 288.524241][ T170] vhci_hcd: stop threads [ 288.528664][ T170] vhci_hcd: release socket [ 288.530621][ T170] vhci_hcd: disconnect device [ 290.188775][ T841] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 290.197422][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 290.339320][ T841] usb 6-1: config index 0 descriptor too short (expected 352, got 96) [ 290.343018][ T841] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.361190][ T841] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 290.364701][ T841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.371523][ T841] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.375546][ T841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 290.380552][ T841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.386316][ T841] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.389948][ T841] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.393533][ T841] usb 6-1: Product: syz [ 290.396226][ T841] usb 6-1: Manufacturer: syz [ 290.400153][T10213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.403311][ T841] cdc_wdm 6-1:1.0: skipping garbage [ 290.405004][ T841] cdc_wdm 6-1:1.0: skipping garbage [ 290.408765][ T841] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 290.411187][ T841] cdc_wdm 6-1:1.0: Unknown control protocol [ 290.795620][ T6040] usb 6-1: USB disconnect, device number 12 [ 291.079881][T10218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.082761][T10218] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 291.098566][T10218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.101645][T10218] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 291.110997][T10218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.114716][T10218] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 291.133848][T10218] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 291.138925][T10218] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 291.144523][T10218] CPU: 0 UID: 0 PID: 10218 Comm: syz.0.1170 Not tainted syzkaller #0 PREEMPT(full) [ 291.148308][T10218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.152022][T10218] RIP: 0010:klist_put+0x4d/0x1b0 [ 291.153981][T10218] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 291.161017][T10218] RSP: 0018:ffffc90003faf8d0 EFLAGS: 00010202 [ 291.163430][T10218] RAX: dffffc0000000000 RBX: ffff888060765c60 RCX: ffffc90025db9000 [ 291.166307][T10218] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 291.168828][T10218] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211cefc [ 291.171384][T10218] R10: ffffffff908e77e3 R11: 000000000000001e R12: 0000000000000000 [ 291.174213][T10218] R13: 0000000000000001 R14: 1ffff920007f5f22 R15: ffffffff908e77a0 [ 291.176937][T10218] FS: 0000000000000000(0000) GS:ffff8880974c3000(0063) knlGS:00000000f54ddb40 [ 291.179949][T10218] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 291.182119][T10218] CR2: 000000008002d000 CR3: 0000000023158000 CR4: 0000000000352ef0 [ 291.184844][T10218] Call Trace: [ 291.186015][T10218] [ 291.186977][T10218] klist_remove+0x13f/0x2e0 [ 291.188399][T10218] ? kobject_move+0x15d/0x260 [ 291.189887][T10218] ? __pfx_klist_remove+0x10/0x10 [ 291.191488][T10218] ? __pfx_kobject_move+0x10/0x10 [ 291.193271][T10218] ? get_device_parent+0x1ed/0x4e0 [ 291.195483][T10218] device_move+0x12d/0x10d0 [ 291.197443][T10218] hci_conn_del_sysfs+0x81/0x180 [ 291.199598][T10218] hci_conn_del+0x5b3/0xe70 [ 291.201068][T10218] hci_conn_hash_flush+0x186/0x260 [ 291.202707][T10218] hci_dev_close_sync+0x602/0x11d0 [ 291.204891][T10218] ? __pfx_bt_err+0x10/0x10 [ 291.206451][T10218] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 291.208347][T10218] ? do_raw_spin_lock+0x12c/0x2b0 [ 291.210117][T10218] hci_dev_do_close+0x2e/0x90 [ 291.211619][T10218] hci_rfkill_set_block+0x225/0x360 [ 291.213497][T10218] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.215697][T10218] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 291.217986][T10218] rfkill_set_block+0x1fb/0x550 [ 291.220026][T10218] rfkill_fop_write+0x2c0/0x580 [ 291.222024][T10218] ? common_file_perm+0x1a9/0x340 [ 291.224227][T10218] ? __pfx_rfkill_fop_write+0x10/0x10 [ 291.226530][T10218] ? bpf_lsm_inode_setsecurity+0x10/0x20 [ 291.229212][T10218] ? security_file_permission+0x71/0x210 [ 291.231538][T10218] ? rw_verify_area+0xcf/0x6c0 [ 291.233575][T10218] ? __pfx_rfkill_fop_write+0x10/0x10 [ 291.235555][T10218] vfs_write+0x2a0/0x11d0 [ 291.237211][T10218] ? __pfx_vfs_write+0x10/0x10 [ 291.238922][T10218] ? find_held_lock+0x2b/0x80 [ 291.240442][T10218] ? __fget_files+0x204/0x3c0 [ 291.241964][T10218] ? __fget_files+0x20e/0x3c0 [ 291.243570][T10218] ksys_write+0x1f8/0x250 [ 291.244910][T10218] ? __pfx_ksys_write+0x10/0x10 [ 291.246527][T10218] ? rcu_is_watching+0x12/0xc0 [ 291.248035][T10218] __do_fast_syscall_32+0x7c/0x3a0 [ 291.250057][T10218] do_fast_syscall_32+0x32/0x80 [ 291.252102][T10218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.254633][T10218] RIP: 0023:0xf710e579 [ 291.256109][T10218] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.263845][T10218] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 291.267317][T10218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 291.270585][T10218] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.273928][T10218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.277224][T10218] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 291.280636][T10218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.283573][T10218] [ 291.284729][T10218] Modules linked in: [ 291.286640][T10218] ---[ end trace 0000000000000000 ]--- [ 291.291570][T10218] RIP: 0010:klist_put+0x4d/0x1b0 [ 291.298191][T10218] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 291.308602][T10218] RSP: 0018:ffffc90003faf8d0 EFLAGS: 00010202 [ 291.311067][T10218] RAX: dffffc0000000000 RBX: ffff888060765c60 RCX: ffffc90025db9000 [ 291.314053][T10218] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 291.316564][T10218] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211cefc [ 291.321051][T10218] R10: ffffffff908e77e3 R11: 000000000000001e R12: 0000000000000000 [ 291.323622][T10218] R13: 0000000000000001 R14: 1ffff920007f5f22 R15: ffffffff908e77a0 [ 291.326110][T10218] FS: 0000000000000000(0000) GS:ffff8880974c3000(0063) knlGS:00000000f54ddb40 [ 291.329554][T10218] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 291.334839][T10218] CR2: 00007f4413c7ead0 CR3: 0000000023158000 CR4: 0000000000352ef0 [ 291.339102][T10218] Kernel panic - not syncing: Fatal exception [ 291.342427][T10218] Kernel Offset: disabled [ 291.344358][T10218] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:34:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617075 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90003faf2d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0f96c0 R15=ffffffff85617010 RIP=ffffffff8561709f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008002d000 CR3=0000000023158000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88802436c880 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000440dc0 RSI=0000000000000000 RDI=ffffea00008f53c0 RBP=0000000000440dc0 RSP=ffffc90003cef640 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed10047a9e00 R11=dffffc0000000000 R12=1ffff9200079dece R13=ffffea00008f5400 R14=dffffc0000000000 R15=ffff88802436c880 RIP=ffffffff822a8fcd RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53ecda4 CR3=0000000027cf5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000012 RCX=dffffc0000000000 RDX=ffff888022302440 RSI=ffffffff8c165200 RDI=0000000000000012 RBP=ffffc90002c6f320 RSP=ffffc90002c6f1e8 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200058de46 R13=0000000000000010 R14=0000000000000001 R15=ffffffff8c1656a5 RIP=ffffffff84e90d0e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb98e9ae300 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d5ab72aec8 CR3=000000004b688000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=4a47030df3ee937e 3186f090b10bc6da 4a47030df3ee937e 3186f090b10bc6da 4a47030df3ee937e 3186f090b10bc6da 4a47030df3ee937e 3186f090b10bc6da ZMM18=572d6fe421e796e2 0f34b7c2838bf383 572d6fe421e796e2 0f34b7c2838bf383 572d6fe421e796e2 0f34b7c2838bf383 572d6fe421e796e2 0f34b7c2838bf383 ZMM19=e50a000000000000 0000000000000004 e50a000000000000 0000000000000003 e50a000000000000 0000000000000002 e50a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000000000000 0000000000000000 000001ffffffffff ffffffdf080de003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000dd80320c0 8008000dd0030fff ffffff040dc00300 08000db803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0db0030fffffffff 040da0030fffffff ff040d9003000800 0d88032208000d80 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffeb40800098002 060108d032080006 8080860800000206 0140820108000190 ZMM25=0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 0f34b7c20f34b7c2 ZMM26=21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 21e796e221e796e2 ZMM27=572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 572d6fe4572d6fe4 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 e40a0000e40a0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802418c880 RCX=ffffffff81608e12 RDX=ffff88802418c880 RSI=0000000000000001 RDI=ffff88802418c880 RBP=ffffc9000355ff30 RSP=ffffc9000355fef8 R8 =0000000000000001 R9 =ffffed1004831910 R10=ffff88802418c887 R11=0000000000000001 R12=0000000020004000 R13=000000000000010b R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81977824 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008057f000 CR3=0000000069c35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000