last executing test programs: 3m7.261865454s ago: executing program 2 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 3m6.380499651s ago: executing program 2 (id=350): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0xd2a, 0x1004}, {0xa43, 0x5}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x680, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x66c, 0x1, [@m_mpls={0x18c, 0x15, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x10001, 0x2, 0x200, 0x3}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7fff, 0x10000000, 0x4}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x7, 0x10000000, 0x1, 0x80000000}}}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x0, 0x2, 0x7}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd0, 0x6, "a37513cc7ec6c00e11c2eeaf16e32bf159704b9aedb1539705a7e823ee6fcc01a48a3aeccd5ea47ca893df31841680e22b9c9cb620ff25aac9f228b257b6f89ba917a337d4ccecbe5036c0c52408cca2121e5f972232b6e103d2d51112242c9b17f9cc405a0d930c31ab87c651e24b18912cab4fc9e170f8909b2489c41c804bf22f9341372e43ab98bfb9090bf73b94bfb7f5392a99a797d3859dbedc3f65139c91b5f23f7afc4e3d1d6e746498882ba3875571be374d528a036e927074244b52d104bb23f1c74da2e52a4a"}, {0xc, 0x7, {0xa26ef2f6fd7a40f9}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x104, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0xd5, 0x6, "cbdebf0d270acd1001df49741ab1d570e99c2975322843a7aed3e494ae84dc3e1997e1205aee9ea88ae378e9c9a69651986528c3a2726765bc061f0b080b1edb6be04c32d19a5350a97ead0bfc4bc1d8f853bab6bfcfd785fc759a0b13a13997f5b43b5c5fff1ea7f9efee0010901c02d15842d1fc1d57969b591d4e117bf057c4daee939bad847a53e8ccb7a2dc2e4dce6ac9d39955554800a15aa289de7946e102211fe4283c491eaae471ca1b839198c4ed6f9deddc0fd34e9208a05e0542ad03d1ee23e830ef86e6f97aacaa27d802"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x1a0, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1000000, 0x1, 0x1, 0xffff0000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x10, 0x1, 0x7, 0x80}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x6d8, 0x4, 0x54, 0xa8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xa4b, 0x4, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x2, 0x8, 0xfffffc01, 0x9}, 0x1}}]}, {0xd4, 0x6, "011f10de209010c5af15caa399bc43d4d30fe02f6222a3e18c6d385ae4428fcee1f56e46f1f4094189c5b51cab26d3ace2bcc5343ea2b4b8758bf6379c95cf50116a298549279eb84df930fc3a92cd3c37303e70ef0c5090c5c22ffdfdb1d9283e4128aca10042eb468a44404688dc6b6985d6033a65471cdab3c045502d8a3a4b93aa3032c10fc8f17c71027cfd59f6d90d9535e0d856ff7142b4280d4a3cff60a05166a3612eb31d0df9e8e0f416a9d428e9ea87ccfd26bcfbab6139c449520ccdbff846c1890d494490caa59a36f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x30, 0x0, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc, 0x7, {0x5f027ce871aa6297, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x208, 0x1c, 0x0, 0x0, {{0x7}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7c, 0x6, {0x800, 'nat\x00', 0x1, 0x42, "910ef24830f6fcc5e804af2fa62d5b301c359e78db2dae183d02066d59384c92b4838947cc92f4af21255a901b75776503e41c087b1a3a0318d16805b580ef4ebc2e4f188df9cfdcd127f424ce1e630dfeb4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x35b}, @TCA_IPT_TARG={0x49, 0x6, {0x40, 'security\x00', 0xcf, 0x97d, "055353f341ebb785e83975fba89d58915ff817914066bae6c7d90b633aea9e"}}, @TCA_IPT_TARG={0x8a, 0x6, {0x400, 'filter\x00', 0x27, 0x1, "42860b8697bfa625d9dbdedfc5270a6c82d7c0f851939b3c0d10435f0ffcfcbabd86b014f8120af53b717462f2f3878eaac0c59d4103384112cda68e76e1550dc87fdcb8bd7f2fe5d1e14d63db42ff8231c38fa299857c839c7e51d2ea17517a"}}]}, {0x56, 0x6, "d8ce7b1dfc8e4709d41c5622f53efdcd13e76f9c386fff7489b8a9c647bbdcb4289899a001e4fe6b1fcc661585f31f54cb0bf34c945ff00e55a1d3ec2891457d3b6f08ad09a00ab9bc09aa90ed68aa8a3649"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x680}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(0x0, 0x8, 0x101000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1001}]) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$6lowpan_enable(r6, &(0x7f0000000400)='0', 0x1) 3m6.310369938s ago: executing program 2 (id=352): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0x37, 0x9, 0xff, 0x4, 0x7fff, 0x9, 0x5, [0x0, 0x9]}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x13b, 0x7, {0xffffffffffffffff}, {0xee00}, 0x3ff, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 3m4.891104974s ago: executing program 2 (id=355): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x9d8d2a5017a9ed00) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000047c0), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000040000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m4.111085621s ago: executing program 1 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000780)="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", 0x0, 0x9, 0x6000000000000000, 0xffffffffffffff44, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)="8a0a75303967843cd4b4a9970c8b2d7b937633318f42b801f5df2b027af402c87740841ca63821311837148204000000d7a6a0003e0ed234803b30eb49d89962a7720cdf82d78d5370", 0x0, 0x0, 0x2}, 0x28) (fail_nth: 13) 3m4.110505667s ago: executing program 2 (id=357): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x80001) write$hidraw(r0, &(0x7f00000000c0)="57f846473e898ad78e090d289026f84b0a853316f40ba2eae4ad24f533980b94497e8be5f7584b7a4c48575001a4cc7760f597c30c19e78e0f6358b596c7e84d6edfe29a9dc5fcd1979f704e1bf3714f090e32c48cfefa51c015c587f67b1ea6f6c7960d3e31959f81f81a2abf111cb83d3facb50c571252277cbed0d595b94ed5a0290f2a0e31c0723db4a9e800184519b57fc2f47769d2878e8230fb11f2d94d03cf449c1e28106de16bfd3c8d0bd4374e08d448df8cba29e591e1606d0c823134dd93a321c9a5efa4e2c78ead2c055062a0f0948cfd4a2508", 0xda) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xfc66, 0x0, 0x202796}) syz_open_dev$radio(0x0, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000311000/0x18000)=nil, &(0x7f0000001000)=[@text32={0x20, &(0x7f0000000fc0)="66bad10466ed66b836018ee8660fc737f26fc4e149e9363e65670f01c50f01d166bad004ecf30f005c3c000fc79cefac000000", 0x33}], 0x1, 0x5, &(0x7f0000001040)=[@flags={0x3, 0x2}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB="000000ff00000000", @ANYRES16=r3, @ANYBLOB="130526bd7000fddbdf25310000000500350002000000050033000000000005003600000000000a0201007770616e31000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040841}, 0x40004) mkdir(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x40025b0c, &(0x7f0000000040)) 3m4.01150582s ago: executing program 1 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x6, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)=ANY=[@ANYBLOB="28000077aafa8100fdffffff00000000100000000c000000000000000000000008001d001be5605e"], 0x28}], 0x1}, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) madvise(&(0x7f0000408000/0x1000)=nil, 0x1000, 0xf) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) move_pages(r3, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) ftruncate(r4, 0x9) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 3m3.781838061s ago: executing program 1 (id=361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002c6a3954256b59d238cc54e1c22e8b8c9beffeca443c512340189eeb4ac64da536d97329265c9f34b988bf5595380897b6eb72e24456cc603c7afbeb445a7211db457815bec8af4751b03968c6a5bb45f7a486e4b3d6350f0facf10a11edb592aaa75378afbd86f3652c80044819fa6f5cac", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf252300000005002200000000000500230008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040800}, 0x41c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x302, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x4010) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="f1519120", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf250c0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) 3m3.691445816s ago: executing program 1 (id=362): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m2.791296356s ago: executing program 1 (id=366): creat(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mlockall(0x7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00LN\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3008808c, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r5) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) 3m2.671607955s ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400210000e4ffffeec1000077f00000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000092c7a657d10000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000380)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x7f) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c40)=[{{&(0x7f0000000300)=@abs={0x7b559ff97b5d994f, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000680)="4d26cd34ed9fb2cb3339f268ed515020eaac6d8691db33347eddcfb8d0cfe17d5422715cfefa301d4424ca4c5ba5f843ab7f0a792de6cb68c7ea1cf9b96c5c75a4941c654326e7d7eb32d1e66f0b91215a71f0c2dd21acd8dbdc52b795121ab53859cea3ddfe5bdfebdbd5b2126709c7c201104efe27208e87d9d0b17517d1868ff90f40dfeb43dac404c946fc171e1b66f95c265644111621dd71f513a985611322cb949e911f17f93f50d9defe94181a7096487cbc361840ea1ff6c2dd4775", 0xc0}, {&(0x7f0000000500)="c77d3ae692bd269ac6b4f08a3d11fd40115294f343ad6496eb4b4510c312404ac7d322011b669b57dfa1b0e115d7bf01504e43217495c76f8a31f917ea129a40e6b2bc1fad111b4b8af0a1c375c1c4aa73218c3e28bddd547bd7cdc761f5bfdb63", 0x61}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3a0000000100000002000000", @ANYRES32=0x0, @ANYBLOB="2be63fbf01b0025c9acc77a85a5f3a8dbd30febd3a194314e7aa0970714650826308ab5c3e6e44f5a9dc8a637ed0cfbb0d61835c4a82835d65b56e269df33341971acb86fc32f577eecd4bd4d2fa0b678a72e9d7583f009fb0ffcecfa96578534ce0eaf96a51e18bb9c20cae8b7831600b27ff06658a21cff4f4c2486a9bf99ab0f4eb1f9c8cf627d808c75f6db4932326b2", @ANYRES32=r0, @ANYBLOB="4781aa1cc85524", @ANYRES64=r3, @ANYRES32, @ANYRES16=r2, @ANYBLOB="140000000100000001000000", @ANYRES32=r4, @ANYRES16=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18431caae7275dcee9903624", @ANYRES16, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r4, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3], 0xa8, 0x20004000}}, {{&(0x7f0000000980)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="fb303367c5563d4aa85665c937ce45fb1a8b13bbfb4d02", 0x17}, {&(0x7f0000000a40)="c5c03dcc267e67e1ee15723f18e1354cc3855721fe35d1ffffe3ef72a50715253e261bc217921de673f73624cdcce5b940", 0x31}, {&(0x7f0000000a80)="192f608718263dfbbf5b5ad2b383ea4fbc892a8cbcd34fbd50dda9dee230e03bb21fdae2a271717dc39cf90f8ed972bee6b6f24647de0a0355c2bed1ff45a99978dd7f7912c87eba215f54b861c3f3a6", 0x50}, {&(0x7f00000008c0)="e3a60cd8e3d9d7e97dd944ef7d983f1512382454c272ebda00e693f24c9db9ef3b11d35a513885db3577b9fa2e6ccea144bd1506ed7f58a9e1a40c9493a13622c04b8a6ab7c729b0f8f3e415ce2ff05da4683394ddda8f644860a02db783c9b5f31bd3c56681a1279345efc4f3b9740e620b1afa5672332ee61881c6c08c97362f4b5e94b76a69bdc231ef1ccca89d2a8dc726d974", 0x95}, {&(0x7f0000000b80)}], 0x5, &(0x7f0000000c00)=[@cred={{0x18}}, @cred={{0x18}}], 0x30, 0x8800}}], 0x2, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x1, [{}, {}, {0x9}, {0x1}, {0x0, 0xfffffff7}, {0xfffffffa, 0x6}, {}, {0x0, 0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x1fc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0xfffffffffffffed2) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) ioperm(0x8, 0x7, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(0xffffffffffffffff, r6) read$FUSE(r7, 0x0, 0x0) 3m1.910533415s ago: executing program 1 (id=371): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @sdr={0x42303159, 0x80}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000006c0)=0xffff5bee, 0x4) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x8800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474dfa64f778eecf29c94337"}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c080, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000940), 0x1182, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000280)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000003c0)={0x2, 0x4}, 0x2) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000700)={0x0, {}, 0x0, {}, 0xffffffff, 0x5, 0x4, 0x2, "cd0d05a286a8d9c7b457dd4340274fc803519e9ad2a58b8177005172844f746b2b5a97d6203497d63e00004682d499db310cb04c000000000010420f9f3d00", "e39fb4a6d7333a09000000000000006a08f93200000000ee0100", [0xd026, 0x36e1]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001c00)=""/4099, 0x1003}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f00000007c0)=""/89, 0x59}], 0x3}}], 0x1, 0x700, 0x0) 2m58.811743561s ago: executing program 3 (id=380): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x80000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 2m58.811449997s ago: executing program 3 (id=381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x2000000}) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="14009fb95078194b759fb31a0600001000010000000000000000000000000a2000000000000000000000000001000000090001007379"], 0xc8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r7, @ANYRES16=r8, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r9, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @remote, 0x1}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6000000}, 0x1c) 2m57.911614419s ago: executing program 3 (id=382): r0 = getpgid(0x0) syz_clone3(&(0x7f0000001240)={0x104204200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0xff4f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x17, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x7, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000003440)=ANY=[@ANYBLOB="190100001c00000085000000070000c73d2a67fcf4c2b4b806fa15950000000000000000", @ANYRES64, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, 0x0) readlink(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 2m57.751643241s ago: executing program 3 (id=383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x90, 0x3a, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x67, 0x0, @private1, @private2, [@dstopts={0x84, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0xc4e9, [0x4, 0xff, 0x3b81, 0xfffffffffffffffe, 0xbc, 0x2, 0x6]}}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = accept4$rose(r2, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@netrom, @default, @rose, @rose, @remote, @rose]}, &(0x7f0000000200)=0x40, 0x800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000880), 0x80040, 0x0) ioctl$CDROM_LAST_WRITTEN(r5, 0x80041284, &(0x7f00000008c0)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x2}) ioprio_set$pid(0x0, 0x0, 0x2007) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) read(r3, &(0x7f00000005c0)=""/233, 0xe9) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002035db28ecee7b4a9a4d20234e98a4cfcac305b38f7514a38812f2b83eb5464fe44cbda5e672e31b144d09a88f9150ec30dfd509b9a4127e28ca7b927132f6bc6f95051163b4d8e8e1c1038b1feaadae543b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r10}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) r12 = openat$rdma_cm(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000000a40)={0x1, 0x10, 0xfa00, {&(0x7f0000000940), r13}}, 0x18) close_range(r2, 0xffffffffffffffff, 0x2) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r14, &(0x7f0000000180)="0b031404e0ff640f020047540ff6a13bb1000e04080008004803", 0x10f6c, 0x0, &(0x7f0000000140)={0x11, 0x0, r15}, 0x14) io_uring_enter(r6, 0x3516, 0x300, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa4, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x17c, 0xffffffff, 0xffffffff, 0x17c, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff000000, 0xffffffff, 'veth1_macvtap\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x67, 0x1, 0x11}, 0x6, 0x70, 0xa4}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffff}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'netpci0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x2}, {0x4, 0x0, 0x2}, 0x80, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x26c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 2m57.701657095s ago: executing program 3 (id=384): mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x88}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0xe8, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[@dstopts={0x2f, 0x9, '\x00', [@padn, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xa, [0x5, 0x0, 0xc5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x3a, 0x0, '\x00', [@padn]}, @dstopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x11e) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) socket$inet_udplite(0x2, 0x2, 0x88) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m57.561738835s ago: executing program 3 (id=385): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90029118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f727ff696702c0db70d4c5a5", 0xf}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="d0c8", 0x2}], 0x1}, 0x20000801) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xad46}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x0) 2m47.079798495s ago: executing program 32 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400210000e4ffffeec1000077f00000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000092c7a657d10000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000380)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x7f) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000c40)=[{{&(0x7f0000000300)=@abs={0x7b559ff97b5d994f, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000680)="4d26cd34ed9fb2cb3339f268ed515020eaac6d8691db33347eddcfb8d0cfe17d5422715cfefa301d4424ca4c5ba5f843ab7f0a792de6cb68c7ea1cf9b96c5c75a4941c654326e7d7eb32d1e66f0b91215a71f0c2dd21acd8dbdc52b795121ab53859cea3ddfe5bdfebdbd5b2126709c7c201104efe27208e87d9d0b17517d1868ff90f40dfeb43dac404c946fc171e1b66f95c265644111621dd71f513a985611322cb949e911f17f93f50d9defe94181a7096487cbc361840ea1ff6c2dd4775", 0xc0}, {&(0x7f0000000500)="c77d3ae692bd269ac6b4f08a3d11fd40115294f343ad6496eb4b4510c312404ac7d322011b669b57dfa1b0e115d7bf01504e43217495c76f8a31f917ea129a40e6b2bc1fad111b4b8af0a1c375c1c4aa73218c3e28bddd547bd7cdc761f5bfdb63", 0x61}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3a0000000100000002000000", @ANYRES32=0x0, @ANYBLOB="2be63fbf01b0025c9acc77a85a5f3a8dbd30febd3a194314e7aa0970714650826308ab5c3e6e44f5a9dc8a637ed0cfbb0d61835c4a82835d65b56e269df33341971acb86fc32f577eecd4bd4d2fa0b678a72e9d7583f009fb0ffcecfa96578534ce0eaf96a51e18bb9c20cae8b7831600b27ff06658a21cff4f4c2486a9bf99ab0f4eb1f9c8cf627d808c75f6db4932326b2", @ANYRES32=r0, @ANYBLOB="4781aa1cc85524", @ANYRES64=r3, @ANYRES32, @ANYRES16=r2, @ANYBLOB="140000000100000001000000", @ANYRES32=r4, @ANYRES16=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18431caae7275dcee9903624", @ANYRES16, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r4, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3], 0xa8, 0x20004000}}, {{&(0x7f0000000980)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="fb303367c5563d4aa85665c937ce45fb1a8b13bbfb4d02", 0x17}, {&(0x7f0000000a40)="c5c03dcc267e67e1ee15723f18e1354cc3855721fe35d1ffffe3ef72a50715253e261bc217921de673f73624cdcce5b940", 0x31}, {&(0x7f0000000a80)="192f608718263dfbbf5b5ad2b383ea4fbc892a8cbcd34fbd50dda9dee230e03bb21fdae2a271717dc39cf90f8ed972bee6b6f24647de0a0355c2bed1ff45a99978dd7f7912c87eba215f54b861c3f3a6", 0x50}, {&(0x7f00000008c0)="e3a60cd8e3d9d7e97dd944ef7d983f1512382454c272ebda00e693f24c9db9ef3b11d35a513885db3577b9fa2e6ccea144bd1506ed7f58a9e1a40c9493a13622c04b8a6ab7c729b0f8f3e415ce2ff05da4683394ddda8f644860a02db783c9b5f31bd3c56681a1279345efc4f3b9740e620b1afa5672332ee61881c6c08c97362f4b5e94b76a69bdc231ef1ccca89d2a8dc726d974", 0x95}, {&(0x7f0000000b80)}], 0x5, &(0x7f0000000c00)=[@cred={{0x18}}, @cred={{0x18}}], 0x30, 0x8800}}], 0x2, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x1, [{}, {}, {0x9}, {0x1}, {0x0, 0xfffffff7}, {0xfffffffa, 0x6}, {}, {0x0, 0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x1fc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0xfffffffffffffed2) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) ioperm(0x8, 0x7, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(0xffffffffffffffff, r6) read$FUSE(r7, 0x0, 0x0) 2m46.068122549s ago: executing program 33 (id=371): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @sdr={0x42303159, 0x80}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000006c0)=0xffff5bee, 0x4) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x8800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474dfa64f778eecf29c94337"}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c080, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000940), 0x1182, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000280)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000003c0)={0x2, 0x4}, 0x2) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000700)={0x0, {}, 0x0, {}, 0xffffffff, 0x5, 0x4, 0x2, "cd0d05a286a8d9c7b457dd4340274fc803519e9ad2a58b8177005172844f746b2b5a97d6203497d63e00004682d499db310cb04c000000000010420f9f3d00", "e39fb4a6d7333a09000000000000006a08f93200000000ee0100", [0xd026, 0x36e1]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001c00)=""/4099, 0x1003}, {&(0x7f0000000880)=""/112, 0x70}, {&(0x7f00000007c0)=""/89, 0x59}], 0x3}}], 0x1, 0x700, 0x0) 2m42.599884858s ago: executing program 34 (id=385): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90029118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f727ff696702c0db70d4c5a5", 0xf}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="d0c8", 0x2}], 0x1}, 0x20000801) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xad46}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x0) 3.179851377s ago: executing program 5 (id=1282): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback={0x8000000}}, 0x62) 3.113292069s ago: executing program 5 (id=1284): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x88b02, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="701800000408000000000000000000", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2b\x06\b\xba\xdf\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file1\x00'}, 0x6e) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f000024a000/0x3000)=nil, 0x3000}}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280), 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e5efffffffffffff0dcd065ac6e022b5cf9c4fe38e325ad86a19c7a1aa830cf9011a1c462ec2466861ec9051ae4298dbf40b899a712529a1f6885b99413a8fdaf16129d0d26464758d054bedccaf33a3d3763236b9564b72a294024c8559f04c1b2a8e680eb19190436b138e3b57e989fba477", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) 2.650080434s ago: executing program 4 (id=1290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0xfff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) 2.649817611s ago: executing program 4 (id=1291): r0 = fanotify_init(0x2, 0x0) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000640)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="5fdeddcc879031abd2ba6cdb3ec71bb7ce", 0x1}], 0x1}}], 0x2, 0x40488e4) syz_io_uring_setup(0x5552, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x4, 0xfffffffc, 0x0, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x2, 0x0, 0x0, 0x9}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, 0x0, 0x0, 0x4, 0x0, 0x0) close_range(r7, r6, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa) fanotify_mark(r0, 0x11, 0x48000038, r6, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRES8=r5, @ANYBLOB="08030000000000001c0012000c000c00d84d26c80a0200"/33, @ANYRESHEX, @ANYRES64=r0], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe422}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000000000001400128009000100626f6e64000000000400028008000a0080f000679554c9203115d3a82d5524c408bfbe30bb6b275023211ee372f5a0511509650cc67d21cc3175529b5ff3aad5fe11154a486218a9e60aed00add3fb4e127c7d9bb3e363b1fdb110c9f025373e789d3cae8cfe919dab2a36d6b79cb2fdf2325c305cfeb94e272c84ef30ff85ad97fc65da02a7f4d9ba0442ec6d837e0f4f7da10de7a39ba326cacd7f2604a420", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) 2.219517133s ago: executing program 5 (id=1292): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="14000000160053cbce1b3efb52d72c1c19", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x0) getitimer(0x2, &(0x7f00000001c0)={{0x0}, {0x0, 0x0}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2f4, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f0000000040)={0x1}) fsopen(&(0x7f0000000280)='ceph\x00', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000040000f1ca600cd5d6ffadb1be610008000019e25d900b625e4c1b2d4d5e455dbee26074d5720000", @ANYRES32=0x1, @ANYRES8=r1, @ANYRES64=r2, @ANYBLOB="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", @ANYRESDEC=r5], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000300)={r6, 0x2f, &(0x7f0000000200)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() connect$unix(r3, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000206010823000000000000000000000005000100060000000d000300686173683a6e65740000000005000400800000000900020073797a3100000000050005000a0000001300031f686173683a6e65742c6966616365000014000780080013400000003708000640000000070500010007000000050004"], 0x88}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000680)) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="4c1f6f0973879467b65f18edda4c17a9466db2c7c6b6250495e475bed60e4c055b5c85aee420aaee28bc24af11bbf04f2448522326947a9833b5a74315c73527523393ed36f9e5393f176803b30b8716b8a00761094a8e728bd06b6f83f52917b12b9ce4e5ed97442537cce61250c9aa5653e7a46ea018f29bffd9e2c5e38a27371ec4ffb847bdb98a7b72a4082b12208f55986ed9c6cf4bc2928c001cec78e9e0505dd523247a8ff258d752d197f309caca918b6767f9a49a60dc", 0xbb}, {&(0x7f0000000180)="79a1e663194785f40371979eb64071653e8272ccd3878f53bafd277d63c4107d7f833e5afb9c95919d6bc587358621cd637fbc04f4878d2aea49c78f39efb01157019e6199618de7a2aa7037fa08c0bec0a85a043d999975959afa5f97fda10dd042ee4bf713d049a9c30ae0afcf122dad68c06a62ff5973ae09ff1baa226002", 0x80}, {&(0x7f0000000200)="bfd0d8923215d72375d9f9ea0c9093f5b5206a1c493ab82061328b54e55e1dd4113b1d4ec365a7dcd074749b70207e3b21ac81895d2a3542c28f9ed4931897269f6b968fb9d037a3ee4109264aa9007be8adef274de8cada51368934d820e08fceb32d58aca9141efe7935c568e246d3cc593b740c2717cd58a83ad0daaf467b33f1be6f716f13a5f8bf4aad1f189cc1db56", 0x92}, {&(0x7f00000002c0)="340d7a01ff45d7c1a57e50fde2feea4862457d1b76abc753316dfeab351cc64c7655b638850e", 0x26}, {&(0x7f0000000300)="b460f3d4ca262d3b4684256f5b1bd2f26a8d3d0d64073b7c47d7184ea5ea8b3ae108f15dced00c1d1473a9c4e403d141a0249a7aa5f0f68001ea5ba66154943b3c0e4a4b68afbbf68b1db95f844cbdca3f2eb2e230422548e163175ffe73bfc7ddb265be94f1b1b0f018394e0cd86c8ea58a86d901d374c8fa8c518e4b", 0x7d}, {&(0x7f0000000380)="7cdbc0d091a2334b53f16772a059c4e23cdf79c2922b095103ec4a3256d05c72fb330fd6e4e80c8627e14354e995bceed980972fbc78e61e34e58a6dfc2bee8094716fb13f290b504d4e993fba8a9984059a62d7605f88630b127fdb852d37464fbb86da0ee79ce0bf88eda50770eae134d3e96bbbc4", 0x76}, {&(0x7f0000000400)="d70a1b9298403c12bd5c80584140db69ae8d8b57a59a91487ef27e3c3120d1d6a661e16f", 0x24}, {&(0x7f0000000440)="d8cea68593580aad13e68d58c00b280dadaedb78ec228a0a4492d76ed561825580fb20370f368e6146881fe2c82fb713f74103d2d8929a04bd1b56a81096a4be69a0c8136f18e5d0b8185d1f1fbc346721e1efff5809874cab50af36f01aa8ae7cf18299a94b7d37d2da3c21a178305036e6", 0x72}, {&(0x7f00000004c0)='P=Ko', 0x4}], 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="840000000e0100000c00000079c6441c6261ef68b05479f32d22c5a78914cfa8cef4dac2ebbcb47d80dd8efb055afe086d4b6dbbb51ef13a9c53409310dd37134ea230aba406f9660200000000000000cfd638c1386875015ccf66bb11be77dadf91ca71028616c3686eceb223513fe0fb7a8710df1798f4656857a8c256c75b31000000"], 0x84}, 0x2) 2.02597006s ago: executing program 5 (id=1294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x700, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) 1.999924393s ago: executing program 5 (id=1295): unshare(0x62040200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x7, 0x1, 0x9, 0x9, 0x7fffffff]}, &(0x7f00000000c0)=0x54) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async, rerun: 32) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x5, 0x1, 0x1, 0x78000000, 0x9]}, &(0x7f00000001c0)=0x54) (rerun: 32) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x7003, [0x0, 0x7, 0x3, 0x6, 0x9]}, &(0x7f0000000100)=0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8, 0x1, 0x0, 0x7, {{0x2f, 0x4, 0x1, 0x6, 0xbc, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x54, 0x37, 0x3, 0xb, [{@private=0xa010102, 0x5}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x9}, {@empty, 0x5}, {@remote, 0x3}, {@local, 0xffff}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x81}, {@multicast1, 0x2}]}, @timestamp={0x44, 0x14, 0x4d, 0x0, 0x5, [0x200, 0xc, 0x82a80, 0x8]}, @timestamp_addr={0x44, 0x3c, 0xe7, 0x1, 0x1, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@local, 0x3}, {@remote, 0x6}, {@private=0xa010102, 0x9e}, {@broadcast, 0xfffffd1a}]}, @rr={0x7, 0x3, 0x26}]}}}}}) (async, rerun: 32) unshare(0x2a020480) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002000000"], 0x18) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000040a245d5cde0080045000028000000000002907800000000ffffffff11009078e0000002000000020000000000000000"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SIOCRSACCEPT(r5, 0x89e3) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10002) (async, rerun: 64) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x110, 0x30, 0x1, 0x0, 0x0, {}, [{0xfc, 0x1, [@m_sample={0xb0, 0x11, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xc, 0x2, 0x20000002, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}]}, {0x33, 0x6, "be3253594de44b1783dd5fbb71ac2a06a69722d384d1644a76ebe2d56aedf4cb5080e75d2d0c69b3640323a53f33d8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1b, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32) read$FUSE(r6, 0x0, 0x0) (rerun: 32) 1.980023827s ago: executing program 6 (id=1296): r0 = io_uring_setup(0x640b, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x50}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2d8, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0xb4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r11) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r12, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 1.889267162s ago: executing program 5 (id=1298): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 1.759055573s ago: executing program 4 (id=1300): r0 = socket(0x2a, 0x800000003, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) sched_setaffinity(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) dup2(r1, r5) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}}, 0x0) 1.28003518s ago: executing program 6 (id=1301): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1f) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) sendto$inet(r1, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xffffff01}], 0x1, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) ioctl$CEC_DQEVENT(r6, 0x40046109, &(0x7f0000000340)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c0000000000000180012800800"/28, @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8484", 0x2}], 0x1}}], 0x1, 0x4400c800) 1.277666817s ago: executing program 6 (id=1302): r0 = mmap$IORING_OFF_SQES(&(0x7f00003d1000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x72, 0x0, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x0, 0x1, {0x0, r1}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.090121414s ago: executing program 6 (id=1303): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000c00000000ffdf7df4fff500"}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x3}) r5 = syz_open_pts(r1, 0x0) dup3(r5, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000200), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) 834.558052ms ago: executing program 4 (id=1305): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "980db8b526d9548b30c82c3b5a42577dc7a9ca2e3f94776c033fc42fe6c3b7a9", "29a3012abf34338853e0d22ff28f3075f77ef0af3c4e0c958f8ba059ee353e2d", "1a9a2c4e49137477f1678e64154f2afca8b2e4170baf5581dee5bd4fd5a4b6a1", "b55595429568ad557306775116d832618a484062cfcb36621e7ae4be83c8344f", "f6dc1d17e213d7226fe9d68e6159e6dae795817fa10c130bb294ad6652023c12", "9fd0b2417f0e00367af9ab93"}}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x19, r0, 0x80000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) socket$inet_udplite(0x2, 0x2, 0x88) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r1, &(0x7f00000000c0), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x3}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x7fffffff, 0x3, 0x4, 0xc, 0x7, 0x2, 0x0, 0x3, 0xfe, 0x5, 0x5, 0xc0, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xb5, 0x5, 0x2, 0xc, 0xfe, 0x40, 0x6, 0x18, 0xa}, {0xa20000, 0x0, 0x3, 0xb, 0x2, 0x77, 0xff, 0x9, 0x2, 0x5, 0x8, 0x54, 0x18bf}], 0xd9}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 506.458282ms ago: executing program 0 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x43, 0x9, 0xffffffff, 0x25dfdbfc, {0x1}, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0x1e, 0x0, 0x0, @u64=0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000200)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x514, 0x1, @local, 0x7, 0x1, 0xa, 0x5b}}}}}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x58}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 64) 506.300518ms ago: executing program 0 (id=1307): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x4) 430.136576ms ago: executing program 0 (id=1308): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) syz_io_uring_setup(0x6bd6, &(0x7f0000000080)={0x0, 0x7757, 0x40, 0x0, 0x277, 0x0, r1}, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x800000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 429.579368ms ago: executing program 4 (id=1309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) (async) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x84040, 0x0) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xca65, 0x4000, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r6, 0x0, 0x0, 0x0, 0x80800}) (async, rerun: 64) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) (rerun: 64) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) (async) recvmmsg(r10, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10100, 0x0) 429.424791ms ago: executing program 0 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6, 0x0, 0x500}, 0x80000000}], 0x4, 0x40000030, 0x0) 338.89938ms ago: executing program 0 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x1b4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1a0, 0x1, [@m_ife={0x154, 0x12, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="1b839788052c"}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xc368}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4765}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @random="8f38fd7b3920"}]}, {0xd5, 0x6, "0af776c23fd93436ee684797ba81b503721428ae2599748bde478362f3dd24512985c5f759866e654d7c41a57b960db03f4b4daaf8fa6b4dd699ad0d10bb659ddd287a78397f3d09f6665e6637330c6a448d6e46452fd1b87876420067afa79b9fd6b32699b7ba93dfaf7da6e123b812f10861396ccfcdfbb212d13ddd83178ac7a7da235293d6a741319b9549a426ec8fa7a676073d67277734b6f751bc802ba69193697ef100c712479a4eb46d5477a581045454d67b2aabd80137f6957954c4a8c1724fc587439f4b8caf057044671f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0xc7}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000240)="fdffffff", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x40}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) 150.121435ms ago: executing program 6 (id=1312): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x755, 0x17}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fda30e2ed46d812ed92603b91ac31eefb5b2ccfa1cb7a0ca9c2bd0222c413df2ccb809667f75c65acbafdb4ad02cd328496ac923d3ac3d68534bee0591dceeb1cf9c827efb64904c90456df08642720402e3dd23ac2772d5cd3abe9d605231d941fbb92dfa7b99d5703da533caefd7b7a44240faac7692e9d6d82a7b277fc0dd869b34d9355b6e09dac2aafc20a9c25af1267aed165ecc63c88e8cf616fdafbfbb98efc63920fc7afa36be78d02fe5f1627f", 0xb2}, {&(0x7f00000006c0)="93e43645e17fae8ec433dcbe8e7d749daec93b1863502570f54c5a0d9487155d6bd6cadf025c2b4b6e22219cb6c99624451a7c20c5fed5df6ce8199a64320abbf447e4711ffb58123c354db8b9246fab592bd6ba2b49605c2955", 0x5a}, {&(0x7f0000000b40)="69911be93b1f41f874f25217a50473ac98310c835f0f591cbcdfeda181489fd01440a9dae5cb16070c60ea51a1b728d517209bfaafd04fbb4a6caabe116fd2d79c217f3387731c014b0e9fce63b88c97f2663c3ad6d1489e083186336952689b16e4fb81b0f9fc3b681023ffd071b94a677383abfc9aa41d9a694672703de4f8861c4a876fbc43c8348a0398fbb1d18525e26ab2042dc7e4ef7a9b86feda0b36cca8ebd0fd2abcf389896cfbd7a26ad2efa2b9c3b43e0be0154146e55b4f8913644cec8b8a879120d5df63ae0f27ac2f951b728ea535f975d59d125804873180ba97f5736374dc430a1adf8736f4b8871c751619f9ec67c569", 0xf9}, {&(0x7f0000000840)="5c4a5600c958caf6081d414a835d82c25586c49ee6870eaf106684391fd4008384f0200fb0297fb793ad8cae9fba30b7a28a9103b36f8746226d9cfa1f85f88eb77b845a510317c12a1de55209676e", 0x4f}, {&(0x7f0000000280)="12157f9d06de06f1fcba", 0xa}, {&(0x7f00000008c0)="920e1edd0572fc19c13473c425350a7202955ac2db7ba8d786393df7271adc836e3b1fc01450e692232c4534233fda66768180dbd3ff01b0b9bacc759cfd95afa8d10add87d168868150cdcd5f3fd6c564c72485a56d676227", 0x59}, {&(0x7f0000000940)="b31de5abcc9b194bad8a16355b3cc006c2e1eabeed99a85a9464493c1cf5892509004e261cac7a3ef10800000000000000bf1f2146f3b8f1ed5daa9bbbdb49c479987389", 0x44}, {&(0x7f0000000300)="fa4f3fcde774f829", 0x8}, {&(0x7f0000002700)="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", 0xcfd}], 0x9) 58.259904ms ago: executing program 0 (id=1313): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x48cb, &(0x7f0000000440)={0x0, 0x0, 0x40}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) io_setup(0x8d54, &(0x7f0000000100)) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) 0s ago: executing program 4 (id=1314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, 0x0, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (fail_nth: 8) kernel console output (not intermixed with test programs): 253.960311][ T5988] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.972049][ T5988] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.998479][ T5988] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.006610][ T5988] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.009548][ T5988] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 254.023776][ T5988] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.029049][ T5988] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.047810][ T5988] usb 11-1: config 0 descriptor?? [ 254.161486][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.165553][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.167927][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.170237][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.172609][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.176376][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.178702][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.180932][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.183170][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.187674][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.190204][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.192503][ T5988] hid-generic 00A0:0006:0003.0018: unknown main item tag 0x0 [ 254.195481][ T5988] hid-generic 00A0:0006:0003.0018: hidraw1: HID v0.05 Device [syz1] on syz0 [ 254.254980][ T832] usb 11-1: USB disconnect, device number 29 [ 254.423806][ T30] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 254.573743][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 254.576481][ T30] usb 5-1: no configurations [ 254.578244][ T30] usb 5-1: can't read configurations, error -22 [ 254.703763][ T30] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 254.714135][ T832] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 254.863775][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 254.866233][ T30] usb 5-1: no configurations [ 254.867583][ T30] usb 5-1: can't read configurations, error -22 [ 254.869595][ T30] usb usb5-port1: attempt power cycle [ 254.933727][ T832] usb 11-1: Using ep0 maxpacket: 32 [ 254.936421][ T832] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.939210][ T832] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.941750][ T832] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.944751][ T832] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.947307][ T832] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.950080][ T832] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 254.953835][ T832] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.956413][ T832] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.959943][ T832] usb 11-1: config 0 descriptor?? [ 254.983953][ T5988] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 255.018419][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 255.044009][ T9668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.055228][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.153736][ T5988] usb 10-1: Using ep0 maxpacket: 8 [ 255.158370][ T5988] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 255.161514][ T5988] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.164294][ T5988] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.213710][ T30] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 255.244189][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 255.246424][ T30] usb 5-1: no configurations [ 255.247819][ T30] usb 5-1: can't read configurations, error -22 [ 255.383731][ T30] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 255.404155][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 255.406178][ T30] usb 5-1: no configurations [ 255.407588][ T30] usb 5-1: can't read configurations, error -22 [ 255.409544][ T30] usb usb5-port1: unable to enumerate USB device [ 255.847646][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 255.850465][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 255.853560][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 255.856647][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 255.859615][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 255.862364][ T9675] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 255.865147][ T9675] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 255.883771][ T9672] nbd4: detected capacity change from 0 to 4 [ 255.886590][ T7586] block nbd4: Send control failed (result -89) [ 255.889058][ T7586] block nbd4: Request send failed, requeueing [ 255.891331][ T5311] block nbd4: Receive control failed (result -32) [ 255.894159][ T1280] block nbd4: Dead connection, failed to find a fallback [ 255.897268][ T1280] block nbd4: shutting down sockets [ 255.899140][ T7586] ldm_validate_partition_table(): Disk read failed. [ 255.901261][ T7586] Dev nbd4: unable to read RDB block 0 [ 255.902968][ T7586] nbd4: unable to read partition table [ 255.904757][ T7586] nbd4: partition table beyond EOD, truncated [ 255.908002][ T7586] ldm_validate_partition_table(): Disk read failed. [ 255.910111][ T7586] Dev nbd4: unable to read RDB block 0 [ 255.911820][ T7586] nbd4: unable to read partition table [ 255.913572][ T7586] nbd4: partition table beyond EOD, truncated [ 256.068131][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 256.071424][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 256.074701][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 256.473695][ T832] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 256.625158][ T832] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 256.628462][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.631761][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.634722][ T832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 256.639548][ T832] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 256.642356][ T832] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 256.644852][ T832] usb 9-1: Manufacturer: syz [ 256.647769][ T832] usb 9-1: config 0 descriptor?? [ 256.938362][ T35] usb 11-1: USB disconnect, device number 30 [ 257.054525][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.057039][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.060473][ T832] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 257.062867][ T832] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 257.066793][ T832] appleir 0003:05AC:8243.0019: hiddev0,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 257.219102][ T9693] random: crng reseeded on system resumption [ 257.480115][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.484986][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.506265][ T8] usb 9-1: USB disconnect, device number 33 [ 257.736845][ T35] usb 10-1: USB disconnect, device number 21 [ 257.943350][ T9712] bio_check_eod: 17 callbacks suppressed [ 257.943367][ T9712] syz.5.971: attempt to access beyond end of device [ 257.943367][ T9712] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 257.951069][ T9712] syz.5.971: attempt to access beyond end of device [ 257.951069][ T9712] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 257.955041][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 257.957782][ T9712] getblk(): invalid block size 512 requested [ 257.959888][ T9712] logical block size: 1024 [ 257.961691][ T9712] CPU: 3 UID: 0 PID: 9712 Comm: syz.5.971 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 257.961704][ T9712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.961711][ T9712] Call Trace: [ 257.961715][ T9712] [ 257.961720][ T9712] dump_stack_lvl+0x16c/0x1f0 [ 257.961737][ T9712] __getblk_slow+0x4fe/0x5c0 [ 257.961755][ T9712] ? __pfx___might_resched+0x10/0x10 [ 257.961773][ T9712] ? fs_reclaim_acquire+0xae/0x150 [ 257.961789][ T9712] bdev_getblk+0xb1/0xc0 [ 257.961806][ T9712] __bread_gfp+0x86/0x340 [ 257.961816][ T9712] udf_read_tagged+0xae/0x740 [ 257.961832][ T9712] udf_check_anchor_block+0x8a/0x4b0 [ 257.961843][ T9712] ? udf_get_last_block+0x1cf/0x2b0 [ 257.961859][ T9712] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 257.961872][ T9712] ? __brelse+0x8c/0xb0 [ 257.961887][ T9712] udf_load_vrs+0x668/0x1050 [ 257.961902][ T9712] ? __pfx_udf_load_vrs+0x10/0x10 [ 257.961911][ T9712] ? lockdep_init_map_type+0x16d/0x7d0 [ 257.961928][ T9712] ? __pfx_udf_get_last_session+0x10/0x10 [ 257.961946][ T9712] udf_fill_super+0x79b/0x1e00 [ 257.961958][ T9712] ? __pfx_udf_fill_super+0x10/0x10 [ 257.961968][ T9712] ? do_raw_spin_lock+0x12d/0x2c0 [ 257.961978][ T9712] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.961988][ T9712] ? set_blocksize+0x2a8/0x360 [ 257.962001][ T9712] ? sb_set_blocksize+0xf6/0x120 [ 257.962013][ T9712] ? setup_bdev_super+0x369/0x730 [ 257.962027][ T9712] get_tree_bdev_flags+0x38b/0x620 [ 257.962041][ T9712] ? __pfx_udf_fill_super+0x10/0x10 [ 257.962052][ T9712] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 257.962067][ T9712] ? apparmor_capable+0x114/0x1d0 [ 257.962079][ T9712] ? bpf_lsm_capable+0x9/0x10 [ 257.962090][ T9712] ? security_capable+0x7e/0x260 [ 257.962101][ T9712] vfs_get_tree+0x8b/0x340 [ 257.962113][ T9712] path_mount+0x14e6/0x1f10 [ 257.962129][ T9712] ? kmem_cache_free+0x2e2/0x4d0 [ 257.962144][ T9712] ? __pfx_path_mount+0x10/0x10 [ 257.962162][ T9712] ? putname+0x13c/0x180 [ 257.962174][ T9712] __ia32_sys_mount+0x28d/0x310 [ 257.962184][ T9712] ? __pfx___ia32_sys_mount+0x10/0x10 [ 257.962197][ T9712] __do_fast_syscall_32+0x73/0x120 [ 257.962213][ T9712] do_fast_syscall_32+0x32/0x80 [ 257.962227][ T9712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.962244][ T9712] RIP: 0023:0xf7f01579 [ 257.962252][ T9712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.962262][ T9712] RSP: 002b:00000000f4fe455c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 257.962272][ T9712] RAX: ffffffffffffffda RBX: 0000000080000500 RCX: 0000000080004a00 [ 257.962279][ T9712] RDX: 0000000080000040 RSI: 0000000000008007 RDI: 0000000000000000 [ 257.962284][ T9712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.962290][ T9712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.962296][ T9712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.962308][ T9712] [ 257.962312][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 258.053846][ T9712] syz.5.971: attempt to access beyond end of device [ 258.053846][ T9712] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 258.057542][ T9712] syz.5.971: attempt to access beyond end of device [ 258.057542][ T9712] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 258.061405][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 258.064276][ T9712] syz.5.971: attempt to access beyond end of device [ 258.064276][ T9712] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 258.067963][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 258.070918][ T9712] syz.5.971: attempt to access beyond end of device [ 258.070918][ T9712] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 258.073819][ T9707] nbd5: detected capacity change from 0 to 4 [ 258.075109][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 258.079393][ T9712] block nbd5: Send control failed (result -89) [ 258.081186][ T9712] block nbd5: Request send failed, requeueing [ 258.083085][ T36] block nbd5: Dead connection, failed to find a fallback [ 258.083105][ T5311] block nbd5: Receive control failed (result -32) [ 258.085155][ T36] block nbd5: shutting down sockets [ 258.086778][ T7586] ldm_validate_partition_table(): Disk read failed. [ 258.089680][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 258.090370][ T7586] Dev nbd5: unable to read RDB block 0 [ 258.092089][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 258.094722][ T7586] nbd5: unable to read partition table [ 258.098995][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 258.100490][ T7586] nbd5: partition table beyond EOD, truncated [ 258.103261][ T9712] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 258.107885][ T9712] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 258.108314][ T7586] ldm_validate_partition_table(): Disk read failed. [ 258.112477][ T7586] Dev nbd5: unable to read RDB block 0 [ 258.114403][ T7586] nbd5: unable to read partition table [ 258.116112][ T7586] nbd5: partition table beyond EOD, truncated [ 258.567408][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.570376][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.573486][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.577348][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.579776][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.582075][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.587299][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.590699][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.593629][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.596284][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.598661][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.601119][ T30] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 258.607397][ T30] hid-generic 00A0:0006:0003.001A: hidraw1: HID v0.05 Device [syz1] on syz0 [ 258.614956][ T9737] tmpfs: Bad value for 'mpol' [ 258.712443][ T9742] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.980'. [ 258.904797][ T5988] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 258.970842][ T9753] syz.5.983: attempt to access beyond end of device [ 258.970842][ T9753] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 258.976290][ T9753] syz.5.983: attempt to access beyond end of device [ 258.976290][ T9753] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 258.981370][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 258.984965][ T9753] syz.5.983: attempt to access beyond end of device [ 258.984965][ T9753] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 258.989255][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 258.993470][ T9753] syz.5.983: attempt to access beyond end of device [ 258.993470][ T9753] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 258.998374][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 259.004108][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 259.019862][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 259.023201][ T9753] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 259.026145][ T9753] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 259.043871][ T9748] nbd5: detected capacity change from 0 to 4 [ 259.052361][ T7586] block nbd5: Send control failed (result -89) [ 259.054626][ T7586] block nbd5: Request send failed, requeueing [ 259.056528][ T5311] block nbd5: Receive control failed (result -32) [ 259.059262][ T1280] block nbd5: Dead connection, failed to find a fallback [ 259.061376][ T1280] block nbd5: shutting down sockets [ 259.062954][ T1280] blk_print_req_error: 78 callbacks suppressed [ 259.062961][ T1280] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.067565][ T1280] buffer_io_error: 77 callbacks suppressed [ 259.067571][ T1280] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.073769][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.076374][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.078802][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.083983][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.086340][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.088951][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.091246][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.094461][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.096788][ T7586] ldm_validate_partition_table(): Disk read failed. [ 259.098753][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.101387][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.105888][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.108561][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.111064][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.113919][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.116257][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.118792][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.120972][ T7586] Dev nbd5: unable to read RDB block 0 [ 259.122554][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.125444][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.127814][ T7586] nbd5: unable to read partition table [ 259.129616][ T7586] nbd5: partition table beyond EOD, truncated [ 259.343482][ T7586] ldm_validate_partition_table(): Disk read failed. [ 259.346058][ T7586] Dev nbd5: unable to read RDB block 0 [ 259.347768][ T7586] nbd5: unable to read partition table [ 259.349548][ T7586] nbd5: partition table beyond EOD, truncated [ 259.353756][ T5988] usb 9-1: Using ep0 maxpacket: 16 [ 259.355784][ T5988] usb 9-1: no configurations [ 259.357451][ T5988] usb 9-1: can't read configurations, error -22 [ 259.483780][ T5988] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 259.635025][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.985'. [ 259.953795][ T5988] usb 9-1: Using ep0 maxpacket: 16 [ 259.955845][ T5988] usb 9-1: no configurations [ 259.957391][ T5988] usb 9-1: can't read configurations, error -22 [ 259.963838][ T5988] usb usb9-port1: attempt power cycle [ 260.113827][ T1331] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 260.243756][ T1331] usb 11-1: device descriptor read/64, error -71 [ 260.323774][ T5988] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 260.344454][ T5988] usb 9-1: Using ep0 maxpacket: 16 [ 260.346364][ T5988] usb 9-1: no configurations [ 260.347863][ T5988] usb 9-1: can't read configurations, error -22 [ 260.473924][ T5988] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 260.494234][ T5988] usb 9-1: Using ep0 maxpacket: 16 [ 260.494554][ T1331] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 260.496607][ T5988] usb 9-1: no configurations [ 260.500455][ T5988] usb 9-1: can't read configurations, error -22 [ 260.503289][ T5988] usb usb9-port1: unable to enumerate USB device [ 260.643708][ T1331] usb 11-1: device descriptor read/64, error -71 [ 260.753865][ T1331] usb usb11-port1: attempt power cycle [ 260.830722][ T9780] random: crng reseeded on system resumption [ 260.833806][ T9782] netlink: 'syz.0.991': attribute type 39 has an invalid length. [ 261.093615][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 261.095950][ T1331] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 261.099243][ T9784] netlink: 173 bytes leftover after parsing attributes in process `syz.0.992'. [ 261.104718][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 261.115872][ T1331] usb 11-1: device descriptor read/8, error -71 [ 261.353703][ T1331] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 261.374075][ T1331] usb 11-1: device descriptor read/8, error -71 [ 261.493921][ T1331] usb usb11-port1: unable to enumerate USB device [ 261.914997][ T9809] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.777324][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 262.779691][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 262.780581][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 262.789854][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 262.793413][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 262.793779][ T9824] nbd5: detected capacity change from 0 to 4 [ 262.798883][ T7586] block nbd5: Send control failed (result -89) [ 262.802411][ T7586] block nbd5: Request send failed, requeueing [ 262.805312][ T26] block nbd5: Dead connection, failed to find a fallback [ 262.805328][ T5957] block nbd5: Receive control failed (result -32) [ 262.808223][ T26] block nbd5: shutting down sockets [ 262.813066][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 262.814056][ T7586] ldm_validate_partition_table(): Disk read failed. [ 262.816201][ T9827] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 262.820484][ T7586] Dev nbd5: unable to read RDB block 0 [ 262.822798][ T9827] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 262.824857][ T7586] nbd5: unable to read partition table [ 262.829567][ T7586] nbd5: partition table beyond EOD, truncated [ 262.842329][ T7586] ldm_validate_partition_table(): Disk read failed. [ 262.844636][ T7586] Dev nbd5: unable to read RDB block 0 [ 262.847020][ T7586] nbd5: unable to read partition table [ 262.848831][ T7586] nbd5: partition table beyond EOD, truncated [ 262.941274][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.944334][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.946622][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.948708][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.950738][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.952884][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.955932][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.958271][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.960407][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.962556][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.964855][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.967003][ T9] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 262.971322][ T9] hid-generic 00A0:0006:0003.001B: hidraw1: HID v0.05 Device [syz1] on syz0 [ 263.193725][ T74] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 263.213786][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.215622][ T5311] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 263.343770][ T74] usb 10-1: Using ep0 maxpacket: 16 [ 263.345844][ T74] usb 10-1: no configurations [ 263.347329][ T74] usb 10-1: can't read configurations, error -22 [ 263.398252][ T9841] nvme_fabrics: missing parameter 'transport=%s' [ 263.400390][ T9841] nvme_fabrics: missing parameter 'nqn=%s' [ 263.501569][ T9849] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.571055][ T74] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 263.754052][ T1331] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 263.757465][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1011'. [ 263.903778][ T1331] usb 5-1: Using ep0 maxpacket: 8 [ 263.906971][ T1331] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 263.909900][ T1331] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.912470][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.913741][ T74] usb 10-1: Using ep0 maxpacket: 16 [ 263.916887][ T74] usb 10-1: no configurations [ 263.918551][ T74] usb 10-1: can't read configurations, error -22 [ 263.921264][ T74] usb usb10-port1: attempt power cycle [ 264.253746][ T74] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 264.274154][ T74] usb 10-1: Using ep0 maxpacket: 16 [ 264.276109][ T74] usb 10-1: no configurations [ 264.277499][ T74] usb 10-1: can't read configurations, error -22 [ 264.413784][ T74] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 264.434329][ T74] usb 10-1: Using ep0 maxpacket: 16 [ 264.437017][ T74] usb 10-1: no configurations [ 264.438888][ T74] usb 10-1: can't read configurations, error -22 [ 264.441625][ T74] usb usb10-port1: unable to enumerate USB device [ 264.902952][ T9859] tmpfs: Unknown parameter 's' [ 265.169390][ T9864] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 265.173790][ T9864] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 265.969436][ T9872] trusted_key: encrypted_key: insufficient parameters specified [ 266.386036][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1020'. [ 266.503921][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1021'. [ 266.529734][ T74] usb 5-1: USB disconnect, device number 42 [ 266.879417][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.884040][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.886235][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.888367][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.890492][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.892705][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.894850][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.896964][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.899137][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.901226][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.903379][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.905829][ T35] hid-generic 00A0:0006:0003.001C: unknown main item tag 0x0 [ 266.909164][ T35] hid-generic 00A0:0006:0003.001C: hidraw1: HID v0.05 Device [syz1] on syz0 [ 267.133745][ T1331] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 267.303814][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 267.314827][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 267.317043][ T1331] usb 9-1: can't read configurations, error -61 [ 267.443710][ T1331] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 267.514408][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1028'. [ 267.593744][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 267.596885][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 267.599062][ T1331] usb 9-1: can't read configurations, error -61 [ 267.601040][ T1331] usb usb9-port1: attempt power cycle [ 267.963897][ T1331] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 267.984113][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 268.071502][ T9915] 8021q: adding VLAN 0 to HW filter on device bond14 [ 268.275351][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 268.277662][ T1331] usb 9-1: can't read configurations, error -61 [ 268.361459][ T9920] bond0: entered promiscuous mode [ 268.363362][ T9920] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 268.366609][ T9920] bond0: left promiscuous mode [ 268.413740][ T1331] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 268.444539][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 268.451649][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 268.455013][ T1331] usb 9-1: can't read configurations, error -61 [ 268.457804][ T1331] usb usb9-port1: unable to enumerate USB device [ 269.907223][ T39] audit: type=1326 audit(1740780706.690:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.921378][ T39] audit: type=1326 audit(1740780706.700:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.930333][ T39] audit: type=1326 audit(1740780706.700:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.935865][ T39] audit: type=1326 audit(1740780706.700:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.941800][ T39] audit: type=1326 audit(1740780706.700:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.948678][ T39] audit: type=1326 audit(1740780706.700:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.957112][ T39] audit: type=1326 audit(1740780706.700:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.962615][ T39] audit: type=1326 audit(1740780706.700:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.968558][ T39] audit: type=1326 audit(1740780706.700:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 269.975050][ T39] audit: type=1326 audit(1740780706.700:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1039" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f01579 code=0x7ffc0000 [ 270.275980][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1041'. [ 271.170905][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 271.196232][ T9969] 8021q: adding VLAN 0 to HW filter on device bond12 [ 271.799526][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.802460][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.805380][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.808056][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.810788][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.813869][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.816925][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.819827][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.822579][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.838922][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.841782][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.845742][ T35] hid-generic 00A0:0006:0003.001D: unknown main item tag 0x0 [ 271.848571][ T35] hid-generic 00A0:0006:0003.001D: hidraw1: HID v0.05 Device [syz1] on syz0 [ 272.045408][ T1331] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 272.203785][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 272.208644][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 272.212920][ T1331] usb 9-1: can't read configurations, error -61 [ 272.353772][ T1331] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 272.524023][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 272.537166][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 272.539371][ T1331] usb 9-1: can't read configurations, error -61 [ 272.541387][ T1331] usb usb9-port1: attempt power cycle [ 272.643933][ T1018] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 272.653934][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1053'. [ 272.883787][ T1331] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 272.884886][ T1018] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.889765][ T1018] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.892717][ T1018] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.895678][ T1018] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.899848][ T9996] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 272.904271][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 272.905184][ T1018] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.908086][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 272.911153][ T1331] usb 9-1: can't read configurations, error -61 [ 273.043733][ T1331] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 273.066138][ T1331] usb 9-1: Using ep0 maxpacket: 16 [ 273.069031][ T1331] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 273.071140][ T1331] usb 9-1: can't read configurations, error -61 [ 273.073105][ T1331] usb usb9-port1: unable to enumerate USB device [ 273.593707][ T1331] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 273.756501][ T1331] usb 10-1: Using ep0 maxpacket: 8 [ 273.759274][ T1331] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 273.762397][ T1331] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 273.765764][ T1331] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 273.769260][ T1331] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.774568][ T1331] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.778167][ T1331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.785579][ T1331] usbtmc 10-1:16.0: bulk endpoints not found [ 273.894299][T10011] FAULT_INJECTION: forcing a failure. [ 273.894299][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 273.897687][T10011] CPU: 3 UID: 0 PID: 10011 Comm: syz.0.1057 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 273.897701][T10011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.897707][T10011] Call Trace: [ 273.897711][T10011] [ 273.897715][T10011] dump_stack_lvl+0x16c/0x1f0 [ 273.897733][T10011] should_fail_ex+0x50a/0x650 [ 273.897751][T10011] ? fs_reclaim_acquire+0xae/0x150 [ 273.897766][T10011] ? smc_nl_get_stats+0x322/0x9b0 [ 273.897778][T10011] should_failslab+0xc2/0x120 [ 273.897788][T10011] __kmalloc_cache_noprof+0x68/0x410 [ 273.897803][T10011] ? __nla_put+0x27/0x40 [ 273.897813][T10011] ? __asan_memcpy+0x3c/0x60 [ 273.897827][T10011] ? nla_put+0x101/0x140 [ 273.897839][T10011] smc_nl_get_stats+0x322/0x9b0 [ 273.897852][T10011] ? __asan_memset+0x23/0x50 [ 273.897865][T10011] ? __build_skb_around+0x278/0x3b0 [ 273.897880][T10011] ? __pfx_smc_nl_get_stats+0x10/0x10 [ 273.897892][T10011] ? __pfx___alloc_skb+0x10/0x10 [ 273.897905][T10011] ? do_fast_syscall_32+0x32/0x80 [ 273.897920][T10011] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.897941][T10011] genl_dumpit+0x122/0x230 [ 273.897958][T10011] netlink_dump+0x53c/0xd00 [ 273.897973][T10011] ? __pfx_netlink_dump+0x10/0x10 [ 273.897994][T10011] ? __asan_memset+0x23/0x50 [ 273.898008][T10011] ? genl_start+0x67d/0x960 [ 273.898025][T10011] __netlink_dump_start+0x6ca/0x970 [ 273.898041][T10011] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 273.898059][T10011] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 273.898080][T10011] ? __pfx_genl_get_cmd+0x10/0x10 [ 273.898094][T10011] ? __pfx_genl_start+0x10/0x10 [ 273.898108][T10011] ? __pfx_genl_dumpit+0x10/0x10 [ 273.898123][T10011] ? __pfx_genl_done+0x10/0x10 [ 273.898141][T10011] ? __radix_tree_lookup+0x21f/0x2c0 [ 273.898156][T10011] genl_rcv_msg+0x470/0x800 [ 273.898174][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.898191][T10011] ? __pfx_smc_nl_get_stats+0x10/0x10 [ 273.898204][T10011] ? __pfx___lock_acquire+0x10/0x10 [ 273.898222][T10011] netlink_rcv_skb+0x16b/0x440 [ 273.898237][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.898254][T10011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.898274][T10011] ? down_read+0xc9/0x330 [ 273.898289][T10011] ? __pfx_down_read+0x10/0x10 [ 273.898304][T10011] ? netlink_deliver_tap+0x1ae/0xd30 [ 273.898319][T10011] genl_rcv+0x28/0x40 [ 273.898334][T10011] netlink_unicast+0x53c/0x7f0 [ 273.898350][T10011] ? __pfx_netlink_unicast+0x10/0x10 [ 273.898365][T10011] ? __phys_addr_symbol+0x30/0x80 [ 273.898375][T10011] ? __check_object_size+0x488/0x710 [ 273.898388][T10011] netlink_sendmsg+0x8b8/0xd70 [ 273.898409][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.898429][T10011] ____sys_sendmsg+0xaaf/0xc90 [ 273.898441][T10011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.898453][T10011] ? get_compat_msghdr+0x11b/0x170 [ 273.898471][T10011] ___sys_sendmsg+0x135/0x1e0 [ 273.898487][T10011] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.898508][T10011] ? __pfx_lock_release+0x10/0x10 [ 273.898522][T10011] ? trace_lock_acquire+0x14e/0x1f0 [ 273.898539][T10011] ? __fget_files+0x206/0x3a0 [ 273.898557][T10011] __sys_sendmsg+0x16e/0x220 [ 273.898573][T10011] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.898607][T10011] __do_fast_syscall_32+0x73/0x120 [ 273.898627][T10011] do_fast_syscall_32+0x32/0x80 [ 273.898647][T10011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.898669][T10011] RIP: 0023:0xf7fb7579 [ 273.898682][T10011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 273.898695][T10011] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 273.898710][T10011] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 273.898720][T10011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.898728][T10011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.898737][T10011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 273.898746][T10011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.898768][T10011] [ 274.838425][T10019] 9pnet_fd: Insufficient options for proto=fd [ 274.999378][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 275.053904][T10023] team0: Port device team_slave_1 removed [ 275.103908][ T1018] usb 11-1: USB disconnect, device number 35 [ 275.331356][T10031] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 275.333762][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1062'. [ 275.461594][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1064'. [ 276.198503][ T35] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 276.353730][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 276.356590][ T35] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 276.358993][ T35] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 276.361122][ T1331] usb 10-1: USB disconnect, device number 26 [ 276.361525][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 276.361548][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.372027][ T35] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.375150][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.378957][ T35] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 276.381822][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.386069][ T35] usb 9-1: config 0 descriptor?? [ 276.387117][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.390452][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.393334][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.398063][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.400821][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.404852][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.407648][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.410398][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.413191][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.417904][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.420682][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.423464][ T6351] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 276.427589][ T6351] hid-generic 00A0:0006:0003.001E: hidraw1: HID v0.05 Device [syz1] on syz0 [ 276.645961][ T35] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 276.652498][ T35] usb 9-1: USB disconnect, device number 46 [ 276.655230][ T35] usblp0: removed [ 276.703779][ T1331] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 276.873807][ T1331] usb 10-1: Using ep0 maxpacket: 16 [ 276.876892][ T1331] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 276.879125][ T1331] usb 10-1: can't read configurations, error -61 [ 276.883747][ T30] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 277.003710][ T1331] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 277.033718][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 277.036353][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.038773][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.041328][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.044162][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 277.046727][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.049378][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.052116][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 277.056029][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 277.058701][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.061923][ T30] usb 5-1: config 0 descriptor?? [ 277.083704][ T1018] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 277.153729][ T1331] usb 10-1: Using ep0 maxpacket: 16 [ 277.156839][ T1331] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 277.159052][ T1331] usb 10-1: can't read configurations, error -61 [ 277.160951][ T1331] usb usb10-port1: attempt power cycle [ 277.235368][ T1018] usb 9-1: Using ep0 maxpacket: 32 [ 277.238160][ T1018] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.240541][ T1018] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.242973][ T1018] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 277.245961][ T1018] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.249211][ T1018] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.252041][ T1018] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 277.256081][ T1018] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 277.258764][ T1018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.262220][ T1018] usb 9-1: config 0 descriptor?? [ 277.267029][ T30] usb 5-1: USB disconnect, device number 43 [ 277.493730][ T1331] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 277.514568][ T1331] usb 10-1: Using ep0 maxpacket: 16 [ 277.518146][ T1331] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 277.520348][ T1331] usb 10-1: can't read configurations, error -61 [ 277.643762][ T1331] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 277.665626][ T1331] usb 10-1: Using ep0 maxpacket: 16 [ 277.668635][ T1331] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 277.670859][ T1331] usb 10-1: can't read configurations, error -61 [ 277.671207][ T1018] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 277.672858][ T1331] usb usb10-port1: unable to enumerate USB device [ 277.677206][ T1018] usb 9-1: USB disconnect, device number 47 [ 277.680428][ T1018] usblp0: removed [ 277.703856][ T35] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 277.853768][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 277.856492][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.858902][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.861521][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.865288][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 277.868693][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.872356][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.876680][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 277.881323][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 277.884764][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.888976][ T35] usb 5-1: config 0 descriptor?? [ 279.226360][T10054] netlink: 'syz.6.1071': attribute type 9 has an invalid length. [ 279.441568][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1072'. [ 279.787313][T10065] bio_check_eod: 11 callbacks suppressed [ 279.787327][T10065] syz.5.1073: attempt to access beyond end of device [ 279.787327][T10065] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 279.793394][T10065] syz.5.1073: attempt to access beyond end of device [ 279.793394][T10065] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 279.793749][T10064] nbd5: detected capacity change from 0 to 4 [ 279.797214][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 279.801784][T10065] block nbd5: Send control failed (result -89) [ 279.803548][T10065] block nbd5: Request send failed, requeueing [ 279.805531][ T5311] block nbd5: Receive control failed (result -32) [ 279.807440][ T36] block nbd5: Dead connection, failed to find a fallback [ 279.809477][ T36] block nbd5: shutting down sockets [ 279.810988][ T36] blk_print_req_error: 48 callbacks suppressed [ 279.810996][ T36] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.815506][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 279.815577][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.820907][ T7586] buffer_io_error: 48 callbacks suppressed [ 279.820915][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.826627][ T7586] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.829293][ T7586] Buffer I/O error on dev nbd5, logical block 1, async page read [ 279.831672][T10065] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.834617][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.837340][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.843830][ T7586] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.846664][ T7586] Buffer I/O error on dev nbd5, logical block 1, async page read [ 279.848908][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 279.851499][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 279.854681][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.856009][ T1331] usb 5-1: USB disconnect, device number 44 [ 279.857841][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.872964][ T7586] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.878625][ T7586] Buffer I/O error on dev nbd5, logical block 1, async page read [ 279.881281][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 279.884470][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.895088][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.897406][ T7586] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.899931][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.902206][ T7586] ldm_validate_partition_table(): Disk read failed. [ 279.905288][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.907948][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 279.912426][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 279.917256][ T7586] Buffer I/O error on dev nbd5, logical block 0, async page read [ 279.919834][ T7586] Dev nbd5: unable to read RDB block 0 [ 279.921557][ T7586] nbd5: unable to read partition table [ 279.923452][ T7586] nbd5: partition table beyond EOD, truncated [ 279.927521][ T7586] ldm_validate_partition_table(): Disk read failed. [ 279.929673][ T7586] Dev nbd5: unable to read RDB block 0 [ 279.931379][ T7586] nbd5: unable to read partition table [ 279.933101][ T7586] nbd5: partition table beyond EOD, truncated [ 279.936626][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 279.939636][T10065] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 279.950700][T10065] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 279.979203][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 280.183871][ T6351] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 280.333822][ T6351] usb 9-1: Using ep0 maxpacket: 8 [ 280.337064][ T6351] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 280.341099][ T6351] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 280.349365][ T6351] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 280.353048][ T6351] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.358393][ T6351] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.362000][ T6351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.368637][ T6351] usbtmc 9-1:16.0: bulk endpoints not found [ 280.634240][ T35] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 280.783774][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 280.786957][ T35] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.789413][ T35] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.791915][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.795645][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.798619][ T35] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.801391][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.805382][ T35] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.808022][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.815529][ T35] usb 10-1: config 0 descriptor?? [ 280.873816][ T30] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 280.896964][T10094] syz.6.1084: attempt to access beyond end of device [ 280.896964][T10094] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 280.901227][T10094] syz.6.1084: attempt to access beyond end of device [ 280.901227][T10094] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 280.903690][T10093] nbd6: detected capacity change from 0 to 4 [ 280.906436][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 280.911336][T10094] block nbd6: Send control failed (result -89) [ 280.913150][T10094] block nbd6: Request send failed, requeueing [ 280.915934][ T51] block nbd6: Dead connection, failed to find a fallback [ 280.915933][ T5311] block nbd6: Receive control failed (result -32) [ 280.919894][ T51] block nbd6: shutting down sockets [ 280.921511][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 280.922483][ T7710] ldm_validate_partition_table(): Disk read failed. [ 280.924388][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1, location=1 [ 280.924461][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 280.927502][ T7710] Dev nbd6: unable to read RDB block 0 [ 280.929681][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 280.932935][ T7710] nbd6: unable to read partition table [ 280.934458][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 280.934506][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 280.937214][ T7710] nbd6: partition table beyond EOD, [ 280.938926][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 280.941155][ T7710] truncated [ 280.949061][T10094] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 280.949731][ T7710] ldm_validate_partition_table(): Disk read failed. [ 280.951627][T10094] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 280.954335][ T7710] Dev nbd6: unable to read RDB block 0 [ 280.958564][ T7710] nbd6: unable to read partition table [ 280.960372][ T7710] nbd6: partition table beyond EOD, truncated [ 281.001535][T10097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.053698][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 281.056323][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.058785][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.061346][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.064229][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.066989][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.069739][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.071993][ T35] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.072519][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.077889][ T35] usb 10-1: USB disconnect, device number 31 [ 281.079968][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.083031][ T35] usblp0: removed [ 281.084377][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.093372][ T30] usb 5-1: config 0 descriptor?? [ 281.247984][T10101] TCP: TCP_TX_DELAY enabled [ 281.300506][ T74] usb 5-1: USB disconnect, device number 45 [ 281.514989][ T35] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 281.574062][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1087'. [ 281.673908][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 281.676802][ T35] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.679386][ T35] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.682416][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.685335][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.688403][ T35] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.714772][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.718444][ T35] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.721189][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.725843][ T35] usb 10-1: config 0 descriptor?? [ 281.733766][ T832] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 281.883742][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 281.886850][ T832] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.889413][ T832] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.891952][ T832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.894694][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.897523][ T832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.900364][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.903208][ T832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.907031][ T832] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.909714][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.913573][ T832] usb 5-1: config 0 descriptor?? [ 282.132134][ T35] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.136555][ T35] usb 10-1: USB disconnect, device number 32 [ 282.139323][ T35] usblp0: removed [ 282.603744][ T35] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 282.753741][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 282.756412][ T35] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 282.759348][ T35] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.763958][ T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.767225][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.771946][ T35] usbtmc 11-1:16.0: bulk endpoints not found [ 282.956425][ T6351] usb 9-1: USB disconnect, device number 48 [ 283.247963][T10123] syz.4.1092: attempt to access beyond end of device [ 283.247963][T10123] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 283.253270][T10123] syz.4.1092: attempt to access beyond end of device [ 283.253270][T10123] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 283.258612][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 283.261479][T10123] syz.4.1092: attempt to access beyond end of device [ 283.261479][T10123] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 283.265485][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 283.265536][T10121] nbd4: detected capacity change from 0 to 4 [ 283.270240][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 283.273136][T10123] block nbd4: Send control failed (result -89) [ 283.275023][T10123] block nbd4: Request send failed, requeueing [ 283.276975][ T5311] block nbd4: Receive control failed (result -32) [ 283.280276][ T36] block nbd4: Dead connection, failed to find a fallback [ 283.282366][ T36] block nbd4: shutting down sockets [ 283.284452][ T7586] ldm_validate_partition_table(): Disk read failed. [ 283.285060][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 283.286750][ T7586] Dev nbd4: unable to read RDB block 0 [ 283.289167][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 283.291500][ T7586] nbd4: unable to read partition table [ 283.294379][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 283.296550][ T7586] nbd4: partition table beyond EOD, truncated [ 283.299203][T10123] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 283.304463][T10123] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 283.305242][ T7586] ldm_validate_partition_table(): Disk read failed. [ 283.308988][ T7586] Dev nbd4: unable to read RDB block 0 [ 283.310673][ T7586] nbd4: unable to read partition table [ 283.312350][ T7586] nbd4: partition table beyond EOD, truncated [ 283.366912][T10127] kAFS: Can only specify source 'none' with -o dyn [ 283.458171][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 283.776180][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'. [ 283.880836][ T35] usb 5-1: USB disconnect, device number 46 [ 284.343888][ T35] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 284.504044][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 284.508634][ T35] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 284.511684][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.514965][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.517979][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.522731][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.525450][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.529892][ T35] usbtmc 5-1:16.0: bulk endpoints not found [ 284.543732][T10154] nbd5: detected capacity change from 0 to 4 [ 284.546648][ T7586] block nbd5: Send control failed (result -89) [ 284.548656][ T7586] block nbd5: Request send failed, requeueing [ 284.550784][ T5311] block nbd5: Receive control failed (result -32) [ 284.552788][ T1280] block nbd5: Dead connection, failed to find a fallback [ 284.557363][ T1280] block nbd5: shutting down sockets [ 284.559270][ T7586] ldm_validate_partition_table(): Disk read failed. [ 284.561396][ T7586] Dev nbd5: unable to read RDB block 0 [ 284.563113][ T7586] nbd5: unable to read partition table [ 284.564978][ T7586] nbd5: partition table beyond EOD, truncated [ 284.570975][T10154] ldm_validate_partition_table(): Disk read failed. [ 284.574588][T10154] Dev nbd5: unable to read RDB block 0 [ 284.577077][T10154] nbd5: unable to read partition table [ 284.579422][T10154] nbd5: partition table beyond EOD, truncated [ 284.584430][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 284.587896][ T7586] ldm_validate_partition_table(): Disk read failed. [ 284.590118][ T7586] Dev nbd5: unable to read RDB block 0 [ 284.592074][ T7586] nbd5: unable to read partition table [ 284.593776][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 284.594065][ T7586] nbd5: partition table beyond EOD, truncated [ 284.596647][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 284.601027][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 284.604283][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 284.607188][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 284.609884][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 284.612844][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 284.615685][T10154] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 284.618469][T10154] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 284.921053][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1102'. [ 285.061202][ T62] kernel read not supported for file /dsp (pid: 62 comm: kworker/2:1) [ 285.234692][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1103'. [ 285.375043][ T30] usb 11-1: USB disconnect, device number 37 [ 285.613754][ T35] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 285.774593][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 285.777794][ T35] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.780281][ T35] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.783545][ T35] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.787223][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.790217][ T35] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.792997][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.795977][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.801139][ T35] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.803835][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.807671][ T35] usb 9-1: config 0 descriptor?? [ 285.970573][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1109'. [ 286.013860][ T30] usb 9-1: USB disconnect, device number 49 [ 286.454125][ T74] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 286.524746][T10184] syzkaller0: entered promiscuous mode [ 286.526428][T10184] syzkaller0: entered allmulticast mode [ 286.605174][ T74] usb 9-1: Using ep0 maxpacket: 32 [ 286.607900][ T74] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.611126][ T74] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.613968][ T74] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.616591][ T74] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.619383][ T74] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.622197][ T74] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.625679][ T74] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.629405][ T74] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.631999][ T74] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.635290][ T74] usb 9-1: config 0 descriptor?? [ 287.050509][ T74] usb 5-1: USB disconnect, device number 47 [ 287.103996][ T35] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 287.267764][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 287.287399][ T35] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 287.291474][ T35] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.296529][ T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.300034][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.332854][ T35] usbtmc 11-1:16.0: bulk endpoints not found [ 288.164012][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 288.166643][T10210] netlink: 'syz.0.1119': attribute type 30 has an invalid length. [ 288.168940][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 288.182754][T10215] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 288.185703][T10215] netlink: 'syz.5.1121': attribute type 10 has an invalid length. [ 288.200550][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 288.200563][ T39] audit: type=1326 audit(1740780724.980:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.211808][ T39] audit: type=1326 audit(1740780724.980:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.218562][ T39] audit: type=1326 audit(1740780724.980:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.225300][ T39] audit: type=1326 audit(1740780724.980:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.234246][ T39] audit: type=1326 audit(1740780724.980:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.242364][ T39] audit: type=1326 audit(1740780724.990:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.249079][ T39] audit: type=1326 audit(1740780724.990:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb75a7 code=0x7ffc0000 [ 288.256628][ T39] audit: type=1326 audit(1740780724.990:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.263053][ T39] audit: type=1326 audit(1740780724.990:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb75a7 code=0x7ffc0000 [ 288.269361][ T39] audit: type=1326 audit(1740780724.990:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10216 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 288.392169][T10224] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1124'. [ 288.593711][ T35] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 288.609816][ T6103] usb 9-1: USB disconnect, device number 50 [ 288.753698][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 288.756390][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.759577][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.762475][ T35] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.765779][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.769486][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.772066][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.776774][ T35] usbtmc 5-1:16.0: bulk endpoints not found [ 288.963705][ T6103] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 289.113716][ T6103] usb 9-1: Using ep0 maxpacket: 32 [ 289.116562][ T6103] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 289.119064][ T6103] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 289.121532][ T6103] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 289.124175][ T6103] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.126989][ T6103] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.129806][ T6103] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.133604][ T6103] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.136326][ T6103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.139994][ T6103] usb 9-1: config 0 descriptor?? [ 289.409523][ T6103] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 289.415529][ T6103] usb 9-1: USB disconnect, device number 51 [ 289.418577][ T6103] usblp0: removed [ 289.612281][T10243] bridge_slave_1: left allmulticast mode [ 289.614178][T10243] bridge_slave_1: left promiscuous mode [ 289.615916][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.619464][T10243] bond0: (slave bond_slave_0): Releasing backup interface [ 289.622447][T10243] bond0: (slave bond_slave_1): Releasing backup interface [ 289.628348][T10243] team0: Port device team_slave_0 removed [ 289.631206][T10243] team0: Port device team_slave_1 removed [ 289.632955][T10243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.635507][T10243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.853731][ T6103] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 289.879472][ T30] usb 11-1: USB disconnect, device number 38 [ 290.020751][ T6103] usb 9-1: Using ep0 maxpacket: 32 [ 290.025382][ T6103] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 290.028704][ T6103] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 290.031968][ T6103] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 290.035425][ T6103] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.038217][ T6103] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.040984][ T6103] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.045625][ T6103] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.048198][ T6103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.051509][ T6103] usb 9-1: config 0 descriptor?? [ 290.157233][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1131'. [ 290.461761][ T6103] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.466224][ T6103] usb 9-1: USB disconnect, device number 52 [ 290.468864][ T6103] usblp0: removed [ 290.863738][ T1018] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 290.910127][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'. [ 291.023768][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 291.026541][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.028937][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.031366][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.034062][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.036813][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.039736][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.042580][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.046391][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.049049][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.052151][ T1018] usb 10-1: config 0 descriptor?? [ 291.257230][ T1018] usb 10-1: USB disconnect, device number 33 [ 291.349117][ T35] usb 5-1: USB disconnect, device number 48 [ 291.706462][T10282] FAULT_INJECTION: forcing a failure. [ 291.706462][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 291.710128][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.4.1142 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 291.710143][T10282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.710149][T10282] Call Trace: [ 291.710152][T10282] [ 291.710157][T10282] dump_stack_lvl+0x16c/0x1f0 [ 291.710176][T10282] should_fail_ex+0x50a/0x650 [ 291.710195][T10282] should_failslab+0xc2/0x120 [ 291.710206][T10282] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 291.710224][T10282] ? skb_clone+0x190/0x3f0 [ 291.710243][T10282] skb_clone+0x190/0x3f0 [ 291.710259][T10282] netlink_deliver_tap+0xabd/0xd30 [ 291.710277][T10282] netlink_unicast+0x5e1/0x7f0 [ 291.710296][T10282] ? __pfx_netlink_unicast+0x10/0x10 [ 291.710311][T10282] ? __phys_addr_symbol+0x30/0x80 [ 291.710323][T10282] ? __check_object_size+0x488/0x710 [ 291.710335][T10282] netlink_sendmsg+0x8b8/0xd70 [ 291.710352][T10282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.710371][T10282] ____sys_sendmsg+0xaaf/0xc90 [ 291.710384][T10282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.710395][T10282] ? get_compat_msghdr+0x11b/0x170 [ 291.710415][T10282] ___sys_sendmsg+0x135/0x1e0 [ 291.710431][T10282] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.710452][T10282] ? __pfx_lock_release+0x10/0x10 [ 291.710466][T10282] ? trace_lock_acquire+0x14e/0x1f0 [ 291.710483][T10282] ? __fget_files+0x206/0x3a0 [ 291.710502][T10282] __sys_sendmsg+0x16e/0x220 [ 291.710517][T10282] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.710540][T10282] __do_fast_syscall_32+0x73/0x120 [ 291.710556][T10282] do_fast_syscall_32+0x32/0x80 [ 291.710570][T10282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.710588][T10282] RIP: 0023:0xf749e579 [ 291.710596][T10282] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.710606][T10282] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 291.710616][T10282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 291.710623][T10282] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.710628][T10282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.710634][T10282] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.710640][T10282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.710652][T10282] [ 291.782663][ T1018] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 291.913833][ T6103] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 291.933803][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 291.938433][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.940870][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.946168][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.949582][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.952909][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.956892][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.960011][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.964230][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.967479][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.972041][ T1018] usb 10-1: config 0 descriptor?? [ 292.093692][ T6103] usb 11-1: Using ep0 maxpacket: 8 [ 292.096529][ T6103] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 292.099447][ T6103] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 292.102587][ T6103] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.105649][ T6103] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.109352][ T6103] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.111983][ T6103] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.119709][ T6103] usbtmc 11-1:16.0: bulk endpoints not found [ 292.143911][T10299] FAULT_INJECTION: forcing a failure. [ 292.143911][T10299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.148146][T10299] CPU: 2 UID: 0 PID: 10299 Comm: syz.4.1147 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 292.148166][T10299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.148176][T10299] Call Trace: [ 292.148182][T10299] [ 292.148189][T10299] dump_stack_lvl+0x16c/0x1f0 [ 292.148215][T10299] should_fail_ex+0x50a/0x650 [ 292.148255][T10299] ? __pfx___might_resched+0x10/0x10 [ 292.148281][T10299] should_fail_alloc_page+0xe7/0x130 [ 292.148304][T10299] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 292.148324][T10299] ? __alloc_frozen_pages_noprof+0x3fd/0x2470 [ 292.148377][T10299] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 292.148401][T10299] ? cpa_flush+0x39f/0x510 [ 292.148426][T10299] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.148449][T10299] ? pgprot2cachemode+0x9b/0x140 [ 292.148465][T10299] ? __pfx_pgprot2cachemode+0x10/0x10 [ 292.148481][T10299] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.148508][T10299] ? change_page_attr_set_clr+0x351/0x490 [ 292.148531][T10299] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 292.148550][T10299] ? lock_acquire+0x2f/0xb0 [ 292.148570][T10299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.148594][T10299] ? policy_nodemask+0xea/0x4e0 [ 292.148618][T10299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.148642][T10299] ? policy_nodemask+0xea/0x4e0 [ 292.148667][T10299] alloc_pages_mpol+0x1fc/0x540 [ 292.148682][T10299] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 292.148698][T10299] ? alloc_pages_noprof+0x23c/0x390 [ 292.148716][T10299] alloc_pages_noprof+0x131/0x390 [ 292.148732][T10299] kimage_alloc_pages+0x75/0x300 [ 292.148759][T10299] kimage_alloc_page+0x132/0x890 [ 292.148786][T10299] kimage_load_segment+0x19f/0x750 [ 292.148814][T10299] do_kexec_load+0x6f1/0x8c0 [ 292.148831][T10299] ? __pfx_do_kexec_load+0x10/0x10 [ 292.148844][T10299] ? __might_fault+0xe3/0x190 [ 292.148866][T10299] __do_compat_sys_kexec_load+0x2cf/0x330 [ 292.148885][T10299] ? __pfx___do_compat_sys_kexec_load+0x10/0x10 [ 292.148910][T10299] __do_fast_syscall_32+0x73/0x120 [ 292.148933][T10299] do_fast_syscall_32+0x32/0x80 [ 292.148954][T10299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.148979][T10299] RIP: 0023:0xf749e579 [ 292.148992][T10299] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 292.149006][T10299] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 292.149022][T10299] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 292.149031][T10299] RDX: 0000000080000000 RSI: 0000000000320000 RDI: 0000000000000000 [ 292.149041][T10299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.149049][T10299] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 292.149059][T10299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.149078][T10299] [ 293.081331][T10315] FAULT_INJECTION: forcing a failure. [ 293.081331][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 293.085779][T10315] CPU: 3 UID: 0 PID: 10315 Comm: syz.4.1152 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 293.085793][T10315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.085800][T10315] Call Trace: [ 293.085803][T10315] [ 293.085807][T10315] dump_stack_lvl+0x16c/0x1f0 [ 293.085836][T10315] should_fail_ex+0x50a/0x650 [ 293.085856][T10315] ? fs_reclaim_acquire+0xae/0x150 [ 293.085871][T10315] should_failslab+0xc2/0x120 [ 293.085882][T10315] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 293.085899][T10315] ? xprt_switch_alloc+0x2b8/0x3a0 [ 293.085913][T10315] ? rpc_create_xprt+0x2ae/0x410 [ 293.085927][T10315] ? rpc_create+0x454/0x7e0 [ 293.085939][T10315] ? kstrdup_const+0x63/0x80 [ 293.085954][T10315] kstrdup+0x53/0x100 [ 293.085967][T10315] kstrdup_const+0x63/0x80 [ 293.085980][T10315] __kernfs_new_node+0x9c/0x890 [ 293.085995][T10315] ? hlock_class+0x4e/0x130 [ 293.086007][T10315] ? __pfx___kernfs_new_node+0x10/0x10 [ 293.086027][T10315] ? __pfx___lock_acquire+0x10/0x10 [ 293.086045][T10315] kernfs_new_node+0x186/0x240 [ 293.086062][T10315] ? lock_acquire.part.0+0x11b/0x380 [ 293.086078][T10315] kernfs_create_dir_ns+0x4c/0x150 [ 293.086096][T10315] sysfs_create_dir_ns+0x13b/0x2b0 [ 293.086110][T10315] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 293.086124][T10315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.086134][T10315] ? kobject_add_internal+0x12d/0x990 [ 293.086151][T10315] ? do_raw_spin_unlock+0x172/0x230 [ 293.086162][T10315] kobject_add_internal+0x2c8/0x990 [ 293.086180][T10315] kobject_init_and_add+0x11c/0x190 [ 293.086197][T10315] ? __pfx_kobject_init_and_add+0x10/0x10 [ 293.086220][T10315] rpc_sysfs_xprt_setup+0x175/0x2f0 [ 293.086238][T10315] xprt_switch_alloc+0x2b8/0x3a0 [ 293.086252][T10315] rpc_create_xprt+0x2ae/0x410 [ 293.086266][T10315] rpc_create+0x454/0x7e0 [ 293.086280][T10315] ? __pfx_rpc_create+0x10/0x10 [ 293.086302][T10315] ? __pfx___lock_acquire+0x10/0x10 [ 293.086329][T10315] ? __pfx___lock_acquire+0x10/0x10 [ 293.086345][T10315] rpcb_create_af_local+0x10d/0x300 [ 293.086357][T10315] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 293.086374][T10315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.086384][T10315] ? lock_acquire+0x2f/0xb0 [ 293.086397][T10315] ? rpcb_create_local+0x148/0x270 [ 293.086410][T10315] rpcb_create_local+0x1ee/0x270 [ 293.086422][T10315] svc_bind+0x1e8/0x260 [ 293.086435][T10315] nfsd_create_serv+0x2d4/0x480 [ 293.086450][T10315] ? __pfx_nfsd_create_serv+0x10/0x10 [ 293.086463][T10315] ? __asan_memset+0x23/0x50 [ 293.086480][T10315] nfsd_nl_listener_set_doit+0xeb/0x1b40 [ 293.086497][T10315] ? __pfx___nla_validate_parse+0x10/0x10 [ 293.086513][T10315] ? rcu_is_watching+0x12/0xc0 [ 293.086525][T10315] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 293.086542][T10315] ? __nla_parse+0x40/0x60 [ 293.086555][T10315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 293.086574][T10315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 293.086594][T10315] genl_family_rcv_msg_doit+0x202/0x2f0 [ 293.086611][T10315] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 293.086628][T10315] ? trace_cap_capable+0x1a2/0x210 [ 293.086643][T10315] ? bpf_lsm_capable+0x9/0x10 [ 293.086654][T10315] ? security_capable+0x7e/0x260 [ 293.086667][T10315] genl_rcv_msg+0x565/0x800 [ 293.086685][T10315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.086702][T10315] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 293.086719][T10315] ? __pfx___lock_acquire+0x10/0x10 [ 293.086737][T10315] netlink_rcv_skb+0x16b/0x440 [ 293.086751][T10315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.086768][T10315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.086788][T10315] ? down_read+0xc9/0x330 [ 293.086803][T10315] ? __pfx_down_read+0x10/0x10 [ 293.086818][T10315] ? netlink_deliver_tap+0x1ae/0xd30 [ 293.086834][T10315] genl_rcv+0x28/0x40 [ 293.086849][T10315] netlink_unicast+0x53c/0x7f0 [ 293.086865][T10315] ? __pfx_netlink_unicast+0x10/0x10 [ 293.086880][T10315] ? __phys_addr_symbol+0x30/0x80 [ 293.086891][T10315] ? __check_object_size+0x488/0x710 [ 293.086903][T10315] netlink_sendmsg+0x8b8/0xd70 [ 293.086920][T10315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.086939][T10315] ____sys_sendmsg+0xaaf/0xc90 [ 293.086953][T10315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.086964][T10315] ? get_compat_msghdr+0x11b/0x170 [ 293.086982][T10315] ___sys_sendmsg+0x135/0x1e0 [ 293.086998][T10315] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.087020][T10315] ? __pfx_lock_release+0x10/0x10 [ 293.087033][T10315] ? trace_lock_acquire+0x14e/0x1f0 [ 293.087050][T10315] ? __fget_files+0x206/0x3a0 [ 293.087069][T10315] __sys_sendmsg+0x16e/0x220 [ 293.087084][T10315] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.087108][T10315] __do_fast_syscall_32+0x73/0x120 [ 293.087124][T10315] do_fast_syscall_32+0x32/0x80 [ 293.087138][T10315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.087156][T10315] RIP: 0023:0xf749e579 [ 293.087165][T10315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 293.087176][T10315] RSP: 002b:00000000f510555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 293.087186][T10315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 293.087192][T10315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.087198][T10315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.087204][T10315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 293.087210][T10315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.087222][T10315] [ 293.087241][T10315] kobject: kobject_add_internal failed for xprt-0-local (error: -12 parent: switch-0) [ 293.349424][T10324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1154'. [ 293.826017][T10341] ÿÿÿÿ: left allmulticast mode [ 293.828055][T10341] ÿÿÿÿ: left promiscuous mode [ 293.830104][T10341] bridge0: port 1(ÿÿÿÿ) entered disabled state [ 293.838198][T10341] bridge_slave_1: left allmulticast mode [ 293.840534][T10341] bridge_slave_1: left promiscuous mode [ 293.842908][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.851084][T10341] bond0: (slave bond_slave_0): Releasing backup interface [ 293.860994][T10341] bond0: (slave bond_slave_1): Releasing backup interface [ 293.873047][T10341] team0: Port device team_slave_0 removed [ 293.880781][T10341] team0: Port device team_slave_1 removed [ 293.882768][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.885101][T10341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.887662][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.889757][T10341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.947711][ T6103] usb 10-1: USB disconnect, device number 34 [ 294.633742][ T1018] usb 11-1: USB disconnect, device number 39 [ 294.678875][T10359] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 294.736893][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 294.800717][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1164'. [ 295.204114][ T1018] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 295.374080][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 295.379625][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.384160][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.388326][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.394207][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.399510][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.403595][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.408513][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.412271][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.416609][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.420411][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.425715][ T1018] usb 10-1: config 0 descriptor?? [ 295.593751][ T35] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 295.634805][ T1018] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.641669][ T1018] usb 10-1: USB disconnect, device number 35 [ 295.648172][ T1018] usblp0: removed [ 295.753862][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 295.758363][ T35] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 295.762418][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 295.765737][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 295.768597][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 295.772179][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.775781][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.781951][ T35] usbtmc 5-1:16.0: bulk endpoints not found [ 296.096957][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 296.106725][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 296.173804][ T1018] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 296.343708][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 296.346756][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 296.349194][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 296.351721][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 296.354382][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.357353][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 296.360134][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.362957][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 296.373677][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.377359][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 296.379931][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.383194][ T1018] usb 10-1: config 0 descriptor?? [ 296.588114][ T1018] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 296.788730][ T6351] usb 10-1: USB disconnect, device number 36 [ 296.794081][ T6351] usblp0: removed [ 297.420631][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 297.424854][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 297.427935][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 297.430855][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 297.433757][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 298.340901][ T1331] usb 5-1: USB disconnect, device number 49 [ 298.881997][T10452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.921304][T10453] syz.5.1183: attempt to access beyond end of device [ 298.921304][T10453] nbd5: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 298.926100][T10453] XFS (nbd5): SB validate failed with error -5. [ 299.312846][T10471] loop6: detected capacity change from 0 to 64 [ 299.593336][T10480] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 299.595290][T10480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 299.598156][T10480] vhci_hcd vhci_hcd.0: Device attached [ 299.773753][ T35] vhci_hcd: vhci_device speed not set [ 299.833738][ T35] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 299.889323][T10488] __nla_validate_parse: 35 callbacks suppressed [ 299.889340][T10488] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1197'. [ 300.150550][T10488] bond0 (unregistering): Released all slaves [ 300.763208][T10502] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1202'. [ 300.937408][T10512] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1205'. [ 301.157521][T10481] vhci_hcd: connection reset by peer [ 301.164800][ T9551] vhci_hcd: stop threads [ 301.166081][ T9551] vhci_hcd: release socket [ 301.167439][ T9551] vhci_hcd: disconnect device [ 301.497521][T10525] syz.6.1210: attempt to access beyond end of device [ 301.497521][T10525] nbd6: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 301.634214][T10525] XFS (nbd6): SB validate failed with error -5. [ 301.858595][T10546] syz.0.1217: attempt to access beyond end of device [ 301.858595][T10546] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 301.862404][T10546] syz.0.1217: attempt to access beyond end of device [ 301.862404][T10546] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 301.866555][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 301.869503][T10546] syz.0.1217: attempt to access beyond end of device [ 301.869503][T10546] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 301.873295][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 301.876907][T10546] syz.0.1217: attempt to access beyond end of device [ 301.876907][T10546] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 301.880714][T10546] syz.0.1217: attempt to access beyond end of device [ 301.880714][T10546] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 301.885177][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 301.889152][T10546] syz.0.1217: attempt to access beyond end of device [ 301.889152][T10546] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 301.893061][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 301.897594][T10546] syz.0.1217: attempt to access beyond end of device [ 301.897594][T10546] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 301.902043][T10546] syz.0.1217: attempt to access beyond end of device [ 301.902043][T10546] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 301.906544][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 301.909666][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 301.912754][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 301.916778][T10546] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 301.920616][T10546] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 302.033975][ T5992] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 302.164795][ T5992] usb 10-1: device descriptor read/64, error -71 [ 302.222241][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 302.237647][T10563] can: request_module (can-proto-3) failed. [ 302.312471][T10560] FAULT_INJECTION: forcing a failure. [ 302.312471][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.316610][T10560] CPU: 0 UID: 0 PID: 10560 Comm: syz.6.1222 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 302.316626][T10560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.316632][T10560] Call Trace: [ 302.316635][T10560] [ 302.316640][T10560] dump_stack_lvl+0x16c/0x1f0 [ 302.316658][T10560] should_fail_ex+0x50a/0x650 [ 302.316678][T10560] _copy_to_user+0x32/0xd0 [ 302.316692][T10560] simple_read_from_buffer+0xd0/0x160 [ 302.316708][T10560] proc_fail_nth_read+0x198/0x270 [ 302.316722][T10560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.316736][T10560] ? rw_verify_area+0xcf/0x680 [ 302.316770][T10560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.316784][T10560] vfs_read+0x1df/0xbf0 [ 302.316798][T10560] ? __fget_files+0x1fc/0x3a0 [ 302.316814][T10560] ? __pfx___mutex_lock+0x10/0x10 [ 302.316829][T10560] ? __pfx_vfs_read+0x10/0x10 [ 302.316847][T10560] ? __fget_files+0x206/0x3a0 [ 302.316865][T10560] ksys_read+0x12b/0x250 [ 302.316879][T10560] ? __pfx_ksys_read+0x10/0x10 [ 302.316898][T10560] __do_fast_syscall_32+0x73/0x120 [ 302.316913][T10560] do_fast_syscall_32+0x32/0x80 [ 302.316928][T10560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.316946][T10560] RIP: 0023:0xf7fb2579 [ 302.316954][T10560] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.316965][T10560] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 302.316975][T10560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 302.316982][T10560] RDX: 000000000000000f RSI: 00000000f743cff4 RDI: 0000000000000000 [ 302.316988][T10560] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 302.316994][T10560] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 302.317000][T10560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.317013][T10560] [ 302.413760][ T5992] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 302.531699][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 302.535787][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 302.539993][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 302.543142][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 302.546399][ T5992] usb 10-1: device descriptor read/64, error -71 [ 302.548759][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 302.551684][T10579] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 302.554904][T10579] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 302.653981][ T5992] usb usb10-port1: attempt power cycle [ 302.993832][ T5992] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 303.014230][ T5992] usb 10-1: device descriptor read/8, error -71 [ 303.255346][ T5992] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 303.284186][ T5992] usb 10-1: device descriptor read/8, error -71 [ 303.431679][ T5992] usb usb10-port1: unable to enumerate USB device [ 303.595280][T10604] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 303.599069][T10604] team0: Port device netdevsim0 added [ 303.602294][T10604] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 303.606448][T10604] team0: Port device netdevsim0 removed [ 304.332434][T10614] bio_check_eod: 13 callbacks suppressed [ 304.332449][T10614] syz.4.1237: attempt to access beyond end of device [ 304.332449][T10614] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 304.338769][T10614] syz.4.1237: attempt to access beyond end of device [ 304.338769][T10614] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 304.342384][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 304.345486][T10614] syz.4.1237: attempt to access beyond end of device [ 304.345486][T10614] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 304.349196][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 304.352043][T10614] syz.4.1237: attempt to access beyond end of device [ 304.352043][T10614] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 304.358261][T10614] syz.4.1237: attempt to access beyond end of device [ 304.358261][T10614] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 304.361959][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 304.364922][T10614] syz.4.1237: attempt to access beyond end of device [ 304.364922][T10614] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 304.369021][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 304.372032][T10614] syz.4.1237: attempt to access beyond end of device [ 304.372032][T10614] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 304.376103][T10614] syz.4.1237: attempt to access beyond end of device [ 304.376103][T10614] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 304.379722][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 304.382614][T10614] syz.4.1237: attempt to access beyond end of device [ 304.382614][T10614] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 304.386399][T10614] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 304.389116][T10614] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 304.514372][ T39] kauditd_printk_skb: 400 callbacks suppressed [ 304.514388][ T39] audit: type=1326 audit(1740780741.300:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.515868][T10621] vivid-007: disconnect [ 304.516186][ T39] audit: type=1326 audit(1740780741.300:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.516212][ T39] audit: type=1326 audit(1740780741.300:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.526281][T10620] vivid-007: reconnect [ 304.531303][ T39] audit: type=1326 audit(1740780741.300:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.545580][ T39] audit: type=1326 audit(1740780741.300:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.551492][ T39] audit: type=1326 audit(1740780741.300:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.557934][ T39] audit: type=1326 audit(1740780741.300:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.566165][ T39] audit: type=1326 audit(1740780741.300:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.572629][ T39] audit: type=1326 audit(1740780741.300:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 304.580778][ T39] audit: type=1326 audit(1740780741.300:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 305.148377][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1243'. [ 305.153887][ T35] vhci_hcd: vhci_device speed not set [ 305.211789][T10645] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 305.213736][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.218179][T10645] vhci_hcd vhci_hcd.0: Device attached [ 305.443763][ T35] vhci_hcd: vhci_device speed not set [ 305.503820][ T35] usb 49-1: device descriptor read/64, error -110 [ 305.526094][T10651] loop6: detected capacity change from 0 to 64 [ 305.684243][ T35] vhci_hcd: vhci_device speed not set [ 305.743985][ T35] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 306.239183][T10658] FAULT_INJECTION: forcing a failure. [ 306.239183][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.243148][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.5.1247 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 306.243168][T10658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.243178][T10658] Call Trace: [ 306.243184][T10658] [ 306.243191][T10658] dump_stack_lvl+0x16c/0x1f0 [ 306.243216][T10658] should_fail_ex+0x50a/0x650 [ 306.243247][T10658] _copy_from_user+0x2e/0xd0 [ 306.243266][T10658] ipv6_flowlabel_opt+0x234/0x2ea0 [ 306.243296][T10658] ? find_held_lock+0x2d/0x110 [ 306.243316][T10658] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 306.243341][T10658] ? sockopt_lock_sock+0x54/0x70 [ 306.243369][T10658] ? mark_held_locks+0x9f/0xe0 [ 306.243393][T10658] ? __local_bh_enable_ip+0xa4/0x120 [ 306.243421][T10658] ? do_ipv6_setsockopt+0x1052/0x4520 [ 306.243442][T10658] do_ipv6_setsockopt+0x1052/0x4520 [ 306.243470][T10658] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 306.243494][T10658] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 306.243521][T10658] ? find_held_lock+0x2d/0x110 [ 306.243552][T10658] ? __pfx___might_resched+0x10/0x10 [ 306.243583][T10658] ? aa_sk_perm+0x2f5/0xb20 [ 306.243606][T10658] ? ipv6_setsockopt+0xcb/0x170 [ 306.243641][T10658] ipv6_setsockopt+0xcb/0x170 [ 306.243664][T10658] tcp_setsockopt+0xa4/0x100 [ 306.243685][T10658] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.243717][T10658] do_sock_setsockopt+0x222/0x480 [ 306.243736][T10658] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 306.243755][T10658] ? lock_acquire+0x2f/0xb0 [ 306.243790][T10658] __sys_setsockopt+0x1a0/0x230 [ 306.243817][T10658] __ia32_sys_setsockopt+0xbc/0x160 [ 306.243838][T10658] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.243859][T10658] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 306.243881][T10658] __do_fast_syscall_32+0x73/0x120 [ 306.243906][T10658] do_fast_syscall_32+0x32/0x80 [ 306.243934][T10658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.243961][T10658] RIP: 0023:0xf7f01579 [ 306.243974][T10658] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.243990][T10658] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 306.244007][T10658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 306.244018][T10658] RDX: 0000000000000020 RSI: 00000000800000c0 RDI: 000000000000fe60 [ 306.244029][T10658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.244039][T10658] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 306.244049][T10658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.244072][T10658] [ 306.447087][T10664] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1250'. [ 306.451239][T10664] netlink: 860 bytes leftover after parsing attributes in process `syz.5.1250'. [ 306.766225][T10646] vhci_hcd: connection reset by peer [ 306.769378][ T1134] vhci_hcd: stop threads [ 306.770951][ T1134] vhci_hcd: release socket [ 306.772409][ T1134] vhci_hcd: disconnect device [ 306.944710][T10675] netlink: 'syz.6.1253': attribute type 2 has an invalid length. [ 306.947050][T10675] netlink: 'syz.6.1253': attribute type 1 has an invalid length. [ 306.949439][T10675] netlink: 'syz.6.1253': attribute type 1 has an invalid length. [ 307.059542][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 307.188146][T10684] syz.4.1255: attempt to access beyond end of device [ 307.188146][T10684] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 307.191885][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 307.195045][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 307.198043][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 307.200773][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 307.203607][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 307.206535][T10684] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 307.210354][T10684] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 307.210415][T10679] loop7: detected capacity change from 16384 to 16383 [ 307.412467][T10693] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 307.420827][T10693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.434436][T10693] bond0: (slave gretap1): making interface the new active one [ 307.437197][T10693] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 307.607950][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 307.610829][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 307.614996][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 307.618934][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 307.622040][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 307.625150][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 307.628078][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 307.630743][T10706] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 307.635466][T10706] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 308.017059][T10725] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.386648][T10759] misc userio: The device must be registered before sending interrupts [ 308.523737][ T74] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 308.675282][ T74] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 308.678013][ T74] usb 5-1: config 0 has no interface number 0 [ 308.680301][ T74] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.696199][ T74] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 308.699029][ T74] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.701680][ T74] usb 5-1: Product: syz [ 308.702973][ T74] usb 5-1: Manufacturer: syz [ 308.704607][ T74] usb 5-1: SerialNumber: syz [ 308.714072][ T74] usb 5-1: config 0 descriptor?? [ 308.927958][ T74] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 308.930190][ T74] keyspan 5-1:0.133: unsupported endpoint type 0 [ 308.936031][ T74] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 308.938318][ T74] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 308.940508][ T74] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 308.943882][ T74] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 308.952000][ T74] usb 5-1: USB disconnect, device number 50 [ 308.957338][ T74] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 308.960327][ T74] keyspan 5-1:0.133: device disconnected [ 308.970774][T10783] bond10: entered allmulticast mode [ 308.974827][T10783] bond10 (unregistering): Released all slaves [ 309.422331][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 309.948284][ T1018] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 310.113819][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 310.129519][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.147166][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.163879][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.206104][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.211044][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.217069][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.225341][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 310.228207][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1301'. [ 310.230058][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.238647][ T1018] usb 10-1: config 0 descriptor?? [ 310.400050][T10827] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 310.414018][T10827] batman_adv: batadv0: Adding interface: gretap2 [ 310.415995][T10827] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.426970][T10827] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 310.451524][ T1018] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 310.461754][ T1018] usb 10-1: USB disconnect, device number 41 [ 310.554359][T10831] misc userio: The device must be registered before sending interrupts [ 310.565303][ T1018] usblp0: removed [ 310.883739][ T35] vhci_hcd: vhci_device speed not set [ 311.025391][ T1018] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 311.183776][ T1018] usb 10-1: Using ep0 maxpacket: 32 [ 311.192006][ T1018] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.197947][ T1018] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.202358][ T1018] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.206965][ T1018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.211196][ T1018] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.217067][ T1018] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.223761][ T1018] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.228427][ T1018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.233926][ T1018] usb 10-1: config 0 descriptor?? [ 311.372688][T10855] [U] ^A [ 311.449319][ T1018] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 311.501989][T10867] FAULT_INJECTION: forcing a failure. [ 311.501989][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 311.506332][T10867] CPU: 3 UID: 0 PID: 10867 Comm: syz.4.1314 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 311.506353][T10867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.506363][T10867] Call Trace: [ 311.506369][T10867] [ 311.506376][T10867] dump_stack_lvl+0x16c/0x1f0 [ 311.506401][T10867] should_fail_ex+0x50a/0x650 [ 311.506425][T10867] ? fs_reclaim_acquire+0xae/0x150 [ 311.506447][T10867] ? kobject_get_path+0xd9/0x2b0 [ 311.506468][T10867] should_failslab+0xc2/0x120 [ 311.506482][T10867] __kmalloc_noprof+0xcb/0x510 [ 311.506505][T10867] ? lock_acquire+0x2f/0xb0 [ 311.506528][T10867] ? kernfs_rename_ns+0x87/0x600 [ 311.506550][T10867] kobject_get_path+0xd9/0x2b0 [ 311.506575][T10867] kobject_rename+0xcb/0x260 [ 311.506597][T10867] ? __pfx_kobject_rename+0x10/0x10 [ 311.506621][T10867] ? kernfs_put+0x35/0x50 [ 311.506644][T10867] device_rename+0x130/0x230 [ 311.506668][T10867] cfg802154_switch_netns+0x1d2/0x470 [ 311.506688][T10867] nl802154_wpan_phy_netns+0x134/0x2b0 [ 311.506707][T10867] genl_family_rcv_msg_doit+0x202/0x2f0 [ 311.506733][T10867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.506756][T10867] ? trace_cap_capable+0x1a2/0x210 [ 311.506782][T10867] ? bpf_lsm_capable+0x9/0x10 [ 311.506800][T10867] ? security_capable+0x7e/0x260 [ 311.506823][T10867] genl_rcv_msg+0x565/0x800 [ 311.506852][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.506887][T10867] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 311.506909][T10867] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 311.506931][T10867] ? __pfx_nl802154_post_doit+0x10/0x10 [ 311.506957][T10867] ? __pfx___lock_acquire+0x10/0x10 [ 311.506987][T10867] netlink_rcv_skb+0x16b/0x440 [ 311.507011][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.507038][T10867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.507073][T10867] ? down_read+0xc9/0x330 [ 311.507096][T10867] ? __pfx_down_read+0x10/0x10 [ 311.507121][T10867] ? netlink_deliver_tap+0x1ae/0xd30 [ 311.507148][T10867] genl_rcv+0x28/0x40 [ 311.507172][T10867] netlink_unicast+0x53c/0x7f0 [ 311.507201][T10867] ? __pfx_netlink_unicast+0x10/0x10 [ 311.507227][T10867] ? __phys_addr_symbol+0x30/0x80 [ 311.507245][T10867] ? __check_object_size+0x488/0x710 [ 311.507267][T10867] netlink_sendmsg+0x8b8/0xd70 [ 311.507295][T10867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.507331][T10867] ____sys_sendmsg+0xaaf/0xc90 [ 311.507355][T10867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.507374][T10867] ? get_compat_msghdr+0x11b/0x170 [ 311.507410][T10867] ___sys_sendmsg+0x135/0x1e0 [ 311.507439][T10867] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.507478][T10867] ? __pfx_lock_release+0x10/0x10 [ 311.507502][T10867] ? trace_lock_acquire+0x14e/0x1f0 [ 311.507534][T10867] ? __fget_files+0x206/0x3a0 [ 311.507568][T10867] __sys_sendmsg+0x16e/0x220 [ 311.507595][T10867] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.507639][T10867] __do_fast_syscall_32+0x73/0x120 [ 311.507664][T10867] do_fast_syscall_32+0x32/0x80 [ 311.507687][T10867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.507714][T10867] RIP: 0023:0xf749e579 [ 311.507728][T10867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.507745][T10867] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 311.507762][T10867] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 311.507773][T10867] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.507783][T10867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.507793][T10867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.507803][T10867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.507827][T10867] [ 311.508537][T10867] ------------[ cut here ]------------ [ 311.627244][T10867] WARNING: CPU: 3 PID: 10867 at net/ieee802154/core.c:258 cfg802154_switch_netns+0x3b5/0x470 [ 311.630422][T10867] Modules linked in: [ 311.631660][T10867] CPU: 3 UID: 0 PID: 10867 Comm: syz.4.1314 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 311.636464][T10867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.640383][T10867] RIP: 0010:cfg802154_switch_netns+0x3b5/0x470 [ 311.642638][T10867] Code: 00 00 fb 48 8b 7b 20 e8 c9 97 24 fe 31 ff 89 c5 89 c6 e8 ce c5 ac f6 85 ed 0f 84 0d ff ff ff e9 ff fe ff ff e8 bc ca ac f6 90 <0f> 0b 90 e9 28 fe ff ff 4c 89 ef e8 ab 04 0f f7 e9 a9 fc ff ff e8 [ 311.649088][T10867] RSP: 0018:ffffc9000dedf500 EFLAGS: 00010293 [ 311.650856][T10867] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff8b0d132d [ 311.653615][T10867] RDX: ffff88802622a440 RSI: ffffffff8b0d1504 RDI: 0000000000000005 [ 311.656656][T10867] RBP: ffff888046718198 R08: 0000000000000005 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.658970][T10867] R10: 00000000fffffff4 R11: 0000000000000003 R12: 0000000000000000 [ 311.661410][T10867] R13: ffff88801308ec00 R14: ffff888046718078 R15: ffff888046718000 [ 311.663824][T10867] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5126b40 [ 311.666704][T10867] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 311.668610][T10867] CR2: 00000000f5125528 CR3: 0000000052bf8000 CR4: 0000000000352ef0 [ 311.670859][T10867] Call Trace: [ 311.671849][T10867] [ 311.672742][T10867] ? __warn+0xea/0x3c0 [ 311.674031][T10867] ? cfg802154_switch_netns+0x3b5/0x470 [ 311.675643][T10867] ? report_bug+0x3c0/0x580 [ 311.677302][T10867] ? handle_bug+0x54/0xa0 [ 311.679050][T10867] ? exc_invalid_op+0x17/0x50 [ 311.680542][T10867] ? asm_exc_invalid_op+0x1a/0x20 [ 311.681999][T10867] ? cfg802154_switch_netns+0x1dd/0x470 [ 311.683945][T10867] ? cfg802154_switch_netns+0x3b4/0x470 [ 311.685664][T10867] ? cfg802154_switch_netns+0x3b5/0x470 [ 311.687229][T10867] nl802154_wpan_phy_netns+0x134/0x2b0 [ 311.688834][T10867] genl_family_rcv_msg_doit+0x202/0x2f0 [ 311.690452][T10867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.692256][T10867] ? trace_cap_capable+0x1a2/0x210 [ 311.693813][T10867] ? bpf_lsm_capable+0x9/0x10 [ 311.695199][T10867] ? security_capable+0x7e/0x260 [ 311.695734][ C0] usblp0: nonzero read bulk status received: -71 [ 311.696339][ T1018] usb 10-1: USB disconnect, device number 42 [ 311.696949][T10867] genl_rcv_msg+0x565/0x800 [ 311.702183][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.703855][T10867] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 311.705689][T10867] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 311.707815][T10867] ? __pfx_nl802154_post_doit+0x10/0x10 [ 311.709477][T10867] ? __pfx___lock_acquire+0x10/0x10 [ 311.711004][T10867] netlink_rcv_skb+0x16b/0x440 [ 311.712757][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.715384][T10867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.717025][T10867] ? down_read+0xc9/0x330 [ 311.718492][T10867] ? __pfx_down_read+0x10/0x10 [ 311.720104][T10867] ? netlink_deliver_tap+0x1ae/0xd30 [ 311.721642][T10867] genl_rcv+0x28/0x40 [ 311.722830][T10867] netlink_unicast+0x53c/0x7f0 [ 311.724493][T10867] ? __pfx_netlink_unicast+0x10/0x10 [ 311.726399][T10867] ? __phys_addr_symbol+0x30/0x80 [ 311.728367][T10867] ? __check_object_size+0x488/0x710 [ 311.729847][T10867] netlink_sendmsg+0x8b8/0xd70 [ 311.731186][T10867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.732720][T10867] ____sys_sendmsg+0xaaf/0xc90 [ 311.734293][T10867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.735860][T10867] ? get_compat_msghdr+0x11b/0x170 [ 311.737398][T10867] ___sys_sendmsg+0x135/0x1e0 [ 311.739083][T10867] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.741210][T10867] ? __pfx_lock_release+0x10/0x10 [ 311.743248][T10867] ? trace_lock_acquire+0x14e/0x1f0 [ 311.744905][T10867] ? __fget_files+0x206/0x3a0 [ 311.746745][T10867] __sys_sendmsg+0x16e/0x220 [ 311.748156][T10867] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.749686][T10867] __do_fast_syscall_32+0x73/0x120 [ 311.751182][T10867] do_fast_syscall_32+0x32/0x80 [ 311.752641][T10867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.755128][T10867] RIP: 0023:0xf749e579 [ 311.756778][T10867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.762311][T10867] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 311.764869][T10867] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 311.767263][T10867] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.769536][T10867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.771818][T10867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.774233][T10867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.776692][T10867] [ 311.777607][T10867] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.779695][T10867] CPU: 3 UID: 0 PID: 10867 Comm: syz.4.1314 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 311.782763][T10867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.785880][T10867] Call Trace: [ 311.786857][T10867] [ 311.787727][T10867] dump_stack_lvl+0x3d/0x1f0 [ 311.789094][T10867] panic+0x71d/0x800 [ 311.790245][T10867] ? __pfx_panic+0x10/0x10 [ 311.791549][T10867] ? show_trace_log_lvl+0x29d/0x3d0 [ 311.793076][T10867] ? check_panic_on_warn+0x1f/0xb0 [ 311.794585][T10867] ? cfg802154_switch_netns+0x3b5/0x470 [ 311.796203][T10867] check_panic_on_warn+0xab/0xb0 [ 311.797646][T10867] __warn+0xf6/0x3c0 [ 311.798784][T10867] ? cfg802154_switch_netns+0x3b5/0x470 [ 311.800379][T10867] report_bug+0x3c0/0x580 [ 311.801653][T10867] handle_bug+0x54/0xa0 [ 311.802871][T10867] exc_invalid_op+0x17/0x50 [ 311.804229][T10867] asm_exc_invalid_op+0x1a/0x20 [ 311.805687][T10867] RIP: 0010:cfg802154_switch_netns+0x3b5/0x470 [ 311.807467][T10867] Code: 00 00 fb 48 8b 7b 20 e8 c9 97 24 fe 31 ff 89 c5 89 c6 e8 ce c5 ac f6 85 ed 0f 84 0d ff ff ff e9 ff fe ff ff e8 bc ca ac f6 90 <0f> 0b 90 e9 28 fe ff ff 4c 89 ef e8 ab 04 0f f7 e9 a9 fc ff ff e8 [ 311.812964][T10867] RSP: 0018:ffffc9000dedf500 EFLAGS: 00010293 [ 311.814780][T10867] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff8b0d132d [ 311.817065][T10867] RDX: ffff88802622a440 RSI: ffffffff8b0d1504 RDI: 0000000000000005 [ 311.819325][T10867] RBP: ffff888046718198 R08: 0000000000000005 R09: 0000000000000000 [ 311.821620][T10867] R10: 00000000fffffff4 R11: 0000000000000003 R12: 0000000000000000 [ 311.823854][T10867] R13: ffff88801308ec00 R14: ffff888046718078 R15: ffff888046718000 [ 311.826025][T10867] ? cfg802154_switch_netns+0x1dd/0x470 [ 311.827566][T10867] ? cfg802154_switch_netns+0x3b4/0x470 [ 311.829105][T10867] nl802154_wpan_phy_netns+0x134/0x2b0 [ 311.830684][T10867] genl_family_rcv_msg_doit+0x202/0x2f0 [ 311.832216][T10867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.834052][T10867] ? trace_cap_capable+0x1a2/0x210 [ 311.835587][T10867] ? bpf_lsm_capable+0x9/0x10 [ 311.836999][T10867] ? security_capable+0x7e/0x260 [ 311.838431][T10867] genl_rcv_msg+0x565/0x800 [ 311.839754][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.841220][T10867] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 311.842812][T10867] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 311.844588][T10867] ? __pfx_nl802154_post_doit+0x10/0x10 [ 311.846223][T10867] ? __pfx___lock_acquire+0x10/0x10 [ 311.847730][T10867] netlink_rcv_skb+0x16b/0x440 [ 311.849135][T10867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.850630][T10867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.852194][T10867] ? down_read+0xc9/0x330 [ 311.853461][T10867] ? __pfx_down_read+0x10/0x10 [ 311.854881][T10867] ? netlink_deliver_tap+0x1ae/0xd30 [ 311.856414][T10867] genl_rcv+0x28/0x40 [ 311.857596][T10867] netlink_unicast+0x53c/0x7f0 [ 311.858987][T10867] ? __pfx_netlink_unicast+0x10/0x10 [ 311.860523][T10867] ? __phys_addr_symbol+0x30/0x80 [ 311.862026][T10867] ? __check_object_size+0x488/0x710 [ 311.863561][T10867] netlink_sendmsg+0x8b8/0xd70 [ 311.864993][T10867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.866525][T10867] ____sys_sendmsg+0xaaf/0xc90 [ 311.867933][T10867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.869459][T10867] ? get_compat_msghdr+0x11b/0x170 [ 311.870952][T10867] ___sys_sendmsg+0x135/0x1e0 [ 311.872337][T10867] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.873872][T10867] ? __pfx_lock_release+0x10/0x10 [ 311.875329][T10867] ? trace_lock_acquire+0x14e/0x1f0 [ 311.876856][T10867] ? __fget_files+0x206/0x3a0 [ 311.878209][T10867] __sys_sendmsg+0x16e/0x220 [ 311.879540][T10867] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.881048][T10867] __do_fast_syscall_32+0x73/0x120 [ 311.882567][T10867] do_fast_syscall_32+0x32/0x80 [ 311.884095][T10867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.885971][T10867] RIP: 0023:0xf749e579 [ 311.887194][T10867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.892561][T10867] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 311.895024][T10867] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 311.897303][T10867] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.899576][T10867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.901849][T10867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.904131][T10867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.906416][T10867] [ 311.907878][T10867] Kernel Offset: disabled [ 311.909212][T10867] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:12:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000007c833f RBX=0000000000000000 RCX=ffffffff8b552469 RDX=0000000000000000 RSI=ffffffff8b6ced80 RDI=ffffffff8bd34800 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000078982000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001107eb1 RBX=0000000000000001 RCX=ffffffff8b552469 RDX=0000000000000000 RSI=ffffffff8b6ced80 RDI=ffffffff8bd34800 RBP=ffffed1003ad2910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d694880 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000b00 CR3=0000000052bf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81c19695 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff90627710 RBP=000000000003da8c RSP=ffffc90003abf300 R8 =0000000000000000 R9 =ffffed10056c7da8 R10=ffff88802b63ed43 R11=0000000000000001 R12=ffff88802b63fb70 R13=ffff88807671a440 R14=ffff888022058a00 R15=ffff88802b63ed40 RIP=ffffffff821c11dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6e27bbed00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056467b9e4000 CR3=000000002ab28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ec2a9259ec2a9259 ZMM22=2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 2df2f9f42df2f9f4 ZMM23=0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 0e6635a60e6635a6 ZMM24=e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 e502ba20e502ba20 ZMM25=5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 5bfd94e35bfd94e3 ZMM26=841356db841356db 841356db841356db 841356db841356db 841356db841356db 841356db841356db 841356db841356db 841356db841356db 841356db841356db ZMM27=aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e aafb647eaafb647e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 7709000077090000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e6235 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc9000dedee88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ab6ee20 R15=0000000000000000 RIP=ffffffff853e625f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5125528 CR3=0000000052bf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000