last executing test programs: 23m34.821200234s ago: executing program 3 (id=281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400000a4dddc29d15587400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)="881002292705cc0aa00be910113e313f8fb33c449943d4d268c7e57053f803945d8a279089c9bcea9d6434ce7dd230ff593771022ac96b87ae876a52e0e156bc4f85677175f282af8227d249458669f375fd9e5aed4a97941aa093eb19be4c9071547eaa2b85544eb1660089552989d91e4e6714c0e94a990090252d435707a5dc23353e7040bd823f681ffba8ecf9f347311fa9fa0909a0cc3d124d9d4f70ce832006e55b99e9ecc8242d2a1c24554a0f3e6049f36e12111c4b5985", &(0x7f00000015c0), 0x55, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$comedi(0xffffff9c, &(0x7f0000000b00)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_CMD(r6, 0x80406409, &(0x7f0000000c00)={0x0, 0x1, 0x10, 0x1, 0x2, 0x201, 0x1, 0x10, 0x100, 0x535, 0x100, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x2, &(0x7f00000002c0)=0x6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1b4, 0x111, 0x4b4, 0x1b4, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x20, 0x4, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa, 0x3}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e4) landlock_create_ruleset(&(0x7f0000000400)={0x840, 0x0, 0x3}, 0x18, 0x1) 23m34.773577981s ago: executing program 3 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 23m33.882864991s ago: executing program 3 (id=286): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4008010) sendmmsg(r5, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000d80)="309a7c61a8a85b615f1b0c58962510dd345ba89c7b893ccee7c6a9e8d4dddaacc47f44ff3e523c124b61677009fb2bcd43b669cb418f70e25764594db4d7e1e43ab388c1942ccbd37d96d954c37986e7c9b1de50bd93fe0087c7d702584feba0b91639c2a3e79f38b3700a927bc029826ab93e20213dd80d719058dd9f548c1af24a50f82718e9ba42bac6f32926174da8d932fc77a87c0fd48d873eac2f4a0a3c02c19b231c51c1bb35", 0xaa}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000400)="fd0632a8c8040ce5aaff57d09fc8ebe262fcb344f038f4f68aa62c20a7c42d138238bc7b2b02b44dc2a1c1d81713ecf22930349326e6ecdc94715f4522142797000000", 0x43}, {&(0x7f0000000680)="67cb5af0f2c0154ae92950b4f079ceaab940f8101db8132260df087fc9bbadc4ead82dac6648bd979e728b42e4fc0b320947df6a291cf702e63b535f6cf48da5033d5e30204c05f4fcc06d1920c75f6d2615155d2d0f0566b7f59e50780b32afe4462f0ab1fea2eef2fa224f6282308e1ad39748789d0fc8d261563a3308451527e941630cd8557910c0a10839f831f8c2612edd1738cf136af8820a6a6a8fe57d941e033c240655ed7c33e05805966bd7fc63d2a11b492814e48fa173a53e7eb0e69733da012fb59bccfb44379b", 0xce}], 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="8a4e3eaf079882bb9814398356b69f17845bbab50753aa09ef2592d38342605b628342a73673e4ef2d4d85d7704c87471c28e0cc86c7a5dfb432a8e7e9fbfb6089dd5613e12995a0199d727f6cd9425e1454073d27c4f008c5fb8d0a881ee0e1489d20ecf4094f7f02846be5cb0b9a3fc42b71c1159d01fc366c67eece5c1e2344cbe916df5b7fc3f57da3a466f3bc8f5e8051f1127b2bb4c8b5326f6eeb47dc21bdd81dca450d88d734f0bc56459efb9e514dc5ee7305e757629874bad523caa6a0c445b193d9961ebd6f8ae011d94921af927fa1d1cff7cd203b17", 0xdc}, {&(0x7f0000000980)="0dcbab8659710a2b4cce4697507423e2ab4bd9561f63bfa33b329632c80357341c407f6e681161b10e0f516035921b9bf501123b918eed3b671cc5d2f38b574cb8c7ec06afc7c37e970c3d6fd966bb73131fb619f4631dbb8b413dd1ad24c98cf94ee62bc171ecf5e0a569e0aef6db8d0bf79ccde163b761cfcc044175af0155d873408177b80c3c6ba382097637ffe1fc79af361891cbb8e72eb0237194d63d34f2bf05d33248bf4edf398eb51267934bf8919f37e39c771175a381e131f99145e6628d9f0b9c1b529099b85b4aa80d290a930a3e389cc0", 0xd8}, {&(0x7f0000000100)="e84f8866871ef14ada2a7d058147f429f700193d1140c65990fb3aa12c0853a3eade0e6ab1ca5d16b391ee7d09a523b013870f4388a55f6e14727731c93f", 0x3e}, {&(0x7f0000000780)="df65cb2e1525056091f8b825acf1778c231abf6fbe38a4bd5e58deac2b961fb3566684bef55de6b95e35cadbfa50958c70f26c79200dc495a3933d1566e8d86af4a790b68f5e", 0x46}, {&(0x7f0000000340)="d650381956785428bef67c02", 0xc}, {&(0x7f0000000a80)="98d355fafa6d98ce27c5b1acaae4d12ac6340e88de53ff045691f0f75b7c1de82467edbd2d4320d8bc90a2963cfd346596041fa3bcdfd525caaabe08f5ea9a0ae2ef9728297dfc9a2db9a55054f88c2b8ffeef0943360033e665624e261a4a1665dcea3432f20e3a3cb9b17de0338ea91f99304a795ccd9d69a079780349a612905dec736d8ed14ab4d83607564d4e31c5ebf7f771a74f423b2bd35824cf456d15296338dfc8ed57b44b55f41c7ef58cd2e20111da1988eaf671e46d00e41dd380cc10a19da54f", 0xc7}, {&(0x7f0000000800)="383766cc035044b7cae9d77864654aa6daa7a0a1a9c00f7d99897e36822cbf38f6c4ae3c4e43040ba49ec775f72acb2a3aab51845f5bdf9e64", 0x39}, {&(0x7f0000000b80)="733e261b4a4ec9ba734bce489a1878917ad63d002b6c20be048844bb972b4369943cd504b5b98455ca0413e5d9d9b20ee98ab96b867d2348f5d0327868d6048babda67405ac05ece5ddb8c59a7a46595207ea4a3f1a43250723b62a790bbc12a64b05758f9388b5a0c091b390e33f481d248c9f1cc18112b2c2048567cccc1", 0x7f}, {&(0x7f0000000c40)="d1730a483008a03068898fbf1f6a031023de158058e23b032493b7e06243e274b4eca604c9ba697b003723d539bef151d009c0d020ec18b568a14e1901d7725cf9025e4abe4750854e57", 0x4a}], 0x9}}], 0x2, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000240)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001880)) r9 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0x10000000}) 23m32.793787314s ago: executing program 3 (id=289): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) syz_clone3(&(0x7f0000000840)={0x300, 0x0, 0x0, 0x0, {0x12}, &(0x7f00000007c0), 0x0, 0x0, 0x0}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffe, 0x30}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "2809e8dbe108598927875397bab22d0000b42076c1ce8ef05f819e01177d3d458dac00000000000000000000003b000000000000005bd7ed960e17288800", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x24, 0x8000003f) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000007a23cad8f64d4fc4000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000700000a"], 0x74}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000002c0)={0x2, @pix={0x40, 0xd61, 0x30395056, 0x9, 0x9, 0x1, 0xc, 0x12, 0x1, 0x3, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x101, 0x0, 0x38416761, 0x2, 0x6, [{0x5, 0x6}, {0x6, 0x7}, {0x6, 0xffffffff}, {0x9, 0x6}, {0xe6, 0xd}, {0x400007f, 0x80000}, {0x6, 0x17}, {0x2000, 0xfffffff3}], 0xfa, 0x4, 0x8, 0x2}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) 23m32.681966177s ago: executing program 3 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400000a4dddc29d15587400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)="881002292705cc0aa00be910113e313f8fb33c449943d4d268c7e57053f803945d8a279089c9bcea9d6434ce7dd230ff593771022ac96b87ae876a52e0e156bc4f85677175f282af8227d249458669f375fd9e5aed4a97941aa093eb19be4c9071547eaa2b85544eb1660089552989d91e4e6714c0e94a990090252d435707a5dc23353e7040bd823f681ffba8ecf9f347311fa9fa0909a0cc3d124d9d4f70ce832006e55b99e9ecc8242d2a1c24554a0f3e6049f36e12111c4b5985", &(0x7f00000015c0), 0x55, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$comedi(0xffffff9c, &(0x7f0000000b00)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_CMD(r6, 0x80406409, &(0x7f0000000c00)={0x0, 0x1, 0x10, 0x1, 0x2, 0x201, 0x1, 0x10, 0x100, 0x535, 0x100, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x2, &(0x7f00000002c0)=0x6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1b4, 0x111, 0x4b4, 0x1b4, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x20, 0x4, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa, 0x3}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e4) landlock_create_ruleset(&(0x7f0000000400)={0x840, 0x0, 0x3}, 0x18, 0x1) 23m32.320412472s ago: executing program 3 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 23m32.211201112s ago: executing program 32 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4m32.129664725s ago: executing program 0 (id=4049): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 4m31.165207775s ago: executing program 0 (id=4051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 4m30.2786016s ago: executing program 0 (id=4054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 4m29.370287366s ago: executing program 0 (id=4057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x208, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3f5fd6d3a978d536"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740), 0x0, 0x40000040, 0x0) 4m28.426820667s ago: executing program 0 (id=4062): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) ioctl$HIDIOCSREPORT(r0, 0x400c4808, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r3, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) fchdir(r2) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, &(0x7f0000000400)=""/71, 0x47, &(0x7f0000000480)=""/233, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r2}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010028bd7040000000000f0000004c60afeb88ef4940b4767cffe4c8f400"], 0x14}}, 0x18) sendmsg$BATADV_CMD_SET_HARDIF(r1, 0x0, 0x804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc606e5a537aae940}, 0x4048090) 4m27.307126495s ago: executing program 0 (id=4066): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000001c0)=0x208000b, 0x4) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x300000000000000}, &(0x7f0000000000)={0x8, 0x3}, 0x0, 0x0, 0x0) 4m12.257614282s ago: executing program 33 (id=4066): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000001c0)=0x208000b, 0x4) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x300000000000000}, &(0x7f0000000000)={0x8, 0x3}, 0x0, 0x0, 0x0) 7.247647259s ago: executing program 2 (id=5300): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020601020000000000000000000000000500010006000000050005000a0000000900020073790f00000000000000040003000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) 5.704408014s ago: executing program 2 (id=5306): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0xc3a, 0xd2e8, 0xf, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x10) 4.375555187s ago: executing program 2 (id=5311): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) socketpair(0x11, 0xa, 0xffff, &(0x7f0000000440)) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x4, 0x6, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @ringbuf_query], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x9, 0x80000, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000000f80)=[{0x5, 0x3, 0x3, 0x2}, {0x2, 0x2, 0xc, 0x7}, {0x1, 0x3, 0xf, 0x5}, {0x4, 0x2, 0x1, 0x6}, {0x0, 0x3, 0x8, 0xf}, {0x0, 0x3, 0x10, 0x7}], 0x10, 0x6}, 0x94) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, &(0x7f0000000a00)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671c01fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de2e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e00000000000000000f7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada35ff000000775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f648f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6d86958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc50925475eaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf26b6eecc7fa28914beb66ac9e519bd333b30d3ce2f50dddeea3447aeb3e3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6e40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc386d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50800dc38ba908ac618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db64f3c4d67095a3d614bd8fed1ab6d2846c73345962897d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {0x0, 0xfff3}}}, 0x24}}, 0x800) write$sndseq(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r1, 0xffffffffffffffff, 0x0) 3.319711125s ago: executing program 1 (id=5314): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0xe97, 0x3, 0x3}, 0x18, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bridge_slave_1\x00', &(0x7f0000000500)=@ethtool_ts_info}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x808, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x1000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)}) 3.283466148s ago: executing program 5 (id=5316): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open$dir(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181402, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080a0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) utime(&(0x7f0000000040)='./file2\x00', 0x0) 3.158594385s ago: executing program 4 (id=5317): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x21, 0x0, [@mcast2]}}}], 0x28}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) futimesat(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x800000002400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000004340), 0x8800, 0x0) sendmsg$nl_route(r8, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 2.945737228s ago: executing program 4 (id=5318): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 2.633488832s ago: executing program 1 (id=5319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24e752c05516b82c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fa6cabe0c7b3a9ccff26d1d7acc8e7b56e68f108d44b3d1a5db8599856acfeb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fde918717a29da62f08839a6863779109a0b399abf096b36e0e6436d831f1744"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ba0a009666b5d27aa746d07c3a21517edc7c45f898a928f0c97d6431594ff8b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5015fc8e0e8853f2de5e93e282f25e55"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "668c44b5aa96d3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da152ce91721cfd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88f2d715155e6b36"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aae07d12d3cf074f174b423b2a7ec2393364106c149a49e623381dc17f8f350a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70831b3817ce0bac5ce796e1c981ef4ddf24f64b3f9ea02d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="992b4c19f3c63316c4adebbcae0f6442867b90f7357e809b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4f1b9b78ab71f4ceaa6da3bb88f29e7c47d8d54f133032cde2d1a904c8393e5b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f117262d25f3d2b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da081a57a5e74518bf13a2c86839eb13"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84824166e3eac2f9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="068e602827bc19d5883b393a8f0653ba797f2bc414ae8e80746de0c8326e1ade"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x293c0000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2855b695b8a25e85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "76f76c8d431cad23"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x2400c800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000040, 0x0) 2.529188731s ago: executing program 2 (id=5320): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0xffee, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1}, 0x19}, {{&(0x7f0000000400), 0x80, &(0x7f0000000700), 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)=""/144, 0x90}], 0x1, &(0x7f0000000e00)=""/110, 0x6e}, 0x7}, {{&(0x7f0000000e80)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f0000000f80)=""/161, 0xa1}, {&(0x7f0000001200)=""/215, 0xd7}, {&(0x7f0000001300)=""/164, 0xa4}, {&(0x7f00000013c0)=""/71, 0x54}], 0x6, &(0x7f0000001080)=""/133, 0x85}, 0x3a4000}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x29, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYBLOB="cd0f4a47afd472d196d42c29194552a131f165b662dce836ea81e539ce2d3389918d4669b661efa91da21cb19f156a644bdbc3f6de3eb1e6ffdc6b8e560283dee120e9ccf1ccaec2b18425377b6847df3693ada74c51ba1dd3f4bb8f2ddc18c311f5364e4715dbf19713bb6ae060bb15d8bc4cd3c7dfc3a55c81ea8e11d6af26903a30b5538d127b669c75ae41462b5745be1df0695d08b0d4362b075012671bbf93d689de907e58d553dd92ff18274c7e9a9a78df4789c0245065f049f3faa10af46595", @ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB="08000a00266ae7499c8f04e435f3b5495d8871791e360282b1f266c05d8c78dbb4217db0df31245d3318d91e14dee3dcff7144b02a3360e9592cc64fd6f6931acd9f784cc0bee2f4fecec25e7c96159d525de8cdf302c8a838f5f23670d3fed51dd1fe3ff7e05a0bc666152d8a1e7766aa3a2842", @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x1a2c42) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='OGAIN \'Capture Volume\' 0000000000000'], 0xbb) close(r10) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x13fffc, 0x0, 0x3, 0x40000021, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x1, 0xfffffffffffffffc]}}) r11 = dup(r9) write$UHID_INPUT(r11, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2.349126579s ago: executing program 5 (id=5321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r3 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) pwrite64(r3, &(0x7f00000000c0)='i', 0x1, 0x3fff) fcntl$addseals(r3, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000280)={0x1, 0x1, [{r3, 0x0, 0x1000, 0x2000}]}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="7bd5e467f93fb8280274faab930dd83d5350d06cfde0085db87ab51b74f47c645e4d81e8d3639401934522e5b3285a9b8ff98a7c5811c9661edb0137fe2cb149447f3cf83e58546f3cce70b866b48db224985208c0209bafb6164d2f75955bfe44ccd1dc107a39b320fb9912bf5abb908826a8bd67c8163230eb3874673270d4aa", 0x81}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x11cc}, 0x8004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x0, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000057f00000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.915553851s ago: executing program 4 (id=5322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync_file_range(0xffffffffffffffff, 0x4, 0x3, 0x1) 1.860333236s ago: executing program 4 (id=5323): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181402, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) utime(&(0x7f0000000040)='./file2\x00', 0x0) 1.54308788s ago: executing program 1 (id=5324): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r0, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 1.394902122s ago: executing program 1 (id=5325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005700)=@newtaction={0xac, 0x30, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{0x94, 0x1, [@m_connmark={0x34, 0xb, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x30, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x5, 0x6, '3'}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0xf, r2, 0x27, r3}, 0x10) sendmmsg$sock(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x2, @private1, 0xfffffff9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001300)="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", 0x1000}], 0x1, &(0x7f0000000240)=[@mark={{0x10, 0x1, 0x24, 0xd}}], 0x10}}], 0x1, 0x408c041) 1.121363982s ago: executing program 4 (id=5326): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x2, 0x21, 0x0, [@mcast2]}}}], 0x28}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) futimesat(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x800000002400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000004340), 0x8800, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.104469589s ago: executing program 2 (id=5327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4008111}, 0x4000) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) pipe(&(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) capset(&(0x7f00000004c0)={0x20080522}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) 929.624127ms ago: executing program 4 (id=5328): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80101, 0x101) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000002a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="8000", 0x2}, {&(0x7f0000000200)="860f4fb0b945", 0x6}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="98000000290000644ce86769ce2540a6610c5b003e0000002900000000000000"], 0x18}}], 0x1, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000200)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x89901) fspick(r8, &(0x7f0000000000)='.\x00', 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x20000004) ioctl$KVM_RUN(r7, 0xae80, 0x0) 909.981634ms ago: executing program 1 (id=5329): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open$dir(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181402, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080a0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) utime(&(0x7f0000000040)='./file2\x00', 0x0) 823.925418ms ago: executing program 5 (id=5330): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open$dir(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181402, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) utime(&(0x7f0000000040)='./file2\x00', 0x0) 429.488642ms ago: executing program 5 (id=5331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync_file_range(0xffffffffffffffff, 0x4, 0x3, 0x1) 369.919586ms ago: executing program 5 (id=5332): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}}) socket(0x10, 0x3, 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=""/253, 0xfd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3f) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x9, 0x18, 0x0, 0xffc, 0xe, 0xb, 0xf9, 0x49, 0x10, 0x6, 0x9, 0x0, 0x6, 0x50, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x69, 0x1}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000000)={[{0x11, 0x2, 0x6, 0x7, 0x4, 0x5, 0xe1, 0x1, 0x8, 0xe, 0x5, 0xfa, 0x2}, {0x2, 0x0, 0x6, 0x8, 0x8, 0x8, 0x6, 0x9, 0x9, 0xf, 0x1, 0x6, 0x7}, {0xfffffffa, 0x9, 0x3, 0x4, 0x0, 0xe, 0x40, 0x6, 0x4, 0x2, 0x4, 0x3, 0xff}], 0x5}) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000000), 0x4) 0s ago: executing program 1 (id=5333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x1, 0x7]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl(r1, 0x80004507, 0x0) setpgid(r0, r0) setpgid(0x0, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28c203, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0x5, 0x0, 0xb49, 0x0, 0x8, 0x7, 0x85}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r3, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="b20f5bb28c75b4ec3a6df7ed10224550e72bd8e71ca230803753f99a12d628c40532c0ede975c930647407708eb781ce3c2f162fbe8f97cc52f4b125283b2312aa555c8bd0001a", 0x47}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="6c7532da0ab7782e239d6c515bbe7a65829fe42293e2b0e95bf1e409e1cd076a5a9bc608a9129a6c55d66ebb3d0e791210825e0487077d055c8250b5b7d68893495ea03d36a83a8660632a67f351dd90e1b2cecd677caf073d076ba9b38cc384a4935f9aa1df797dd84651283a2f0638e2dc935354508d8ac157a6351521ed2be3d05a09f9f76a071200f373d32af958a8761b67530510b4da85c3647ce20ae4fbd651d721714a14853b038ab9785f0c2ffbe041c16e3ae1c3d200beaa92d9727bf4d1b53ee183dd8e3b6067", 0xfffffffffffffe08}, {&(0x7f0000000380)="5f1474249647b77de3fbb34295154b79cf9cabf13256044f547116d418c8fcaddee1578dc0a9f9d0e07385cc1a1d71cef2430539d7ddc87c53415be7544ff2811f07e160f918a3ff2a3d7f4ff9c710abb5d37a8df544d832981533d800ac124d3ebe5436d9dfd2d6a09e16c45830073fdd8717f3edbb08d5ba3473b20f444fa3da87fb83c97959bae5dcbdeefb670ee3428cca4eea384d51e8cc0ed75d9544a598b62bb8fbd900b2c47354d649", 0xad}, {&(0x7f0000000680)="35ac55355815f385373e6f85c9f9fd73ffb1588b8b53868654a4747eb30e204b47d6ad12701f53d10a84a2cd34f17923c19a1f730d68d36b7fab41006d908c5eacd3def126b84e456f713ff8f328ff0f40b4d316f73bbb36e2d40f8e500010aeecefe515cc5aba77625ba3f873c7ae6f639afca70cc3d687c729f3532ee40ddaab300f79e32174dae26e135af3aa88e445bef4f565d03137b244f3a7f5c5341e7231b1beb61c111ee6e07eac064314be33be05ae5c9ff178a26c8dedd18fad9be793c4b4066417c6c640f0dd37e2c65b427c688192bf2c008c3d16e4255f3e1c104fbad58e81f188de83480f49b9e27365e270", 0xf3}, {&(0x7f0000000780)="e837acd9b018b92a9dae00347d34620d746c089be1101357584003b70b59bd6093f8e2ba8f253da08190bc5d5195c2338e0de7b7cfdc7204ebb02dfaa47b79eccf5b0f11ef4c80c1b4fdc854fab914ece15144c6fd6a3b9d96c441896631467646d907c718750d14162af3100edc10eea6c249e3c783627bfa6856620a4c68d16a6f51e71e087556d2936a3aebd4c87d0deb0d022d7e0ca7431909a711503a515b559db46ed1048683fa5f3990aa3346540fc5eda55af71b729432e65547066d9af41a9a2314c151bd", 0xc9}, {&(0x7f0000000940)="60ee46ea", 0x4}, {&(0x7f0000000880)="b6ce3d8c7c3e20845d0035f7394c0c0afba8b1b99e48b6405f5b3b8041e7246b3317e15d23f1b0b3ee31801cc55dd242d659659746df706631baff804de0b1b1c5cb77db6c546a561334e4140a1e5f39401b9736c71baaf815c6354e2d556c9f6a8c445c18b7e11b0f1bee73e9a4a5ca4480e82e3df7498eb3c73db7281ee94de2c4674db4f40df593149ea6c4989c46496991cc7196bfbf4639fb7e17774ce16e0a8715dc4b", 0xa6}], 0x8, &(0x7f0000000940)}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x80, @private1, 0xa}, 0x1c, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000002c40)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002c80)="230a452855b72aeb049561579a789eaf2363ae0337885284fca661626b3662b9e01d0c47bec8fb69c63383931024b7847a38b64b01fce38e2159ce89ed7fd3d18321fda254e6a3b0f734f6b2cf66647be0df876de39d4307728fc582645b08d9d5965ce082cc88d10a4b64c0cab3f59433cc01bfa3ca0f8ea5fe4d9c6c3e7b7ba51bfefa1b6753d23e2be993658c640dc7b14a9d1d8ecebba7c28121153ed9a566b73de0e04b0982f16fce253d327acbeac7006c8c044b3366c18cda511f22c9128e9c0ea49bea5771f5edec5bc68694", 0xd0}], 0x1}}, {{&(0x7f0000002dc0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c, &(0x7f00000050c0)=[{&(0x7f0000002e00)="b56d1c08838ea57d0a568f11e4a5c3dfd16bd77374936f481df728e8e89b2bdca33925a417cc71374763bdc52f62356a04c6d3c5773fca23a8be71937130f40e7321baeb18f0e36e626f440b19d6b5ff4efc1ecf2794b479fd785f22eaa2718d922edf30d837cb57180c8f968e076785c378ede0aec3bc91b4fea133f607bc0959bf3c97ad53e913ecc2db8496ee895d77239a7fb93ec0a2e4417113df1e80409da1b14fb4e260971e3211d090852e178be88942c5c96b639c361447ab3f6f431688627ec6f7243f4714d0390f66e25618d6339a7ed8165a1786c2", 0xdb}, {&(0x7f0000002f00)="2892d5dacd25de130827b49500d70612703019492a0ae7c671b3b9b7605e3d94a6c31901000000000000000077dd1c229426ccecf518bb08dec17fa32d20080000000000000095d1c9aafe98feb9c7e1e7f54d96b9118031300e649ebb0c4f2346218274107230feaf56fd667ddf0524", 0x70}, {0x0}, {&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="c352af511b2df17ed6d4cdcbaf8b0e0a8314cbf760b85f66b0dcc93ca6069926167d4563352fe0f54dae27172f637b50e83182feaf466ccafc2a5921f65cf208861e6ad8f016ca1828ee4bc1671c30746f2c4eee059b41f6f08e7ecdfdb06ee5d2a8bfca87e87f4257b8366776de06e44d0c9745bccad37dbf06183936d4f69a0dc3ac6982dd5c7464e428c90d40d0a187c74c774ce29ef6f714", 0x9a}, {&(0x7f0000005040)="c0577a7f4510d4131b2c8d77c10aa512090ee7351d85a41dc82cca8bb3ac7a47bdbd52490034249103cd7a1438004ef2c82345abe7102c47762cb26099b4355300d377a600e4f440bbcd60e7c29324611e82312cd1e781d2", 0x58}], 0x6, &(0x7f0000005100)=ANY=[@ANYBLOB="100000002900000443000000020000001000003e000000020000000000000000"], 0x20}}], 0x4, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): 5" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1419.226026][ T40] audit: type=1326 audit(1762535592.178:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.4635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1419.233055][ T40] audit: type=1326 audit(1762535592.178:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.4635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1419.240182][ T40] audit: type=1326 audit(1762535592.188:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.4635" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1419.247261][ T40] audit: type=1326 audit(1762535592.188:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.4635" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1419.473208][T16339] usb 46-1: SetAddress Request (66) to port 0 [ 1419.476166][T16339] usb 46-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1419.810136][T24857] vhci_hcd: connection reset by peer [ 1419.813134][T14700] vhci_hcd: stop threads [ 1419.814917][T14700] vhci_hcd: release socket [ 1419.816900][T14700] vhci_hcd: disconnect device [ 1420.473216][T22734] usb 6-1: USB disconnect, device number 44 [ 1420.527104][T24866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1420.530511][T24861] FAULT_INJECTION: forcing a failure. [ 1420.530511][T24861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.536932][T24861] CPU: 1 UID: 0 PID: 24861 Comm: syz.1.4636 Not tainted syzkaller #0 PREEMPT(full) [ 1420.536954][T24861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1420.536966][T24861] Call Trace: [ 1420.536972][T24861] [ 1420.536979][T24861] dump_stack_lvl+0x16c/0x1f0 [ 1420.537006][T24861] should_fail_ex+0x512/0x640 [ 1420.537037][T24861] _copy_to_user+0x32/0xd0 [ 1420.537068][T24861] bpf_test_finish.isra.0+0x53c/0x6e0 [ 1420.537097][T24861] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 1420.537129][T24861] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1420.537155][T24861] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1420.537187][T24861] ? __pfx____migrate_enable+0x10/0x10 [ 1420.537210][T24861] bpf_prog_test_run_flow_dissector+0x5d8/0x980 [ 1420.537240][T24861] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1420.537261][T24861] ? find_held_lock+0x2b/0x80 [ 1420.537281][T24861] ? __fget_files+0x204/0x3c0 [ 1420.537303][T24861] ? __fget_files+0x20e/0x3c0 [ 1420.537319][T24861] ? __might_fault+0x90/0x190 [ 1420.537341][T24861] ? fput+0x9b/0xd0 [ 1420.537365][T24861] ? __bpf_prog_get+0x97/0x2a0 [ 1420.537389][T24861] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1420.537409][T24861] __sys_bpf+0x1035/0x4980 [ 1420.537431][T24861] ? __pfx___sys_bpf+0x10/0x10 [ 1420.537448][T24861] ? find_held_lock+0x2b/0x80 [ 1420.537471][T24861] ? find_held_lock+0x2b/0x80 [ 1420.537495][T24861] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1420.537532][T24861] ? fput+0x9b/0xd0 [ 1420.537555][T24861] ? ksys_write+0x1ac/0x250 [ 1420.537574][T24861] ? __pfx_ksys_write+0x10/0x10 [ 1420.537597][T24861] __ia32_sys_bpf+0x76/0xe0 [ 1420.537617][T24861] __do_fast_syscall_32+0x7c/0x300 [ 1420.537641][T24861] do_fast_syscall_32+0x32/0x80 [ 1420.537663][T24861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1420.537684][T24861] RIP: 0023:0xf707d579 [ 1420.537698][T24861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1420.537714][T24861] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1420.537731][T24861] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 1420.537742][T24861] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1420.537752][T24861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1420.537762][T24861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1420.537772][T24861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1420.537796][T24861] [ 1420.627835][T24871] overlayfs: failed to resolve './file0': -2 [ 1421.352652][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 1421.356089][T24883] lo speed is unknown, defaulting to 1000 [ 1421.421719][T22734] usb 10-1: USB disconnect, device number 5 [ 1421.594641][T24883] lo speed is unknown, defaulting to 1000 [ 1421.639103][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4652'. [ 1421.642329][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4652'. [ 1421.668268][T24901] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1421.697221][T24883] macsec1: entered promiscuous mode [ 1421.699508][T24883] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1421.702326][T24883] macsec1: entered allmulticast mode [ 1422.002966][T22734] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1422.152796][T22734] usb 10-1: Using ep0 maxpacket: 8 [ 1422.154430][T22734] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1422.159536][T22734] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1422.163189][T22734] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1422.167188][T22734] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1422.172252][T22734] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1422.176774][T22734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.505464][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.507610][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.722844][ T5945] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1422.875190][ T5945] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1422.879108][ T5945] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1422.882462][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1422.887904][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1422.892188][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1422.895661][ T5945] usb 6-1: Product: syz [ 1422.897436][ T5945] usb 6-1: Manufacturer: syz [ 1422.899399][ T5945] usb 6-1: SerialNumber: syz [ 1422.907495][ T5945] usb 6-1: config 0 descriptor?? [ 1422.910472][T24924] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1422.917500][ T5945] usb 6-1: selecting invalid altsetting 0 [ 1423.693051][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1424.117258][T24937] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1424.263813][T24940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4661'. [ 1424.339836][T24943] overlayfs: failed to resolve './file0': -2 [ 1424.542841][T22690] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1424.692776][T22690] usb 7-1: device descriptor read/64, error -71 [ 1424.932832][T16339] usb 46-1: device descriptor read/8, error -110 [ 1424.963358][T22690] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1425.132912][T22690] usb 7-1: device descriptor read/64, error -71 [ 1425.236462][T22734] usb 10-1: usb_control_msg returned -71 [ 1425.239124][T22734] usbtmc 10-1:16.0: can't read capabilities [ 1425.247079][T22734] usb 10-1: USB disconnect, device number 6 [ 1425.263002][T22690] usb usb7-port1: attempt power cycle [ 1425.268910][T16046] usb 6-1: USB disconnect, device number 45 [ 1425.345135][T16339] usb usb46-port1: attempt power cycle [ 1425.439655][T24952] netlink: 'syz.1.4664': attribute type 15 has an invalid length. [ 1425.444158][T24952] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1425.603097][T22690] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1425.633306][T22690] usb 7-1: device descriptor read/8, error -71 [ 1425.704669][T24957] sg_write: data in/out 328448/11 bytes for SCSI command 0x8a-- guessing data in; [ 1425.704669][T24957] program syz.5.4667 not setting count and/or reply_len properly [ 1425.882867][T22690] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1425.904462][T22690] usb 7-1: device descriptor read/8, error -71 [ 1425.933225][T16339] usb usb46-port1: unable to enumerate USB device [ 1426.013330][T22690] usb usb7-port1: unable to enumerate USB device [ 1426.306078][T24963] bridge: RTM_NEWNEIGH with invalid ether address [ 1426.396114][T24966] netlink: 'syz.4.4670': attribute type 10 has an invalid length. [ 1426.404940][T24966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.419270][T24966] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1427.172909][ T5945] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1427.334077][ T5945] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1427.337672][ T5945] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1427.340777][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1427.351501][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1427.354485][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1427.356920][ T5945] usb 6-1: Product: syz [ 1427.358294][ T5945] usb 6-1: Manufacturer: syz [ 1427.360234][ T5945] usb 6-1: SerialNumber: syz [ 1427.363579][ T5945] usb 6-1: config 0 descriptor?? [ 1427.365783][T24977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1427.370809][ T5945] usb 6-1: selecting invalid altsetting 0 [ 1428.052832][T22690] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1428.212996][T22690] usb 7-1: Using ep0 maxpacket: 8 [ 1428.217043][T22690] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1428.220342][T22690] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1428.224678][T22690] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1428.229085][T22690] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14368, setting to 1024 [ 1428.233983][T22690] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1428.238161][T22690] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1428.244198][T22690] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1428.247970][T22690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.459921][T22690] usb 7-1: usb_control_msg returned -32 [ 1428.461714][T22690] usbtmc 7-1:16.0: can't read capabilities [ 1428.892051][T25009] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4683'. [ 1428.934805][T25009] Cannot find map_set index 256 as target [ 1429.176845][T25015] bridge2: entered promiscuous mode [ 1429.179167][T25015] bridge2: entered allmulticast mode [ 1429.193547][T25019] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1429.719760][ T5945] usb 6-1: USB disconnect, device number 46 [ 1429.744382][T25023] FAULT_INJECTION: forcing a failure. [ 1429.744382][T25023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1429.748279][T25023] CPU: 1 UID: 0 PID: 25023 Comm: syz.1.4686 Not tainted syzkaller #0 PREEMPT(full) [ 1429.748293][T25023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1429.748300][T25023] Call Trace: [ 1429.748304][T25023] [ 1429.748308][T25023] dump_stack_lvl+0x16c/0x1f0 [ 1429.748325][T25023] should_fail_ex+0x512/0x640 [ 1429.748344][T25023] _copy_to_user+0x32/0xd0 [ 1429.748361][T25023] simple_read_from_buffer+0xcb/0x170 [ 1429.748381][T25023] proc_fail_nth_read+0x197/0x240 [ 1429.748393][T25023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1429.748405][T25023] ? rw_verify_area+0xcf/0x6c0 [ 1429.748415][T25023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1429.748426][T25023] vfs_read+0x1e4/0xcf0 [ 1429.748440][T25023] ? __pfx_vfs_read+0x10/0x10 [ 1429.748450][T25023] ? find_held_lock+0x2b/0x80 [ 1429.748464][T25023] ? __fget_files+0x20e/0x3c0 [ 1429.748479][T25023] ksys_read+0x12a/0x250 [ 1429.748489][T25023] ? __pfx_ksys_read+0x10/0x10 [ 1429.748500][T25023] ? fput+0x9b/0xd0 [ 1429.748514][T25023] ? rcu_is_watching+0x12/0xc0 [ 1429.748527][T25023] __do_fast_syscall_32+0x7c/0x300 [ 1429.748542][T25023] do_fast_syscall_32+0x32/0x80 [ 1429.748555][T25023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.748568][T25023] RIP: 0023:0xf707d579 [ 1429.748577][T25023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1429.748587][T25023] RSP: 002b:00000000f546d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1429.748597][T25023] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546d620 [ 1429.748604][T25023] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 1429.748610][T25023] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1429.748616][T25023] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1429.748622][T25023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1429.748635][T25023] [ 1429.980760][T25033] fuse: Unknown parameter 'fd0x0000000000000004' [ 1430.368534][T25033] wg1: entered promiscuous mode [ 1430.370287][T25033] wg1: entered allmulticast mode [ 1430.562625][T25038] tmpfs: Bad value for 'mpol' [ 1430.750515][T25043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1430.789974][T25043] Cannot find map_set index 256 as target [ 1430.835823][T22734] usb 7-1: USB disconnect, device number 45 [ 1431.312821][ T5945] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1431.514458][ T5945] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1431.519877][ T5945] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1431.524260][ T5945] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1431.529429][ T5945] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1431.533968][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1431.537457][ T5945] usb 10-1: Product: syz [ 1431.539285][ T5945] usb 10-1: Manufacturer: syz [ 1431.541299][ T5945] usb 10-1: SerialNumber: syz [ 1431.545870][ T5945] usb 10-1: config 0 descriptor?? [ 1431.549468][T25056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.555630][ T5945] usb 10-1: selecting invalid altsetting 0 [ 1432.317649][T25077] FAULT_INJECTION: forcing a failure. [ 1432.317649][T25077] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.322507][T25077] CPU: 0 UID: 0 PID: 25077 Comm: syz.4.4703 Not tainted syzkaller #0 PREEMPT(full) [ 1432.322528][T25077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1432.322538][T25077] Call Trace: [ 1432.322545][T25077] [ 1432.322552][T25077] dump_stack_lvl+0x16c/0x1f0 [ 1432.322576][T25077] should_fail_ex+0x512/0x640 [ 1432.322597][T25077] ? fs_reclaim_acquire+0xae/0x150 [ 1432.322620][T25077] should_failslab+0xc2/0x120 [ 1432.322641][T25077] __kmalloc_noprof+0xdd/0x880 [ 1432.322666][T25077] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1432.322705][T25077] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1432.322723][T25077] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1432.322743][T25077] ? tomoyo_profile+0x47/0x60 [ 1432.322767][T25077] tomoyo_path_number_perm+0x245/0x580 [ 1432.322788][T25077] ? tomoyo_path_number_perm+0x237/0x580 [ 1432.322812][T25077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1432.322881][T25077] ? find_held_lock+0x2b/0x80 [ 1432.322898][T25077] ? hook_file_ioctl_common+0x145/0x410 [ 1432.322920][T25077] ? __fget_files+0x20e/0x3c0 [ 1432.322939][T25077] security_file_ioctl_compat+0x9b/0x240 [ 1432.322954][T25077] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1432.322981][T25077] __do_fast_syscall_32+0x7c/0x300 [ 1432.323004][T25077] do_fast_syscall_32+0x32/0x80 [ 1432.323024][T25077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1432.323042][T25077] RIP: 0023:0xf700d579 [ 1432.323060][T25077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1432.323074][T25077] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1432.323087][T25077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b3a [ 1432.323098][T25077] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1432.323107][T25077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1432.323117][T25077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1432.323126][T25077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1432.323149][T25077] [ 1432.406371][T25077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1432.642927][ C2] hpet_rtc_timer_reinit: 299 callbacks suppressed [ 1432.642939][ C2] hpet: Lost 1 RTC interrupts [ 1433.851581][ C2] hpet: Lost 1 RTC interrupts [ 1433.918286][ C2] hpet: Lost 1 RTC interrupts [ 1433.950465][T22734] usb 10-1: USB disconnect, device number 7 [ 1434.485420][ T40] audit: type=1326 audit(1762535607.478:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.492351][ T40] audit: type=1326 audit(1762535607.478:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.500024][ T40] audit: type=1326 audit(1762535607.478:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.508020][ T40] audit: type=1326 audit(1762535607.478:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.515746][ T40] audit: type=1326 audit(1762535607.478:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.522186][ T40] audit: type=1326 audit(1762535607.498:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1434.530156][ T40] audit: type=1326 audit(1762535607.498:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25125 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 1435.128168][T25138] fuse: Unknown parameter 'fd0x0000000000000004' [ 1435.312166][T25138] wg1: entered promiscuous mode [ 1435.313871][T25138] wg1: entered allmulticast mode [ 1436.472230][T25168] FAULT_INJECTION: forcing a failure. [ 1436.472230][T25168] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.477084][T25168] CPU: 3 UID: 0 PID: 25168 Comm: syz.5.4726 Not tainted syzkaller #0 PREEMPT(full) [ 1436.477100][T25168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1436.477106][T25168] Call Trace: [ 1436.477111][T25168] [ 1436.477116][T25168] dump_stack_lvl+0x16c/0x1f0 [ 1436.477132][T25168] should_fail_ex+0x512/0x640 [ 1436.477148][T25168] ? fs_reclaim_acquire+0xae/0x150 [ 1436.477164][T25168] should_failslab+0xc2/0x120 [ 1436.477178][T25168] __kmalloc_noprof+0xdd/0x880 [ 1436.477196][T25168] ? tomoyo_encode2+0x100/0x3e0 [ 1436.477210][T25168] ? tomoyo_encode2+0x100/0x3e0 [ 1436.477221][T25168] tomoyo_encode2+0x100/0x3e0 [ 1436.477234][T25168] tomoyo_encode+0x29/0x50 [ 1436.477245][T25168] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1436.477258][T25168] ? tomoyo_fill_path_info+0x233/0x420 [ 1436.477275][T25168] tomoyo_mount_acl+0x1ae/0x850 [ 1436.477285][T25168] ? bpf_ksym_find+0x124/0x1c0 [ 1436.477298][T25168] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.477311][T25168] ? is_bpf_text_address+0x94/0x1a0 [ 1436.477327][T25168] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1436.477337][T25168] ? unwind_get_return_address+0x59/0xa0 [ 1436.477364][T25168] ? tomoyo_domain+0xbb/0x150 [ 1436.477376][T25168] ? tomoyo_profile+0x47/0x60 [ 1436.477392][T25168] tomoyo_mount_permission+0x16d/0x420 [ 1436.477402][T25168] ? tomoyo_mount_permission+0x14f/0x420 [ 1436.477414][T25168] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1436.477433][T25168] security_sb_mount+0x9b/0x260 [ 1436.477450][T25168] path_mount+0x158/0x23a0 [ 1436.477465][T25168] ? __pfx_path_mount+0x10/0x10 [ 1436.477478][T25168] ? kmem_cache_free+0x2d4/0x6c0 [ 1436.477489][T25168] ? putname+0x154/0x1a0 [ 1436.477504][T25168] ? putname+0x154/0x1a0 [ 1436.477519][T25168] ? __ia32_sys_mount+0x291/0x310 [ 1436.477531][T25168] __ia32_sys_mount+0x291/0x310 [ 1436.477544][T25168] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1436.477557][T25168] ? rcu_is_watching+0x12/0xc0 [ 1436.477570][T25168] __do_fast_syscall_32+0x7c/0x300 [ 1436.477585][T25168] do_fast_syscall_32+0x32/0x80 [ 1436.477599][T25168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1436.477612][T25168] RIP: 0023:0xf70ed579 [ 1436.477620][T25168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1436.477631][T25168] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1436.477641][T25168] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000000 [ 1436.477648][T25168] RDX: 0000000080000180 RSI: 0000000000000040 RDI: 0000000000000000 [ 1436.477654][T25168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1436.477660][T25168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1436.477666][T25168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1436.477680][T25168] [ 1436.477693][T25168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1436.676104][T25174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1436.785845][T25174] kvm: pic: non byte read [ 1436.790710][T25174] kvm: pic: level sensitive irq not supported [ 1436.791445][T25174] kvm: pic: non byte read [ 1436.798692][T25174] kvm: pic: level sensitive irq not supported [ 1436.798994][T25174] kvm: pic: non byte read [ 1436.803666][T25174] kvm: pic: level sensitive irq not supported [ 1436.803948][T25174] kvm: pic: non byte read [ 1436.809741][T25174] kvm: pic: level sensitive irq not supported [ 1436.810103][T25174] kvm: pic: non byte read [ 1436.816298][T25174] kvm: pic: level sensitive irq not supported [ 1436.816728][T25174] kvm: pic: non byte read [ 1436.822304][T25174] kvm: pic: level sensitive irq not supported [ 1436.822576][T25174] kvm: pic: non byte read [ 1436.843379][T25174] kvm: pic: level sensitive irq not supported [ 1436.843669][T25174] kvm: pic: non byte read [ 1437.075634][T25181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1437.082017][ T6025] lo speed is unknown, defaulting to 1000 [ 1437.355087][T25201] netlink: 'syz.4.4734': attribute type 15 has an invalid length. [ 1437.357601][T25201] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4734'. [ 1437.571583][T25204] qnx4: no qnx4 filesystem (no root dir). [ 1437.762873][T25212] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96 [ 1438.316157][T25220] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1438.325375][T25220] kvm: pic: non byte read [ 1438.327957][T25220] kvm: pic: level sensitive irq not supported [ 1438.328242][T25220] kvm: pic: non byte read [ 1438.333534][T25220] kvm: pic: level sensitive irq not supported [ 1438.335925][T25220] kvm: pic: level sensitive irq not supported [ 1438.468402][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1438.518615][T25227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1438.577491][T25227] vlan2: entered allmulticast mode [ 1438.579894][T25227] bond2: entered allmulticast mode [ 1438.688460][T25232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1438.730093][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1438.795685][T25235] gfs2: not a GFS2 filesystem [ 1439.043293][T25246] netlink: 'syz.2.4750': attribute type 15 has an invalid length. [ 1439.064310][T25246] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1439.944835][T25254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1439.996492][T25261] lo speed is unknown, defaulting to 1000 [ 1440.129398][T25264] netlink: 'syz.2.4754': attribute type 15 has an invalid length. [ 1440.132102][T25264] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1440.194285][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 1440.194296][ T40] audit: type=1326 audit(1762535613.188:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.205264][ T40] audit: type=1326 audit(1762535613.188:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.213666][ T40] audit: type=1326 audit(1762535613.188:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.224614][ T40] audit: type=1326 audit(1762535613.188:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.235797][ T40] audit: type=1326 audit(1762535613.188:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.246530][ T40] audit: type=1326 audit(1762535613.188:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.248876][T25261] lo speed is unknown, defaulting to 1000 [ 1440.258153][ T40] audit: type=1326 audit(1762535613.188:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.271019][ T40] audit: type=1326 audit(1762535613.188:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.283057][ T40] audit: type=1326 audit(1762535613.188:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.291240][ T40] audit: type=1326 audit(1762535613.188:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25265 comm="syz.4.4756" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1440.538493][T25276] netlink: 'syz.5.4757': attribute type 1 has an invalid length. [ 1440.576178][T25276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1440.651943][T25276] bond2: entered promiscuous mode [ 1440.656835][T25276] bond2 (unregistering): Released all slaves [ 1441.065115][T25301] netlink: 'syz.1.4762': attribute type 15 has an invalid length. [ 1441.067744][T25301] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1441.542949][T25313] lo speed is unknown, defaulting to 1000 [ 1441.759350][T25313] lo speed is unknown, defaulting to 1000 [ 1442.113921][T25334] lo speed is unknown, defaulting to 1000 [ 1442.180668][T25341] binder: 25340:25341 ioctl c00c620f 80000400 returned -22 [ 1442.275471][T25344] netlink: 'syz.5.4772': attribute type 15 has an invalid length. [ 1442.278439][T25344] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1442.327747][T25347] bridge2: entered allmulticast mode [ 1442.342187][T25347] : renamed from hsr0 (while UP) [ 1442.501667][T25334] lo speed is unknown, defaulting to 1000 [ 1442.838508][T25362] netlink: 'syz.4.4776': attribute type 15 has an invalid length. [ 1442.841265][T25362] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1442.976419][ T6042] block nbd0: Possible stuck request ffff888025a20000: control (read@0,1024B). Runtime 30 seconds [ 1442.980455][ T6042] block nbd0: Possible stuck request ffff888025a201c0: control (read@1024,1024B). Runtime 30 seconds [ 1442.984361][ T6042] block nbd0: Possible stuck request ffff888025a20380: control (read@2048,1024B). Runtime 30 seconds [ 1442.987968][ T6042] block nbd0: Possible stuck request ffff888025a20540: control (read@3072,1024B). Runtime 30 seconds [ 1443.446187][T25387] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1443.457935][T25387] picdev_read: 14 callbacks suppressed [ 1443.457946][T25387] kvm: pic: non byte read [ 1443.462599][T25387] pic_ioport_write: 11 callbacks suppressed [ 1443.462608][T25387] kvm: pic: level sensitive irq not supported [ 1443.465932][T25387] kvm: pic: non byte read [ 1443.614454][T25394] 8021q: VLANs not supported on vxcan1 [ 1443.617022][T25394] syz_tun: entered allmulticast mode [ 1443.620980][T25394] lo: entered allmulticast mode [ 1443.634434][T25396] syz_tun: left allmulticast mode [ 1443.637458][T25396] lo: left allmulticast mode [ 1443.783889][T25407] lo speed is unknown, defaulting to 1000 [ 1443.931165][T25407] lo speed is unknown, defaulting to 1000 [ 1444.181574][T25429] batman_adv: batadv0: Adding interface: dummy0 [ 1444.183802][T25429] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.191568][T25429] batman_adv: batadv0: Interface activated: dummy0 [ 1444.542282][T25437] netlink: 'syz.5.4793': attribute type 15 has an invalid length. [ 1444.545997][T25437] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1445.392740][T25455] nvme_fabrics: missing parameter 'transport=%s' [ 1445.396203][T25455] nvme_fabrics: missing parameter 'nqn=%s' [ 1445.407721][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1445.409752][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1445.494422][T25461] netlink: 'syz.5.4799': attribute type 10 has an invalid length. [ 1445.519703][T25461] lo: entered promiscuous mode [ 1445.521417][T25461] lo: entered allmulticast mode [ 1445.524555][T25461] tunl0: entered promiscuous mode [ 1445.526273][T25461] tunl0: entered allmulticast mode [ 1445.528913][T25461] gre0: entered promiscuous mode [ 1445.530505][T25461] gre0: entered allmulticast mode [ 1445.535675][T25461] gretap0: entered promiscuous mode [ 1445.541036][T25461] gretap0: entered allmulticast mode [ 1445.544651][T25461] erspan0: entered promiscuous mode [ 1445.546920][T25461] erspan0: entered allmulticast mode [ 1445.549977][T25461] ip_vti0: entered promiscuous mode [ 1445.551643][T25461] ip_vti0: entered allmulticast mode [ 1445.554298][T25461] ip6_vti0: entered promiscuous mode [ 1445.556227][T25461] ip6_vti0: entered allmulticast mode [ 1445.558893][T25461] sit0: entered promiscuous mode [ 1445.560603][T25461] sit0: entered allmulticast mode [ 1445.563626][T25461] ip6tnl0: entered promiscuous mode [ 1445.565388][T25461] ip6tnl0: entered allmulticast mode [ 1445.567928][T25461] ip6gre0: entered promiscuous mode [ 1445.569737][T25461] ip6gre0: entered allmulticast mode [ 1445.571852][T25461] syz_tun: entered promiscuous mode [ 1445.574479][T25461] syz_tun: entered allmulticast mode [ 1445.579439][T25461] ip6gretap0: entered promiscuous mode [ 1445.581356][T25461] ip6gretap0: entered allmulticast mode [ 1445.584627][T25461] bridge0: entered promiscuous mode [ 1445.586412][T25461] bridge0: entered allmulticast mode [ 1445.589374][T25461] vcan0: entered promiscuous mode [ 1445.591224][T25461] vcan0: entered allmulticast mode [ 1445.596576][T25461] bond0: entered promiscuous mode [ 1445.598235][T25461] bond_slave_0: entered promiscuous mode [ 1445.600202][T25461] bond_slave_1: entered promiscuous mode [ 1445.602029][T25461] bond0: entered allmulticast mode [ 1445.603811][T25461] bond_slave_0: entered allmulticast mode [ 1445.605741][T25461] bond_slave_1: entered allmulticast mode [ 1445.609716][T25461] team0: entered promiscuous mode [ 1445.611504][T25461] team_slave_0: entered promiscuous mode [ 1445.613894][T25461] team_slave_1: entered promiscuous mode [ 1445.616173][T25461] team0: entered allmulticast mode [ 1445.618277][T25461] team_slave_0: entered allmulticast mode [ 1445.622289][T25461] team_slave_1: entered allmulticast mode [ 1445.624771][T25461] dummy0: entered promiscuous mode [ 1445.626829][T25461] dummy0: entered allmulticast mode [ 1445.630851][T25461] nlmon0: entered promiscuous mode [ 1445.633413][T25461] nlmon0: entered allmulticast mode [ 1445.637141][T25461] caif0: entered promiscuous mode [ 1445.639259][T25461] caif0: entered allmulticast mode [ 1445.641624][T25461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1445.672963][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1445.674991][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1445.741318][T25466] lo speed is unknown, defaulting to 1000 [ 1445.855453][T25466] lo speed is unknown, defaulting to 1000 [ 1446.017340][T25480] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1446.028325][T25480] kvm: pic: non byte read [ 1446.031302][T25480] kvm: pic: level sensitive irq not supported [ 1446.031583][T25480] kvm: pic: non byte read [ 1446.110051][T25484] sp0: Synchronizing with TNC [ 1446.117788][T25483] [U] [ 1446.193802][T21948] libceph: connect (1)[c::]:6789 error -101 [ 1446.196431][T21948] libceph: mon0 (1)[c::]:6789 connect error [ 1446.274399][T25492] netlink: 'syz.4.4807': attribute type 15 has an invalid length. [ 1446.276578][T25492] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4807'. [ 1446.462889][ T6025] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1446.466228][T25455] ceph: No mds server is up or the cluster is laggy [ 1446.587782][T25498] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1446.590334][T25498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1446.594963][T25498] vhci_hcd vhci_hcd.0: Device attached [ 1446.622836][ T6025] usb 6-1: Using ep0 maxpacket: 16 [ 1446.630973][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1446.637788][T25498] netlink: 'syz.5.4810': attribute type 10 has an invalid length. [ 1446.641509][T25498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.644439][ T6025] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1446.649095][T25498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.651896][ T6025] usb 6-1: config 1 has no interface number 1 [ 1446.654304][ T6025] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1446.658654][ T6025] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1446.669612][T25498] batadv_slave_0: entered promiscuous mode [ 1446.671630][T25498] batadv_slave_0: entered allmulticast mode [ 1446.676647][T25498] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1446.676765][ T6025] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1446.682886][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.685772][ T6025] usb 6-1: Product: syz [ 1446.687410][ T6025] usb 6-1: Manufacturer: syz [ 1446.688732][ T6025] usb 6-1: SerialNumber: syz [ 1446.942813][T16046] usb 48-1: SetAddress Request (2) to port 0 [ 1446.944791][T16046] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1446.962832][T22690] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1447.145718][T22690] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1447.150531][T22690] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1447.154801][T22690] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1447.159551][T22690] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1447.163509][T22690] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1447.166884][T22690] usb 7-1: Product: syz [ 1447.168730][T22690] usb 7-1: Manufacturer: syz [ 1447.169087][T25499] vhci_hcd: connection reset by peer [ 1447.170603][T22690] usb 7-1: SerialNumber: syz [ 1447.172642][T22690] usb 7-1: config 0 descriptor?? [ 1447.175567][T14700] vhci_hcd: stop threads [ 1447.176917][T25502] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1447.177921][T14700] vhci_hcd: release socket [ 1447.183006][T14700] vhci_hcd: disconnect device [ 1447.272788][ T5945] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1447.423022][ T5945] usb 9-1: Using ep0 maxpacket: 8 [ 1447.426583][ T5945] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1447.429107][ T5945] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1447.432430][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.438020][ T5945] usb 9-1: config 0 descriptor?? [ 1447.771160][T25507] FAULT_INJECTION: forcing a failure. [ 1447.771160][T25507] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.775292][T25507] CPU: 3 UID: 0 PID: 25507 Comm: syz.5.4813 Not tainted syzkaller #0 PREEMPT(full) [ 1447.775309][T25507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1447.775315][T25507] Call Trace: [ 1447.775319][T25507] [ 1447.775324][T25507] dump_stack_lvl+0x16c/0x1f0 [ 1447.775341][T25507] should_fail_ex+0x512/0x640 [ 1447.775357][T25507] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1447.775369][T25507] should_failslab+0xc2/0x120 [ 1447.775384][T25507] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1447.775394][T25507] ? io_submit_one+0x122/0x1df0 [ 1447.775409][T25507] ? io_submit_one+0x122/0x1df0 [ 1447.775419][T25507] io_submit_one+0x122/0x1df0 [ 1447.775432][T25507] ? __lock_acquire+0xb8a/0x1c90 [ 1447.775449][T25507] ? __pfx_io_submit_one+0x10/0x10 [ 1447.775465][T25507] ? __might_fault+0xe3/0x190 [ 1447.775475][T25507] ? __might_fault+0x13b/0x190 [ 1447.775488][T25507] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 1447.775500][T25507] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 1447.775514][T25507] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1447.775527][T25507] ? fput+0x9b/0xd0 [ 1447.775544][T25507] ? rcu_is_watching+0x12/0xc0 [ 1447.775555][T25507] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1447.775571][T25507] __do_fast_syscall_32+0x7c/0x300 [ 1447.775585][T25507] do_fast_syscall_32+0x32/0x80 [ 1447.775599][T25507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1447.775612][T25507] RIP: 0023:0xf70ed579 [ 1447.775620][T25507] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1447.775643][T25507] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 1447.775653][T25507] RAX: ffffffffffffffda RBX: 00000000f748f000 RCX: 0000000000000001 [ 1447.775660][T25507] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1447.775666][T25507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1447.775672][T25507] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1447.775678][T25507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1447.775692][T25507] [ 1447.851193][ T5945] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 1447.862045][ T5945] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1448.095820][T25505] netlink: 'syz.4.4812': attribute type 3 has an invalid length. [ 1448.099831][T21948] usb 9-1: USB disconnect, device number 55 [ 1448.103267][ T5945] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1448.316260][T25522] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1448.329205][T25522] kvm: pic: non byte read [ 1448.334719][T25522] kvm: pic: level sensitive irq not supported [ 1448.335300][T25522] kvm: pic: non byte read [ 1448.558592][T25539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4819'. [ 1448.762168][T25550] netlink: 'syz.4.4820': attribute type 15 has an invalid length. [ 1448.765603][T25550] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4820'. [ 1449.181689][ T6025] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1449.193449][T22690] usb 7-1: selecting invalid altsetting 0 [ 1449.198048][ T6025] usb 6-1: USB disconnect, device number 47 [ 1449.391347][T25552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4821'. [ 1449.397367][T25552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4821'. [ 1449.406053][T25552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1449.408551][T25552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1449.411402][T25552] vhci_hcd vhci_hcd.0: Device attached [ 1449.419999][T25554] vhci_hcd: connection closed [ 1449.420291][T14057] vhci_hcd: stop threads [ 1449.424568][T14057] vhci_hcd: release socket [ 1449.426266][T14057] vhci_hcd: disconnect device [ 1449.554988][ T6025] usb 7-1: USB disconnect, device number 46 [ 1452.012947][T16046] usb 48-1: device descriptor read/8, error -110 [ 1452.413278][T16046] usb usb48-port1: attempt power cycle [ 1452.973795][T16046] usb usb48-port1: unable to enumerate USB device [ 1458.466097][T25578] lo speed is unknown, defaulting to 1000 [ 1458.550521][T25578] lo speed is unknown, defaulting to 1000 [ 1458.721733][T25588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4825'. [ 1459.711981][T25611] lo speed is unknown, defaulting to 1000 [ 1459.801301][T25611] lo speed is unknown, defaulting to 1000 [ 1460.065299][T25623] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1460.075224][T25623] kvm: pic: non byte read [ 1460.078516][T25623] kvm: pic: level sensitive irq not supported [ 1460.078877][T25623] kvm: pic: non byte read [ 1460.588731][T25642] lo speed is unknown, defaulting to 1000 [ 1460.658422][T25637] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1460.666296][T25637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1460.675047][T25637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1460.677000][T25637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1460.680604][T25637] vhci_hcd vhci_hcd.0: Device attached [ 1460.688173][T25645] vhci_hcd: connection closed [ 1460.688325][ T7146] vhci_hcd: stop threads [ 1460.691193][ T7146] vhci_hcd: release socket [ 1460.692546][ T7146] vhci_hcd: disconnect device [ 1460.709780][T25642] lo speed is unknown, defaulting to 1000 [ 1460.802032][T25640] input: syz0 as /devices/virtual/input/input39 [ 1461.349702][T25664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1461.716873][T25670] lo speed is unknown, defaulting to 1000 [ 1461.807924][T25670] lo speed is unknown, defaulting to 1000 [ 1463.639858][T25681] vivid-009: kernel_thread() failed [ 1463.797826][T25690] lo speed is unknown, defaulting to 1000 [ 1463.941763][T25699] lo speed is unknown, defaulting to 1000 [ 1463.960430][T25690] lo speed is unknown, defaulting to 1000 [ 1464.044051][T25699] lo speed is unknown, defaulting to 1000 [ 1464.162936][T21948] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1464.282841][ T6025] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1464.335584][T21948] usb 9-1: config 0 has no interfaces? [ 1464.337927][T21948] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1464.341444][T21948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.348999][T21948] usb 9-1: config 0 descriptor?? [ 1464.445097][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1464.449869][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1464.455992][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1464.460646][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1464.465303][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1464.473983][ T6025] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1464.478284][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.481721][ T6025] usb 6-1: Product: syz [ 1464.484885][ T6025] usb 6-1: Manufacturer: syz [ 1464.486868][ T6025] usb 6-1: SerialNumber: syz [ 1464.492358][ T6025] usb 6-1: config 0 descriptor?? [ 1464.503717][ T6025] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input40 [ 1464.559740][T25700] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1464.576802][T25700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4848'. [ 1464.704344][ T6025] usb 6-1: USB disconnect, device number 48 [ 1465.093985][ C2] hpet_rtc_timer_reinit: 37 callbacks suppressed [ 1465.093996][ C2] hpet: Lost 2 RTC interrupts [ 1465.488478][T25722] 9pnet_virtio: no channels available for device syz [ 1465.498425][T25722] netlink: 'syz.5.4852': attribute type 21 has an invalid length. [ 1465.522381][T25718] input: syz0 as /devices/virtual/input/input41 [ 1465.962007][T25724] netlink: 'syz.2.4853': attribute type 15 has an invalid length. [ 1465.967792][T25724] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4853'. [ 1466.956999][T25739] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4856'. [ 1467.094596][T21948] usb 9-1: USB disconnect, device number 56 [ 1467.601447][T25752] atomic_op ffff888025833198 conn xmit_atomic 0000000000000000 [ 1468.735155][T25766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1468.848066][T25760] kvm: pic: non byte read [ 1469.068173][T25760] kvm: pic: level sensitive irq not supported [ 1469.214321][T25760] kvm: pic: non byte read [ 1469.366329][ C2] hpet: Lost 1 RTC interrupts [ 1469.675589][T25775] 9pnet_virtio: no channels available for device syz [ 1469.723729][T25775] netlink: 'syz.1.4865': attribute type 21 has an invalid length. [ 1470.305017][T25784] lo speed is unknown, defaulting to 1000 [ 1470.628125][T25784] lo speed is unknown, defaulting to 1000 [ 1470.729854][T25797] lo speed is unknown, defaulting to 1000 [ 1471.272056][T25797] lo speed is unknown, defaulting to 1000 [ 1471.587843][T25807] atomic_op ffff8880241f4998 conn xmit_atomic 0000000000000000 [ 1471.607542][T25808] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1471.609618][T25808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1471.630669][T25808] vhci_hcd vhci_hcd.0: Device attached [ 1472.022775][T16046] usb 42-1: SetAddress Request (54) to port 0 [ 1472.024891][T16046] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1472.374246][T25809] vhci_hcd: connection closed [ 1472.374493][T14044] vhci_hcd: stop threads [ 1472.377384][T14044] vhci_hcd: release socket [ 1472.380539][T14044] vhci_hcd: disconnect device [ 1472.392923][T16046] usb 42-1: enqueue for inactive port 0 [ 1472.796747][T16046] usb usb42-port1: attempt power cycle [ 1472.946224][ T61] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1472.948041][T25824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1472.965477][T25824] kvm: pic: non byte read [ 1472.968239][T25824] kvm: pic: level sensitive irq not supported [ 1472.968817][T25824] kvm: pic: non byte read [ 1473.085276][T25833] input: syz0 as /devices/virtual/input/input42 [ 1473.119645][ T61] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1473.242636][ T6042] block nbd0: Possible stuck request ffff888025a20000: control (read@0,1024B). Runtime 60 seconds [ 1473.246021][ T6042] block nbd0: Possible stuck request ffff888025a201c0: control (read@1024,1024B). Runtime 60 seconds [ 1473.249364][ T6042] block nbd0: Possible stuck request ffff888025a20380: control (read@2048,1024B). Runtime 60 seconds [ 1473.252888][ T6042] block nbd0: Possible stuck request ffff888025a20540: control (read@3072,1024B). Runtime 60 seconds [ 1473.263072][ T61] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.266292][ T61] usb 6-1: config 0 has no interfaces? [ 1473.268123][ T61] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1473.270980][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.278729][ T61] usb 6-1: config 0 descriptor?? [ 1473.664653][T16046] usb usb42-port1: unable to enumerate USB device [ 1474.247124][T25851] netlink: 'syz.4.4883': attribute type 15 has an invalid length. [ 1474.249756][T25851] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1474.280037][T25852] lo speed is unknown, defaulting to 1000 [ 1474.363217][T25852] lo speed is unknown, defaulting to 1000 [ 1474.372766][T22690] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1474.524759][T22690] usb 10-1: config 0 has no interfaces? [ 1474.526576][T22690] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1474.529487][T22690] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.533272][T22690] usb 10-1: config 0 descriptor?? [ 1474.741881][T25847] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1474.752461][T25847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4882'. [ 1475.232502][ T40] audit: type=1326 audit(1762535648.218:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1475.239437][ T40] audit: type=1326 audit(1762535648.218:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1475.246489][ T40] audit: type=1326 audit(1762535648.218:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.253475][ T40] audit: type=1326 audit(1762535648.218:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.260247][ T40] audit: type=1326 audit(1762535648.218:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.267007][ T40] audit: type=1326 audit(1762535648.218:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.274251][ T40] audit: type=1326 audit(1762535648.218:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.280968][ T40] audit: type=1326 audit(1762535648.218:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.288475][ T40] audit: type=1326 audit(1762535648.218:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf700d598 code=0x7ffc0000 [ 1475.295639][ T40] audit: type=1326 audit(1762535648.218:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25865 comm="syz.4.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 1475.336729][T25869] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1475.348031][T25869] kvm: pic: non byte read [ 1475.354095][T25869] kvm: pic: level sensitive irq not supported [ 1475.354856][T25869] kvm: pic: non byte read [ 1475.617481][T16582] usb 6-1: USB disconnect, device number 49 [ 1476.667471][T25893] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1476.965508][T25903] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1476.995942][T25903] kvm: pic: non byte read [ 1477.003138][T25903] kvm: pic: level sensitive irq not supported [ 1477.003766][T25903] kvm: pic: non byte read [ 1477.030639][T25905] netlink: 'syz.1.4898': attribute type 15 has an invalid length. [ 1477.033554][T25905] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4898'. [ 1477.115922][ T6025] usb 10-1: USB disconnect, device number 8 [ 1477.455411][T25918] netlink: 'syz.5.4902': attribute type 15 has an invalid length. [ 1477.458137][T25918] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4902'. [ 1477.975353][T25935] FAULT_INJECTION: forcing a failure. [ 1477.975353][T25935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.979413][T25935] CPU: 1 UID: 0 PID: 25935 Comm: syz.2.4909 Not tainted syzkaller #0 PREEMPT(full) [ 1477.979438][T25935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1477.979445][T25935] Call Trace: [ 1477.979456][T25935] [ 1477.979461][T25935] dump_stack_lvl+0x16c/0x1f0 [ 1477.979490][T25935] should_fail_ex+0x512/0x640 [ 1477.979515][T25935] _copy_to_user+0x32/0xd0 [ 1477.979533][T25935] simple_read_from_buffer+0xcb/0x170 [ 1477.979551][T25935] proc_fail_nth_read+0x197/0x240 [ 1477.979564][T25935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1477.979577][T25935] ? rw_verify_area+0xcf/0x6c0 [ 1477.979587][T25935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1477.979598][T25935] vfs_read+0x1e4/0xcf0 [ 1477.979612][T25935] ? __pfx_vfs_read+0x10/0x10 [ 1477.979622][T25935] ? find_held_lock+0x2b/0x80 [ 1477.979637][T25935] ? __fget_files+0x20e/0x3c0 [ 1477.979647][T25935] ? fput+0x50/0xd0 [ 1477.979664][T25935] ksys_read+0x12a/0x250 [ 1477.979675][T25935] ? __pfx_ksys_read+0x10/0x10 [ 1477.979687][T25935] ? rcu_is_watching+0x12/0xc0 [ 1477.979701][T25935] __do_fast_syscall_32+0x7c/0x300 [ 1477.979716][T25935] do_fast_syscall_32+0x32/0x80 [ 1477.979729][T25935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.979743][T25935] RIP: 0023:0xf703d579 [ 1477.979751][T25935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1477.979761][T25935] RSP: 002b:00000000f540c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1477.979771][T25935] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f540c620 [ 1477.979778][T25935] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1477.979784][T25935] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1477.979801][T25935] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1477.979807][T25935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1477.979821][T25935] [ 1478.051779][T25939] lo speed is unknown, defaulting to 1000 [ 1478.131642][T25939] lo speed is unknown, defaulting to 1000 [ 1478.177700][T25944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1478.342596][T25957] netlink: 'syz.4.4915': attribute type 15 has an invalid length. [ 1478.345250][T25957] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4915'. [ 1478.915243][T25972] netlink: 'syz.1.4921': attribute type 15 has an invalid length. [ 1478.917888][T25972] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1479.306170][T25978] lo speed is unknown, defaulting to 1000 [ 1479.391293][T25978] lo speed is unknown, defaulting to 1000 [ 1479.467855][T25982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.078166][T25999] FAULT_INJECTION: forcing a failure. [ 1480.078166][T25999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.085102][T25999] CPU: 3 UID: 0 PID: 25999 Comm: syz.1.4929 Not tainted syzkaller #0 PREEMPT(full) [ 1480.085125][T25999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1480.085136][T25999] Call Trace: [ 1480.085152][T25999] [ 1480.085159][T25999] dump_stack_lvl+0x16c/0x1f0 [ 1480.085198][T25999] should_fail_ex+0x512/0x640 [ 1480.085235][T25999] _copy_from_user+0x2e/0xd0 [ 1480.085261][T25999] get_compat_msghdr+0xa7/0x170 [ 1480.085287][T25999] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1480.085314][T25999] ? __lock_acquire+0x622/0x1c90 [ 1480.085343][T25999] ___sys_recvmsg+0x191/0x1a0 [ 1480.085361][T25999] ? __pfx____sys_recvmsg+0x10/0x10 [ 1480.085381][T25999] ? find_held_lock+0x2b/0x80 [ 1480.085414][T25999] __sys_recvmsg+0x16a/0x220 [ 1480.085430][T25999] ? __pfx___sys_recvmsg+0x10/0x10 [ 1480.085457][T25999] ? rcu_is_watching+0x12/0xc0 [ 1480.085479][T25999] __do_fast_syscall_32+0x7c/0x300 [ 1480.085503][T25999] do_fast_syscall_32+0x32/0x80 [ 1480.085521][T25999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1480.085542][T25999] RIP: 0023:0xf707d579 [ 1480.085558][T25999] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1480.085572][T25999] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 1480.085589][T25999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 1480.085599][T25999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1480.085610][T25999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1480.085619][T25999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1480.085634][T25999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1480.085658][T25999] [ 1480.185913][T26004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4931'. [ 1480.269442][T26007] netlink: 'syz.4.4930': attribute type 15 has an invalid length. [ 1480.272460][T26007] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4930'. [ 1480.302953][T25983] delete_channel: no stack [ 1480.792033][T26011] infiniband syz2: set down [ 1480.792365][ C2] hpet_rtc_timer_reinit: 2 callbacks suppressed [ 1480.792376][ C2] hpet: Lost 1 RTC interrupts [ 1480.793642][T26011] infiniband syz2: added ipvlan0 [ 1481.321473][T26011] RDS/IB: syz2: added [ 1481.322883][T26011] smc: adding ib device syz2 with port count 1 [ 1481.324848][T26011] smc: ib device syz2 port 1 has no pnetid [ 1482.129497][T26026] netlink: 'syz.4.4935': attribute type 15 has an invalid length. [ 1482.131979][T26026] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1482.836245][T26047] lo speed is unknown, defaulting to 1000 [ 1482.911763][T26047] lo speed is unknown, defaulting to 1000 [ 1483.153687][T26057] netlink: 'syz.4.4943': attribute type 15 has an invalid length. [ 1483.156431][T26057] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4943'. [ 1483.987908][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.990566][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.267716][T26083] lo speed is unknown, defaulting to 1000 [ 1484.316391][T26084] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1484.355143][T26083] lo speed is unknown, defaulting to 1000 [ 1484.577921][T26091] lo speed is unknown, defaulting to 1000 [ 1484.669518][T26091] lo speed is unknown, defaulting to 1000 [ 1484.791221][T26096] nvme_fabrics: missing parameter 'transport=%s' [ 1484.795430][T26096] nvme_fabrics: missing parameter 'nqn=%s' [ 1485.041386][T26105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4956'. [ 1485.414480][T26120] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1486.020284][ C2] hpet: Lost 1 RTC interrupts [ 1486.349406][T26122] netlink: 'syz.2.4958': attribute type 15 has an invalid length. [ 1486.352004][T26122] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1486.423352][T26126] input: syz0 as /devices/virtual/input/input43 [ 1486.518992][T26130] syzkaller0: entered promiscuous mode [ 1486.520802][T26130] syzkaller0: entered allmulticast mode [ 1486.819317][T26139] lo speed is unknown, defaulting to 1000 [ 1486.955421][T26139] lo speed is unknown, defaulting to 1000 [ 1487.161630][T26151] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1487.287425][T26150] netlink: 'syz.4.4969': attribute type 15 has an invalid length. [ 1487.290150][T26150] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4969'. [ 1487.446349][ T40] audit: type=1326 audit(1762535660.438:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26154 comm="syz.4.4970" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x0 [ 1488.748077][T26181] netlink: 'syz.5.4978': attribute type 15 has an invalid length. [ 1488.751217][T26181] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4978'. [ 1488.896934][T26193] lo speed is unknown, defaulting to 1000 [ 1489.014214][T26193] lo speed is unknown, defaulting to 1000 [ 1490.053636][T26227] lo speed is unknown, defaulting to 1000 [ 1490.335630][T26227] lo speed is unknown, defaulting to 1000 [ 1491.191698][T26261] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1491.191698][T26261] program syz.4.4996 not setting count and/or reply_len properly [ 1492.044124][T26280] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1492.236379][T26283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1493.676618][T26312] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1493.676618][T26312] program syz.1.5009 not setting count and/or reply_len properly [ 1493.872821][T22690] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1494.038761][T26316] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5012'. [ 1494.044321][T26316] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5012'. [ 1494.048787][T22690] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1494.053587][T22690] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1494.057582][T22690] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1494.061039][T22690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.067311][T26311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1494.071203][T22690] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1494.102811][T22642] Bluetooth: hci0: command tx timeout [ 1494.192863][T16582] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1494.248253][T26322] netlink: 'syz.5.5013': attribute type 15 has an invalid length. [ 1494.251498][T26322] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1494.288855][ T6025] usb 7-1: USB disconnect, device number 47 [ 1494.354079][T16582] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1494.357690][T16582] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1494.363113][T16582] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1494.366622][T16582] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.375483][T26314] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1494.382487][T16582] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1494.594656][T16582] usb 9-1: USB disconnect, device number 57 [ 1495.193399][T26341] lo speed is unknown, defaulting to 1000 [ 1495.294132][T26341] lo speed is unknown, defaulting to 1000 [ 1496.729621][T26378] lo speed is unknown, defaulting to 1000 [ 1496.778596][T26381] syzkaller0: entered promiscuous mode [ 1496.780871][T26381] syzkaller0: entered allmulticast mode [ 1496.848063][T26378] lo speed is unknown, defaulting to 1000 [ 1497.526906][T26408] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1497.564917][T26411] lo speed is unknown, defaulting to 1000 [ 1497.650723][T26411] lo speed is unknown, defaulting to 1000 [ 1497.943277][T26425] lo speed is unknown, defaulting to 1000 [ 1497.953015][T26427] 9pnet_fd: Insufficient options for proto=fd [ 1498.098417][T26425] lo speed is unknown, defaulting to 1000 [ 1498.307300][T26439] netlink: 'syz.2.5045': attribute type 15 has an invalid length. [ 1498.309919][T26439] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5045'. [ 1498.860736][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1498.864427][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1498.867497][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1498.870538][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.876881][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1498.895670][T22642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1498.899535][T22642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1498.901971][T22642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1498.905325][T22642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.907821][T22642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1498.942450][T26447] lo speed is unknown, defaulting to 1000 [ 1499.063022][T26447] lo speed is unknown, defaulting to 1000 [ 1499.238484][T26454] FAULT_INJECTION: forcing a failure. [ 1499.238484][T26454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.242666][T26454] CPU: 3 UID: 0 PID: 26454 Comm: syz.5.5051 Not tainted syzkaller #0 PREEMPT(full) [ 1499.242690][T26454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1499.242698][T26454] Call Trace: [ 1499.242702][T26454] [ 1499.242707][T26454] dump_stack_lvl+0x16c/0x1f0 [ 1499.242723][T26454] should_fail_ex+0x512/0x640 [ 1499.242743][T26454] _copy_to_user+0x32/0xd0 [ 1499.242761][T26454] simple_read_from_buffer+0xcb/0x170 [ 1499.242779][T26454] proc_fail_nth_read+0x197/0x240 [ 1499.242791][T26454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1499.242804][T26454] ? rw_verify_area+0xcf/0x6c0 [ 1499.242814][T26454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1499.242825][T26454] vfs_read+0x1e4/0xcf0 [ 1499.242839][T26454] ? __pfx_vfs_read+0x10/0x10 [ 1499.242848][T26454] ? find_held_lock+0x2b/0x80 [ 1499.242864][T26454] ? __fget_files+0x20e/0x3c0 [ 1499.242878][T26454] ksys_read+0x12a/0x250 [ 1499.242889][T26454] ? __pfx_ksys_read+0x10/0x10 [ 1499.242901][T26454] ? rcu_is_watching+0x12/0xc0 [ 1499.242914][T26454] __do_fast_syscall_32+0x7c/0x300 [ 1499.242929][T26454] do_fast_syscall_32+0x32/0x80 [ 1499.242943][T26454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.242956][T26454] RIP: 0023:0xf70ed579 [ 1499.242965][T26454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1499.242975][T26454] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1499.242985][T26454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54dd620 [ 1499.242991][T26454] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1499.242997][T26454] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1499.243004][T26454] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1499.243009][T26454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.243023][T26454] [ 1499.302003][ C3] vkms_vblank_simulate: vblank timer overrun [ 1499.362074][T26462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1499.432117][T26447] chnl_net:caif_netlink_parms(): no params data found [ 1499.563678][T26447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.568703][T26447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.575880][T26447] bridge_slave_0: entered allmulticast mode [ 1499.579985][T26447] bridge_slave_0: entered promiscuous mode [ 1499.590647][T26447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.595409][T26447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.598422][T26447] bridge_slave_1: entered allmulticast mode [ 1499.602156][T26447] bridge_slave_1: entered promiscuous mode [ 1499.655173][T26447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.660087][T26447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.723455][T26447] team0: Port device team_slave_0 added [ 1499.728640][T26447] team0: Port device team_slave_1 added [ 1499.791544][T26447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.794616][T26447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.807735][T26447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.814098][T26447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.816862][T26447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.830631][T26447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.909618][T26447] hsr_slave_0: entered promiscuous mode [ 1499.914265][T26447] hsr_slave_1: entered promiscuous mode [ 1499.917015][T26447] debugfs: 'hsr0' already exists in 'hsr' [ 1499.919314][T26447] Cannot create hsr debugfs directory [ 1500.079891][T26447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.204887][T26447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.236688][T26489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5059'. [ 1500.324115][T26447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.338892][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5059'. [ 1500.395703][T26447] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1500.431204][T26447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.476591][T26493] comedi comedi3: pcl812: I/O port conflict (0x3,16) [ 1500.693193][ T6004] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1500.973449][T22642] Bluetooth: hci4: command tx timeout [ 1501.003135][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1501.013488][T26497] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 1501.016401][T26498] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 1501.017096][T26497] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1501.018785][T26498] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1501.019010][T26498] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 1501.027763][T26498] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1501.122465][T26447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1501.172071][T26447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1501.184102][T26447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1501.206895][T26447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1501.284644][T26447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.300600][T26447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.307792][T14702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.310287][T14702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.319069][T14702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.321295][T14702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.676655][T26447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.721984][T26447] veth0_vlan: entered promiscuous mode [ 1501.733627][T26447] veth1_vlan: entered promiscuous mode [ 1501.762785][T26447] veth0_macvtap: entered promiscuous mode [ 1501.768960][T26447] veth1_macvtap: entered promiscuous mode [ 1501.785529][T26447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.798007][T26447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.809262][T14702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.828896][T14702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.831953][T14702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.839754][T14702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.878545][T14057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.881315][T14057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.910960][T14057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.914637][T14057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.557602][T26538] kernel profiling enabled (shift: 34) [ 1502.562025][T26538] profiling shift: 34 too large [ 1502.564872][T26538] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5069'. [ 1502.780258][T26543] vlan2: entered promiscuous mode [ 1502.782012][T26543] macvtap0: entered promiscuous mode [ 1502.823953][T26545] FAULT_INJECTION: forcing a failure. [ 1502.823953][T26545] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.828196][T26545] CPU: 3 UID: 0 PID: 26545 Comm: syz.5.5072 Not tainted syzkaller #0 PREEMPT(full) [ 1502.828212][T26545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1502.828218][T26545] Call Trace: [ 1502.828223][T26545] [ 1502.828227][T26545] dump_stack_lvl+0x16c/0x1f0 [ 1502.828244][T26545] should_fail_ex+0x512/0x640 [ 1502.828263][T26545] should_failslab+0xc2/0x120 [ 1502.828278][T26545] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1502.828289][T26545] ? dst_alloc+0x99/0x1a0 [ 1502.828307][T26545] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1502.828318][T26545] ? dst_alloc+0x99/0x1a0 [ 1502.828332][T26545] dst_alloc+0x99/0x1a0 [ 1502.828348][T26545] ip6_pol_route+0x96b/0x1230 [ 1502.828366][T26545] ? __pfx_ip6_pol_route+0x10/0x10 [ 1502.828387][T26545] ? __local_bh_enable_ip+0xa4/0x120 [ 1502.828402][T26545] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1502.828417][T26545] fib6_rule_lookup+0x536/0x720 [ 1502.828433][T26545] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1502.828448][T26545] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 1502.828463][T26545] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1502.828480][T26545] ? ip6table_mangle_hook+0xcb/0x770 [ 1502.828497][T26545] ip6_route_input+0x662/0xc70 [ 1502.828515][T26545] ? __pfx_ip6_route_input+0x10/0x10 [ 1502.828530][T26545] ? lock_acquire+0x179/0x350 [ 1502.828552][T26545] ? sock_wfree+0x11c/0x880 [ 1502.828568][T26545] ? udp_v6_early_demux+0x2ca/0xfd0 [ 1502.828583][T26545] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1502.828601][T26545] ipv6_rcv+0x1e8/0x650 [ 1502.828617][T26545] ? __pfx_ipv6_rcv+0x10/0x10 [ 1502.828632][T26545] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1502.828648][T26545] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1502.828664][T26545] ? lock_acquire+0x179/0x350 [ 1502.828679][T26545] ? __phys_addr+0xe8/0x180 [ 1502.828694][T26545] __netif_receive_skb+0x1d/0x160 [ 1502.828710][T26545] netif_receive_skb+0x137/0x7b0 [ 1502.828725][T26545] ? __pfx_netif_receive_skb+0x10/0x10 [ 1502.828745][T26545] tun_rx_batched.isra.0+0x3ee/0x740 [ 1502.828765][T26545] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1502.828785][T26545] ? tun_get_user+0x1ded/0x3cc0 [ 1502.828795][T26545] ? rcu_is_watching+0x12/0xc0 [ 1502.828808][T26545] tun_get_user+0x28b2/0x3cc0 [ 1502.828825][T26545] ? __pfx_tun_get_user+0x10/0x10 [ 1502.828836][T26545] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1502.828851][T26545] ? find_held_lock+0x2b/0x80 [ 1502.828862][T26545] ? tun_get+0x191/0x370 [ 1502.828874][T26545] tun_chr_write_iter+0xdc/0x210 [ 1502.828886][T26545] vfs_write+0x7d3/0x11d0 [ 1502.828898][T26545] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1502.828911][T26545] ? __pfx_vfs_write+0x10/0x10 [ 1502.828921][T26545] ? find_held_lock+0x2b/0x80 [ 1502.828939][T26545] ksys_write+0x12a/0x250 [ 1502.828951][T26545] ? __pfx_ksys_write+0x10/0x10 [ 1502.828963][T26545] ? rcu_is_watching+0x12/0xc0 [ 1502.828976][T26545] __do_fast_syscall_32+0x7c/0x300 [ 1502.828991][T26545] do_fast_syscall_32+0x32/0x80 [ 1502.829004][T26545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.829017][T26545] RIP: 0023:0xf70ed579 [ 1502.829026][T26545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1502.829036][T26545] RSP: 002b:00000000f54dd520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1502.829047][T26545] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800008c0 [ 1502.829054][T26545] RDX: 00000000000000d2 RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1502.829060][T26545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.829065][T26545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1502.829072][T26545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.829085][T26545] [ 1502.945145][ C3] vkms_vblank_simulate: vblank timer overrun [ 1503.052853][T22642] Bluetooth: hci4: command tx timeout [ 1504.093853][T16222] block nbd0: Possible stuck request ffff888025a20000: control (read@0,1024B). Runtime 90 seconds [ 1504.097095][T16222] block nbd0: Possible stuck request ffff888025a201c0: control (read@1024,1024B). Runtime 90 seconds [ 1504.100405][T16222] block nbd0: Possible stuck request ffff888025a20380: control (read@2048,1024B). Runtime 90 seconds [ 1504.103833][T16222] block nbd0: Possible stuck request ffff888025a20540: control (read@3072,1024B). Runtime 90 seconds [ 1504.398563][T26582] netlink: 'syz.4.5081': attribute type 15 has an invalid length. [ 1504.402071][T26582] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5081'. [ 1504.473005][T26581] netlink: 'syz.2.5080': attribute type 15 has an invalid length. [ 1504.475623][T26581] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1505.142947][T22642] Bluetooth: hci4: command tx timeout [ 1505.255748][T22690] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1505.402810][T22690] usb 7-1: Using ep0 maxpacket: 32 [ 1505.405629][T22690] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1505.410278][T22690] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1505.413573][T22690] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1505.416100][T22690] usb 7-1: Product: syz [ 1505.417406][T22690] usb 7-1: Manufacturer: syz [ 1505.418858][T22690] usb 7-1: SerialNumber: syz [ 1505.421897][T22690] usb 7-1: config 0 descriptor?? [ 1505.425486][T26592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1505.908580][T26621] netlink: 'syz.4.5091': attribute type 10 has an invalid length. [ 1507.222867][T22642] Bluetooth: hci4: command tx timeout [ 1507.237432][T26629] netlink: 'syz.1.5093': attribute type 15 has an invalid length. [ 1507.240274][T26629] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1507.480736][T26633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5095'. [ 1507.666376][T26632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5095'. [ 1508.264895][T26639] vlan2: entered allmulticast mode [ 1508.266639][T26639] macsec0: entered allmulticast mode [ 1508.268513][T26639] veth1_macvtap: entered allmulticast mode [ 1508.316148][T26641] FAULT_INJECTION: forcing a failure. [ 1508.316148][T26641] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.320010][T26641] CPU: 2 UID: 0 PID: 26641 Comm: syz.1.5099 Not tainted syzkaller #0 PREEMPT(full) [ 1508.320025][T26641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1508.320032][T26641] Call Trace: [ 1508.320036][T26641] [ 1508.320040][T26641] dump_stack_lvl+0x16c/0x1f0 [ 1508.320057][T26641] should_fail_ex+0x512/0x640 [ 1508.320073][T26641] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1508.320085][T26641] should_failslab+0xc2/0x120 [ 1508.320100][T26641] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1508.320111][T26641] ? skb_clone+0x190/0x3f0 [ 1508.320124][T26641] ? skb_clone+0x190/0x3f0 [ 1508.320133][T26641] skb_clone+0x190/0x3f0 [ 1508.320144][T26641] netlink_deliver_tap+0xabd/0xd30 [ 1508.320158][T26641] netlink_unicast+0x64c/0x870 [ 1508.320171][T26641] ? __pfx_netlink_unicast+0x10/0x10 [ 1508.320188][T26641] netlink_sendmsg+0x8c8/0xdd0 [ 1508.320201][T26641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.320214][T26641] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1508.320232][T26641] ____sys_sendmsg+0xa98/0xc70 [ 1508.320247][T26641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1508.320259][T26641] ? get_compat_msghdr+0x11a/0x170 [ 1508.320282][T26641] ___sys_sendmsg+0x134/0x1d0 [ 1508.320294][T26641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1508.320310][T26641] ? find_held_lock+0x2b/0x80 [ 1508.320330][T26641] __sys_sendmsg+0x16d/0x220 [ 1508.320340][T26641] ? __pfx___sys_sendmsg+0x10/0x10 [ 1508.320356][T26641] ? rcu_is_watching+0x12/0xc0 [ 1508.320370][T26641] __do_fast_syscall_32+0x7c/0x300 [ 1508.320389][T26641] do_fast_syscall_32+0x32/0x80 [ 1508.320403][T26641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1508.320416][T26641] RIP: 0023:0xf701d579 [ 1508.320424][T26641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1508.320435][T26641] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1508.320446][T26641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1508.320452][T26641] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1508.320458][T26641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1508.320464][T26641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1508.320470][T26641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1508.320483][T26641] [ 1508.392853][T21948] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1508.396150][ C2] hpet: Lost 4 RTC interrupts [ 1508.409804][T26641] dummy0: entered promiscuous mode [ 1508.413516][T26641] bond_slave_0: entered promiscuous mode [ 1508.415446][T26641] bond_slave_0: left promiscuous mode [ 1508.417485][T22690] usb 7-1: USB disconnect, device number 48 [ 1508.423002][T26641] dummy0: left promiscuous mode [ 1508.552918][T21948] usb 9-1: Using ep0 maxpacket: 32 [ 1508.562471][T21948] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1508.572282][T21948] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1508.576326][T21948] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 1508.583065][T21948] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 1508.598241][T21948] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1508.613937][T21948] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1508.654539][T21948] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1508.661728][T21948] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1508.661987][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1508.670144][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1508.672923][T21948] usb 9-1: Product: syz [ 1508.674625][T21948] usb 9-1: Manufacturer: syz [ 1508.675312][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1508.676560][T21948] usb 9-1: SerialNumber: syz [ 1508.683181][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1508.690991][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1508.691157][T21948] usb 9-1: config 0 descriptor?? [ 1508.702363][T26633] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1508.710027][T21948] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1508.739877][T21948] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1508.757625][T26645] lo speed is unknown, defaulting to 1000 [ 1508.827551][T26651] netlink: 'syz.5.5102': attribute type 15 has an invalid length. [ 1508.830934][T26651] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5102'. [ 1509.051356][T26645] lo speed is unknown, defaulting to 1000 [ 1509.197357][ T61] usb 9-1: USB disconnect, device number 58 [ 1509.227003][ T61] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1509.231768][T16339] syz1: Port: 1 Link DOWN [ 1509.261722][ T60] smc: removing ib device syz1 [ 1509.509025][T26645] chnl_net:caif_netlink_parms(): no params data found [ 1509.768600][T26645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.771352][T26645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.779290][T26645] bridge_slave_0: entered allmulticast mode [ 1509.799489][T26645] bridge_slave_0: entered promiscuous mode [ 1509.805037][T26645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.807891][T26645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.811109][T26645] bridge_slave_1: entered allmulticast mode [ 1509.818659][T26645] bridge_slave_1: entered promiscuous mode [ 1509.910921][T26670] ubi: mtd0 is already attached to ubi31 [ 1509.929756][T26673] FAULT_INJECTION: forcing a failure. [ 1509.929756][T26673] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.935562][T26673] CPU: 3 UID: 0 PID: 26673 Comm: syz.4.5107 Not tainted syzkaller #0 PREEMPT(full) [ 1509.935585][T26673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1509.935596][T26673] Call Trace: [ 1509.935603][T26673] [ 1509.935610][T26673] dump_stack_lvl+0x16c/0x1f0 [ 1509.935637][T26673] should_fail_ex+0x512/0x640 [ 1509.935661][T26673] ? fs_reclaim_acquire+0xae/0x150 [ 1509.935687][T26673] should_failslab+0xc2/0x120 [ 1509.935710][T26673] __kmalloc_noprof+0xdd/0x880 [ 1509.935737][T26673] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1509.935763][T26673] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1509.935781][T26673] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1509.935803][T26673] ? tomoyo_profile+0x47/0x60 [ 1509.935829][T26673] tomoyo_path_number_perm+0x245/0x580 [ 1509.935856][T26673] ? tomoyo_path_number_perm+0x237/0x580 [ 1509.935885][T26673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1509.935942][T26673] ? find_held_lock+0x2b/0x80 [ 1509.935962][T26673] ? hook_file_ioctl_common+0x145/0x410 [ 1509.935985][T26673] ? __fget_files+0x20e/0x3c0 [ 1509.936008][T26673] security_file_ioctl_compat+0x9b/0x240 [ 1509.936028][T26673] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1509.936057][T26673] __do_fast_syscall_32+0x7c/0x300 [ 1509.936088][T26673] do_fast_syscall_32+0x32/0x80 [ 1509.936110][T26673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1509.936130][T26673] RIP: 0023:0xf700d579 [ 1509.936144][T26673] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1509.936160][T26673] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1509.936176][T26673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40 [ 1509.936186][T26673] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1509.936198][T26673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1509.936209][T26673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1509.936220][T26673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1509.936244][T26673] [ 1509.936251][T26673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1510.027152][T26673] ubi: mtd0 is already attached to ubi31 [ 1510.052783][T26671] netlink: 'syz.1.5105': attribute type 15 has an invalid length. [ 1510.056826][T26671] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5105'. [ 1510.095142][T26645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.103766][T26645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.161038][T26645] team0: Port device team_slave_0 added [ 1510.173581][T26645] team0: Port device team_slave_1 added [ 1510.231827][T26645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.234918][T26645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.246513][T26645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.252551][T26645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.256340][T26645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.267841][T26645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.336871][T26645] hsr_slave_0: entered promiscuous mode [ 1510.340178][T26645] hsr_slave_1: entered promiscuous mode [ 1510.343385][T26645] debugfs: 'hsr0' already exists in 'hsr' [ 1510.345811][T26645] Cannot create hsr debugfs directory [ 1510.516339][T26645] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.520606][T26645] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.594886][T26645] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.598970][T26645] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.649661][T26645] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.653780][T26645] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.720487][T26645] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.724708][T26645] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.813052][T22642] Bluetooth: hci3: command tx timeout [ 1510.924606][T26645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1510.933509][T26645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1510.940858][T26645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1510.947828][T26645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1511.013645][T26645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.029408][T26645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.043701][T14057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.046748][T14057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.081206][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.084332][T14044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.290480][T26645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.323642][T26645] veth0_vlan: entered promiscuous mode [ 1511.329162][T26645] veth1_vlan: entered promiscuous mode [ 1511.345870][T26645] veth0_macvtap: entered promiscuous mode [ 1511.349961][T26645] veth1_macvtap: entered promiscuous mode [ 1511.364708][T26645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.381686][T26645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.393388][T19062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.397873][T19062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.401357][T19062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.407831][T19062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.490984][T14702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.494258][T14702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.508406][T14057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.511884][T14057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.390019][T26722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1512.638554][T26731] netlink: 'syz.4.5117': attribute type 15 has an invalid length. [ 1512.641462][T26731] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5117'. [ 1512.682846][T13832] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1512.854851][T13832] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1512.859117][T13832] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1512.862387][T13832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1512.866862][T13832] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1512.870087][T13832] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1512.872811][T13832] usb 6-1: Product: syz [ 1512.874562][T13832] usb 6-1: Manufacturer: syz [ 1512.876121][T13832] usb 6-1: SerialNumber: syz [ 1512.880278][T13832] usb 6-1: config 0 descriptor?? [ 1512.885269][T26723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1512.892141][T13832] usb 6-1: selecting invalid altsetting 0 [ 1512.902982][T22642] Bluetooth: hci3: command tx timeout [ 1513.242211][T26738] netlink: 'syz.5.5118': attribute type 15 has an invalid length. [ 1513.245462][T26738] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1514.124867][T26752] netlink: 'syz.4.5122': attribute type 2 has an invalid length. [ 1514.137652][T26752] : entered promiscuous mode [ 1514.294518][T26760] FAULT_INJECTION: forcing a failure. [ 1514.294518][T26760] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.298874][T26760] CPU: 1 UID: 0 PID: 26760 Comm: syz.4.5126 Not tainted syzkaller #0 PREEMPT(full) [ 1514.298889][T26760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1514.298896][T26760] Call Trace: [ 1514.298900][T26760] [ 1514.298905][T26760] dump_stack_lvl+0x16c/0x1f0 [ 1514.298921][T26760] should_fail_ex+0x512/0x640 [ 1514.298937][T26760] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1514.298956][T26760] should_failslab+0xc2/0x120 [ 1514.298970][T26760] __kmalloc_cache_noprof+0x72/0x780 [ 1514.298986][T26760] ? _parse_integer_limit+0x17f/0x1d0 [ 1514.298999][T26760] ? refill_pi_state_cache+0x89/0x250 [ 1514.299017][T26760] ? refill_pi_state_cache+0x89/0x250 [ 1514.299037][T26760] refill_pi_state_cache+0x89/0x250 [ 1514.299053][T26760] futex_lock_pi+0x175/0x7c0 [ 1514.299071][T26760] ? __pfx_futex_lock_pi+0x10/0x10 [ 1514.299101][T26760] ? __pfx_futex_wake_mark+0x10/0x10 [ 1514.299120][T26760] ? find_held_lock+0x2b/0x80 [ 1514.299143][T26760] ? ksys_write+0x190/0x250 [ 1514.299159][T26760] do_futex+0x11a/0x350 [ 1514.299175][T26760] ? __pfx_do_futex+0x10/0x10 [ 1514.299193][T26760] __ia32_sys_futex_time32+0x1d9/0x460 [ 1514.299211][T26760] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1514.299226][T26760] ? ksys_write+0x1ac/0x250 [ 1514.299237][T26760] ? __pfx_ksys_write+0x10/0x10 [ 1514.299247][T26760] ? __do_compat_sys_rt_sigreturn+0x1ba/0x270 [ 1514.299266][T26760] ? rcu_is_watching+0x12/0xc0 [ 1514.299279][T26760] __do_fast_syscall_32+0x7c/0x300 [ 1514.299294][T26760] do_fast_syscall_32+0x32/0x80 [ 1514.299307][T26760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.299321][T26760] RIP: 0023:0xf700d579 [ 1514.299330][T26760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1514.299341][T26760] RSP: 002b:00000000f53bb55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 1514.299350][T26760] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000086 [ 1514.299357][T26760] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.299363][T26760] RBP: 00000000fffffffc R08: 0000000000000000 R09: 0000000000000000 [ 1514.299370][T26760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1514.299376][T26760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.299389][T26760] [ 1514.973080][T22642] Bluetooth: hci3: command tx timeout [ 1515.501244][T16339] usb 6-1: USB disconnect, device number 50 [ 1515.544269][T22690] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1515.604933][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1515.617930][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1515.629216][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1515.632442][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1515.635331][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1515.660840][T26775] lo speed is unknown, defaulting to 1000 [ 1515.664668][T26775] lo speed is unknown, defaulting to 1000 [ 1515.755352][T22690] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1515.759096][T22690] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1515.762384][T22690] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1515.773605][T22690] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1515.776940][T22690] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1515.779537][T22690] usb 7-1: Product: syz [ 1515.780963][T22690] usb 7-1: Manufacturer: syz [ 1515.782589][T22690] usb 7-1: SerialNumber: syz [ 1515.801437][T22690] usb 7-1: config 0 descriptor?? [ 1515.806223][T26773] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1515.810392][T22690] usb 7-1: selecting invalid altsetting 0 [ 1515.874349][T26783] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1515.919273][T26775] chnl_net:caif_netlink_parms(): no params data found [ 1516.193959][T26775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.197219][T26775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.200381][T26775] bridge_slave_0: entered allmulticast mode [ 1516.204756][T26775] bridge_slave_0: entered promiscuous mode [ 1516.210680][T26775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.214170][T26775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.217651][T26775] bridge_slave_1: entered allmulticast mode [ 1516.221737][T26775] bridge_slave_1: entered promiscuous mode [ 1516.316343][T26775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.321545][T26775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.382525][T26775] team0: Port device team_slave_0 added [ 1516.387549][T26775] team0: Port device team_slave_1 added [ 1516.475806][T26775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.478144][T26775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.487082][T26775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.494964][T26775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.497139][T26775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.512749][T26775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.608831][T26775] hsr_slave_0: entered promiscuous mode [ 1516.611105][T26775] hsr_slave_1: entered promiscuous mode [ 1516.614460][T26775] debugfs: 'hsr0' already exists in 'hsr' [ 1516.616865][T26775] Cannot create hsr debugfs directory [ 1516.781260][T26775] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.786774][T26775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.861557][T26775] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.865122][T26775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.917663][T26775] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.920789][T26775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.031026][T26799] netlink: 'syz.1.5134': attribute type 15 has an invalid length. [ 1517.034208][T26799] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5134'. [ 1517.061078][T26775] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1517.062847][T22642] Bluetooth: hci3: command tx timeout [ 1517.065004][T26775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.221137][T26775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1517.233886][T26775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1517.241737][T26775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1517.246419][T26775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1517.297358][T26775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.307831][T26775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.314016][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.316449][T14044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.322425][T14057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.324802][T14057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.438450][T26775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.607522][T26775] veth0_vlan: entered promiscuous mode [ 1517.613132][T26775] veth1_vlan: entered promiscuous mode [ 1517.634698][T26775] veth0_macvtap: entered promiscuous mode [ 1517.640807][T26775] veth1_macvtap: entered promiscuous mode [ 1517.656379][T26775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.663039][T26775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1517.671710][T26121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.674638][T26121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.681541][T26121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.689758][T26121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.693938][T22642] Bluetooth: hci1: command tx timeout [ 1517.730149][T14044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.735900][T14044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.751089][T14042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.753952][T14042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.052984][T13832] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1518.213456][T13832] usb 9-1: Using ep0 maxpacket: 32 [ 1518.294255][T13832] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1518.298277][ T5945] usb 7-1: USB disconnect, device number 49 [ 1518.310328][T13832] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1518.320357][T13832] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1518.323199][T13832] usb 9-1: Product: syz [ 1518.324610][T13832] usb 9-1: Manufacturer: syz [ 1518.327020][T13832] usb 9-1: SerialNumber: syz [ 1518.369185][T13832] usb 9-1: config 0 descriptor?? [ 1518.391110][T26820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1518.487178][T26838] netlink: 'syz.2.5139': attribute type 15 has an invalid length. [ 1518.489671][T26838] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5139'. [ 1519.792914][T22642] Bluetooth: hci1: command tx timeout [ 1519.873592][T26856] netlink: 'syz.2.5144': attribute type 15 has an invalid length. [ 1519.876128][T26856] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1519.918918][T26858] wg1: entered promiscuous mode [ 1519.920556][T26858] wg1: entered allmulticast mode [ 1520.720086][T26866] futex_wake_op: syz.5.5147 tries to shift op by -1; fix this program [ 1520.917740][T26872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1521.375212][T26882] netlink: 'syz.5.5152': attribute type 15 has an invalid length. [ 1521.378358][T26882] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5152'. [ 1521.616305][T22734] usb 9-1: USB disconnect, device number 59 [ 1521.852950][T22642] Bluetooth: hci1: command tx timeout [ 1521.879794][T26890] bridge0: port 3(syz_tun) entered blocking state [ 1521.883756][T26890] bridge0: port 3(syz_tun) entered disabled state [ 1521.888542][T26890] syz_tun: entered allmulticast mode [ 1521.894725][T26890] syz_tun: entered promiscuous mode [ 1521.896867][T26890] bridge0: port 3(syz_tun) entered blocking state [ 1521.899091][T26890] bridge0: port 3(syz_tun) entered forwarding state [ 1522.325695][T26899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5158'. [ 1522.609728][T26910] program syz.1.5160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1523.102836][ T6025] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1523.252905][ T6025] usb 9-1: Using ep0 maxpacket: 32 [ 1523.263220][ T6025] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1523.276050][ T6025] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1523.280026][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1523.285434][ T6025] usb 9-1: Product: syz [ 1523.287198][ T6025] usb 9-1: Manufacturer: syz [ 1523.289083][ T6025] usb 9-1: SerialNumber: syz [ 1523.301064][ T6025] usb 9-1: config 0 descriptor?? [ 1523.304874][T26918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1523.587987][T26927] netlink: 'syz.5.5166': attribute type 15 has an invalid length. [ 1523.590476][T26927] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1523.932781][T22642] Bluetooth: hci1: command tx timeout [ 1524.561975][T26951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1525.120600][T26953] bridge0: port 3(syz_tun) entered blocking state [ 1525.122668][T26953] bridge0: port 3(syz_tun) entered disabled state [ 1525.126533][T26953] syz_tun: entered allmulticast mode [ 1525.131634][T26953] syz_tun: entered promiscuous mode [ 1525.134292][T26953] bridge0: port 3(syz_tun) entered blocking state [ 1525.136181][T26953] bridge0: port 3(syz_tun) entered forwarding state [ 1525.698045][T26971] bridge0: port 3(erspan0) entered blocking state [ 1525.700191][T26971] bridge0: port 3(erspan0) entered disabled state [ 1525.703836][T26971] bridge0: port 3(erspan0) entered blocking state [ 1525.705845][T26971] bridge0: port 3(erspan0) entered forwarding state [ 1525.870890][T22690] usb 9-1: USB disconnect, device number 60 [ 1526.003694][T26983] lo speed is unknown, defaulting to 1000 [ 1526.006745][T26983] lo speed is unknown, defaulting to 1000 [ 1526.026658][T26985] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1526.634544][T27007] input: syz1 as /devices/virtual/input/input44 [ 1526.943461][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1527.037570][T27020] bridge0: port 3(syz_tun) entered blocking state [ 1527.039768][T27020] bridge0: port 3(syz_tun) entered disabled state [ 1527.041929][T27020] syz_tun: entered allmulticast mode [ 1527.044565][T27020] syz_tun: entered promiscuous mode [ 1527.046766][T27020] bridge0: port 3(syz_tun) entered blocking state [ 1527.048800][T27020] bridge0: port 3(syz_tun) entered forwarding state [ 1527.517134][T27031] lo speed is unknown, defaulting to 1000 [ 1527.616968][T27031] lo speed is unknown, defaulting to 1000 [ 1527.947811][T27035] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5195'. [ 1528.106202][T27042] netlink: 'syz.2.5196': attribute type 15 has an invalid length. [ 1528.109042][T27042] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5196'. [ 1528.124413][T27044] syzkaller0: entered promiscuous mode [ 1528.126743][T27044] syzkaller0: entered allmulticast mode [ 1528.838557][T27072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1529.115510][T27079] bridge0: port 4(erspan0) entered blocking state [ 1529.118352][T27079] bridge0: port 4(erspan0) entered disabled state [ 1529.121285][T27079] erspan0: entered allmulticast mode [ 1529.126500][T27079] erspan0: entered promiscuous mode [ 1529.128370][T27079] bridge0: port 4(erspan0) entered blocking state [ 1529.130329][T27079] bridge0: port 4(erspan0) entered forwarding state [ 1529.342182][T27083] infiniband syz1: set active [ 1529.348797][T27083] infiniband syz1: added syz_tun [ 1529.381231][T27083] RDS/IB: syz1: added [ 1529.382593][T27083] smc: adding ib device syz1 with port count 1 [ 1529.384745][T27083] smc: ib device syz1 port 1 has no pnetid [ 1529.483967][T27084] netlink: 'syz.4.5210': attribute type 4 has an invalid length. [ 1529.490448][T27084] netlink: 'syz.4.5210': attribute type 4 has an invalid length. [ 1529.554047][T27087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1529.555036][T27084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.638389][T27089] syzkaller0: entered promiscuous mode [ 1529.640280][T27089] syzkaller0: entered allmulticast mode [ 1529.716117][T27084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.934207][T27084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.013359][T27084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.160805][T27108] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1530.169623][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.194053][T22690] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1530.197328][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.214462][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.231348][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.354008][T22690] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1530.357370][T22690] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1530.360568][T22690] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1530.364607][T22690] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1530.367408][T22690] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1530.369872][T22690] usb 10-1: Product: syz [ 1530.371215][T22690] usb 10-1: Manufacturer: syz [ 1530.385260][T22690] usb 10-1: SerialNumber: syz [ 1530.388104][T22690] usb 10-1: config 0 descriptor?? [ 1530.390169][T27106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1530.395036][T22690] usb 10-1: selecting invalid altsetting 0 [ 1531.412840][T27113] FAULT_INJECTION: forcing a failure. [ 1531.412840][T27113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.417313][T27113] CPU: 0 UID: 0 PID: 27113 Comm: syz.4.5218 Not tainted syzkaller #0 PREEMPT(full) [ 1531.417327][T27113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1531.417335][T27113] Call Trace: [ 1531.417339][T27113] [ 1531.417343][T27113] dump_stack_lvl+0x16c/0x1f0 [ 1531.417372][T27113] should_fail_ex+0x512/0x640 [ 1531.417392][T27113] _copy_to_user+0x32/0xd0 [ 1531.417410][T27113] snd_pcm_oss_read2+0x294/0x410 [ 1531.417426][T27113] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1531.417440][T27113] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1531.417454][T27113] snd_pcm_oss_read+0x5d2/0x760 [ 1531.417471][T27113] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1531.417486][T27113] vfs_read+0x1e4/0xcf0 [ 1531.417502][T27113] ? __pfx_vfs_read+0x10/0x10 [ 1531.417511][T27113] ? find_held_lock+0x2b/0x80 [ 1531.417523][T27113] ? __fget_files+0x204/0x3c0 [ 1531.417536][T27113] ? __fget_files+0x20e/0x3c0 [ 1531.417545][T27113] ? handle_mm_fault+0x1e0/0xd10 [ 1531.417565][T27113] ksys_read+0x12a/0x250 [ 1531.417576][T27113] ? __pfx_ksys_read+0x10/0x10 [ 1531.417588][T27113] ? rcu_is_watching+0x12/0xc0 [ 1531.417602][T27113] __do_fast_syscall_32+0x7c/0x300 [ 1531.417617][T27113] do_fast_syscall_32+0x32/0x80 [ 1531.417630][T27113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1531.417643][T27113] RIP: 0023:0xf7ff2579 [ 1531.417664][T27113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1531.417675][T27113] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1531.417685][T27113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 1531.417691][T27113] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.417698][T27113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.417704][T27113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1531.417710][T27113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.417724][T27113] [ 1531.483267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1531.602282][T27127] lo speed is unknown, defaulting to 1000 [ 1531.606116][T27127] lo speed is unknown, defaulting to 1000 [ 1531.765163][T27131] bridge0: port 4(erspan0) entered blocking state [ 1531.767362][T27131] bridge0: port 4(erspan0) entered disabled state [ 1531.769677][T27131] erspan0: entered allmulticast mode [ 1531.772759][T27131] erspan0: entered promiscuous mode [ 1531.775922][T27131] bridge0: port 4(erspan0) entered blocking state [ 1531.778041][T27131] bridge0: port 4(erspan0) entered forwarding state [ 1532.062842][ T61] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1532.212756][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 1532.216296][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.219900][ T61] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1532.226507][ T61] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1532.229314][ T61] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1532.231885][ T61] usb 6-1: Product: syz [ 1532.233488][ T61] usb 6-1: Manufacturer: syz [ 1532.234989][ T61] usb 6-1: SerialNumber: syz [ 1532.241600][ T61] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input45 [ 1532.442265][T27133] QAT: failed to copy from user cfg_data. [ 1532.835141][T22690] usb 10-1: USB disconnect, device number 9 [ 1532.934695][T27142] Bluetooth: MGMT ver 1.23 [ 1533.500158][T27149] netlink: 'syz.2.5227': attribute type 15 has an invalid length. [ 1533.503591][T27149] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5227'. [ 1534.503233][ T6042] block nbd0: Possible stuck request ffff888025a20000: control (read@0,1024B). Runtime 120 seconds [ 1534.506614][ T6042] block nbd0: Possible stuck request ffff888025a201c0: control (read@1024,1024B). Runtime 120 seconds [ 1534.510016][ T6042] block nbd0: Possible stuck request ffff888025a20380: control (read@2048,1024B). Runtime 120 seconds [ 1534.513940][ T6042] block nbd0: Possible stuck request ffff888025a20540: control (read@3072,1024B). Runtime 120 seconds [ 1534.844350][T22690] usb 6-1: USB disconnect, device number 51 [ 1534.859250][T22690] appletouch 6-1:1.0: input: appletouch disconnected [ 1535.179415][T27180] netlink: 'syz.5.5239': attribute type 15 has an invalid length. [ 1535.182164][T27180] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5239'. [ 1537.679930][T27238] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1537.851363][T27247] lo speed is unknown, defaulting to 1000 [ 1537.855324][T27247] lo speed is unknown, defaulting to 1000 [ 1538.772913][ T6025] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1539.139698][ T6025] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 1539.143483][ T6025] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1539.147652][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1539.189773][ T6025] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1539.193079][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1539.195611][ T6025] usb 7-1: Product: syz [ 1539.196944][ T6025] usb 7-1: Manufacturer: syz [ 1539.198612][ T6025] usb 7-1: SerialNumber: syz [ 1539.215177][ T6025] usb 7-1: config 0 descriptor?? [ 1539.218505][T27258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1539.230439][ T6025] usb 7-1: selecting invalid altsetting 0 [ 1539.248665][T27271] bridge0: port 4(erspan0) entered blocking state [ 1539.250831][T27271] bridge0: port 4(erspan0) entered disabled state [ 1539.253174][T27271] erspan0: entered allmulticast mode [ 1539.256336][T27271] erspan0: entered promiscuous mode [ 1539.258541][T27271] bridge0: port 4(erspan0) entered blocking state [ 1539.260607][T27271] bridge0: port 4(erspan0) entered forwarding state [ 1539.402473][T27278] lo speed is unknown, defaulting to 1000 [ 1539.408926][T27278] lo speed is unknown, defaulting to 1000 [ 1539.432945][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1539.436592][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1539.504609][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1539.514126][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1539.694830][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1539.715315][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1539.786148][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1539.789225][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1539.935927][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5267'. [ 1540.334412][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1540.338730][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1540.344722][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1540.348718][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1540.483212][T27315] Invalid source name [ 1540.852861][T27322] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5272'. [ 1541.293184][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1541.344332][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1541.347889][T27335] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1541.372563][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1541.427614][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1541.469985][T27331] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1541.504921][T27331] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1541.610917][T25558] usb 7-1: USB disconnect, device number 50 [ 1541.619418][T27331] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 1541.622176][T27331] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1541.640437][T27331] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 1541.653543][T27331] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1541.663512][T27331] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1541.667268][T27331] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1541.670774][T27331] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 1541.727907][T27339] lo speed is unknown, defaulting to 1000 [ 1541.731715][T27339] lo speed is unknown, defaulting to 1000 [ 1542.153129][T27347] ubi: mtd0 is already attached to ubi31 [ 1542.311736][T27285] ceph: No mds server is up or the cluster is laggy [ 1542.311777][T27279] ceph: No mds server is up or the cluster is laggy [ 1542.337058][T21948] libceph: connect (1)[c::]:6789 error -101 [ 1542.339093][T21948] libceph: mon0 (1)[c::]:6789 connect error [ 1542.341262][T21948] libceph: connect (1)[c::]:6789 error -101 [ 1542.345541][T21948] libceph: mon0 (1)[c::]:6789 connect error [ 1542.613022][T21948] libceph: connect (1)[c::]:6789 error -101 [ 1542.615057][T21948] libceph: mon0 (1)[c::]:6789 connect error [ 1543.650239][T27379] configfs: Unknown parameter 'qaՇ. Ðv_J%Uj'|д"3wё8と5k0y~@' [ 1543.690902][T27380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 1544.062839][T22690] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1544.212794][T22690] usb 9-1: Using ep0 maxpacket: 16 [ 1544.215731][T22690] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1544.218949][T22690] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1544.222195][T22690] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.226984][T22690] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1544.232569][T22690] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1544.235766][T22690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.238452][T22690] usb 9-1: Product: syz [ 1544.239856][T22690] usb 9-1: Manufacturer: syz [ 1544.241366][T22690] usb 9-1: SerialNumber: syz [ 1544.453626][T27378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.458092][T27378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.466872][T22690] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1545.377716][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.418587][T21948] usb 9-1: USB disconnect, device number 61 [ 1545.422971][T21948] usblp0: removed [ 1545.607342][T27414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1545.611149][T27414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1546.088181][T27424] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1547.287310][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5300'. [ 1548.991868][T27469] syzkaller0: entered promiscuous mode [ 1548.993898][T27469] syzkaller0: entered allmulticast mode [ 1549.905645][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1550.628365][T27483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.703277][T27483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.265949][T27501] netlink: 'syz.4.5318': attribute type 15 has an invalid length. [ 1551.269479][T27501] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5318'. [ 1551.597196][T27507] netlink: 'syz.1.5319': attribute type 15 has an invalid length. [ 1551.600470][T27507] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1551.623385][T27508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5320'. [ 1551.696870][T27508] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1551.702021][T27508] block device autoloading is deprecated and will be removed. [ 1552.330079][T27521] lo speed is unknown, defaulting to 1000 [ 1552.342248][T27521] lo speed is unknown, defaulting to 1000 [ 1553.232087][T27543] lo speed is unknown, defaulting to 1000 [ 1553.243266][T27543] lo speed is unknown, defaulting to 1000 [ 1553.387078][T27546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1553.389770][T27546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1553.399766][T27546] vhci_hcd vhci_hcd.0: Device attached [ 1553.878524][T27547] vhci_hcd: connection closed [ 1553.881152][T14702] vhci_hcd: stop threads [ 1553.887547][T14702] vhci_hcd: release socket [ 1553.891698][T14702] vhci_hcd: disconnect device [ 1553.932959][T25558] usb 42-1: enqueue for inactive port 0 [ 1554.059963][T27559] [ 1554.060862][T27559] ====================================================== [ 1554.063477][T27559] WARNING: possible circular locking dependency detected [ 1554.065707][T27559] syzkaller #0 Not tainted [ 1554.067665][T27559] ------------------------------------------------------ [ 1554.071771][T27559] syz.1.5333/27559 is trying to acquire lock: [ 1554.073796][T27559] ffff888065d56868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 1554.076645][T27559] [ 1554.076645][T27559] but task is already holding lock: [ 1554.079014][T27559] ffff888012a41940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1554.081837][T27559] [ 1554.081837][T27559] which lock already depends on the new lock. [ 1554.081837][T27559] [ 1554.085059][T27559] [ 1554.085059][T27559] the existing dependency chain (in reverse order) is: [ 1554.088116][T27559] [ 1554.088116][T27559] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1554.090629][T27559] __mutex_lock+0x193/0x1060 [ 1554.092427][T27559] autofs_notify_daemon+0x4a6/0xd60 [ 1554.094275][T27559] autofs_wait+0x10ca/0x1a70 [ 1554.095924][T27559] autofs_mount_wait+0x132/0x380 [ 1554.097653][T27559] autofs_d_automount+0x390/0x7f0 [ 1554.099432][T27559] __traverse_mounts+0x1b9/0x830 [ 1554.101229][T27559] step_into+0x5aa/0x21a0 [ 1554.102811][T27559] walk_component+0xfc/0x5b0 [ 1554.104816][T27559] path_lookupat+0x142/0x6d0 [ 1554.106879][T27559] filename_lookup+0x224/0x5f0 [ 1554.108760][T27559] kern_path+0x35/0x50 [ 1554.110385][T27559] lookup_bdev+0xd8/0x280 [ 1554.112047][T27559] resume_store+0x1d6/0x460 [ 1554.113755][T27559] kobj_attr_store+0x58/0x80 [ 1554.115389][T27559] sysfs_kf_write+0xf2/0x150 [ 1554.117110][T27559] kernfs_fop_write_iter+0x3af/0x570 [ 1554.119096][T27559] vfs_write+0x7d3/0x11d0 [ 1554.120660][T27559] ksys_write+0x12a/0x250 [ 1554.122244][T27559] __do_fast_syscall_32+0x7c/0x300 [ 1554.124032][T27559] do_fast_syscall_32+0x32/0x80 [ 1554.125539][T27559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.127553][T27559] [ 1554.127553][T27559] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1554.129892][T27559] __mutex_lock+0x193/0x1060 [ 1554.131556][T27559] kernfs_fop_write_iter+0x28f/0x570 [ 1554.133455][T27559] iter_file_splice_write+0xa24/0x12e0 [ 1554.135380][T27559] do_splice+0x1478/0x1fc0 [ 1554.136976][T27559] __do_splice+0x32a/0x360 [ 1554.138592][T27559] __ia32_sys_splice+0x189/0x250 [ 1554.140325][T27559] __do_fast_syscall_32+0x7c/0x300 [ 1554.142175][T27559] do_fast_syscall_32+0x32/0x80 [ 1554.143887][T27559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.146089][T27559] [ 1554.146089][T27559] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1554.148453][T27559] __lock_acquire+0x126f/0x1c90 [ 1554.150181][T27559] lock_acquire+0x179/0x350 [ 1554.151841][T27559] __mutex_lock+0x193/0x1060 [ 1554.153501][T27559] anon_pipe_write+0x15d/0x1bd0 [ 1554.155248][T27559] __kernel_write_iter+0x720/0xb10 [ 1554.157030][T27559] __kernel_write+0xf5/0x140 [ 1554.158709][T27559] autofs_notify_daemon+0x4db/0xd60 [ 1554.160549][T27559] autofs_wait+0x10ca/0x1a70 [ 1554.162239][T27559] autofs_mount_wait+0x132/0x380 [ 1554.163982][T27559] autofs_d_automount+0x390/0x7f0 [ 1554.165756][T27559] __traverse_mounts+0x1b9/0x830 [ 1554.167510][T27559] step_into+0x5aa/0x21a0 [ 1554.169091][T27559] walk_component+0xfc/0x5b0 [ 1554.170826][T27559] path_lookupat+0x142/0x6d0 [ 1554.172479][T27559] filename_lookup+0x224/0x5f0 [ 1554.174261][T27559] kern_path+0x35/0x50 [ 1554.175828][T27559] lookup_bdev+0xd8/0x280 [ 1554.177509][T27559] resume_store+0x1d6/0x460 [ 1554.179160][T27559] kobj_attr_store+0x58/0x80 [ 1554.180864][T27559] sysfs_kf_write+0xf2/0x150 [ 1554.182569][T27559] kernfs_fop_write_iter+0x3af/0x570 [ 1554.184445][T27559] vfs_write+0x7d3/0x11d0 [ 1554.186018][T27559] ksys_write+0x12a/0x250 [ 1554.187583][T27559] __do_fast_syscall_32+0x7c/0x300 [ 1554.189415][T27559] do_fast_syscall_32+0x32/0x80 [ 1554.191479][T27559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.193649][T27559] [ 1554.193649][T27559] other info that might help us debug this: [ 1554.193649][T27559] [ 1554.196879][T27559] Chain exists of: [ 1554.196879][T27559] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 1554.196879][T27559] [ 1554.200772][T27559] Possible unsafe locking scenario: [ 1554.200772][T27559] [ 1554.203280][T27559] CPU0 CPU1 [ 1554.204988][T27559] ---- ---- [ 1554.206731][T27559] lock(&sbi->pipe_mutex); [ 1554.208179][T27559] lock(&of->mutex); [ 1554.210265][T27559] lock(&sbi->pipe_mutex); [ 1554.212586][T27559] lock(&pipe->mutex); [ 1554.213925][T27559] [ 1554.213925][T27559] *** DEADLOCK *** [ 1554.213925][T27559] [ 1554.216465][T27559] 5 locks held by syz.1.5333/27559: [ 1554.218134][T27559] #0: ffff8880220e6ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1554.221027][T27559] #1: ffff88804462c420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1554.223940][T27559] #2: ffff8880669ebc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1554.227023][T27559] #3: ffff88801c3aee18 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1554.230212][T27559] #4: ffff888012a41940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1554.233447][T27559] [ 1554.233447][T27559] stack backtrace: [ 1554.235330][T27559] CPU: 1 UID: 0 PID: 27559 Comm: syz.1.5333 Not tainted syzkaller #0 PREEMPT(full) [ 1554.235343][T27559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1554.235349][T27559] Call Trace: [ 1554.235354][T27559] [ 1554.235359][T27559] dump_stack_lvl+0x116/0x1f0 [ 1554.235374][T27559] print_circular_bug+0x275/0x350 [ 1554.235390][T27559] check_noncircular+0x14c/0x170 [ 1554.235405][T27559] __lock_acquire+0x126f/0x1c90 [ 1554.235423][T27559] lock_acquire+0x179/0x350 [ 1554.235436][T27559] ? anon_pipe_write+0x15d/0x1bd0 [ 1554.235449][T27559] ? __pfx___might_resched+0x10/0x10 [ 1554.235461][T27559] ? is_bpf_text_address+0x8a/0x1a0 [ 1554.235477][T27559] ? anon_pipe_write+0x15d/0x1bd0 [ 1554.235489][T27559] __mutex_lock+0x193/0x1060 [ 1554.235502][T27559] ? anon_pipe_write+0x15d/0x1bd0 [ 1554.235513][T27559] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1554.235525][T27559] ? is_bpf_text_address+0x94/0x1a0 [ 1554.235539][T27559] ? kernel_text_address+0x8d/0x100 [ 1554.235562][T27559] ? __kernel_text_address+0xd/0x40 [ 1554.235576][T27559] ? __pfx___mutex_lock+0x10/0x10 [ 1554.235600][T27559] ? anon_pipe_write+0x15d/0x1bd0 [ 1554.235617][T27559] anon_pipe_write+0x15d/0x1bd0 [ 1554.235636][T27559] ? add_lock_to_list+0x9d/0x130 [ 1554.235652][T27559] ? __pfx_anon_pipe_write+0x10/0x10 [ 1554.235672][T27559] ? __pfx_anon_pipe_write+0x10/0x10 [ 1554.235683][T27559] __kernel_write_iter+0x720/0xb10 [ 1554.235696][T27559] ? __pfx___kernel_write_iter+0x10/0x10 [ 1554.235707][T27559] ? rcu_is_watching+0x12/0xc0 [ 1554.235718][T27559] ? autofs_notify_daemon+0x45a/0xd60 [ 1554.235731][T27559] __kernel_write+0xf5/0x140 [ 1554.235742][T27559] ? __pfx___kernel_write+0x10/0x10 [ 1554.235753][T27559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1554.235769][T27559] autofs_notify_daemon+0x4db/0xd60 [ 1554.235780][T27559] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1554.235789][T27559] ? sysfs_kf_write+0xf2/0x150 [ 1554.235799][T27559] ? kernfs_fop_write_iter+0x3af/0x570 [ 1554.235814][T27559] ? vfs_write+0x7d3/0x11d0 [ 1554.235829][T27559] ? lockdep_init_map_type+0x5c/0x280 [ 1554.235843][T27559] ? lockdep_init_map_type+0x5c/0x280 [ 1554.235859][T27559] autofs_wait+0x10ca/0x1a70 [ 1554.235869][T27559] ? __pfx_autofs_wait+0x10/0x10 [ 1554.235878][T27559] ? __pfx_path_check_mount+0x10/0x10 [ 1554.235891][T27559] ? find_held_lock+0x2b/0x80 [ 1554.235900][T27559] ? path_has_submounts+0xcf/0x120 [ 1554.235916][T27559] ? do_raw_spin_unlock+0x172/0x230 [ 1554.235931][T27559] ? find_held_lock+0x2b/0x80 [ 1554.235941][T27559] autofs_mount_wait+0x132/0x380 [ 1554.235958][T27559] autofs_d_automount+0x390/0x7f0 [ 1554.235974][T27559] __traverse_mounts+0x1b9/0x830 [ 1554.235989][T27559] step_into+0x5aa/0x21a0 [ 1554.235998][T27559] ? __pfx_step_into+0x10/0x10 [ 1554.236007][T27559] ? __pfx___up_read+0x10/0x10 [ 1554.236022][T27559] ? walk_component+0x35e/0x5b0 [ 1554.236030][T27559] ? lookup_fast+0x156/0x610 [ 1554.236040][T27559] walk_component+0xfc/0x5b0 [ 1554.236049][T27559] path_lookupat+0x142/0x6d0 [ 1554.236059][T27559] filename_lookup+0x224/0x5f0 [ 1554.236070][T27559] ? __pfx_filename_lookup+0x10/0x10 [ 1554.236084][T27559] ? getname_kernel+0x52/0x370 [ 1554.236097][T27559] ? __asan_memcpy+0x3c/0x60 [ 1554.236108][T27559] kern_path+0x35/0x50 [ 1554.236117][T27559] lookup_bdev+0xd8/0x280 [ 1554.236133][T27559] ? __pfx_lookup_bdev+0x10/0x10 [ 1554.236148][T27559] ? __asan_memcpy+0x3c/0x60 [ 1554.236159][T27559] resume_store+0x1d6/0x460 [ 1554.236168][T27559] ? __pfx_resume_store+0x10/0x10 [ 1554.236179][T27559] ? find_held_lock+0x2b/0x80 [ 1554.236189][T27559] ? __pfx_resume_store+0x10/0x10 [ 1554.236198][T27559] kobj_attr_store+0x58/0x80 [ 1554.236211][T27559] ? __pfx_kobj_attr_store+0x10/0x10 [ 1554.236222][T27559] sysfs_kf_write+0xf2/0x150 [ 1554.236234][T27559] kernfs_fop_write_iter+0x3af/0x570 [ 1554.236249][T27559] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1554.236260][T27559] vfs_write+0x7d3/0x11d0 [ 1554.236271][T27559] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1554.236288][T27559] ? __pfx_vfs_write+0x10/0x10 [ 1554.236297][T27559] ? find_held_lock+0x2b/0x80 [ 1554.236311][T27559] ksys_write+0x12a/0x250 [ 1554.236321][T27559] ? __pfx_ksys_write+0x10/0x10 [ 1554.236332][T27559] ? rcu_is_watching+0x12/0xc0 [ 1554.236343][T27559] __do_fast_syscall_32+0x7c/0x300 [ 1554.236356][T27559] do_fast_syscall_32+0x32/0x80 [ 1554.236369][T27559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1554.236382][T27559] RIP: 0023:0xf701d579 [ 1554.236391][T27559] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1554.236401][T27559] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1554.236411][T27559] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 1554.236417][T27559] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1554.236423][T27559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1554.236429][T27559] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1554.236435][T27559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1554.236444][T27559] [ 1554.672997][T25558] usb usb42-port1: attempt power cycle [ 1554.832962][T27559] PM: Image not found (code -5) [ 1555.243493][T25558] usb usb42-port1: unable to enumerate USB device [ 1557.544393][ T5348] udevd[5348]: worker [22908] /devices/virtual/block/nbd0 is taking a long time VM DIAGNOSIS: 17:15:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88804488a400 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88804488a402 RBP=dffffc0000000000 RSP=ffffc90003966fb0 R8 =0000000000000001 R9 =ffff88802b23b414 R10=ffff88804488a403 R11=0000000000000012 R12=0000000000006def R13=0000000000000000 R14=ffff88802b23b400 R15=ffffed1008911480 RIP=ffffffff8b6041dd RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc186e37300 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564221a38f40 CR3=000000004b268000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ebcd213cc8e66a0a c7636beedb31ad35 ebcd213cc8e66a0a c7636beedb31ad35 ebcd213cc8e66a0a c7636beedb31ad35 ebcd213cc8e66a0a c7636beedb31ad35 ZMM18=a0ecf5d6d484f1ae b77098852ca9b6df a0ecf5d6d484f1ae b77098852ca9b6df a0ecf5d6d484f1ae b77098852ca9b6df a0ecf5d6d484f1ae b77098852ca9b6df ZMM19=933d000000000000 0000000000000004 933d000000000000 0000000000000003 933d000000000000 0000000000000002 933d000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76b6000000020806 0998034080808080 8088080009900342 0800098803000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09800300020dc202 0800108008000100 00000806060106b2 0004001487840800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03800201c7080008 0043aa0031656c69 662f2e01ffffffff ffffffffef080380 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800080158e80008 0001fc0800518002 0100000408060801 4ed0000400000800 ZMM25=708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 708d2f63708d2f63 ZMM26=572a495f572a495f 572a495f572a495f 572a495f572a495f 572a495f572a495f 572a495f572a495f 572a495f572a495f 572a495f572a495f 572a495f572a495f ZMM27=8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 8eab57938eab5793 ZMM28=000001c0000001bf 000001be000001bd 000001bc000001bb 000001ba000001b9 000001b8000001b7 000001b6000001b5 000001b4000001b3 000001b2000001b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2684000026840000 2684000026840000 2684000026840000 2684000026840000 2684000026840000 2684000026840000 2684000026840000 2684000026840000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269a35 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc9000752e738 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adc5da0 R15=ffffffff852699d0 RIP=ffffffff85269a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809790d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71aa910 CR3=0000000053b97000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=1ffff920007c0efb RCX=ffffc9002e504000 RDX=0000000000080000 RSI=ffffffff8b9021a0 RDI=ffffc90003e07a48 RBP=ffffc90003e07958 RSP=ffffc90003e077d0 R8 =0000000000000005 R9 =ffffc90003e07890 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=ffffc90003e07a48 R14=ffffffff8b9021a0 R15=1ffff920007c0f12 RIP=ffffffff84a9ca1c RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=0000000062a11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000004 RBX=ffff88802b43a4c0 RCX=ffffffff8b604764 RDX=1ffff92000608e6a RSI=0000000000000004 RDI=ffffc90003047350 RBP=ffffc90003047350 RSP=ffffc900030472c0 R8 =0000000000000001 R9 =fffff52000608e6a R10=0000000000000003 R11=ffff88801d6e4d90 R12=0000000000007f2f R13=0000000000000000 R14=ffff88802b53b400 R15=0000000000100000 RIP=ffffffff8b604779 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002dc00ff8 CR3=0000000062a11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000