last executing test programs: 5.910660849s ago: executing program 0 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000000400000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfffff997, 0x2000) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, {0x6efc, 0x1, 0xef}}) io_uring_setup(0x51a1, &(0x7f00000001c0)={0x0, 0xb6d7, 0x400, 0x1, 0x3af, 0x0, r1}) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = dup(0xffffffffffffffff) sendmsg$netlink(r10, &(0x7f00000006c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000540)={0x84, 0x2b, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x30}, @nested={0x4, 0x12d}]}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x3}, @generic="d03de58de41e45a385647a5ba2ce94c942f7cd03352fd92c32ff5917fad655f7c1c6bc3506a1544f0d0fe193d15413d3c6fa3e3b490b74c499b4a8758fb440151ad24513c50dbcaeb2b1c29c3351e7454e", @nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x11a}]}]}, 0x84}, {&(0x7f0000000880)={0x178, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x140, 0x43, 0x0, 0x1, [@nested={0x4, 0x104}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @generic="393df295231862baa461122924837b8ac7a688f3a65222c5da44dba6da2d117e89acbdb8406a71afa43f48b049029017b87140eb657313eee73dd73d3c4e817c6ff3bf81", @typed={0x15, 0x41, 0x0, 0x0, @str='/dev/v4l-subdev#\x00'}, @nested={0x4, 0x125}, @generic="ae15fca23eb38bf3dde07f1467fb211896d7ea3edbae386c7bac586950bf46a57225fcc4ce37a3597d35d18a1b186a394f1ce5d05cc12ff6075277704eada3729dca52dc7baf94c03b87f780383c4ef77690bf1a98c12f807bf281dcf9e5d7d8249c8262518bbf34ea48b40970d3e974fed94308dbc20a2edbf26854174a544920ad40881d70bff607ee2720d3647f568fac7d63ba558d92c912c506fba0c4f93d38c9021ad71abf639b8f2c2afb872ce67748d9dab6cb39", @typed={0x8, 0xb5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0xeb, 0x0, 0x0, @fd}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x80}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0xc5, 0x0, 0x0, @uid}]}, 0x178}, {&(0x7f0000000a00)={0x13d4, 0x29, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="0f917b778c0ec34f7d54ebf59d563683d84484638fbc658af6aba2a47fccae0971f6c9b1a547853e038e8ab090617fb7efa642b4c8f39f461acf2967041db1cc54fc5191718d898e", @generic="195ca7a6fbe5257a3b077f20ef90eeabb8e6e12cbc9dc0fe62f1f1e3e25696c25c85860aa89082aa88148cf0e08169867e2bdb893d3caced3dd759b5d0fff1f398c0a28b0f697bbb686035a2d2c5e20be08970eac226e95a6960e2239c7b", @generic="4e511c05fd8aee82b7783c5b4566a9fa89bc7fb96ea1bd28606a33ec7d9481fefd1914ce79517b0fc01c8e21f719fe3e158130c89dcdaf653702ce61b5cec696c1ab43fe0288a57999d3f4c31948c290417022cc7a9070e4ffbe43e2422a1d6ce1130dfe2b8105bd6e3eeb0e61a2d95e84ea7d58eb8afe202e27eccfe17e734b7c4c84267c4d367ae4b73ff230d08f628c83c5ea9d133b4ff304413bec6d0cf639549ec60259fc81e7dcbb0bd0983bff27b5ca52e3f2cc72ead97b078b4b424ef6e12571a59a5abc6c9a7dde4c1944e37b55fb141df8b4303c2a59d21e2a786d10ada1cc67eb68953c5405c3015087e458ecca", @generic="5c06edb04bdceb26f5663f9faa8d1712a1ee23b75ea95ee3be1ae4bf433afe32604735f18fd36f90ce11356d40bc97233e4860c19e457f5730aa56af4e508cb5df0ce271a566ff26a79c937c0abc31800272989f4ed2982d70bf4876e886", @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}, @nested={0x1b4, 0xc5, 0x0, 0x1, [@typed={0xeb, 0x137, 0x0, 0x0, @binary="7b42858bddbe0c0df84e44779fc4ae16b5ae1d205119467e725cd76bc58df0f826fb77751f7d3b19299c3c893bc9448ad5bc26ccf851bea1c72e12788c288ed31a7c1e047fe4828f13ae40533fe1c6f26e1ef8d031b0e3b89ef94f04425cd6c1985456b64334bf2688ef905fe9dd7201ff560d67458198e0489aef61b5f1c6cc0831f59fb8be551d1d7e4abdbd93cbbbf0aa89583d07ebf7d7f9915e153686f65236d33a1bb75cc138cbe699831e3f7290088d7a150ad808fced99d7ec13d5c0a19ef931ed1aed88ff7deac59a5d6a2362bc29ba51cbf663767fb4772e40cabe678eb0c133426b"}, @typed={0xc1, 0x14e, 0x0, 0x0, @binary="b8e8c2713829b37b19bd0d6172e644f444fa009648fd0e7180a38e3f34804a6db0e86a3d63c4b3bb3cc2b205e1fd29ed1abddd423032ceb6ad557ffdf845a30a107bb3da193e9396a02ec2895c7f0040d73d71e925ca383543e2db9b7c391505372cd0f1ffb2da431754a79e0006fba709c0435102579643356524109e2eb8b68bea33805c3cd320cd3c114bb3d3a3f7deab8ffd66d609d065a0c9148d8c7c19be8b46917ee63d9688747fff090b3595c6fac4587897dea543b927d0a2"}]}, @typed={0x4, 0x129}]}, 0x13d4}], 0x3, 0x0, 0x0, 0x80}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 5.61947836s ago: executing program 0 (id=2169): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000800), 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) 4.829653769s ago: executing program 1 (id=2174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) chdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x91, 0x0, 0x2024, 0x80, 0x317, 0x55f, 0x8000, 0x1}) copy_file_range(r3, &(0x7f00000001c0)=0xffffffffffffff7f, r2, 0x0, 0x81, 0x10000000000000) setfsgid(0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x3, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) epoll_create(0x7) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 4.768289296s ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$cdrom(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r4, 0x5393, &(0x7f0000001280)={"d06da1b285717e8f3279ee73", &(0x7f0000000200)="854543890b44db0aff56a16f86105f4aba972130b95303eaf3942eb5ab57078c41c20a3b8551e5202efef78456144f82683ef3318b639ee16104930ec808330681adf62cf4a05a6ff70dac851b6c69bf80915fc71b0e269317e3cea058fb9bf288f50e540a1af17e5cd5c7eaeaca9fc7ee4ab9d0ae33f1928f58dce0060967dd15c73d35e019c9c6a19752b339ecd47da56178d6f29612adb1eaba48954877b00189840a0746d63453b1161b3fe67d967bfb9a3e7b4e2e743987882a0fbef359db98f37422fc5b61932d4fee3d255a11c09b93d72d768b7c8feb5c028ba012ec9a8ea0f2362f60173673557487da6268f856b632fecbdfa9a50bcdce63c6ae221ef356b641132f2a19054537c7a2028c08ac61cedc39a4a843a8257e87cb44e3371833a3b930722a5bbb939b38eba078a5260c780960e16ac155c1ab295e16c1ba7d3f748e97fac2918db367eef7770758f34b30869d25d4a52934449e739214ff1896f7f641a6b0ff39ffdf89877c07ca547527d6062a499f53207f0afb513ee6556aba8b65e0d1200f85756eb418234140de5b4f947d46f4e10f379f9e79607ef75aafa41188df8f32472b99694ac39df86d51dfea92cd614839731e3d8a5d4f9936261a99b37a464ee1ef2bc2d35f9e5165a678125165433946f743a7d02de7bc42d2ca949553ac29537e91e2d9f216d3eba283a349cc4de07a7516597fe3", 0x200, 0x0, 0x0, 0x2, 0x8000000, 0x4, 0x0}) ioctl$FITHAW(r2, 0xc0045878) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x84d, &(0x7f0000000400)=0x3, &(0x7f0000000440)=0x86) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.135672866s ago: executing program 2 (id=2178): socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0x0, 0x0, 0xee00) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000040)=""/31, 0x1f, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) 3.888951168s ago: executing program 1 (id=2179): socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0x0, 0x0, 0xee00) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000040)=""/31, 0x1f, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) 3.454537772s ago: executing program 3 (id=2182): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x800, 0x3, 0x0, 0xfffffffffffffff8, 0x5, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.289438173s ago: executing program 3 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000003a00)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, 0x0, 0x0) socket(0x40000000002, 0x3, 0x6) sendmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00000000"], 0x10}}], 0x1, 0x400c0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2.740038637s ago: executing program 0 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000003a00)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, 0x0, 0x0) socket(0x40000000002, 0x3, 0x6) sendmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00000000"], 0x10}}], 0x1, 0x400c0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2.596449647s ago: executing program 2 (id=2185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000000400000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfffff997, 0x2000) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, {0x6efc, 0x1, 0xef}}) io_uring_setup(0x51a1, &(0x7f00000001c0)={0x0, 0xb6d7, 0x400, 0x1, 0x3af, 0x0, r1}) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = dup(0xffffffffffffffff) sendmsg$netlink(r10, &(0x7f00000006c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000540)={0x84, 0x2b, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x30}, @nested={0x4, 0x12d}]}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x3}, @generic="d03de58de41e45a385647a5ba2ce94c942f7cd03352fd92c32ff5917fad655f7c1c6bc3506a1544f0d0fe193d15413d3c6fa3e3b490b74c499b4a8758fb440151ad24513c50dbcaeb2b1c29c3351e7454e", @nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x11a}]}]}, 0x84}, {&(0x7f0000000880)={0x178, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x140, 0x43, 0x0, 0x1, [@nested={0x4, 0x104}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @generic="393df295231862baa461122924837b8ac7a688f3a65222c5da44dba6da2d117e89acbdb8406a71afa43f48b049029017b87140eb657313eee73dd73d3c4e817c6ff3bf81", @typed={0x15, 0x41, 0x0, 0x0, @str='/dev/v4l-subdev#\x00'}, @nested={0x4, 0x125}, @generic="ae15fca23eb38bf3dde07f1467fb211896d7ea3edbae386c7bac586950bf46a57225fcc4ce37a3597d35d18a1b186a394f1ce5d05cc12ff6075277704eada3729dca52dc7baf94c03b87f780383c4ef77690bf1a98c12f807bf281dcf9e5d7d8249c8262518bbf34ea48b40970d3e974fed94308dbc20a2edbf26854174a544920ad40881d70bff607ee2720d3647f568fac7d63ba558d92c912c506fba0c4f93d38c9021ad71abf639b8f2c2afb872ce67748d9dab6cb39", @typed={0x8, 0xb5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0xeb, 0x0, 0x0, @fd}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x80}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0xc5, 0x0, 0x0, @uid}]}, 0x178}, {&(0x7f0000000a00)={0x1430, 0x29, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="0f917b778c0ec34f7d54ebf59d563683d84484638fbc658af6aba2a47fccae0971f6c9b1a547853e038e8ab090617fb7efa642b4c8f39f461acf2967041db1cc54fc5191718d898e", @generic="195ca7a6fbe5257a3b077f20ef90eeabb8e6e12cbc9dc0fe62f1f1e3e25696c25c85860aa89082aa88148cf0e08169867e2bdb893d3caced3dd759b5d0fff1f398c0a28b0f697bbb686035a2d2c5e20be08970eac226e95a6960e2239c7beb7c9bda50e82330de46cf6e7e6d0c3a3242de34c0a4dcbacfdfd21dbe9e2057c0bfb43ef26e8eebf55771a4b95995b10ab941d1e88901d32e94a701ca40b124acad60f3db3ecf77e9a38d74f03d63d10d6f1d69cd83ad81790cad7044f9", @generic="4e511c05fd8aee82b7783c5b4566a9fa89bc7fb96ea1bd28606a33ec7d9481fefd1914ce79517b0fc01c8e21f719fe3e158130c89dcdaf653702ce61b5cec696c1ab43fe0288a57999d3f4c31948c290417022cc7a9070e4ffbe43e2422a1d6ce1130dfe2b8105bd6e3eeb0e61a2d95e84ea7d58eb8afe202e27eccfe17e734b7c4c84267c4d367ae4b73ff230d08f628c83c5ea9d133b4ff304413bec6d0cf639549ec60259fc81e7dcbb0bd0983bff27b5ca52e3f2cc72ead97b078b4b424ef6e12571a59a5abc6c9a7dde4c1944e37b55fb141df8b4303c2a59d21e2a786d10ada1cc67eb68953c5405c3015087e458ecca", @generic="5c06edb04bdceb26f5663f9faa8d1712a1ee23b75ea95ee3be1ae4bf433afe32604735f18fd36f90ce11356d40bc97233e4860c19e457f5730aa56af4e508cb5df0ce271a566ff26a79c937c0abc31800272989f4ed2982d70bf4876e8", @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}, @nested={0x1b4, 0xc5, 0x0, 0x1, [@typed={0xeb, 0x137, 0x0, 0x0, @binary="7b42858bddbe0c0df84e44779fc4ae16b5ae1d205119467e725cd76bc58df0f826fb77751f7d3b19299c3c893bc9448ad5bc26ccf851bea1c72e12788c288ed31a7c1e047fe4828f13ae40533fe1c6f26e1ef8d031b0e3b89ef94f04425cd6c1985456b64334bf2688ef905fe9dd7201ff560d67458198e0489aef61b5f1c6cc0831f59fb8be551d1d7e4abdbd93cbbbf0aa89583d07ebf7d7f9915e153686f65236d33a1bb75cc138cbe699831e3f7290088d7a150ad808fced99d7ec13d5c0a19ef931ed1aed88ff7deac59a5d6a2362bc29ba51cbf663767fb4772e40cabe678eb0c133426b"}, @typed={0xc1, 0x14e, 0x0, 0x0, @binary="b8e8c2713829b37b19bd0d6172e644f444fa009648fd0e7180a38e3f34804a6db0e86a3d63c4b3bb3cc2b205e1fd29ed1abddd423032ceb6ad557ffdf845a30a107bb3da193e9396a02ec2895c7f0040d73d71e925ca383543e2db9b7c391505372cd0f1ffb2da431754a79e0006fba709c0435102579643356524109e2eb8b68bea33805c3cd320cd3c114bb3d3a3f7deab8ffd66d609d065a0c9148d8c7c19be8b46917ee63d9688747fff090b3595c6fac4587897dea543b927d0a2"}]}, @typed={0x4, 0x129}]}, 0x1430}], 0x3, 0x0, 0x0, 0x80}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 2.383189787s ago: executing program 3 (id=2186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x44580, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x39, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c00078008001240000000090500050002000040050004000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x1000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) r7 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = userfaultfd(0x80800) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r10, 0xc018aa06, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.315425919s ago: executing program 1 (id=2187): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x44580, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c00078008001240000000090500050002000040050004000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x1000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200f5ffffff0000000200000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) r7 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = userfaultfd(0x80800) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r10, 0xc018aa06, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.287564691s ago: executing program 2 (id=2195): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) 2.080697814s ago: executing program 3 (id=2188): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x219, &(0x7f0000000740)={0x0, 0xcadd, 0x400, 0x1, 0x361}, &(0x7f0000000500)=0x0, &(0x7f00000004c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x5, 0x9, 0x6b90, 0x1ff, 0x5e, 0x35}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000004480)={@random="e5ac47edc16f", @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00c222", 0x18, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x2, 0x4, 0x0, 0x4, {[@mss={0x2, 0x4, 0x5}]}}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x19, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0xdf, 0xc4, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x1, 0x8000, 0x1}, 0x24) r9 = fanotify_init(0x200, 0x101000) r10 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r11 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r10) r12 = add_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xffffffb5, r11) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r12}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'sha224-asm\x00'}}, 0x0, 0x0) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc25c4111, &(0x7f0000000240)={0x8, [[0x2, 0x9, 0x9, 0x1, 0x9, 0xcb9, 0x1, 0x4], [0x6, 0xe, 0x8d7c, 0x5, 0x1ff, 0x8, 0xdcbe], [0x2, 0x3, 0x5, 0x8, 0x400, 0x2, 0x0, 0x9]], '\x00', [{0x4, 0x7f, 0x1, 0x1}, {0xfff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x1ff, 0xffff497d, 0x1, 0x0, 0x1, 0x1}, {0x860b, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x200000, 0x0, 0x0, 0x1, 0x1}, {0x7a405f61, 0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0xc, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x77, 0x0, 0x1}, {0xfffffffd, 0x5, 0x1, 0x0, 0x1, 0x1}, {0xc4a, 0x6, 0x1, 0x1, 0x1}, {0xfffffff5, 0x9dec, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x56}) 2.079206445s ago: executing program 2 (id=2197): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) 1.80270249s ago: executing program 0 (id=2189): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) chdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x91, 0x0, 0x2024, 0x80, 0x317, 0x55f, 0x8000, 0x1}) copy_file_range(r3, &(0x7f00000001c0)=0xffffffffffffff7f, r2, 0x0, 0x81, 0x10000000000000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x3, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0x4, 0x0, 0x1}, 0x20) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) epoll_create(0x7) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 1.802468566s ago: executing program 2 (id=2190): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000007001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.780420784s ago: executing program 0 (id=2191): r0 = socket(0xa, 0x3, 0xff) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x20000014) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100001c00000000008cc8d2ecb28dea000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x18) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x1) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1}) write$eventfd(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)="61b005de521262b1f5", &(0x7f0000002480), 0xce4, r6}, 0x38) (fail_nth: 6) 1.758072522s ago: executing program 2 (id=2192): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000800), 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) 1.511110188s ago: executing program 1 (id=2193): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) 596.539446ms ago: executing program 3 (id=2194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000000400000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfffff997, 0x2000) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, {0x6efc, 0x1, 0xef}}) io_uring_setup(0x51a1, &(0x7f00000001c0)={0x0, 0xb6d7, 0x400, 0x1, 0x3af, 0x0, r1}) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = dup(0xffffffffffffffff) sendmsg$netlink(r10, &(0x7f00000006c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000540)={0x84, 0x2b, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x30}, @nested={0x4, 0x12d}]}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x3}, @generic="d03de58de41e45a385647a5ba2ce94c942f7cd03352fd92c32ff5917fad655f7c1c6bc3506a1544f0d0fe193d15413d3c6fa3e3b490b74c499b4a8758fb440151ad24513c50dbcaeb2b1c29c3351e7454e", @nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x11a}]}]}, 0x84}, {&(0x7f0000000880)={0x178, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x140, 0x43, 0x0, 0x1, [@nested={0x4, 0x104}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @generic="393df295231862baa461122924837b8ac7a688f3a65222c5da44dba6da2d117e89acbdb8406a71afa43f48b049029017b87140eb657313eee73dd73d3c4e817c6ff3bf81", @typed={0x15, 0x41, 0x0, 0x0, @str='/dev/v4l-subdev#\x00'}, @nested={0x4, 0x125}, @generic="ae15fca23eb38bf3dde07f1467fb211896d7ea3edbae386c7bac586950bf46a57225fcc4ce37a3597d35d18a1b186a394f1ce5d05cc12ff6075277704eada3729dca52dc7baf94c03b87f780383c4ef77690bf1a98c12f807bf281dcf9e5d7d8249c8262518bbf34ea48b40970d3e974fed94308dbc20a2edbf26854174a544920ad40881d70bff607ee2720d3647f568fac7d63ba558d92c912c506fba0c4f93d38c9021ad71abf639b8f2c2afb872ce67748d9dab6cb39", @typed={0x8, 0xb5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0xeb, 0x0, 0x0, @fd}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x80}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0xc5, 0x0, 0x0, @uid}]}, 0x178}, {&(0x7f0000000a00)={0x141c, 0x29, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="0f917b778c0ec34f7d54ebf59d563683d84484638fbc658af6aba2a47fccae0971f6c9b1a547853e038e8ab090617fb7efa642b4c8f39f461acf2967041db1cc54fc5191718d898e", @generic="195ca7a6fbe5257a3b077f20ef90eeabb8e6e12cbc9dc0fe62f1f1e3e25696c25c85860aa89082aa88148cf0e08169867e2bdb893d3caced3dd759b5d0fff1f398c0a28b0f697bbb686035a2d2c5e20be08970eac226e95a6960e2239c7beb7c9bda50e82330de46cf6e7e6d0c3a3242de34c0a4dcbacfdfd21dbe9e2057c0bfb43ef26e8eebf55771a4b95995b10ab941d1e88901d32e94a701ca40b124acad60f3db3ecf", @generic="4e511c05fd8aee82b7783c5b4566a9fa89bc7fb96ea1bd28606a33ec7d9481fefd1914ce79517b0fc01c8e21f719fe3e158130c89dcdaf653702ce61b5cec696c1ab43fe0288a57999d3f4c31948c290417022cc7a9070e4ffbe43e2422a1d6ce1130dfe2b8105bd6e3eeb0e61a2d95e84ea7d58eb8afe202e27eccfe17e734b7c4c84267c4d367ae4b73ff230d08f628c83c5ea9d133b4ff304413bec6d0cf639549ec60259fc81e7dcbb0bd0983bff27b5ca52e3f2cc72ead97b078b4b424ef6e12571a59a5abc6c9a7dde4c1944e37b55fb141df8b4303c2a59d21e2a786d10ada1cc67eb68953c5405c3015087e458ecca", @generic="5c06edb04bdceb26f5663f9faa8d1712a1ee23b75ea95ee3be1ae4bf433afe32604735f18fd36f90ce11356d40bc97233e4860c19e457f5730aa56af4e508cb5df0ce271a566ff26a79c937c0abc31800272989f4ed2982d70bf4876e886", @generic="21f126e1b713969dad85dfc7594f53d5f5478e7aa96d38d6c01060e0bb079d77cf6f1386704d6531630e144bfc10da3041d4f71a8b15fc4d9cb2806935f3d04a880c5645c980d6ca4c7be82a6ce68338b68afb84612a7c5cb7af2035cb82a01afae3d8cd9fee272efd5bad3cd4fa737577fbfe656ce70cb4c9cd22bcafafe24648fa44f433ae4b0a387c3bf78723877470989c60fca5e40c834e991e8b8f8dd4c2fe9d37295f7d3c0380333db3b18f3da3d55c2eb9e92558374574604e69d1e180c14076fccab6a47dce23b1b2c8ea28b7b9d9abe969209b88520655c9bd6b51d2ef618cdef7a303dd0b4a8b8c20039f829a5761e2c9d13417b9fd4a8d69b3f90e2009e4480f3b21bf11647ce5103595d1992d81271dbc912669059836fa0c7b355f7b7bf83eee36d4d9242f590d82ad37ebfe357d894ca447e53fdde9cac0406843a358d059dc920f48f57f6cbe9849e45c01195e1142670bbd9eb5a4fd56673774cedec78c48e93dcbbc1e614c885d8939cee72f42c785b2e7d806275ff893a39ee7ce47ea5a573015514838fce55d2bff3a3624033ead96bb4226959a5fd66774dad74c69b1da46d8ec5f20e58b0fbc9ebaa907c19a7d63b94a8520a67e01277c5163b9042b744f186be605e9c48e4e1a3e1ec2160e9920d3ca37cfaa7c1b64e212acc913e18eac35f4d3bdb425008e27f5258e2f7f885ccad6d7eaeb7c098c32e6344d09be3774b7638a61a00aa21cc67eb2422cce55057f559e7a18707dcac32801f0b8eccdc694a9c2305a3955dbf7fdc0fa506e988d842875bb0eed8f8fa9916434a431e837c3effb0f69cc32d8079276f1fdca9bda86307cc67fd9b93b0a3db92cf4aeefedeb84f705f7d24caec6ef774b006208f99eac7825fec357cd9cbf3f3595732b94c732d516029039689bb973e34437f70ab17f873c09476d69814503b6fbcd8b287fe5af0d18d3156162f93c02c8c66989660eb7e2c00086f2956c5a972ff098d811f51f7f941bf5fc26e2bd4ac6b9f54171d51a95e7300c88920e72cd0e2047165bca525a561eedb401420e51ae2065dc455480634b89e7ff2c5e1f840b6b83098f08898979281fdfe8619f1d7262f67de817b2f332828a635d3d7b7df8d04b242831076765402836a46f126a11537420cde9737f9bac0c443d84dcb89e534ca4d710b495bead702ae60b742d05d849a1350e7d65c263db53e2ecda852c1e8aad3f02168dfb14ab53688c65d7e986d559f383bbf2127308ac2a41e8b5393737e21ecd0586a8abfb42cbd13cc98139bb11d3a51c9fd642f87d0bf489ccc0d6463fff30eb45d4532bc96b9aa315f862d948c7348aac64800b8a3040c0c84ab1043545846f046b1e89bfc17d9c9c5fb5a27fb1171d7f7727bf93e3f429a8a51ee90a93ba0e177b445b0cc3c833750cbcb702598260ecb92d86618ed98e780388663ec9a57465ef5a4586bad566e01f88cf3c53142830077b509c314c1ba449e7b20ee9cf1c9bb8c0d0a5a27c00918b92f01eef5f01b2e480a50a495039254c9fffaa14a0a728a59c3a333962120b3727b0177aaffba012c83aa3101b587dec3d4c0005bf6f1d70647fa2d1952e065482240902de7d2ffe79df6f7c697c1dc3b64c6903b5b4152b674fffa9eb3c3824d1c4bb0a93891473373aa5d32f06e1fb69717f00cfb4866c091b001081e586975bb1cc707bf76b1f8e8e360724c798c4e74fc5cdbe39827eb02fd179a88bc02b53aba3e1beaa6ec7c2eb267e00b231108b496ab2872d1f0fb1905b4c56d86ddf9d289b8a1af6185ee9aedd51c67e2e4397e536e8088f78c0cf8fe85bcadb573f6c12cd4c81883565754ddbf3146d96d1b761e0327394bc4bfc77767eef96e15d3e2823e4036503ccc44963b414490eb1d3a94ce941ba57d1d134a64d57a1e745b17c45ff9403f2b18d9b679259e71d77ba303f1f043875c832a82305b038cbe0e2bb3517b7b3a29ffac8dddf4c1227d7a0a74c3b0a45e26f26af83de8ed48d7038d71953763550c137ab8c8386a3db8c70769ccbbf2948c2e46121b0485d0cb9440ba68d7e3477e9485cfdecea0712a52209f1cf8709f37fcae1f7c26dfbb01e9941434888b04cf6865c5913625dc4f86235c971e7445219c305b7f7bbca336acb9c1d0fce260462072f9b4fd523984426dd28cc765fcb6b8ab21978f5dc77901de0ac6b73b5f4f9cb59bf281c93260943a15752bc85f354ef340e588fb1cd4b733613f850f30ce40a905b6ba8973cff4649bcdef21ae04827d10c2be78a56ca68d502cf492e74855733c380dcd0a570acef46eb73faf24df713553cf83906a647f78454473440f019ced96f205482b293f1a40533536b6370a06a59dfde9eb9c8bf96ac3cbd2a631531f8d317b4202d70e3ebbafa9edaecfc6be5ef9691db023c87f04bc65f3b10fd88723c09c54a4a06451165fc9ca5dc69ea2e931bf15b94c92b0bcf4cb6076c5e395d613f8abf676b0344f8fd9ddcb3458606454f9a8196bc1e405dfafbb8895469d9e6fe9cc59ddb4a9decc454930e7d083f1d355cbbf4f6f34ea4c3e17f59fac0ba3d3f8ea05fe0e2ad6aa5f534a4289dd267b4ddbe79b5e68316fc2b4db64015b30f0ac1c15895dee99a256f02bd7466ddb1441577da28e2d3d6d40a79c9f60423d3aa16ceedaf9fbe0b5fc2ee43143f8f8d5c330f12827a3cc773a960689ad2076aa98f0bbd082829f8e8047f3d67904dc80601b1c1dbb7d5a86a371f30acd3557ea2ee90716215a8d767948efb97bc7e5075fffad2a9b6e280bded50678763fd3ed6b40995337ca6f4843b286eb9218d2275d4a62c063c5cc9189e3ba0a446ca7ba542c9fb3b166616152f262d1ce117ec35cdfbf83e8457bb2d4d5f135ed20a8ce82b27f20c58e9ff8742be9ceb761a21440b560aa881d71b213b3edb6b7bf42a244802ddfde7c2d5adb760493bf2832738f0ac3aa0242b351bf1ecbb0182b135c579d521af7f576a5a4e4511bbf70d6fda3e2c8df4b2edb8c02ad20aed10b5b3d5dd5a9db750ae49369f76037c0f7d18b021a7ebcd5b0a31c053bbba9cd468ab21823d53b4daccf94d67fe4f9da82a961b76da7ef41b2079ebf4e98acdc2fcf55f4301f80b9795c8c34b7f4701b9ff3d09f9b9f84765e5f205db19e62f5a3c5a211a6fa6c1f0a1567bb03a477adda0f678dc5a508cb7d1ee28c42c413c9291ad76f887391eaa41901c8401ac400f9fa95943fc91bad2c3a3d33f923b5f14b52fa056fb6cdb2a3e525a07395b7e44c1a01ec42d6479fda4b05ec253bc245db323e78e555c4fb9e7d4b7c618a7c5990f0f1c80dccb0909b60e8bb423bf829953c3b2f857173ee41c28d3f7a4314207c701cf470f923fefdc526512d8997a94de0b0c9fdb08d7929fb10c533950122d2deb0f90d2519105f4722ab5f971c4374dbca6508188cd7bc6b027f5f8e4586f3c1c89e0fcf23a37f0c8259a1d3f6451b83558dccf6f5cddb546e9edb25df0ab74400bd61d29dade6e6ad33c15754c248daa53d7e76898057044b5f41f2e26bee8988e312cf120feb71500db19d41982474985839a6279b6afbaf3a80193d18a5a98af28ba63f0f353acc73cb4ae7f968e4298e9b55ea763aa2a37623b2af7de652a2f9a28a522beabfc3faa6fc1bf7c839854275960e11ff129ec86310cddb28029f88ebb5b98ab820072f366bded8f14b452e57b18e2701fcc3eb2e23fa09a858990adf0969c95a04a76330b03044c94b02cf7391ceb29ee639424aec31094b6231762aa838aafaec1ed4b2fa4cb06575133116ecf3853dba1298bfe3463475f86ac538b21acf9b1e2a114b0f9660aa501955e01ab7291a14a176aabd83672c092738469c4224a957671bbf8a06ea65e4a1e6574d57a8928a4094a409185c93d3dccfac2b5c4a337319870afbc038e690a1acc84e0ccedf8047cff2bb67d441862c060028e7e99309bafdc33cf56cd7fbadcb120c5fb86bc16f74783b6687fd3973b51e2fcc48c56b00651486a84343986459e41ea95c31526ad79f1ea9f5f72fb74af78e618b20e1aed18c86e9f6f5ff72180c8d906da3c9f8474a0a7cc8c396ef84e7736eba513f30bd0ed415456ca25e08b19cbc0dae8fa52b08f8947c5ecb2745a5bb2198fd94d26e8e0d321c3b79db16cbff93d7183668805f2f43edb1673d110dd77d9ef6266564d4a81ceb70a117e046bca06c82285d94545f2012e0b7549a5f1419a4ee3075cef03266d157dcd324e8c4156c2fca2caaa0b0acd9b926edbf0b605da6efc535a03bb04c9d286e38d4d8390308b535f269155082c3fabf3ea17bfbe17bcb61d9f993e90073679713f90d05f6c33e01989613a247acb0e8a90f9dbfba469f08f530cbcd0daf529276f22ba7a0234d10ba4267f6e286dccc7b8729062e94cd91501c64e0b6ce6a9f77f0f12f29dc86d01c2efac9af8f9070f1fdce3b8cd598603db3823203d5aced157adac1e9a95cf4a5546fae51fba80f9c008313b8a6bd727a4c1724e05cb5e41daceba3cd20bb9c6d457f5be85a2ecb02c6cc858a5c071f65aefc2df84528f68594d29bfe7f9bba019388ceb1c53409bbf6e9a075fa61298b8e449493f95df386c82c2dc6a89b2782b0bb314ba23389530dcd216f10484e9edf94ed71124edc58049c0ef59b61025de59381e4c28583337196e2f8ae16df473d78bbc12d1414151ecc23150b906cd874b727502c8c9edf5a954f2a901aa51d58102a8cad9152cef05cf5585cd0efad9939e42991832f52232d77f1e3a66697c54e283fd9277e7943c525c4fe25155142d7ccb5085496a58829d908bcd631cddf6bf036877b3e3c140a1de3f89707d4a5fee8b9f11f20a233aaa70aaf045d69b9eb17f195841c59801f3c6ff9f9284a196ab11ad78c7d3f153b4d2efe125a7df9cc5942de5990e30f446ce32e15ff56bfa978f6cbdc188b6d0841465faecc771077ae141e6792127d83a5be147a06448476e910f2c485392c735db6c44d7d9600cdfd4d772c1ea01efd50f87756a0cefe0ee8cb22898bfd65ec099dfbb1c667229da06d55639d637a2e374f8ac67463ab9ca8ceb1d468ae7422d5d8034c063bc8b71df8a8095fb3b82ebaab5a5a474fbe18bcf445d48f11da60aaac4812068fd959867151ffcc042a5c2080a719a8cfad15c0fc2a98561fe53fb6a1805fff0ef53bd8301caf689fa28e109c46be7ec7e171a3ace760144dd9c3c46482f19c38a0730c980c938612cddb5aca57bfbeafc1b0dd9ece620f9382963dc12d9b5944aefa217f8577046e20345529b5ce2e8978b37bd8d35f5b9ea13ad1328b8e53b2e8e1ad4ea3a8f193663ef1ea93545420e6bec999bc2e039295814c4c6b96f4526bb96745c6d6d23224c0408e7250bab3155cb6577c422ed57ca487bd0f96bc4fcb2bf72df4290f20cff1ea8939b5c369fff15f75a16f2f845d2a9431a0a441f2b84030922ca55b30ca91f98e732acec6e6f9f2c03c315c5d80d98dcae398f926e4ab89cf43122c83add966460d4a7ffc135b3e4906d5333d9b1d44cea77660e64858d6ee103ebd74ec1844b241fd2873c61c8bf4ccab7ec334e1b8b0b6ebdbd6d80c0e514e4a3f149acf2c1135629f357294ac9e1b2be5a93045cd3e70be5773edf9e0b6c64cdb4358a86b3be642ecac1c7bbf29d42c1c8c87f93d11ffe79bfdf568f9f354119b6fa8cf2ec9d9836309b1d19bae5dd45b253e0d4990eee0be0e0bfeb06f2dc88783b1c1e1464593d10dbd2cc43ec23415e76d61ff4e90dccea48f6eaf84b10", @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}, @nested={0x1b4, 0xc5, 0x0, 0x1, [@typed={0xeb, 0x137, 0x0, 0x0, @binary="7b42858bddbe0c0df84e44779fc4ae16b5ae1d205119467e725cd76bc58df0f826fb77751f7d3b19299c3c893bc9448ad5bc26ccf851bea1c72e12788c288ed31a7c1e047fe4828f13ae40533fe1c6f26e1ef8d031b0e3b89ef94f04425cd6c1985456b64334bf2688ef905fe9dd7201ff560d67458198e0489aef61b5f1c6cc0831f59fb8be551d1d7e4abdbd93cbbbf0aa89583d07ebf7d7f9915e153686f65236d33a1bb75cc138cbe699831e3f7290088d7a150ad808fced99d7ec13d5c0a19ef931ed1aed88ff7deac59a5d6a2362bc29ba51cbf663767fb4772e40cabe678eb0c133426b"}, @typed={0xc1, 0x14e, 0x0, 0x0, @binary="b8e8c2713829b37b19bd0d6172e644f444fa009648fd0e7180a38e3f34804a6db0e86a3d63c4b3bb3cc2b205e1fd29ed1abddd423032ceb6ad557ffdf845a30a107bb3da193e9396a02ec2895c7f0040d73d71e925ca383543e2db9b7c391505372cd0f1ffb2da431754a79e0006fba709c0435102579643356524109e2eb8b68bea33805c3cd320cd3c114bb3d3a3f7deab8ffd66d609d065a0c9148d8c7c19be8b46917ee63d9688747fff090b3595c6fac4587897dea543b927d0a2"}]}, @typed={0x4, 0x129}]}, 0x141c}], 0x3, 0x0, 0x0, 0x80}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 163.390642ms ago: executing program 0 (id=2196): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x851}, 0x4004080) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000040)={0x1, 0x102000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x12b36304) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getchain={0x4c, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc24da0fbfe745c2d, 0xf}, {0x2, 0xd}, {0xc, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x3b1}, {0x8}, {0x8, 0xb, 0x80000004}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000011}, 0x20040040) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) 20.800047ms ago: executing program 3 (id=2198): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000bec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000aa40)=[{0xc, 0x1}], 0xc}}], 0x2, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x15f}, {&(0x7f0000001280)="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", 0xdeb}], 0x2}, 0x800) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000001400)={'syz', 0x0}, &(0x7f0000000000)='/\x00', 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4004010) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x6, 0x6, @broadcast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}}, 0x0, 0x0, 0x2e, 0x0, "becdda7e0e9fc4bac68af05cc2b52682e3eb4a6785cf00ab7c2ad8d8ef78fedacfdf18c61bf96f76ab27d9e441d9f5c8f38f39960de52cb4334e64a3d35a6c8bc9eee17bfab806d4bf10ec039fc0a8b8"}, 0xd8) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 0s ago: executing program 1 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000005000000000000000400000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfffff997, 0x2000) r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, {0x6efc, 0x1, 0xef}}) io_uring_setup(0x51a1, &(0x7f00000001c0)={0x0, 0xb6d7, 0x400, 0x1, 0x3af, 0x0, r1}) r3 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x400c5) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = dup(0xffffffffffffffff) sendmsg$netlink(r10, &(0x7f00000006c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000540)={0x84, 0x2b, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x53, 0x0, 0x1, [@nested={0x4, 0x30}, @nested={0x4, 0x12d}]}, @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x3}, @generic="d03de58de41e45a385647a5ba2ce94c942f7cd03352fd92c32ff5917fad655f7c1c6bc3506a1544f0d0fe193d15413d3c6fa3e3b490b74c499b4a8758fb440151ad24513c50dbcaeb2b1c29c3351e7454e", @nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x11a}]}]}, 0x84}, {&(0x7f0000000880)={0x178, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x140, 0x43, 0x0, 0x1, [@nested={0x4, 0x104}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @generic="393df295231862baa461122924837b8ac7a688f3a65222c5da44dba6da2d117e89acbdb8406a71afa43f48b049029017b87140eb657313eee73dd73d3c4e817c6ff3bf81", @typed={0x15, 0x41, 0x0, 0x0, @str='/dev/v4l-subdev#\x00'}, @nested={0x4, 0x125}, @generic="ae15fca23eb38bf3dde07f1467fb211896d7ea3edbae386c7bac586950bf46a57225fcc4ce37a3597d35d18a1b186a394f1ce5d05cc12ff6075277704eada3729dca52dc7baf94c03b87f780383c4ef77690bf1a98c12f807bf281dcf9e5d7d8249c8262518bbf34ea48b40970d3e974fed94308dbc20a2edbf26854174a544920ad40881d70bff607ee2720d3647f568fac7d63ba558d92c912c506fba0c4f93d38c9021ad71abf639b8f2c2afb872ce67748d9dab6cb39", @typed={0x8, 0xb5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @typed={0x8, 0xeb, 0x0, 0x0, @fd}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x80}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0xc5, 0x0, 0x0, @uid}]}, 0x178}, {&(0x7f0000000a00)={0x141c, 0x29, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="0f917b778c0ec34f7d54ebf59d563683d84484638fbc658af6aba2a47fccae0971f6c9b1a547853e038e8ab090617fb7efa642b4c8f39f461acf2967041db1cc54fc5191718d898e", @generic="195ca7a6fbe5257a3b077f20ef90eeabb8e6e12cbc9dc0fe62f1f1e3e25696c25c85860aa89082aa88148cf0e08169867e2bdb893d3caced3dd759b5d0fff1f398c0a28b0f697bbb686035a2d2c5e20be08970eac226e95a6960e2239c7beb7c9bda50e82330de46cf6e7e6d0c3a3242de34c0a4dcbacfdfd21dbe9e2057c0bfb43ef26e8eebf55771a4b95995b10ab941d1e88901d32e94a701ca40b124acad60f3db3ecf", @generic="4e511c05fd8aee82b7783c5b4566a9fa89bc7fb96ea1bd28606a33ec7d9481fefd1914ce79517b0fc01c8e21f719fe3e158130c89dcdaf653702ce61b5cec696c1ab43fe0288a57999d3f4c31948c290417022cc7a9070e4ffbe43e2422a1d6ce1130dfe2b8105bd6e3eeb0e61a2d95e84ea7d58eb8afe202e27eccfe17e734b7c4c84267c4d367ae4b73ff230d08f628c83c5ea9d133b4ff304413bec6d0cf639549ec60259fc81e7dcbb0bd0983bff27b5ca52e3f2cc72ead97b078b4b424ef6e12571a59a5abc6c9a7dde4c1944e37b55fb141df8b4303c2a59d21e2a786d10ada1cc67eb68953c5405c3015087e458ecca", @generic="5c06edb04bdceb26f5663f9faa8d1712a1ee23b75ea95ee3be1ae4bf433afe32604735f18fd36f90ce11356d40bc97233e4860c19e457f5730aa56af4e508cb5df0ce271a566ff26a79c937c0abc31800272989f4ed2982d70bf4876e886", @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}, @nested={0x1b4, 0xc5, 0x0, 0x1, [@typed={0xeb, 0x137, 0x0, 0x0, @binary="7b42858bddbe0c0df84e44779fc4ae16b5ae1d205119467e725cd76bc58df0f826fb77751f7d3b19299c3c893bc9448ad5bc26ccf851bea1c72e12788c288ed31a7c1e047fe4828f13ae40533fe1c6f26e1ef8d031b0e3b89ef94f04425cd6c1985456b64334bf2688ef905fe9dd7201ff560d67458198e0489aef61b5f1c6cc0831f59fb8be551d1d7e4abdbd93cbbbf0aa89583d07ebf7d7f9915e153686f65236d33a1bb75cc138cbe699831e3f7290088d7a150ad808fced99d7ec13d5c0a19ef931ed1aed88ff7deac59a5d6a2362bc29ba51cbf663767fb4772e40cabe678eb0c133426b"}, @typed={0xc1, 0x14e, 0x0, 0x0, @binary="b8e8c2713829b37b19bd0d6172e644f444fa009648fd0e7180a38e3f34804a6db0e86a3d63c4b3bb3cc2b205e1fd29ed1abddd423032ceb6ad557ffdf845a30a107bb3da193e9396a02ec2895c7f0040d73d71e925ca383543e2db9b7c391505372cd0f1ffb2da431754a79e0006fba709c0435102579643356524109e2eb8b68bea33805c3cd320cd3c114bb3d3a3f7deab8ffd66d609d065a0c9148d8c7c19be8b46917ee63d9688747fff090b3595c6fac4587897dea543b927d0a2"}]}, @typed={0x4, 0x129}]}, 0x141c}], 0x3, 0x0, 0x0, 0x80}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x3000) syz_open_dev$vbi(0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) kernel console output (not intermixed with test programs): nged: olddecodes=none,decodes=none:owns=io+mem [ 353.725600][T11907] overlayfs: missing 'lowerdir' [ 354.735024][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fcb8c00: rx timeout, send abort [ 354.737989][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fcb8c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 354.779585][T11921] input: syz1 as /devices/virtual/input/input42 [ 354.992266][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 355.733018][ T6058] usb 6-1: USB disconnect, device number 33 [ 355.792253][ T1466] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 355.890854][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 355.896511][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 355.938275][ T1466] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 355.942826][ T1466] usb 8-1: config 0 interface 0 has no altsetting 0 [ 355.948904][ T1466] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.952744][ T1466] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.958346][ T1466] usb 8-1: Product: syz [ 355.960141][ T1466] usb 8-1: Manufacturer: syz [ 355.962066][ T1466] usb 8-1: SerialNumber: syz [ 355.966442][ T1466] usb 8-1: config 0 descriptor?? [ 355.971030][ T1466] usb 8-1: selecting invalid altsetting 0 [ 356.219322][ T6040] usb 8-1: USB disconnect, device number 25 [ 356.745278][T11966] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 356.952718][T11978] mkiss: ax0: crc mode is auto. [ 357.539002][T11998] loop6: detected capacity change from 0 to 2560 [ 357.541679][T11998] buffer_io_error: 5 callbacks suppressed [ 357.541689][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.546961][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.550555][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.554184][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.557355][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.560720][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.567535][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.570897][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.574225][T11998] ldm_validate_partition_table(): Disk read failed. [ 357.576859][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.580336][T11998] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.583919][T11998] Dev loop6: unable to read RDB block 0 [ 357.587448][T11998] loop6: unable to read partition table [ 357.590169][T11998] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 357.840755][ T24] vhci_hcd: vhci_device speed not set [ 357.859254][T12005] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 357.867100][T12005] picdev_read: 18 callbacks suppressed [ 357.867110][T12005] kvm: pic: non byte read [ 357.873002][T12005] pic_ioport_write: 14 callbacks suppressed [ 357.873016][T12005] kvm: pic: level sensitive irq not supported [ 357.875267][T12005] kvm: pic: non byte read [ 357.880212][T12005] kvm: pic: level sensitive irq not supported [ 357.880527][T12005] kvm: pic: non byte read [ 357.885001][T12005] kvm: pic: level sensitive irq not supported [ 357.885702][T12005] kvm: pic: non byte read [ 357.890286][T12005] kvm: pic: level sensitive irq not supported [ 357.890571][T12005] kvm: pic: non byte read [ 357.895092][T12005] kvm: pic: level sensitive irq not supported [ 357.895569][T12005] kvm: pic: non byte read [ 357.954550][ T1466] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 358.116258][ T1466] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.239882][ T1466] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 358.392590][ T1466] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.394564][ T1466] usb usb5-port1: attempt power cycle [ 358.725740][ T1466] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 358.745733][ T1466] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.878573][ T1466] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 358.897978][ T1466] usb 5-1: Invalid ep0 maxpacket: 32 [ 358.899925][ T1466] usb usb5-port1: unable to enumerate USB device [ 358.989998][T12014] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 358.992544][T12014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 358.995870][T12014] vhci_hcd vhci_hcd.0: Device attached [ 359.013585][T12014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.278276][ T4224] usb 40-1: SetAddress Request (6) to port 0 [ 359.280281][ T4224] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 359.661265][T12015] vhci_hcd: connection reset by peer [ 359.663662][T11131] vhci_hcd: stop threads [ 359.665159][T11131] vhci_hcd: release socket [ 359.666709][T11131] vhci_hcd: disconnect device [ 360.536009][ T1466] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 360.679164][ T1466] usb 8-1: Using ep0 maxpacket: 8 [ 360.683368][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 360.686505][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.692111][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.696710][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.701349][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.706983][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 360.710158][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.714759][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.719713][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.724166][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.730210][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 360.733377][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.737858][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.741503][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.744994][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.751973][ T1466] usb 8-1: string descriptor 0 read error: -22 [ 360.754189][ T1466] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 360.757662][ T1466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.768099][ T1466] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 361.040930][ T6039] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 361.187290][ T6039] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 361.191729][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.196320][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.200154][ T6039] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 361.208348][ T6039] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 361.213548][ T6039] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 361.216970][ T6039] usb 5-1: Manufacturer: syz [ 361.220874][ T6039] usb 5-1: config 0 descriptor?? [ 361.240060][T12064] lo speed is unknown, defaulting to 1000 [ 361.613961][ T6039] hid_parser_main: 43 callbacks suppressed [ 361.613974][ T6039] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 361.628182][ T6039] appleir 0003:05AC:8243.0004: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 361.804852][T12060] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1695'. [ 361.812397][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 361.815339][T12079] openvswitch: netlink: Flow actions attr not present in new flow. [ 361.826292][ T6058] usb 5-1: USB disconnect, device number 27 [ 362.411736][T12086] fuse: Unknown parameter 'root„ode' [ 362.419542][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1704'. [ 362.422966][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1704'. [ 362.435057][T12086] trusted_key: encrypted_key: insufficient parameters specified [ 362.554202][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1706'. [ 362.557327][T12090] 8021q: VLANs not supported on ip_vti0 [ 362.907523][ T6058] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 363.064798][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.069919][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.073796][ T6058] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 363.074403][T12098] No control pipe specified [ 363.077452][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.082695][ T6058] usb 5-1: config 0 descriptor?? [ 363.191612][ T60] usb 8-1: USB disconnect, device number 26 [ 363.277734][T12105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 363.281250][ T6058] usbhid 5-1:0.0: can't add hid device: -71 [ 363.283345][ T6058] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.286555][ T6058] usb 5-1: USB disconnect, device number 28 [ 363.316013][T12100] overlayfs: failed to clone upperpath [ 363.406965][T12109] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 363.803049][ T5974] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 363.804423][ T5987] Bluetooth: hci4: command 0x1003 tx timeout [ 363.917507][T12131] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 364.102435][T12139] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 364.108536][ T4224] usb 40-1: device descriptor read/8, error -110 [ 364.447024][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.489929][ T4224] usb usb40-port1: attempt power cycle [ 365.046956][ T4224] usb usb40-port1: unable to enumerate USB device [ 365.062749][T12169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 365.064825][T12169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.067347][T12169] vhci_hcd vhci_hcd.0: Device attached [ 365.085731][T12170] vhci_hcd: connection closed [ 365.097264][T11142] vhci_hcd: stop threads [ 365.108478][T11142] vhci_hcd: release socket [ 365.118777][T11142] vhci_hcd: disconnect device [ 365.692897][ T34] IPVS: starting estimator thread 0... [ 365.705844][T12181] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.709317][T12181] tipc: Enabled bearer , priority 10 [ 365.793944][T12182] IPVS: using max 42 ests per chain, 100800 per kthread [ 365.833626][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.089183][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.478567][T12210] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.594030][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.727631][T12216] block nbd0: shutting down sockets [ 366.933609][T12220] overlayfs: missing 'lowerdir' [ 367.179021][T12224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 367.181502][T12224] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.184242][T12224] vhci_hcd vhci_hcd.0: Device attached [ 367.242452][T12225] vhci_hcd: connection closed [ 367.242561][T11131] vhci_hcd: stop threads [ 367.245548][T11131] vhci_hcd: release socket [ 367.247389][T11131] vhci_hcd: disconnect device [ 367.604001][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.711085][T12236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1748'. [ 368.506389][T12243] loop9: detected capacity change from 0 to 7 [ 368.597404][T12253] fuse: Unknown parameter '0xffffffffffffffff00000000000000000003' [ 368.603768][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.659748][T12243] Dev loop9: unable to read RDB block 7 [ 368.662393][T12243] loop9: unable to read partition table [ 368.664325][T12243] loop9: partition table beyond EOD, truncated [ 368.666405][T12243] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 369.258090][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'. [ 369.594975][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.811839][T12275] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 369.832595][T12275] kvm: pic: non byte read [ 369.838353][T12275] kvm: pic: level sensitive irq not supported [ 369.838839][T12275] kvm: pic: non byte read [ 369.850668][T12275] kvm: pic: level sensitive irq not supported [ 369.851269][T12275] kvm: pic: non byte read [ 369.859849][T12275] kvm: pic: level sensitive irq not supported [ 369.860173][T12275] kvm: pic: non byte read [ 369.867245][T12275] kvm: pic: level sensitive irq not supported [ 369.867559][T12275] kvm: pic: non byte read [ 369.882680][T12275] kvm: pic: level sensitive irq not supported [ 369.884214][T12275] kvm: pic: non byte read [ 370.114237][T12284] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 370.575602][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.784395][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 370.832296][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 371.136014][T12305] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.152952][T12305] kvm: pic: non byte read [ 371.167450][T12305] kvm: pic: level sensitive irq not supported [ 371.167963][T12305] kvm: pic: non byte read [ 371.177327][T12305] kvm: pic: level sensitive irq not supported [ 371.177596][T12305] kvm: pic: non byte read [ 371.183861][T12305] kvm: pic: level sensitive irq not supported [ 371.192729][T12305] kvm: pic: non byte read [ 371.199763][T12305] kvm: pic: level sensitive irq not supported [ 371.202367][T12305] kvm: pic: level sensitive irq not supported [ 371.281424][T12316] FAULT_INJECTION: forcing a failure. [ 371.281424][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 371.296096][T12316] CPU: 3 UID: 0 PID: 12316 Comm: syz.1.1774 Not tainted syzkaller #0 PREEMPT(full) [ 371.296114][T12316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 371.296121][T12316] Call Trace: [ 371.296125][T12316] [ 371.296129][T12316] dump_stack_lvl+0x16c/0x1f0 [ 371.296165][T12316] should_fail_ex+0x512/0x640 [ 371.296191][T12316] should_failslab+0xc2/0x120 [ 371.296207][T12316] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 371.296221][T12316] ? skb_clone+0x190/0x3f0 [ 371.296241][T12316] skb_clone+0x190/0x3f0 [ 371.296259][T12316] netlink_deliver_tap+0xabd/0xd30 [ 371.296280][T12316] netlink_unicast+0x64c/0x870 [ 371.296300][T12316] ? __pfx_netlink_unicast+0x10/0x10 [ 371.296318][T12316] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 371.296340][T12316] netlink_sendmsg+0x8d1/0xdd0 [ 371.296361][T12316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.296380][T12316] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 371.296396][T12316] ____sys_sendmsg+0xa95/0xc70 [ 371.296411][T12316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.296423][T12316] ? get_compat_msghdr+0x11a/0x170 [ 371.296446][T12316] ___sys_sendmsg+0x134/0x1d0 [ 371.296464][T12316] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.296489][T12316] ? find_held_lock+0x2b/0x80 [ 371.296513][T12316] __sys_sendmsg+0x16d/0x220 [ 371.296530][T12316] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.296554][T12316] ? rcu_is_watching+0x12/0xc0 [ 371.296568][T12316] __do_fast_syscall_32+0x7c/0x3a0 [ 371.296587][T12316] do_fast_syscall_32+0x32/0x80 [ 371.296611][T12316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.296624][T12316] RIP: 0023:0xf70ce579 [ 371.296634][T12316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 371.296645][T12316] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 371.296661][T12316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 371.296668][T12316] RDX: 0000000034008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.296674][T12316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.296680][T12316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 371.296686][T12316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.296700][T12316] [ 371.296723][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1774'. [ 371.502144][T12326] 9pnet_fd: Insufficient options for proto=fd [ 371.511121][ T40] audit: type=1326 audit(1757397550.333:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.2.1777" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x0 [ 371.566659][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.147423][T12339] syzkaller1: entered promiscuous mode [ 372.149296][T12339] syzkaller1: entered allmulticast mode [ 372.160670][T12339] program syz.3.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.223969][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 372.226587][ T1109] ata1.00: irq_stat 0x40000000 [ 372.228590][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 372.230514][ T1109] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 7 [ 372.230514][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 372.235592][ T1109] ata1.00: status: { DRDY ERR } [ 372.237288][ T1109] ata1.00: error: { ABRT } [ 372.238866][ T1109] ata1.00: device reported invalid CHS sector 0 [ 372.407826][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.557263][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.608660][T12364] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 372.656613][T12358] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1783'. [ 372.703922][T12364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.739256][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 372.741883][ T1109] ata1: failed to read log page 10h (errno=-5) [ 372.744462][ T1109] ata1.00: exception Emask 0x1 SAct 0x20000 SErr 0x0 action 0x0 [ 372.747921][ T1109] ata1.00: irq_stat 0x40000000 [ 372.749993][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 372.752593][ T1109] ata1.00: cmd 61/08:88:2e:c3:08/00:00:00:00:00/40 tag 17 ncq dma 4096 out [ 372.752593][ T1109] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 372.760126][ T1109] ata1.00: status: { DRDY } [ 372.762052][ T1109] ata1.00: error: { ABRT } [ 372.764732][ T1109] ata1.00: configured for UDMA/100 [ 372.766866][ T1109] ata1: EH complete [ 372.781803][T12371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1791'. [ 373.002595][T12365] syzkaller1: entered promiscuous mode [ 373.005915][T12365] syzkaller1: entered allmulticast mode [ 373.011932][T12365] program syz.0.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.062406][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 373.065423][ T1109] ata1.00: irq_stat 0x40000000 [ 373.067527][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 373.070221][ T1109] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 15 [ 373.070221][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 373.077003][ T1109] ata1.00: status: { DRDY ERR } [ 373.079166][ T1109] ata1.00: error: { ABRT } [ 373.081284][ T1109] ata1.00: device reported invalid CHS sector 0 [ 373.195833][T12386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1797'. [ 373.271714][T12388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1798'. [ 373.311713][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.315436][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.318547][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.321248][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.323581][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.325891][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.328805][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.331135][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.333497][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.335800][ T24] hid-generic 00A0:0006:0003.0005: unknown main item tag 0x0 [ 373.340512][ T24] hid-generic 00A0:0006:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 373.528321][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1801'. [ 373.547965][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.639741][T12396] cgroup: fork rejected by pids controller in /syz3 [ 373.674024][T12456] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 374.165543][T12787] kAFS: No cell specified [ 374.218437][T12795] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 374.539768][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.577452][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 374.580278][ T1109] ata1: failed to read log page 10h (errno=-5) [ 374.582902][ T1109] ata1.00: exception Emask 0x1 SAct 0x100 SErr 0x0 action 0x0 [ 374.586264][ T1109] ata1.00: irq_stat 0x40000000 [ 374.588309][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 374.590854][ T1109] ata1.00: cmd 61/30:40:d6:10:10/00:00:00:00:00/40 tag 8 ncq dma 24576 out [ 374.590854][ T1109] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 374.605416][ T1109] ata1.00: status: { DRDY } [ 374.619747][ T1109] ata1.00: configured for UDMA/100 [ 374.621878][ T1109] ata1: EH complete [ 374.680912][T12810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 374.689396][T12810] picdev_read: 2 callbacks suppressed [ 374.689406][T12810] kvm: pic: non byte read [ 374.694209][T12810] kvm: pic: level sensitive irq not supported [ 374.694553][T12810] kvm: pic: non byte read [ 374.699836][T12810] kvm: pic: level sensitive irq not supported [ 374.700282][T12810] kvm: pic: non byte read [ 374.705411][T12810] kvm: pic: level sensitive irq not supported [ 374.705750][T12810] kvm: pic: non byte read [ 374.709721][ T34] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 374.713438][T12810] kvm: pic: level sensitive irq not supported [ 374.714117][T12810] kvm: pic: non byte read [ 374.719666][T12810] kvm: pic: level sensitive irq not supported [ 374.720016][T12810] kvm: pic: non byte read [ 374.853038][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 374.856627][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 374.859001][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 374.863233][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.866868][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.870276][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.875193][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 374.877718][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 374.881194][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.884872][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.888355][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.892699][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 374.895074][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 374.898527][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.902250][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.905659][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 374.912352][ T34] usb 8-1: string descriptor 0 read error: -22 [ 374.914465][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.917320][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.923256][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 375.490946][ T34] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 375.528936][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.652920][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 375.656605][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.659423][ T34] usb 6-1: config 0 has no interface number 0 [ 375.663287][ T34] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 375.666285][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.666320][T12823] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 375.668774][ T34] usb 6-1: Product: syz [ 375.668785][ T34] usb 6-1: Manufacturer: syz [ 375.675904][ T34] usb 6-1: SerialNumber: syz [ 375.678613][ T34] usb 6-1: config 0 descriptor?? [ 375.681847][ T34] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 375.684577][ T34] usb 6-1: selecting invalid altsetting 1 [ 375.686368][ T34] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 375.689716][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 375.693958][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 375.696530][ T34] usb 6-1: media controller created [ 375.705205][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.729120][T12825] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 375.738550][T12825] kvm: pic: non byte read [ 375.741363][T12825] kvm: pic: level sensitive irq not supported [ 375.742543][T12825] kvm: pic: non byte read [ 375.747279][T12825] kvm: pic: level sensitive irq not supported [ 375.748840][T12825] kvm: pic: non byte read [ 375.755293][T12825] kvm: pic: level sensitive irq not supported [ 375.755979][T12825] kvm: pic: non byte read [ 375.762656][T12825] kvm: pic: level sensitive irq not supported [ 375.764803][T12825] kvm: pic: level sensitive irq not supported [ 376.367264][T12835] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 376.519532][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.748256][ T34] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 376.750602][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 376.767607][T12817] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 376.773244][ T34] usb 6-1: USB disconnect, device number 34 [ 376.796334][ T1466] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 376.840878][T12851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1833'. [ 376.940519][ T1466] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 376.943936][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.947225][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.950223][ T1466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 376.955026][ T1466] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 376.957729][ T1466] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 376.960242][ T1466] usb 5-1: Manufacturer: syz [ 376.962997][ T1466] usb 5-1: config 0 descriptor?? [ 377.353988][ T60] usb 8-1: USB disconnect, device number 27 [ 377.354570][ T1466] appleir 0003:05AC:8243.0006: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 377.510652][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.541436][T12845] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1831'. [ 377.554994][ T34] usb 5-1: USB disconnect, device number 29 [ 378.094267][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 378.098058][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1840'. [ 378.362120][ T40] audit: type=1326 audit(1757397557.524:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.374873][ T40] audit: type=1326 audit(1757397557.534:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.384241][ T40] audit: type=1326 audit(1757397557.534:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.394096][ T40] audit: type=1326 audit(1757397557.545:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.402382][ T40] audit: type=1326 audit(1757397557.545:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.411048][ T40] audit: type=1326 audit(1757397557.555:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.418996][ T40] audit: type=1326 audit(1757397557.566:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.427743][ T40] audit: type=1326 audit(1757397557.566:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.435719][ T40] audit: type=1326 audit(1757397557.566:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.447560][ T40] audit: type=1326 audit(1757397557.566:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.3.1841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 378.474252][T12881] pim6reg: entered allmulticast mode [ 378.497571][T12881] pim6reg: left allmulticast mode [ 378.501017][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.538050][T12889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1843'. [ 379.052249][T12903] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1846'. [ 379.501071][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.884339][T12931] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 380.101644][T12937] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 380.216381][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 380.219906][T12940] wg2: entered allmulticast mode [ 380.394303][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1860'. [ 380.491832][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.506411][T12956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1861'. [ 380.509306][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 380.514418][T12956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1861'. [ 380.517234][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 380.760352][T12965] netlink: 'syz.2.1865': attribute type 2 has an invalid length. [ 380.763255][T12965] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 381.473395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.464242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.454802][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.445382][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.435989][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.427767][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.417434][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.408007][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.408172][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.444110][T12994] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 389.475825][T12994] picdev_read: 10 callbacks suppressed [ 389.475874][T12994] kvm: pic: non byte read [ 389.481646][T12994] pic_ioport_write: 7 callbacks suppressed [ 389.481660][T12994] kvm: pic: level sensitive irq not supported [ 389.484217][T12994] kvm: pic: non byte read [ 389.490214][T12994] kvm: pic: level sensitive irq not supported [ 389.490486][T12994] kvm: pic: non byte read [ 389.496544][T12994] kvm: pic: level sensitive irq not supported [ 389.497053][T12994] kvm: pic: non byte read [ 389.502638][T12994] kvm: pic: level sensitive irq not supported [ 389.502967][T12994] kvm: pic: non byte read [ 389.507548][T12994] kvm: pic: level sensitive irq not supported [ 389.507809][T12994] kvm: pic: non byte read [ 389.792418][T13005] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 389.794811][T13005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.798452][T13005] vhci_hcd vhci_hcd.0: Device attached [ 390.388908][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.379585][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.851166][ T60] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 391.906217][T13016] __nla_validate_parse: 3 callbacks suppressed [ 391.906228][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1876'. [ 391.979699][T13014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 392.023865][T13014] kvm: pic: non byte read [ 392.028239][T13014] kvm: pic: level sensitive irq not supported [ 392.030823][T13014] kvm: pic: non byte read [ 392.037867][T13014] kvm: pic: level sensitive irq not supported [ 392.038495][T13014] kvm: pic: non byte read [ 392.042854][T13014] kvm: pic: level sensitive irq not supported [ 392.043115][T13014] kvm: pic: non byte read [ 392.052403][T13014] kvm: pic: level sensitive irq not supported [ 392.053938][T13014] kvm: pic: level sensitive irq not supported [ 392.057603][T13006] vhci_hcd: connection reset by peer [ 392.061332][T11118] vhci_hcd: stop threads [ 392.062757][T11118] vhci_hcd: release socket [ 392.064187][T11118] vhci_hcd: disconnect device [ 392.379711][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.172593][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 393.213131][T13034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1878'. [ 393.370552][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.482239][T13050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 393.728546][ T4224] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 393.889738][T13056] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 393.891929][T13056] UDF-fs: Scanning with blocksize 2048 failed [ 393.895278][ T4224] usb 5-1: Using ep0 maxpacket: 8 [ 393.896883][T13056] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 393.899098][T13056] UDF-fs: Scanning with blocksize 4096 failed [ 393.916091][ T4224] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.930379][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.933873][ T4224] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.937501][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.940842][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.948088][ T4224] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.951316][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.955235][ T4224] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.959112][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.962844][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.968817][ T4224] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.973234][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 393.976822][ T4224] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.980529][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.984079][ T4224] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 393.991946][ T4224] usb 5-1: string descriptor 0 read error: -22 [ 393.994248][ T4224] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.997131][ T4224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.023000][ T4224] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 394.361529][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.726576][T13072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1889'. [ 394.758890][T13071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.342618][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.333293][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.714569][ T60] vhci_hcd: vhci_device speed not set [ 397.114410][ T1466] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 397.259432][ T1466] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 397.263768][ T1466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.268132][ T1466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.271961][ T1466] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 397.278476][ T1466] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 397.282068][ T1466] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 397.285170][ T1466] usb 6-1: Manufacturer: syz [ 397.289301][ T1466] usb 6-1: config 0 descriptor?? [ 397.323529][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.365175][ T4224] usb 5-1: USB disconnect, device number 30 [ 397.752710][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 397.876589][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 397.880141][T13101] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1896'. [ 397.905656][ T1466] hid_parser_main: 6 callbacks suppressed [ 397.905669][ T1466] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 397.911372][ T1466] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 397.923640][ T1466] usb 6-1: USB disconnect, device number 35 [ 398.323767][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.913144][T13142] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1901'. [ 398.978307][T13145] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 399.030476][T13148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1905'. [ 399.314404][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.295686][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.286678][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.277372][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.268109][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.258643][ C2] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.258870][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.240148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.424561][T13170] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 406.438049][T13170] picdev_read: 2 callbacks suppressed [ 406.438078][T13170] kvm: pic: non byte read [ 406.446349][T13170] kvm: pic: level sensitive irq not supported [ 406.446628][T13170] kvm: pic: non byte read [ 406.453442][T13170] kvm: pic: level sensitive irq not supported [ 406.454134][T13170] kvm: pic: non byte read [ 406.459698][T13170] kvm: pic: level sensitive irq not supported [ 406.459966][T13170] kvm: pic: non byte read [ 406.468881][T13170] kvm: pic: level sensitive irq not supported [ 406.469568][T13170] kvm: pic: non byte read [ 406.475336][T13170] kvm: pic: level sensitive irq not supported [ 406.476740][T13170] kvm: pic: non byte read [ 406.824097][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 406.824159][ T40] audit: type=1326 audit(1757397587.401:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.837457][ T40] audit: type=1326 audit(1757397587.412:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.852050][ T40] audit: type=1326 audit(1757397587.422:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.859374][ T40] audit: type=1326 audit(1757397587.422:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.866342][ T40] audit: type=1326 audit(1757397587.422:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.873093][ T40] audit: type=1326 audit(1757397587.422:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.880051][ T40] audit: type=1326 audit(1757397587.422:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.886724][ T40] audit: type=1326 audit(1757397587.422:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.899295][ T40] audit: type=1326 audit(1757397587.433:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.906784][ T40] audit: type=1326 audit(1757397587.433:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13183 comm="syz.0.1911" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 406.958135][T13192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 406.985672][T13192] kvm: pic: non byte read [ 407.003690][T13192] kvm: pic: level sensitive irq not supported [ 407.004451][T13192] kvm: pic: non byte read [ 407.013699][T13192] kvm: pic: level sensitive irq not supported [ 407.014184][T13192] kvm: pic: non byte read [ 407.022911][T13192] kvm: pic: level sensitive irq not supported [ 407.024251][T13192] kvm: pic: non byte read [ 407.035645][T13192] kvm: pic: level sensitive irq not supported [ 407.038800][T13192] kvm: pic: level sensitive irq not supported [ 407.230582][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.221645][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.678516][ T1466] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 408.840664][ T1466] usb 5-1: Using ep0 maxpacket: 8 [ 408.847846][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.853637][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.860055][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.867507][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.873372][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.878650][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.883775][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.891477][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.900160][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.907287][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.915762][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.920882][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.928341][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.936001][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.938466][T13223] qrtr: Invalid version 46 [ 408.942942][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.955456][ T1466] usb 5-1: string descriptor 0 read error: -22 [ 408.957494][ T1466] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.965066][ T1466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.977919][ T1466] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 409.211522][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.837305][T13242] qrtr: Invalid version 46 [ 410.211706][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.713228][T13254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 410.890299][T13258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1929'. [ 411.202361][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.245888][ T4224] usb 5-1: USB disconnect, device number 31 [ 412.183528][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.329127][T13282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.334581][T13284] FAULT_INJECTION: forcing a failure. [ 412.334581][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 412.339169][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1937'. [ 412.340963][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.1.1936 Not tainted syzkaller #0 PREEMPT(full) [ 412.340985][T13284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 412.340996][T13284] Call Trace: [ 412.341003][T13284] [ 412.341009][T13284] dump_stack_lvl+0x16c/0x1f0 [ 412.341058][T13284] should_fail_ex+0x512/0x640 [ 412.341092][T13284] ? fs_reclaim_acquire+0xae/0x150 [ 412.341121][T13284] ? tomoyo_encode2+0x100/0x3e0 [ 412.341144][T13284] should_failslab+0xc2/0x120 [ 412.341167][T13284] __kmalloc_noprof+0xd2/0x510 [ 412.341188][T13284] ? d_absolute_path+0x136/0x1a0 [ 412.341218][T13284] tomoyo_encode2+0x100/0x3e0 [ 412.341245][T13284] tomoyo_encode+0x29/0x50 [ 412.341267][T13284] tomoyo_realpath_from_path+0x18f/0x6e0 [ 412.341301][T13284] tomoyo_path_number_perm+0x245/0x580 [ 412.341322][T13284] ? tomoyo_path_number_perm+0x237/0x580 [ 412.341346][T13284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.341407][T13284] ? find_held_lock+0x2b/0x80 [ 412.341426][T13284] ? hook_file_ioctl_common+0x145/0x410 [ 412.341455][T13284] ? __fget_files+0x20e/0x3c0 [ 412.341481][T13284] security_file_ioctl_compat+0x9b/0x240 [ 412.341505][T13284] __ia32_compat_sys_ioctl+0xc3/0x370 [ 412.341536][T13284] __do_fast_syscall_32+0x7c/0x3a0 [ 412.341565][T13284] do_fast_syscall_32+0x32/0x80 [ 412.341591][T13284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.341613][T13284] RIP: 0023:0xf70ce579 [ 412.341627][T13284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 412.341644][T13284] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 412.341661][T13284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007b2 [ 412.341672][T13284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.341682][T13284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.341692][T13284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 412.341702][T13284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.341724][T13284] [ 412.341742][T13284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.671857][T13293] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 413.123994][T13305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1943'. [ 413.174495][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.407083][T13312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1944'. [ 414.164964][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.685050][T13326] comedi comedi0: Minor 3 specified more than once! [ 415.155519][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.194539][T13328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1949'. [ 416.046576][T13337] rdma_rxe: rxe_newlink: failed to add syz_tun [ 416.104072][T13336] lo speed is unknown, defaulting to 1000 [ 416.155710][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.376179][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 416.451032][T13355] ucma_write: process 1449 (syz.1.1956) changed security contexts after opening file descriptor, this is not allowed. [ 416.510469][T13357] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.546606][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 416.555926][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.558412][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.561948][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.565904][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.569222][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.574806][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.577147][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.580525][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.584313][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.587875][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.593231][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 416.596313][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 416.604423][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.618053][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.622694][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.630466][ T24] usb 5-1: string descriptor 0 read error: -22 [ 416.632641][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 416.635738][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.650709][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.719541][T13363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.817033][T13367] input: syz1 as /devices/virtual/input/input43 [ 417.146373][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.202000][T13374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1961'. [ 417.631733][T13399] lo speed is unknown, defaulting to 1000 [ 417.822181][T13411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1970'. [ 418.127642][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.502281][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802afc8000: rx timeout, send abort [ 418.505052][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802afc8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 418.549299][T13424] lo speed is unknown, defaulting to 1000 [ 418.743091][T13433] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 418.778856][T13437] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1979'. [ 419.090234][ T34] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 419.118618][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.242118][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 419.245088][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.248063][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.251294][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.254399][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.258349][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.261165][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.459191][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 419.461189][ T34] usbtmc 6-1:16.0: can't read capabilities [ 419.494480][ T34] usb 5-1: USB disconnect, device number 32 [ 419.946170][ T1466] usb 6-1: USB disconnect, device number 36 [ 420.109244][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.590003][T13472] block nbd0: NBD_DISCONNECT [ 420.592408][T13472] block nbd0: Send disconnect failed -89 [ 420.766461][T13468] nbd0: detected capacity change from 0 to 1024 [ 420.814708][T13480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1993'. [ 421.109151][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.237105][T13468] block nbd0: Disconnected due to user request. [ 421.241064][T13468] block nbd0: shutting down sockets [ 422.044970][T13507] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 422.090185][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.207205][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 422.210861][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 422.570921][T13528] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2006'. [ 422.661820][ T1466] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 422.824075][ T1466] usb 5-1: Using ep0 maxpacket: 8 [ 422.827064][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 422.829428][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 422.833097][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.836713][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 422.840127][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 422.841064][T13540] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2010'. [ 422.845822][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 422.850271][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 422.854774][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.858477][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 422.861891][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 422.866597][ T1466] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 422.868954][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 422.872589][ T1466] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.876214][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 422.881553][ T1466] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 422.889435][ T1466] usb 5-1: string descriptor 0 read error: -22 [ 422.892264][ T1466] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 422.896056][ T1466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.906333][ T1466] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 423.081303][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.529900][T13560] overlay: ./file0 is not a directory [ 423.748158][ T34] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 423.829150][T13580] lo speed is unknown, defaulting to 1000 [ 423.909745][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 423.913379][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 423.922875][ T34] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 423.926653][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.932021][ T34] usb 6-1: Product: syz [ 423.933829][ T34] usb 6-1: Manufacturer: syz [ 423.935781][ T34] usb 6-1: SerialNumber: syz [ 423.942034][ T34] usb 6-1: config 0 descriptor?? [ 423.951130][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 423.956260][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 423.962190][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.071900][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.205273][ T24] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 424.351929][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 424.355348][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.358814][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.361952][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 424.375293][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 424.378364][ T24] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 424.380870][ T24] usb 8-1: Manufacturer: syz [ 424.383777][ T24] usb 8-1: config 0 descriptor?? [ 424.675921][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802afc9800: rx timeout, send abort [ 424.680419][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802afc9800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 424.774512][ T24] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 424.778674][ T24] appleir 0003:05AC:8243.0008: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 424.964539][T13585] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2023'. [ 424.971499][ T1466] usb 8-1: USB disconnect, device number 28 [ 425.071652][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.605425][T13630] fuse: Bad value for 'group_id' [ 425.607084][T13630] fuse: Bad value for 'group_id' [ 425.662898][ T60] usb 5-1: USB disconnect, device number 33 [ 426.063470][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.363635][T13645] [U]  [ 426.365039][T13645] [U] K{‘ [ 426.366035][T13645] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 426.368356][T13645] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 426.373262][T13645] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 426.376482][T13645] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 426.388491][T13645] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 426.395773][T13645] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 426.399742][T13645] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 426.408205][T13645] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 426.443469][T13645] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 426.446409][T13645] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 426.450817][T13645] [U] 22½“Æ©Ðû©x?0;3u± [ 426.452221][T13645] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 426.459853][T13645] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 426.463799][T13645] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 426.467088][T13645] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 426.469515][T13645] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 426.475078][T13645] [U] ¹ ec [ 426.476396][T13645] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 426.484924][T13644] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 426.525744][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 426.528951][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 426.532160][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 426.535482][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 426.767222][ T1466] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 426.805631][ T34] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 426.910140][ T1466] usb 6-1: Using ep0 maxpacket: 16 [ 426.913261][ T1466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 426.918257][ T1466] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.921126][ T1466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.923615][ T1466] usb 6-1: Product: syz [ 426.924948][ T1466] usb 6-1: Manufacturer: syz [ 426.926388][ T1466] usb 6-1: SerialNumber: syz [ 426.929046][ T1466] usb 6-1: config 0 descriptor?? [ 426.932469][ T1466] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.935263][ T1466] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 426.959618][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 426.962984][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.966293][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.969388][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 426.974186][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 426.977315][ T34] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 426.979799][ T34] usb 5-1: Manufacturer: syz [ 426.982417][ T34] usb 5-1: config 0 descriptor?? [ 427.053001][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.388107][ T34] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 427.392880][ T34] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 427.615589][T13661] random: crng reseeded on system resumption [ 427.665421][T13652] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2040'. [ 427.674245][ T34] usb 5-1: USB disconnect, device number 34 [ 428.034176][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.653502][ T1466] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 428.749050][ T24] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 428.798830][ T1466] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 428.801465][ T1466] em28xx 6-1:0.0: board has no eeprom [ 428.853331][ T1466] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 428.856143][ T1466] em28xx 6-1:0.0: dvb set to bulk mode. [ 428.859542][ T1466] em28xx 6-1:0.0: Binding DVB extension [ 428.881944][ T1466] em28xx 6-1:0.0: Registering input extension [ 428.902952][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 428.906750][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.910175][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.914145][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.917456][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 428.921969][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.925017][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.928517][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.931664][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 428.935365][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.938274][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.942873][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.946269][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 428.956466][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.959334][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.962708][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.965762][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 428.971131][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.974377][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.978312][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.981396][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 428.984711][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.996631][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.000196][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.003361][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 429.010074][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.013044][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.017342][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.020516][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 429.023497][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.025229][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.026435][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.032116][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.035699][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 429.039652][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 429.042717][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 429.045590][ T24] usb 8-1: Product: syz [ 429.046958][ T24] usb 8-1: Manufacturer: syz [ 429.048507][ T24] usb 8-1: SerialNumber: syz [ 429.053357][ T24] usb 8-1: config 0 descriptor?? [ 429.057520][ T24] yurex 8-1:0.0: Could not submitting URB [ 429.059499][ T24] yurex 8-1:0.0: probe with driver yurex failed with error -5 [ 429.174553][T13679] team0: Port device team_slave_0 removed [ 429.186733][T13679] team0: Port device team_slave_1 removed [ 429.189958][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.192683][T13679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.200038][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.202687][T13679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.347413][ T60] usb 6-1: USB disconnect, device number 38 [ 429.349889][ T60] em28xx 6-1:0.0: Disconnecting em28xx [ 429.351611][ T60] em28xx 6-1:0.0: Closing input extension [ 429.360112][ T60] em28xx 6-1:0.0: Freeing device [ 430.025055][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.159659][T13695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2049'. [ 430.821219][T13700] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 430.835549][T13700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.845784][T13700] bond1: (slave wlan0): Opening slave failed [ 430.854838][T13700] vlan3: entered allmulticast mode [ 430.856488][T13700] veth1: entered allmulticast mode [ 430.858790][T13700] bond1: (slave vlan3): Opening slave failed [ 430.931581][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.015641][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.098595][ T1466] usb 8-1: USB disconnect, device number 29 [ 431.256414][T13717] comedi comedi0: comedi_config --init_data is deprecated [ 431.997241][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.159257][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.311297][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 432.339669][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 432.341126][T13746] bridge0: entered promiscuous mode [ 432.346309][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.350632][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.353709][T13746] bridge4: entered promiscuous mode [ 432.355535][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.361459][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.366637][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 432.369596][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.374270][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.378806][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.383114][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.388526][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 432.391418][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 432.395770][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.408778][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.412412][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.418255][T13758] block nbd1: shutting down sockets [ 432.421808][ T24] usb 5-1: string descriptor 0 read error: -22 [ 432.423799][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 432.426595][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.432653][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 432.580720][T13765] mkiss: ax0: crc mode is auto. [ 432.997424][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.648715][T13786] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 433.860749][T13790] bridge0: port 1(syz_tun) entered blocking state [ 433.862976][T13790] bridge0: port 1(syz_tun) entered disabled state [ 433.865332][T13790] syz_tun: entered allmulticast mode [ 433.870209][T13790] syz_tun: left allmulticast mode [ 433.875424][T13790] netlink: 'syz.1.2075': attribute type 10 has an invalid length. [ 433.879461][T13790] rdma_rxe: rxe_newlink: failed to add syz_tun [ 433.987655][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.202481][T13796] syzkaller1: entered promiscuous mode [ 434.204358][T13796] syzkaller1: entered allmulticast mode [ 434.310458][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051a8e000: rx timeout, send abort [ 434.314055][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051a8e000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 434.323560][ T60] usb 5-1: USB disconnect, device number 35 [ 434.471876][T13800] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2078'. [ 434.978368][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.008032][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.011401][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.015007][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.018492][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.021889][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.029570][ T5974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.031998][ T5974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.034404][ T5974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.039556][ T5974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.042206][ T5974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 435.069905][T10099] bridge0: port 3(syz_tun) entered disabled state [ 435.079722][T10099] syz_tun (unregistering): left allmulticast mode [ 435.081690][T10099] syz_tun (unregistering): left promiscuous mode [ 435.084380][T10099] bridge0: port 3(syz_tun) entered disabled state [ 435.089354][T11118] smc: removing ib device syz1 [ 435.096595][T13826] lo speed is unknown, defaulting to 1000 [ 435.103586][ T60] syz1: Port: 1 Link DOWN [ 435.385188][T13826] chnl_net:caif_netlink_parms(): no params data found [ 435.650601][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.653685][T13826] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.657233][T13826] bridge_slave_0: entered allmulticast mode [ 435.659816][T13826] bridge_slave_0: entered promiscuous mode [ 435.664065][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.668097][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.670437][T13826] bridge_slave_1: entered allmulticast mode [ 435.673444][T13826] bridge_slave_1: entered promiscuous mode [ 435.712820][T13826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.717472][T13826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.761371][T13826] team0: Port device team_slave_0 added [ 435.765403][T13826] team0: Port device team_slave_1 added [ 435.945814][T13826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.948124][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.956454][T13826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.959907][ C3] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.970289][T13826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.972528][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.980917][T13826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.024289][T13826] hsr_slave_0: entered promiscuous mode [ 436.026816][T13826] hsr_slave_1: entered promiscuous mode [ 436.028882][T13826] debugfs: 'hsr0' already exists in 'hsr' [ 436.030767][T13826] Cannot create hsr debugfs directory [ 436.152011][T11118] bridge_slave_1: left allmulticast mode [ 436.154642][T11118] bridge_slave_1: left promiscuous mode [ 436.158212][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.164422][T11118] bridge_slave_0: left allmulticast mode [ 436.166343][T11118] bridge_slave_0: left promiscuous mode [ 436.168377][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.315748][T11118] bridge0 (unregistering): left allmulticast mode [ 436.650097][T11118] bond1 (unregistering): Released all slaves [ 436.662192][T11118] bond0 (unregistering): Released all slaves [ 436.745608][T11118] tipc: Disabling bearer [ 436.748464][T11118] tipc: Left network mode [ 436.903284][T11118] hsr_slave_0: left promiscuous mode [ 436.906697][T11118] hsr_slave_1: left promiscuous mode [ 436.909175][T11118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.921554][ T1466] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 437.036107][ T5974] Bluetooth: hci4: command tx timeout [ 437.227066][ T34] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.371875][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 437.378753][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 437.381102][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.384618][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.388209][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.391653][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.396087][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 437.398534][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.402034][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.405674][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.409709][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.414004][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 437.416383][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.419913][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.423482][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.426933][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.433078][ T34] usb 5-1: string descriptor 0 read error: -22 [ 437.435051][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 437.437991][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.443290][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 437.781179][T13867] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 437.912711][ T1466] usb 8-1: Using ep0 maxpacket: 8 [ 437.918089][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 437.921240][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.926159][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.926539][T11118] team0 (unregistering): Port device team_slave_1 removed [ 437.931559][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.939819][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.947017][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 437.949345][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.958709][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.966291][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.977457][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.986904][ T1466] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 437.991653][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 437.999676][ T1466] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.007358][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.013913][ T1466] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 438.024665][ T1466] usb 8-1: string descriptor 0 read error: -22 [ 438.029389][ T1466] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 438.034827][ T1466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.039802][T11118] team0 (unregistering): Port device team_slave_0 removed [ 438.047166][ T1466] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 438.596736][ T24] lo speed is unknown, defaulting to 1000 [ 438.598980][ T24] infiniband syz0: ib_query_port failed (-19) [ 438.607271][ T6058] usb 8-1: USB disconnect, device number 30 [ 438.714364][T13872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 438.723806][T13872] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 438.735162][T13872] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 438.807675][T13826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.812449][T13826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.822746][T13826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.828167][T13826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.894582][T13826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.909070][T13826] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.915616][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.917666][T11142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.923428][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.925797][T11131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.938880][T11118] IPVS: stop unused estimator thread 0... [ 439.061643][T13826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.082613][T13826] veth0_vlan: entered promiscuous mode [ 439.092100][T13826] veth1_vlan: entered promiscuous mode [ 439.110305][T13826] veth0_macvtap: entered promiscuous mode [ 439.114418][T13826] veth1_macvtap: entered promiscuous mode [ 439.122917][T13826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.128759][T13826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.139385][T11144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.142912][T11144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.145626][T11144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.165328][T11144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.217275][T11118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.222270][T11118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.258262][T11144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.262033][T11144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.128163][ T4224] usb 5-1: USB disconnect, device number 36 [ 440.298055][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 440.331178][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.333741][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.375380][T13924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2103'. [ 440.429261][T13917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.438882][T13917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.443102][T13921] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2105'. [ 440.694081][ T5974] Bluetooth: hci4: command 0x040f tx timeout [ 440.700053][T11131] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.704623][T11131] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.713048][T11131] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.722379][T11131] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.913153][ T6063] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 440.921668][T13933] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 440.952283][T13935] debugfs: 'ttyS3' already exists in 'caif_serial' [ 440.958807][T13935] FAULT_INJECTION: forcing a failure. [ 440.958807][T13935] name failslab, interval 1, probability 0, space 0, times 0 [ 440.964138][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.2.2109 Not tainted syzkaller #0 PREEMPT(full) [ 440.964154][T13935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.964162][T13935] Call Trace: [ 440.964165][T13935] [ 440.964170][T13935] dump_stack_lvl+0x16c/0x1f0 [ 440.964198][T13935] should_fail_ex+0x512/0x640 [ 440.964216][T13935] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 440.964232][T13935] should_failslab+0xc2/0x120 [ 440.964246][T13935] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 440.964260][T13935] ? __kernfs_new_node+0xd2/0x8e0 [ 440.964276][T13935] __kernfs_new_node+0xd2/0x8e0 [ 440.964292][T13935] ? __pfx___kernfs_new_node+0x10/0x10 [ 440.964309][T13935] ? find_held_lock+0x2b/0x80 [ 440.964321][T13935] ? kernfs_root+0xee/0x2a0 [ 440.964338][T13935] kernfs_new_node+0x13c/0x1e0 [ 440.964353][T13935] ? net_ns_get_ownership+0xf8/0x1b0 [ 440.964372][T13935] kernfs_create_dir_ns+0x4c/0x1a0 [ 440.964390][T13935] sysfs_create_dir_ns+0x13a/0x2b0 [ 440.964403][T13935] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 440.964416][T13935] ? find_held_lock+0x2b/0x80 [ 440.964427][T13935] ? net_namespace+0x12/0x50 [ 440.964439][T13935] ? device_namespace+0x76/0xa0 [ 440.964473][T13935] kobject_add_internal+0x2c4/0x9b0 [ 440.964488][T13935] kobject_add+0x16e/0x240 [ 440.964499][T13935] ? __pfx_kobject_add+0x10/0x10 [ 440.964510][T13935] ? get_device_parent+0x1c5/0x4e0 [ 440.964521][T13935] ? kobject_put+0xab/0x5a0 [ 440.964531][T13935] ? device_add+0xbff/0x1aa0 [ 440.964544][T13935] device_add+0x288/0x1aa0 [ 440.964556][T13935] ? __pfx_dev_set_name+0x10/0x10 [ 440.964569][T13935] ? __pfx_device_add+0x10/0x10 [ 440.964581][T13935] ? lockdep_init_map_type+0x5c/0x280 [ 440.964596][T13935] ? __init_waitqueue_head+0xca/0x150 [ 440.964616][T13935] netdev_register_kobject+0x1a9/0x3d0 [ 440.964630][T13935] register_netdevice+0x13dc/0x2270 [ 440.964644][T13935] ? __pfx_register_netdevice+0x10/0x10 [ 440.964659][T13935] ldisc_open+0x481/0x970 [ 440.964674][T13935] ? __pfx_ldisc_open+0x10/0x10 [ 440.964689][T13935] ? tty_ldisc_reinit+0x185/0x360 [ 440.964704][T13935] ? down_write+0x14d/0x200 [ 440.964716][T13935] ? __pfx_ldisc_open+0x10/0x10 [ 440.964729][T13935] tty_ldisc_open+0x9f/0x120 [ 440.964744][T13935] tty_ldisc_reinit+0x214/0x360 [ 440.964760][T13935] tty_reopen+0x239/0x2a0 [ 440.964773][T13935] tty_open+0xa13/0xf90 [ 440.964786][T13935] ? __pfx_tty_open+0x10/0x10 [ 440.964796][T13935] ? chrdev_open+0x10b/0x6a0 [ 440.964812][T13935] ? __pfx_tty_open+0x10/0x10 [ 440.964822][T13935] chrdev_open+0x231/0x6a0 [ 440.964835][T13935] ? __pfx_apparmor_file_open+0x10/0x10 [ 440.964848][T13935] ? __pfx_chrdev_open+0x10/0x10 [ 440.964863][T13935] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 440.964878][T13935] do_dentry_open+0x97f/0x1530 [ 440.964893][T13935] ? __pfx_chrdev_open+0x10/0x10 [ 440.964915][T13935] vfs_open+0x82/0x3f0 [ 440.964933][T13935] path_openat+0x1de4/0x2cb0 [ 440.964951][T13935] ? __pfx_path_openat+0x10/0x10 [ 440.964964][T13935] ? __lock_acquire+0xb97/0x1ce0 [ 440.964980][T13935] do_filp_open+0x20b/0x470 [ 440.964993][T13935] ? __pfx_do_filp_open+0x10/0x10 [ 440.965016][T13935] ? _raw_spin_unlock+0x28/0x50 [ 440.965030][T13935] ? alloc_fd+0x471/0x7d0 [ 440.965046][T13935] do_sys_openat2+0x11b/0x1d0 [ 440.965062][T13935] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.965080][T13935] ? __fget_files+0x20e/0x3c0 [ 440.965090][T13935] ? handle_mm_fault+0x1b0/0xd10 [ 440.965104][T13935] __ia32_compat_sys_openat+0x16d/0x210 [ 440.965115][T13935] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 440.965124][T13935] ? ksys_write+0x1ac/0x250 [ 440.965139][T13935] ? rcu_is_watching+0x12/0xc0 [ 440.965164][T13935] __do_fast_syscall_32+0x7c/0x3a0 [ 440.965183][T13935] do_fast_syscall_32+0x32/0x80 [ 440.965200][T13935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.965214][T13935] RIP: 0023:0xf704e579 [ 440.965223][T13935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 440.965234][T13935] RSP: 002b:00000000f543e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 440.965245][T13935] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 440.965252][T13935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.965258][T13935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.965264][T13935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 440.965270][T13935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.965283][T13935] [ 440.965355][T13935] kobject: kobject_add_internal failed for cfttyS3 (error: -12 parent: net) [ 441.199725][ T6063] usb 8-1: Using ep0 maxpacket: 8 [ 441.581269][ T6063] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 441.974147][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.977571][ T6063] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.981638][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.986095][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.992098][ T6063] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 441.995517][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.999424][ T6063] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.003455][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.008021][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.012904][ T6063] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 442.016035][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.021155][ T6063] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.025576][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.029471][ T6063] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.035777][ T6063] usb 8-1: string descriptor 0 read error: -22 [ 442.037885][ T6063] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.040999][ T6063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.058057][ T6063] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 442.139520][T13961] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 442.334837][ T4224] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 442.494495][ T4224] usb 7-1: Using ep0 maxpacket: 8 [ 442.497454][ T4224] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 442.499801][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.503970][ T4224] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.507559][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.510934][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.516716][ T6058] usb 8-1: USB disconnect, device number 31 [ 442.521415][ T4224] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 442.523780][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.578436][ T4224] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.582100][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.585618][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.590439][ T4224] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 442.592904][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.596429][ T4224] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.649787][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.653253][ T4224] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.660831][ T4224] usb 7-1: string descriptor 0 read error: -22 [ 442.662820][ T4224] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.665510][ T5974] Bluetooth: hci4: command 0x040f tx timeout [ 442.667865][ T4224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.673434][ T4224] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 443.235803][T13982] debugfs: 'ttyS3' already exists in 'caif_serial' [ 443.465678][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 443.580780][T13994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 443.582859][T13994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 443.585349][T13994] vhci_hcd vhci_hcd.0: Device attached [ 443.610948][ T34] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 443.615079][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.618482][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.621482][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 443.626301][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 443.629260][ T34] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 443.631851][ T34] usb 8-1: Manufacturer: syz [ 443.634490][ T34] usb 8-1: config 0 descriptor?? [ 443.638350][T13995] vhci_hcd: connection closed [ 443.638527][T11144] vhci_hcd: stop threads [ 443.641571][T11144] vhci_hcd: release socket [ 443.642999][T11144] vhci_hcd: disconnect device [ 444.021695][ T34] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 444.039065][ T34] appleir 0003:05AC:8243.000A: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 444.215587][ T34] usb 8-1: USB disconnect, device number 32 [ 444.646909][ T5974] Bluetooth: hci4: command 0x040f tx timeout [ 445.570776][ T6058] usb 7-1: USB disconnect, device number 30 [ 445.632276][T14012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2134'. [ 445.771114][ T34] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 445.923238][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 445.926277][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 445.928718][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.932240][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.935993][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.939380][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.943881][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 445.946296][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.949801][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.953674][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.957035][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.961572][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 445.964010][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.967467][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.971097][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.974594][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.980735][ T34] usb 5-1: string descriptor 0 read error: -22 [ 445.982740][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 445.985469][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.991126][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 446.208266][T14023] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 446.637775][ T5974] Bluetooth: hci4: command 0x040f tx timeout [ 446.904431][ T6058] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 447.058311][ T6058] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 447.061789][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.068520][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.074882][ T6058] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 447.086745][ T6058] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 447.091835][ T6058] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 447.096586][ T6058] usb 7-1: Manufacturer: syz [ 447.101662][ T6058] usb 7-1: config 0 descriptor?? [ 447.477769][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802afa7400: rx timeout, send abort [ 447.480605][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802afa7400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 447.586321][ T6058] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 447.590095][ T4224] usb 5-1: USB disconnect, device number 37 [ 447.597127][ T6058] appleir 0003:05AC:8243.000B: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 447.685441][ T34] usb 7-1: USB disconnect, device number 31 [ 448.335302][T14050] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 448.419350][ T6040] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 448.562111][ T6040] usb 6-1: Using ep0 maxpacket: 8 [ 448.566114][ T6040] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.569116][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.572822][ T6040] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.576433][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.579886][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.584503][ T6040] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.586879][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.590760][ T6040] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.594468][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.597958][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.602437][ T6040] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.604849][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 448.608486][ T6040] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.612815][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.616227][ T6040] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.619121][ T5974] Bluetooth: hci4: command 0x040f tx timeout [ 448.637525][ T6040] usb 6-1: string descriptor 0 read error: -22 [ 448.640044][ T6040] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 448.643332][ T6040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.649556][ T6040] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 448.969323][T14062] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 448.972029][T14062] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.975558][T14062] vhci_hcd vhci_hcd.0: Device attached [ 449.094782][T14065] vhci_hcd: connection closed [ 449.094982][T11115] vhci_hcd: stop threads [ 449.110867][T11115] vhci_hcd: release socket [ 449.112542][T11115] vhci_hcd: disconnect device [ 449.695528][ T4224] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 449.857622][ T4224] usb 8-1: Using ep0 maxpacket: 8 [ 449.861102][ T4224] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 449.863479][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.866851][ T4224] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.870367][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.873916][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.878256][ T4224] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 449.880596][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.884312][ T4224] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.887975][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.891381][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.896663][ T4224] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 449.899562][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 449.903108][ T4224] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.906794][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.910255][ T4224] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.916317][ T4224] usb 8-1: string descriptor 0 read error: -22 [ 449.918369][ T4224] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 449.921159][ T4224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.928275][ T4224] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 450.231242][ T4224] usb 8-1: USB disconnect, device number 33 [ 450.278072][T14081] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 450.310190][T14085] bridge_slave_0: left allmulticast mode [ 450.312007][T14085] bridge_slave_0: left promiscuous mode [ 450.313997][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.326711][T14085] bridge_slave_1: left allmulticast mode [ 450.328662][T14085] bridge_slave_1: left promiscuous mode [ 450.330654][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.340289][T14085] bond0: (slave bond_slave_0): Releasing backup interface [ 450.344466][T14085] bond0: (slave bond_slave_1): Releasing backup interface [ 450.348240][T14085] team0: Port device team_slave_0 removed [ 450.351043][T14085] team0: Port device team_slave_1 removed [ 450.353048][T14085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.355849][T14085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.370045][T14085] vlan0: entered promiscuous mode [ 450.434495][T14088] block nbd2: Send control failed (result -22) [ 450.437416][T14088] block nbd2: Request send failed, requeueing [ 450.444179][ T67] block nbd2: Dead connection, failed to find a fallback [ 450.447465][ T67] block nbd2: shutting down sockets [ 450.449644][ T67] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 450.859780][T14104] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 450.971251][T14108] random: crng reseeded on system resumption [ 450.983637][ T4224] usb 6-1: USB disconnect, device number 39 [ 451.148220][T14112] syz_tun: entered allmulticast mode [ 451.152325][T14111] syz_tun: left allmulticast mode [ 451.222347][T14122] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 451.398064][T14133] tc_dump_action: action bad kind [ 451.555558][ T6040] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 451.714904][ T6040] usb 7-1: Using ep0 maxpacket: 8 [ 451.720955][ T6040] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 451.727809][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.733073][ T6040] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.742520][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.746898][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.752246][ T6040] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 451.755257][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.759593][ T6040] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.762930][ T34] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 451.764263][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.771474][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.776851][ T6040] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 451.779774][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.784123][ T6040] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.788626][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.792497][ T6040] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.800194][ T6040] usb 7-1: string descriptor 0 read error: -22 [ 451.802261][ T6040] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 451.805067][ T6040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.811516][ T6040] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 451.905330][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 451.909440][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 451.912045][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.915752][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.919375][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.922882][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.927762][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 451.930217][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.933709][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.937443][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.941677][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.949273][ T34] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 451.952548][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.957211][ T34] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.961982][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.966407][ T34] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.975363][ T34] usb 5-1: string descriptor 0 read error: -22 [ 451.977632][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 451.981553][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.995881][ T34] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 452.016440][ T4224] usb 7-1: USB disconnect, device number 32 [ 452.365342][T14146] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 452.584867][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 452.588991][T14151] IPVS: Error joining to the multicast group [ 452.599272][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2176'. [ 453.315643][ T6040] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 453.460425][ T6040] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 453.464906][ T6040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.469483][ T6040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.472931][ T6040] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 453.479448][ T6040] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.483172][ T6040] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 453.486488][ T6040] usb 7-1: Manufacturer: syz [ 453.490565][ T6040] usb 7-1: config 0 descriptor?? [ 453.525190][ T6063] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 453.669143][ T6063] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 453.670382][T14169] netlink: 'syz.3.2181': attribute type 2 has an invalid length. [ 453.672577][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.675341][T14169] netlink: 'syz.3.2181': attribute type 1 has an invalid length. [ 453.679730][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.683885][ T6063] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 453.688869][ T6063] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.691661][ T6063] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 453.694247][ T6063] usb 6-1: Manufacturer: syz [ 453.697175][ T6063] usb 6-1: config 0 descriptor?? [ 453.749076][T14172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 453.759079][T14172] picdev_read: 2 callbacks suppressed [ 453.759102][T14172] kvm: pic: non byte read [ 453.763679][T14172] kvm: pic: level sensitive irq not supported [ 453.764573][T14172] kvm: pic: non byte read [ 453.769071][T14172] kvm: pic: level sensitive irq not supported [ 453.769893][T14172] kvm: pic: non byte read [ 453.774740][T14172] kvm: pic: level sensitive irq not supported [ 453.775051][T14172] kvm: pic: non byte read [ 453.780068][T14172] kvm: pic: level sensitive irq not supported [ 453.780392][T14172] kvm: pic: non byte read [ 453.786359][T14172] kvm: pic: level sensitive irq not supported [ 453.786672][T14172] kvm: pic: non byte read [ 453.886219][ T6040] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 453.892122][ T6040] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 454.080424][ T6040] usb 7-1: USB disconnect, device number 33 [ 454.090949][ T6063] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 454.095645][ T6063] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 454.341846][ T6040] usb 6-1: USB disconnect, device number 40 [ 454.392955][ T4224] usb 5-1: USB disconnect, device number 38 [ 455.362135][T14205] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 455.453137][T14210] FAULT_INJECTION: forcing a failure. [ 455.453137][T14210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.459729][T14210] CPU: 3 UID: 0 PID: 14210 Comm: syz.0.2191 Not tainted syzkaller #0 PREEMPT(full) [ 455.459767][T14210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.459777][T14210] Call Trace: [ 455.459784][T14210] [ 455.459791][T14210] dump_stack_lvl+0x16c/0x1f0 [ 455.459845][T14210] should_fail_ex+0x512/0x640 [ 455.459882][T14210] _copy_from_user+0x2e/0xd0 [ 455.459902][T14210] generic_map_update_batch+0x380/0x610 [ 455.459937][T14210] ? __pfx_generic_map_update_batch+0x10/0x10 [ 455.459967][T14210] ? __pfx_generic_map_update_batch+0x10/0x10 [ 455.459994][T14210] bpf_map_do_batch+0x5b4/0x680 [ 455.460018][T14210] __sys_bpf+0x4cf9/0x4de0 [ 455.460046][T14210] ? __pfx___sys_bpf+0x10/0x10 [ 455.460082][T14210] ? ksys_write+0x190/0x250 [ 455.460108][T14210] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 455.460157][T14210] ? fput+0x9b/0xd0 [ 455.460181][T14210] ? ksys_write+0x1ac/0x250 [ 455.460201][T14210] ? __pfx_ksys_write+0x10/0x10 [ 455.460225][T14210] __ia32_sys_bpf+0x76/0xe0 [ 455.460253][T14210] __do_fast_syscall_32+0x7c/0x3a0 [ 455.460282][T14210] do_fast_syscall_32+0x32/0x80 [ 455.460309][T14210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.460352][T14210] RIP: 0023:0xf708e579 [ 455.460366][T14210] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.460382][T14210] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 455.460405][T14210] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000400 [ 455.460416][T14210] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.460426][T14210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.460436][T14210] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 455.460447][T14210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.460470][T14210] [ 455.649438][ T34] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 455.810843][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 457.002290][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 457.010256][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.017233][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.022002][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.025648][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 457.030116][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 457.033971][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.037522][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.049518][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.053593][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 457.064607][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 457.067618][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.071718][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.075564][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.079334][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 457.086323][ T34] usb 7-1: string descriptor 0 read error: -22 [ 457.086416][T14221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 457.089005][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 457.090866][T14221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.094393][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.098031][T14221] vhci_hcd vhci_hcd.0: Device attached [ 457.129554][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 457.211392][T14222] vhci_hcd: connection closed [ 457.212564][T11131] vhci_hcd: stop threads [ 457.215997][T11131] vhci_hcd: release socket [ 457.218310][T11131] vhci_hcd: disconnect device [ 457.237709][T14229] [ 457.238590][T14229] ====================================================== [ 457.241222][T14229] WARNING: possible circular locking dependency detected [ 457.243402][T14229] syzkaller #0 Not tainted [ 457.245054][T14229] ------------------------------------------------------ [ 457.249034][T14229] syz.3.2198/14229 is trying to acquire lock: [ 457.250951][T14229] ffff88801ced9220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0xa3/0x320 [ 457.254213][T14229] [ 457.254213][T14229] but task is already holding lock: [ 457.256498][T14229] ffff88801ced9188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x110 [ 457.260472][T14229] [ 457.260472][T14229] which lock already depends on the new lock. [ 457.260472][T14229] [ 457.263639][T14229] [ 457.263639][T14229] the existing dependency chain (in reverse order) is: [ 457.266411][T14229] [ 457.266411][T14229] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 457.269087][T14229] down_write+0x92/0x200 [ 457.270585][T14229] kernfs_add_one+0x38/0x840 [ 457.272157][T14229] kernfs_create_dir_ns+0xfc/0x1a0 [ 457.273913][T14229] internal_create_group+0x34d/0xf30 [ 457.275736][T14229] cpuhp_invoke_callback+0x3d5/0xa10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.277998][T14229] cpuhp_issue_call+0x1c0/0x980 [ 457.279893][T14229] __cpuhp_setup_state_cpuslocked+0x3a1/0x7b0 [ 457.281949][T14229] __cpuhp_setup_state+0xf4/0x300 [ 457.283610][T14229] do_one_initcall+0x120/0x6e0 [ 457.285218][T14229] kernel_init_freeable+0x5c2/0x910 [ 457.287321][T14229] kernel_init+0x1c/0x2b0 [ 457.289347][T14229] ret_from_fork+0x5d7/0x6f0 [ 457.291472][T14229] ret_from_fork_asm+0x1a/0x30 [ 457.293681][T14229] [ 457.293681][T14229] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 457.296766][T14229] [ 457.296766][T14229] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 457.299542][T14229] cpus_read_lock+0x42/0x160 [ 457.301604][T14229] static_key_slow_inc+0x12/0x30 [ 457.303550][T14229] setup_udp_tunnel_sock+0x39b/0x680 [ 457.305339][T14229] gtp_encap_enable_socket+0x445/0x4f0 [ 457.307165][T14229] gtp_newlink+0xf53/0x1390 [ 457.308683][T14229] rtnl_newlink+0xc42/0x2000 [ 457.310314][T14229] rtnetlink_rcv_msg+0x95e/0xe90 [ 457.312391][T14229] netlink_rcv_skb+0x158/0x420 [ 457.314459][T14229] netlink_unicast+0x5a7/0x870 [ 457.316527][T14229] netlink_sendmsg+0x8d1/0xdd0 [ 457.318350][T14229] ____sys_sendmsg+0xa95/0xc70 [ 457.320127][T14229] ___sys_sendmsg+0x134/0x1d0 [ 457.322150][T14229] __sys_sendmsg+0x16d/0x220 [ 457.324128][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.326109][T14229] do_fast_syscall_32+0x32/0x80 [ 457.328063][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.330753][T14229] [ 457.330753][T14229] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 457.333496][T14229] lock_sock_nested+0x41/0xf0 [ 457.335593][T14229] inet_autobind+0x1a/0x1a0 [ 457.337467][T14229] inet_send_prepare+0x31b/0x530 [ 457.339172][T14229] inet_sendmsg+0x43/0x140 [ 457.341205][T14229] sock_sendmsg+0x37f/0x470 [ 457.342956][T14229] __sock_xmit+0x1e7/0x4f0 [ 457.344619][T14229] nbd_disconnect+0x392/0x550 [ 457.346360][T14229] nbd_ioctl+0x8c8/0xda0 [ 457.348158][T14229] compat_blkdev_ioctl+0x2ee/0x7a0 [ 457.350476][T14229] __ia32_compat_sys_ioctl+0x23f/0x370 [ 457.352969][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.355291][T14229] do_fast_syscall_32+0x32/0x80 [ 457.357444][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.360138][T14229] [ 457.360138][T14229] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 457.363190][T14229] __mutex_lock+0x193/0x1060 [ 457.365236][T14229] nbd_queue_rq+0x423/0x12d0 [ 457.367271][T14229] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 457.369160][T14229] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 457.371312][T14229] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 457.373935][T14229] blk_mq_run_hw_queue+0x239/0x670 [ 457.376257][T14229] blk_mq_dispatch_list+0x514/0x1310 [ 457.378700][T14229] blk_mq_flush_plug_list+0x130/0x600 [ 457.381181][T14229] __blk_flush_plug+0x2c4/0x4b0 [ 457.382989][T14229] blk_finish_plug+0x53/0xa0 [ 457.384612][T14229] xfs_buf_submit+0x668/0xe80 [ 457.386245][T14229] xfs_buf_read_uncached+0x225/0x360 [ 457.388286][T14229] xfs_readsb+0x259/0x5d0 [ 457.389847][T14229] xfs_fs_fill_super+0x99d/0x1fd0 [ 457.392012][T14229] get_tree_bdev_flags+0x38c/0x620 [ 457.393847][T14229] vfs_get_tree+0x8b/0x340 [ 457.395396][T14229] path_mount+0x1513/0x2000 [ 457.397002][T14229] __ia32_sys_mount+0x28b/0x310 [ 457.398703][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.400503][T14229] do_fast_syscall_32+0x32/0x80 [ 457.402186][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.404307][T14229] [ 457.404307][T14229] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 457.406545][T14229] __mutex_lock+0x193/0x1060 [ 457.408183][T14229] nbd_queue_rq+0xbd/0x12d0 [ 457.409808][T14229] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 457.411709][T14229] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 457.413832][T14229] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 457.415843][T14229] blk_mq_run_hw_queue+0x239/0x670 [ 457.417636][T14229] blk_mq_dispatch_list+0x514/0x1310 [ 457.419672][T14229] blk_mq_flush_plug_list+0x130/0x600 [ 457.421820][T14229] __blk_flush_plug+0x2c4/0x4b0 [ 457.423509][T14229] __submit_bio+0x545/0x690 [ 457.425105][T14229] submit_bio_noacct_nocheck+0x660/0xd30 [ 457.427032][T14229] submit_bio_noacct+0xc20/0x1ed0 [ 457.428950][T14229] __bread_gfp+0x18c/0x3c0 [ 457.430509][T14229] vxfs_try_sb_magic+0xd6/0x530 [ 457.432163][T14229] vxfs_fill_super+0x1a7/0xce0 [ 457.433803][T14229] get_tree_bdev_flags+0x38c/0x620 [ 457.435525][T14229] vfs_get_tree+0x8b/0x340 [ 457.437092][T14229] path_mount+0x1513/0x2000 [ 457.438698][T14229] __ia32_sys_mount+0x28b/0x310 [ 457.440415][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.442143][T14229] do_fast_syscall_32+0x32/0x80 [ 457.443796][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.445874][T14229] [ 457.445874][T14229] -> #4 (set->srcu){.+.+}-{0:0}: [ 457.448095][T14229] __synchronize_srcu+0xa1/0x290 [ 457.449803][T14229] blk_mq_quiesce_queue+0x149/0x1b0 [ 457.451562][T14229] elevator_switch+0x17d/0x810 [ 457.453257][T14229] elevator_change+0x391/0x580 [ 457.454905][T14229] elevator_set_default+0x2e9/0x380 [ 457.456688][T14229] blk_register_queue+0x384/0x4e0 [ 457.458409][T14229] __add_disk+0x74a/0xf00 [ 457.459995][T14229] add_disk_fwnode+0x13f/0x5d0 [ 457.461658][T14229] nbd_dev_add+0x783/0xbb0 [ 457.463216][T14229] nbd_init+0x181/0x320 [ 457.464701][T14229] do_one_initcall+0x120/0x6e0 [ 457.466349][T14229] kernel_init_freeable+0x5c2/0x910 [ 457.468137][T14229] kernel_init+0x1c/0x2b0 [ 457.469728][T14229] ret_from_fork+0x5d7/0x6f0 [ 457.471345][T14229] ret_from_fork_asm+0x1a/0x30 [ 457.473014][T14229] [ 457.473014][T14229] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 457.475424][T14229] __mutex_lock+0x193/0x1060 [ 457.477041][T14229] elevator_change+0x17d/0x580 [ 457.478671][T14229] elevator_set_none+0xaa/0x120 [ 457.480468][T14229] __blk_mq_update_nr_hw_queues+0x4bd/0x1200 [ 457.482480][T14229] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 457.484380][T14229] nbd_start_device+0x1b0/0xd70 [ 457.486048][T14229] nbd_ioctl+0x219/0xda0 [ 457.487529][T14229] compat_blkdev_ioctl+0x2ee/0x7a0 [ 457.489268][T14229] __ia32_compat_sys_ioctl+0x23f/0x370 [ 457.491139][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.492848][T14229] do_fast_syscall_32+0x32/0x80 [ 457.494512][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.496582][T14229] [ 457.496582][T14229] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 457.499237][T14229] blk_alloc_queue+0x619/0x760 [ 457.500903][T14229] blk_mq_alloc_queue+0x172/0x280 [ 457.502596][T14229] __blk_mq_alloc_disk+0x29/0x120 [ 457.504278][T14229] nbd_dev_add+0x492/0xbb0 [ 457.505779][T14229] nbd_init+0x181/0x320 [ 457.507196][T14229] do_one_initcall+0x120/0x6e0 [ 457.508796][T14229] kernel_init_freeable+0x5c2/0x910 [ 457.510496][T14229] kernel_init+0x1c/0x2b0 [ 457.511968][T14229] ret_from_fork+0x5d7/0x6f0 [ 457.513506][T14229] ret_from_fork_asm+0x1a/0x30 [ 457.515085][T14229] [ 457.515085][T14229] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 457.517240][T14229] fs_reclaim_acquire+0x102/0x150 [ 457.518934][T14229] kmem_cache_alloc_noprof+0x53/0x3b0 [ 457.520785][T14229] __kernfs_iattrs+0x124/0x3e0 [ 457.522362][T14229] __kernfs_setattr+0x4d/0x3c0 [ 457.523961][T14229] kernfs_iop_setattr+0xda/0x120 [ 457.525613][T14229] notify_change+0x6a6/0x1230 [ 457.527210][T14229] do_truncate+0x1d7/0x230 [ 457.528733][T14229] path_openat+0x2678/0x2cb0 [ 457.530282][T14229] do_filp_open+0x20b/0x470 [ 457.531812][T14229] do_sys_openat2+0x11b/0x1d0 [ 457.533391][T14229] __x64_sys_openat+0x174/0x210 [ 457.535062][T14229] do_syscall_64+0xcd/0x490 [ 457.536649][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.538574][T14229] [ 457.538574][T14229] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 457.541133][T14229] __lock_acquire+0x12a6/0x1ce0 [ 457.542760][T14229] lock_acquire+0x179/0x350 [ 457.544315][T14229] down_write+0x92/0x200 [ 457.545808][T14229] kernfs_unlink_sibling+0xa3/0x320 [ 457.547515][T14229] __kernfs_remove+0x2c0/0x8a0 [ 457.549168][T14229] kernfs_remove_by_name_ns+0x68/0x110 [ 457.551032][T14229] sysfs_unmerge_group+0xe7/0x170 [ 457.552774][T14229] dev_pm_qos_constraints_destroy+0x38/0x780 [ 457.554734][T14229] dpm_sysfs_remove+0x70/0xb0 [ 457.556318][T14229] device_del+0x1a0/0x9f0 [ 457.557846][T14229] device_unregister+0x1d/0xc0 [ 457.559494][T14229] hub_disconnect+0x17b/0x500 [ 457.561174][T14229] usb_unbind_interface+0x1da/0x9e0 [ 457.562948][T14229] device_remove+0x125/0x170 [ 457.564551][T14229] device_release_driver_internal+0x44b/0x620 [ 457.566582][T14229] usb_driver_release_interface+0x109/0x190 [ 457.568573][T14229] proc_disconnect_claim+0x219/0x370 [ 457.570392][T14229] usbdev_ioctl+0x16e3/0x4070 [ 457.572027][T14229] compat_ptr_ioctl+0x6b/0xa0 [ 457.573659][T14229] __ia32_compat_sys_ioctl+0x23f/0x370 [ 457.575551][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.577335][T14229] do_fast_syscall_32+0x32/0x80 [ 457.579009][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.581174][T14229] [ 457.581174][T14229] other info that might help us debug this: [ 457.581174][T14229] [ 457.584307][T14229] Chain exists of: [ 457.584307][T14229] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 457.584307][T14229] [ 457.588613][T14229] Possible unsafe locking scenario: [ 457.588613][T14229] [ 457.590987][T14229] CPU0 CPU1 [ 457.592650][T14229] ---- ---- [ 457.594323][T14229] lock(&root->kernfs_rwsem); [ 457.595803][T14229] lock(cpuhp_state_mutex); [ 457.597980][T14229] lock(&root->kernfs_rwsem); [ 457.600389][T14229] lock(&root->kernfs_iattr_rwsem); [ 457.602011][T14229] [ 457.602011][T14229] *** DEADLOCK *** [ 457.602011][T14229] [ 457.604490][T14229] 5 locks held by syz.3.2198/14229: [ 457.606106][T14229] #0: ffff88802433b198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a8/0x4070 [ 457.608929][T14229] #1: ffff88802433c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 457.612134][T14229] #2: ffffffff8f93e6a8 (usb_port_peer_mutex){+.+.}-{4:4}, at: hub_disconnect+0xe3/0x500 [ 457.615103][T14229] #3: ffffffff8f516dc8 (dev_pm_qos_sysfs_mtx){+.+.}-{4:4}, at: dev_pm_qos_constraints_destroy+0x28/0x780 [ 457.618545][T14229] #4: ffff88801ced9188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x110 [ 457.621832][T14229] [ 457.621832][T14229] stack backtrace: [ 457.623596][T14229] CPU: 1 UID: 0 PID: 14229 Comm: syz.3.2198 Not tainted syzkaller #0 PREEMPT(full) [ 457.623611][T14229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.623618][T14229] Call Trace: [ 457.623624][T14229] [ 457.623628][T14229] dump_stack_lvl+0x116/0x1f0 [ 457.623648][T14229] print_circular_bug+0x275/0x350 [ 457.623663][T14229] check_noncircular+0x14c/0x170 [ 457.623679][T14229] __lock_acquire+0x12a6/0x1ce0 [ 457.623696][T14229] lock_acquire+0x179/0x350 [ 457.623710][T14229] ? kernfs_unlink_sibling+0xa3/0x320 [ 457.623729][T14229] ? __pfx___might_resched+0x10/0x10 [ 457.623742][T14229] down_write+0x92/0x200 [ 457.623752][T14229] ? kernfs_unlink_sibling+0xa3/0x320 [ 457.623766][T14229] ? __pfx_down_write+0x10/0x10 [ 457.623778][T14229] kernfs_unlink_sibling+0xa3/0x320 [ 457.623793][T14229] __kernfs_remove+0x2c0/0x8a0 [ 457.623808][T14229] ? kernfs_find_ns+0x277/0x540 [ 457.623822][T14229] kernfs_remove_by_name_ns+0x68/0x110 [ 457.623844][T14229] sysfs_unmerge_group+0xe7/0x170 [ 457.623863][T14229] dev_pm_qos_constraints_destroy+0x38/0x780 [ 457.623881][T14229] dpm_sysfs_remove+0x70/0xb0 [ 457.623893][T14229] device_del+0x1a0/0x9f0 [ 457.623910][T14229] ? __pfx_device_del+0x10/0x10 [ 457.623926][T14229] ? component_del+0x41d/0x550 [ 457.623936][T14229] ? kernfs_put+0x35/0x60 [ 457.623950][T14229] device_unregister+0x1d/0xc0 [ 457.623967][T14229] hub_disconnect+0x17b/0x500 [ 457.623978][T14229] usb_unbind_interface+0x1da/0x9e0 [ 457.623992][T14229] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 457.624009][T14229] ? __pfx_usb_unbind_interface+0x10/0x10 [ 457.624023][T14229] device_remove+0x125/0x170 [ 457.624038][T14229] device_release_driver_internal+0x44b/0x620 [ 457.624050][T14229] usb_driver_release_interface+0x109/0x190 [ 457.624065][T14229] proc_disconnect_claim+0x219/0x370 [ 457.624080][T14229] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 457.624100][T14229] ? find_held_lock+0x2b/0x80 [ 457.624112][T14229] usbdev_ioctl+0x16e3/0x4070 [ 457.624128][T14229] ? __pfx_usbdev_ioctl+0x10/0x10 [ 457.624146][T14229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.624163][T14229] ? do_vfs_ioctl+0x128/0x14f0 [ 457.624180][T14229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 457.624199][T14229] ? find_held_lock+0x2b/0x80 [ 457.624208][T14229] ? hook_file_ioctl_common+0x145/0x410 [ 457.624226][T14229] ? __fget_files+0x20e/0x3c0 [ 457.624237][T14229] ? __ia32_compat_sys_openat+0xf0/0x210 [ 457.624248][T14229] ? __pfx_usbdev_ioctl+0x10/0x10 [ 457.624263][T14229] compat_ptr_ioctl+0x6b/0xa0 [ 457.624279][T14229] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 457.624316][T14229] __ia32_compat_sys_ioctl+0x23f/0x370 [ 457.624335][T14229] __do_fast_syscall_32+0x7c/0x3a0 [ 457.624354][T14229] do_fast_syscall_32+0x32/0x80 [ 457.624371][T14229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.624386][T14229] RIP: 0023:0xf7fc5579 [ 457.624395][T14229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.624406][T14229] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 457.624416][T14229] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000008108551b [ 457.624423][T14229] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.624430][T14229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.624436][T14229] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 457.624442][T14229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.624452][T14229] [ 457.950469][ T4224] usb 7-1: USB disconnect, device number 34 [ 457.975434][T14227] syz_tun (unregistering): left promiscuous mode [ 458.618208][T11131] bond0 (unregistering): Released all slaves [ 458.889589][T11131] hsr_slave_0: left promiscuous mode [ 458.892324][T11131] hsr_slave_1: left promiscuous mode [ 460.472141][T11131] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.475494][T11131] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.538523][T11131] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.542334][T11131] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.624131][T11131] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.627914][T11131] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.701329][T11131] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.705020][T11131] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.272141][T11131] batman_adv: batadv0: Removing interface: ip6gretap1 [ 461.341465][T11131] team0: Port device geneve0 removed [ 461.715845][T11131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.719981][T11131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.723616][T11131] bond0 (unregistering): Released all slaves [ 461.796071][T11131] bond1 (unregistering): Released all slaves [ 461.799794][T11131] bond2 (unregistering): Released all slaves [ 463.536393][T11131] hsr_slave_0: left promiscuous mode [ 463.539166][T11131] hsr_slave_1: left promiscuous mode [ 463.542710][T11131] hsr_slave_0: left promiscuous mode [ 463.545458][T11131] hsr_slave_1: left promiscuous mode [ 463.548227][T11131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.551640][T11131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.557514][T11131] veth1_macvtap: left promiscuous mode [ 463.559861][T11131] veth0_macvtap: left promiscuous mode [ 464.971445][T11131] team0 (unregistering): Port device team_slave_1 removed [ 465.036119][T11131] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 05:47:42 Registers: info registers vcpu 0 CPU#0 RAX=00000000008f02ed RBX=0000000000000000 RCX=ffffffff8b913bf9 RDX=0000000000000000 RSI=ffffffff8de4eb89 RDI=ffffffff8c163180 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90aba290 R15=0000000000000000 RIP=ffffffff8b91275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032108ff8 CR3=000000002469f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561a2b5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc90003d1ef68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0ff6c0 R15=ffffffff8561a250 RIP=ffffffff8561a2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000324f9ffc CR3=000000002acda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff91503e8e RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc9000221f120 RSP=ffffc9000221f068 R8 =ffffffff91503e92 R9 =0000000000000000 R10=ffffc9000221f0d8 R11=0000000000012a6d R12=ffffc9000221f128 R13=ffffc9000221f0d8 R14=ffffc9000221f318 R15=ffffc9000221f10c RIP=ffffffff816ac9fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa6e40 CR3=0000000023ceb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7444ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000058e17c RBX=0000000000000003 RCX=ffffffff8b913bf9 RDX=ffffed10056a6656 RSI=ffffffff8c163100 RDI=ffffffff8190ca91 RBP=ffffed1003865000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c328000 R14=ffffffff90aba290 R15=0000000000000000 RIP=ffffffff8b91275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=00000000242d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000