last executing test programs: 1m12.288324332s ago: executing program 0 (id=764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560f, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1ffd, 0x6, 0x2}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) 1m11.102279929s ago: executing program 0 (id=774): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a000b00fe800000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000070001"], 0x3c}, 0x1, 0x11}, 0x0) 1m11.017978438s ago: executing program 0 (id=775): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x7, 0x8, 0x6}, {0x7cbe, 0x5, 0x3e, 0x3}, {0x0, 0x6, 0x5, 0x2}]}) r4 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x80001, @local, 0x1}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m10.012880425s ago: executing program 0 (id=778): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000192ffffff00f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m9.937989298s ago: executing program 0 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004801}, 0x4800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) (async) socket(0x2, 0x2, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004801}, 0x4800) (async) 1m9.678002132s ago: executing program 0 (id=783): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfd85) 49.141771542s ago: executing program 32 (id=783): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="6502000002fd0a4f0524012800001f000000000000004f0afd000000000000000000000000000c00000001040000000000007dff0a6e6f6465767b65766f03d38b9200000000000000000000000000280070673effeb09b5351f5bde054000000000187899a916638814e5708103b494e1000000000000000002000800ac00f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a440b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37003986415fc5d613a39b1191937a280e8d889fc220d115ac8e2f184b9a61758d26772ab0f2044d8ef0263ddd97d3c427b3a532efab1d1ce32ca7c1fc231af48408e02b255028b7c9bb85396f4d8af0eb95fc0ecc99f780e22c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7"], 0xfd85) 4.139697279s ago: executing program 1 (id=1078): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18300000eaffffff000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2b00}, 0x94) 4.13689734s ago: executing program 1 (id=1080): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r1}) r3 = syz_usb_connect_ath9k(0x3, 0x0, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc7}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "929eb598", {0x1, 0x101, 0xb72, 0x7f, 0x24}}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3002000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r7}, 0x18) 2.146896412s ago: executing program 2 (id=1096): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xf, 0xf9, 0x55}, 0x10) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0xada0d4317990e9ad}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001ac0)='syzkaller\x00', 0x34c, 0xdf, &(0x7f0000001b00)=""/223, 0x41000, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80), 0x10, 0x10000}, 0x94) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000280)={0x550, 0x20, 0x30, 0x4b0, 0x747f, 0x2, 0x18, 0x0, {0x1, 0x8, 0x1}, {0xfffffff8, 0x7, 0x1}, {0x9, 0x3}, {0x2, 0x2}, 0x0, 0x80, 0xfffffffe, 0x8, 0x0, 0x4, 0xf5, 0xe04, 0x9, 0xa, 0x8, 0x4, 0x0, 0x100, 0x2}) socket$kcm(0x29, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xbb5, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xb7f, 0x0, 0x0, @private2, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}], "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"}}}}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x400, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {&(0x7f0000000840)={0x104, 0x19, 0x310, 0x70bd2c, 0x25dfdbfd, "", [@generic="330fdbaf28e79cb77bcb0a96e87ae364c0a7083aae0aa83467032771c9b35f04eb7643d3d4bb3e6e7d689c8b7f793eee6e75e1080e37d5b01747a16fddef6e9ffafacddea62e7490f2267d6db40e72ba1ec670ce15653014e85b2073042305de04e6c33e9da59373f5fc7ef598c93f055c6d6247435ce459f1130cf47f9c4c595f6a962efe2a310103c1eb5bdfc8fb6fdfd025279311b6801abef4f5e72c2435ac6695478435c59be37131aa31645674ed78cec153e36ebec6cbe191d76adb34f00b4a7e8c21061763063214c211cc8c15a4613bbbfbe1baeb8f5b8895f083982ff6de198178d030ddb5bd0230acfb7f7e"]}, 0x104}, {&(0x7f0000007300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000800729d", @ANYBLOB="0800ca000a0101000000"], 0x1604}, {&(0x7f00000024c0)={0x10, 0x19, 0x0, 0x5, 0x25dfdbfc}, 0x10}, {&(0x7f0000004b40)=ANY=[@ANYBLOB="740000002700080025bd7000ffdbdf2504001380eb76111d66175030b1546a96b323b9ed8e985489a40f4d7370456dee6bf2e6f759d810af273e84bff18d963140e750b638a598d49b3dfc2d86e021dee130"], 0x74}, {&(0x7f0000001dc0)={0x7c, 0x20, 0x801, 0x70bd25, 0x8fff, "", [@generic="4b748007741125f0914002486b6aa7489fe11c828c7f3d2de39601380cb4101e973e153ad1b7473ff8919ac9ebf9b6f77fa3a73113a499ab3ba33f2aa345ef4f0a76c3cff9a3ee24fbb9bd6ca65057d6cc9c31b6ab9dc1acda58cfa97ef4e249877e92bcccfb7b5b10b10c9c"]}, 0x7c}, {&(0x7f0000004c00)=ANY=[@ANYBLOB="d80000003b0000022dbd7000fbdbdf255d23ad2690047c182674a815fa02487029bf97139fda6763881cfee37972722595561b795e90416d87f5f588b0ce4e67729aa658f79144db78765cf8c87723d90622cb9e6d33dce784ef40e5081842415111b3ea3c047eb0f125a6b3c543824679685b05cfa40ff4e52afd1cfa237095f7b06f47328e2c26f1a8b88c76b9186e5cdf5950427ec6bf1c46ac32404d97264b1a6bda51d9f0fd820c00bf7b97e2efdcae794f5d5b6f53c3a2ec67d21144bbecc6caff7cfbc8"], 0xd8}, {0x0, 0x304}], 0x8}, 0x0) r4 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0xfc, 0xa, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 2.100926352s ago: executing program 2 (id=1097): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a000b00fe800000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000700000000000001"], 0x3c}, 0x1, 0x11}, 0x0) 2.045928118s ago: executing program 2 (id=1098): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000002008000f0001000000", 0x24) 1.919326216s ago: executing program 2 (id=1099): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600000000b10000000000000000"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}, "ee"}}}}}, 0x0) 1.918635411s ago: executing program 2 (id=1100): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x3f}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000008c0)={0x1, 0x0, [{0x1, 0x7c5, 0x5, 0x1, 0x4, 0x9e13, 0x7}]}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.786347493s ago: executing program 2 (id=1101): socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = gettid() clock_nanosleep(0x7, 0x3b9ac9ff, &(0x7f0000000040)={0x77359400}, 0x0) tkill(r4, 0x7) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) unshare(0x20050400) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r6) 1.582542898s ago: executing program 4 (id=1105): io_setup(0x5, &(0x7f0000000000)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x1e, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007b01"]) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x9, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) io_submit(r0, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x10) 1.46098382s ago: executing program 3 (id=1106): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xf, 0xf9, 0x55}, 0x10) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0xada0d4317990e9ad}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001ac0)='syzkaller\x00', 0x34c, 0xdf, &(0x7f0000001b00)=""/223, 0x41000, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80), 0x10, 0x10000}, 0x94) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000280)={0x550, 0x20, 0x30, 0x4b0, 0x747f, 0x2, 0x18, 0x0, {0x1, 0x8, 0x1}, {0xfffffff8, 0x7, 0x1}, {0x9, 0x3}, {0x2, 0x2}, 0x0, 0x80, 0xfffffffe, 0x8, 0x0, 0x4, 0xf5, 0xe04, 0x9, 0xa, 0x8, 0x4, 0x0, 0x100, 0x2}) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0xbb5, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xb7f, 0x0, 0x0, @private2, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}], "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"}}}}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x400, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {&(0x7f0000000840)={0x104, 0x19, 0x310, 0x70bd2c, 0x25dfdbfd, "", [@generic="330fdbaf28e79cb77bcb0a96e87ae364c0a7083aae0aa83467032771c9b35f04eb7643d3d4bb3e6e7d689c8b7f793eee6e75e1080e37d5b01747a16fddef6e9ffafacddea62e7490f2267d6db40e72ba1ec670ce15653014e85b2073042305de04e6c33e9da59373f5fc7ef598c93f055c6d6247435ce459f1130cf47f9c4c595f6a962efe2a310103c1eb5bdfc8fb6fdfd025279311b6801abef4f5e72c2435ac6695478435c59be37131aa31645674ed78cec153e36ebec6cbe191d76adb34f00b4a7e8c21061763063214c211cc8c15a4613bbbfbe1baeb8f5b8895f083982ff6de198178d030ddb5bd0230acfb7f7e"]}, 0x104}, {&(0x7f0000007300)=ANY=[@ANYBLOB="04160000130000022abd7000fbdbdf25f201e180b534844e0b4fa175819b1c73ecf99025747820249c8ff06e9ebe6d4f5eb46433699e68d79bc0e65f933bf44b6ee747e2bcc64b8c7c0c0d00119057e322853817f29396bbb71212d296c7bd0293f43177567a7fb2fecb0f3fb62305a4e3191e7504e37903de3d1dcc5c05f35cc610b996173d4d7107131ea82930e170627f70103966185027e6900e53a02621ebaa2ad028bbe8061720a3f2fe9c7fe006000d007b0000000400b28004003f8008004c00ac1414aa915158a74df667dbaf24377c918f2e9315fc527e6d220796fd794d8b1e76a3cb561f3a524a2835e89d5ba7d7fc3f42f259ae559afeddbfdd1a03894cad4333996b86be6907c06787567a9d921ed82aae5c25d1243848d974d0449c9601f7d54b1c3fae86bb0202504269276bc1b51baef95b672b34f59dc80c23eeb86db2fa57533ec4f2c01c7bcb2fc12a04bde4d75a66f6f5d19fcb7d24a06e406e9897b4f252efe5e64c55a10d1d3afe35eea905b638473fe5b94d1cba2208ee83f484dfc1f6fcf63e678981425fae4dd606bfcec955bd488572917c5f722abebb7294f8b7517653fb611be9080a7720147f821fdf637d77249f75a05a597053f0a1763f244db560bf2c016742fbd8597c2568f8e69f2c83bc03be2056e2adf5e6a3818dca13d15090c55cc95ade628852d7bc626ab9de6b2e4d4ba38dbb99000004004f0008009800ac1e010194d5fe6bf0d3e06672cb267bda5a7d290012b06cf1f6c7da2cd28bfdfce130c4c1b409875523e77fa55f8e666841b8973f1bbaba2a325df77f0286e63f3e8aea73ff22a4a201361dcaeeafcb46e09096588b224617aa6f5142b4534ce6cbde739e458d26e725121ab03cf1d3c892bdfc691c7673d705c855b8be99d995746c8b7c109380d358eebee1fac2a18e5e61f18932fd0ca7a8060fd81fcb6aaaba09f29e0901e64ded126dcc0015642b7f1889912b203ce33bb24b5e1a2d70f78bc0c22ad97a66c272c0dea688ab0720f0e1b7ab7cdd0dbc493419b1cba47ace2e1f5e9900e068c7ce9b8c6ad259581c210ab2ce525b40bc9c88c82ff15ee83b7ce3e6f5f9e2601de2939f3785ac1d70a30f421a85a8e9acac34e82089826c89dabbbf4bc74b01b6ca88bc530563c89526cfc80f11dcadd99254e0b91c5027bf2e19b25b2f1095249c784c535c78746bce4830d30080f6e3fb335869acaae088428394ea968cfefbd9e17c6658742eb1f0435eecbd93213458ae5f2e4bad8f39a512980df956e32d159c21f4245b59822bbee07529bc17e86ba64596a9306fec4a2861cb0efea8524aed9e3ee8b39422ab9a718a688f4cc0baa206d533f5d4d6d2179db2b842aedd0a1a8dc269afdc3715263b9550ca7d37ffbb082e27ff545e2fd01c53ae17a3a46da26d1abaf27bd4bf592ce1d00aca73e5e6f7c15002c136368b551a60127e36be1594e07670916d8c0ca943be54c0c3a6346b5b9aef65fcdcd25c8ebd136383bab803f11d9813c183993587f5255de354915386b56a3bb315b7672d1a497c6fa466fd0dd7ebaa030f269a47302e7b86f77cdebe1e83f44ec54b7231e5b0ede8d9c30e853b38a8dc6a7248569ea013531ec06122c5e7da96f3a8db9d07784e4b66b5a5de31d193cf772ffd0c0c1cfb862f4cb9ece3d327a063bb5439014c032f93dbf8884afd7d55b8299cff109c248f785d074f7ad9865cb56896dba7de0324c582f8be93cccf6a4a3ea2b3274dc0960cad4f03359f85f90a6e15f9774b8c1ec65d1dfab75afc6005d8d62b2ccde20e4f27ac5fb8e0a7d7dec13f7acfe3789674fb4b2340698c536257c73856135edc50ec868c6b3733bc4706736bb67f32674c523b8b4c7ba71179bae019d8f12c154f5f32d11f3df6adc26402fc5690b1c8b6adea70a8c01d090571f724c9a311ac61034fa38c732626e6f51b9429904b5d1a96b3646b3cf3985e0865f7d9cf5c991cc2e39708a8c2829729bd0fa1a057dedbdb1467858e7d0166bcb8ec79b551e1a0476fc22f5890c1e82a8a2c1ca24097ff7b9f1665573ef5e9938f55baf830fe62ec45a4322b85bfd94c13338c0e97fe70f5c360c4a98b76a01454546ec8135cd225b1446c2306747ce34c9c0a0b7bd5332da2735f8f22b0b8ebe43fb68e33f8c50bf3c62a2747478966a3e529d4202dfbee6694134d0352714f4ba80a1ca332397bd17f1915405f6aff097f7b05f169f6deaff03b476f48e3839cc43633b631225580628aa0dad7e2950e8e307c969ab8bd7aedc49b11b606ee46d307210497aeae6e3a7369f653945b8c583747d9d0c2f5e3c5141ee1b2339038dae8ea54f29285f24e53d139d06aba97230b3d5217511fb3012f1b69451cccb1b334ff83ab6f2f61cad1c04293b9cde9d335f625f5479d5446add95ba0e88271bb5a98283714dd3abe9959a604405cc57405a7e009c1707181ddda07ef3221a2b2d49f61b5bfd21789479f3f7f1f7bb15ccdbd1479117804e216fff27da47aef58b80591aa21ed1a8546862f856c0d25e58bb9bdc6d4be933ec3a87cff712666b4814e63998a023de16e9aa9b9bb082af3870d4069b5323a644ce87f8a9d0db330cd3b9bfd1646e1e48fc14179b7f97c140fc2527c8e3f4f38bc8700dfafb8c13a5c138ae5c1641d33cd6b72f077466915b67fb87892fad2afa4ffbc59aa5b93e36c952429bc49814ffd47db29b9a7fbef591a52a144cd103ec9fbe3b28a4bd46f153752a27684f1d33e26c82ca91fc90743e5c73a595a9f0a8aeeca4804b0f2b37647a386f89641e1bad400429504169b4ca6f543cec841a6fb8df1040ca6549e436141fdcca50879299f5d9f19f03044522b7d3d91d3399c18c4a0a63bd7682b111f9eb4c1803a333ba7c1daa82fa70cfaf89c9126c1037fdd857b1919fb62dfddbbb820b21962c6694868564b8459f2c2194cd48e4e62018afa104acd0f5d99bc9a6a128e6776a688525dfc6ee9a9be3c4810cf2bb9b94074b271f9659c3833a242bb188882067a5f04cf8a46539eeb0f7d4085d327f83080d0bee43fc3ee73315ab2f1f46479ebc5e45e2758b4db0ee85dff1b086b39bc976c90beac556b3222104c75f6c5309bdfa4d2c54799da04ebabd20b5ff071b56f50ddcf1af0f3d129477d76e8c894137381425ea3910929fa4f18667bdc5c56ff9b8734d2cedefe86a09987c9c0169577345d5cbfa4c95fdb9678931d80a7379593e57a6ccaa36543d6d7ed6cf29d0b5d5a57597424ab9d223615e65215c7e80d9647a95d19ea02a42330b06e61809cd98389bc75de706787bec57a91249a40a171389a77ee372e9224ce0ba6a5d7aaa0ca7930c57e6b2b56d1147b8a924a8ca67ad001765e4262c3cef332bc453e00c7a337de068b82c4ec60098fd61bc0c922dc0340b0ad0720397216ca88110967ca2a8979ed6ab6768171c368242ec8c5d4446ffc350ce4a94a845a1661ea50c97dd8e648b729697bf5748ddbb546feed22e083827e09d337177691936f7d233f21e24054168305a951e1c01071ba77391230daecba367475bf1f79d4affc2b599edac440dbcebd3719d841de55d9ffe0915ae7e7a79313de972e39ee170e54e55e5ebf8f9936d2e74b0b1031470cfd27f927a25c0a66d721e5c5bd0e7d94f681bd0dd9ddad73b536a89a66fe78b0077b29cb889662c97db4c9c8bb9220999ec4dfff11518aa832895a0f6260dfe041ef6e4170b4082da97d4af586d5fcc5c58534675578311d6a3c5a605f19f3bfc51c8542bd51da696b5f80a581bca939e12a118a334fc40a9fca398647a418eb129361db7457894b037310eb8451d09ad551183141dde6deca21f25b5386cf1b2ac47befd24be4f05c0cbeb08d155dbbc05ef1f16acad51cf4e3b457fb65bb67ada310dfc7801805f7360404d3b574eaa63d1d715833a196455dd3be3a8140e8b9c3c52f9971964700e047664d38a38675de84631f2f808298ff8a693999de89c3c3363b2dda7f8c08fb2ec881f9f9dc1f70a83c8645ed138fd271fd2b38ead9eaf61d4442abac8b723bd7412230bf8f467fb08727483a2b28584b425bd812c7d13357c5797d1c2e0d765f32fdcf527ceb9e49c69be4d8b3cbccb460dbd8ebc4aed31c7b11b2921b1f0e608b10cd7a745c9ea00fff322f4ad0f21e461f13e04379839b4a25aa3dfb3831ee0892ee4af095b35dda0b39d5f5765a4425660fe41a277bcbe832b73b28408defe58d0fcb0e1bf268b3ced9d766b4486dc74063301e84e33af4311a77dc3c2d56cb228476c4cf78cd9959b4ebcf7b78a8c76cf7e43db07a818c6e8d3f853f90e12ed59c6b90b1379bab77519a00c3f555d441027ea17397be07e69d3854b9af751bfca91602c9e5a57790435e843659ddefd8f2b4711532a18329407c62894ef2ead2da34163288d0e2851e7a69c38c14191f770abe6fd7da976fcfdc4e0abf87843073e766ad3092165413b4ef155881706345db50a4e5c6ec23a54ab0d5b191716e586ce2466be0f558be264852c8a9c78a897e82ef866928a661fcacff9abbdad840ac7f075982ac9cb05370859241506871ce8bdf04f5cd8e14677f72c14fcafa63d4aaa05be3206163d5a6659bee4eff81cf912aa1342504a84242c634eeef84e99c1248966e6d44f62417a676b49d703a6f8958305441f0e2ffee428c632c193c91b98ec8abc26a556b0aa631eb35b4a5b796552d266ef75c41f60d81a6e2ea9fbe3fff658828d2bbba2c386d077180b811c4a5d9c56cf7a94955bb3a5eb0a44cdd5aae33a4f9b6cad7c1c05c0d2c6c13c3eed9f8b76a531b667a4a0bf26251c3fd7f9cf33bfac6f051744d9428c11e0ffdab2ae36cc0f0d49fbceb4421036a5d22fbc04d214c3110b9da8346afbda9583256d863b023a1044a9983290acbf74918c501a00d9171e18d24054adc16b3ea077eb25f1efb2ab8de60e6e5c43f1fbbedb92a29cb90b267c8334b26212ba2e627837dbcd7f4d3f37ff5b4c526fe1c7af52c2fcab1335834f31334e57a0e02642d1596e4e0941881f25d49957e468bba2a053cb50a607bc6d7764986b1ca3bfd57b93559b1de7aa57eac989617794480b3d388bde0f547cfc3f63f7b49e6451bbd42223a59ba434998f75a8e3929f5f67de03d72731e21e278c4cd6301cba888898ed530c01386f6501752a18ae2c9d8a3752575a42fbbed1b29709fe03465cf6571165bfb2297fe440a24c2af256a3411c690cf5afd044e59d616c833f9f51ecf382e62d04a8dad73432975318198de6f65dfa94635411b6e0e2598422a430108889ddb377c604d2f97e48dcf0d8a9a51b4ae4575730edea7f3b968552884fb0b929ef016ee36fc189de4dd988f840fc86def5eb230b2f93bd1be5e8cb1889afce5b299f3589554e1f2adf0bf534eafe3356f18917c446bf177ef8ae6e6b85a460a0a31839974e2454a379951ac2d10a7f714187a1242504be34886e416fa1411de75bde2e59d8a11892b2d6acdd0e12e06d891a89db068613f6d0e2ca9646580d51091b4640121d1bb5030901b083a42175780f32a68f200f7483dd63f87816ff8a24ce39b8bfde428aa1781cad3230e64d69f83cddd522b7d782b3330de7bf9b7a0553c52a64da314107479d845d3797d6bd25b8614646f339f36a29e945ccc485d96139951a896b91917fa94ed4080a47bd8d5fe6cb2c17c2b0d4eed1d88457b981b056647ae9b9337da6bc085a7f7ccdfc03d47fff0d79be4939a41e8b666a1d1a0815435fd92bffbc82983faa160fd86c02a64392279e73d8a07723e562d96948d14bb3522ccd85cb4ca06a2a6137134d5c235013c15917158c4f492559425b4eb0c4d06c14600a96f850090f04041a927f13a19919d466fa63b6d32fdf7c4ebb825c01fa2c5aad4eb55b8638e6abc8a1af12f2ad9971b4202facc185ff37771085f6ed0e69f988d60b61bbf3b55f8b682412a6a4ef323a3f3fec7e59165319f3059c7177649850bb15529275b5b362a13745e351f117178123f2161cf614fae2be6e27c657bc1d52a196b7738d1f2be01c5cf876cd10758f94c5f6452b1970077fb6dfdb1bce53fdb33b9222e4fd64bf31809b4a084b15b6bd361de54df252eaf0acaf57333001115153320571b454b17d5c36fa30bb7573ef26c850229fdd8bd3d8ab168ba5e740c97910d8f0adcdb0901239adc168640b2dc4f01ad38b2614ac4f93219d9fa6e09e749035bc28383671bbf464293045f36200d9b8cd6f3da9c7f868ffb844b362ff98a1c153266dd7c35692c1119b435bad20d12aa9975ee0db465127023ceb493ae27dcc0560890eb1ba1be1ccae71e7176b130d119cab59967dfb57cd81f510ec1cea814983ec248ce092f78b5b693375bb98ea7306bc7de78757f07db62a1082d475ba3e6b8d0a2564ed47c5cc4ffac6aa1ede631733ea19d51cc6b957c1edac41f8373b788368344d8bf282e3511730b11341be6ef2b8846bf5658b59525d543193558d24af889361f2f65a7d337b3b4aa8feda078dc5fb1266b065d25cf52d2e0ad05a7a5d6aebcaa3d73e5e56bc3f9b41a530ba3f7e17048d2356f4d60ac7262f6f87917729f92c3e909b5bd8d094bcfff6afd932405bb51bcd9018ecd88ba1aaffb8a5cb30401b8a908e2c1d53da238e049acc6f4f1376a8cf9e97669ffc174b3251bcd4bb143b5a2280295277988407c71e50bf39c382263051d7456a37207a17012c3f2a6d4817052c247c58d7bf3cba0d883f7e809edacf4228aa2e9efbf47f863bb86b90ea34e17221d649bd446a64f1b57c12f1026357415e925b5c829dd42dee7f67fcc089fbf8f396f1da1aab0e8a457b8904b5c4e09ad3ae6669c326c905110039fe67cdfa4e896a78176de6bb284ab277cfe501f2be260df5e7aa22e38933c0db51f1bb136335f9da71cd11bba5bfa5825c19f7c1be36929569610ea24e956e6cbb8340e51b7d51ea7c77c6a87361d0ac7d3a33c6c271bb048abf9c82bf4c89159ccbff53f1dd8f8631af08fb321636657ce6ccfafc8eb2688d0f515d247a27f2a29464ec221ecd87d170faa76cf7c22709f0ec28c9c3ff569720f5b7f64f6097caa76b10e947863ec5f712d637df59ef976bf179709fe07b5ff2c5135fec6a9584574f60269e16e52c83b1f211372e5d7b112c3b107fd57ab42ddd0cf43005b345b9b66f8faf70d94805e5e818478dee04731eb49be4827679fd504c04172421f2ad99cfb19ef7b156683baca6b35d5ac5248cf7bf420c826dc8366a94bb0a3fb05372e4f7723cc2c402fe0702629f20c1114d31d0018f3faa429b82c8fe33b35a9ebe7d42b60aadbe38a2f6998ccb0b037c95955dfddcf417d9feb0ca0fc4e43aa8a201631fd9c990100f0417a874d6fd64a018da75c20333352ed61ab9ea0a245c51ae2b605c30ae4511c0398a4fa7c5916412c2be8b78b182d22aae159d4733ed4108bf6a73e2a013c16d108d872dc00000000003301f980050080000000000007000a004a1ca90004001e0004004580f0612ad66b5fb6733618f7f8e1b6c5fba73796dd2fe83cf4000700c14915070d5039534022ed084a487bff33d46074b2d7cea308690dbaff3b54dfcfd447c0a46dc324b7ea97cc1e4fa873466ff88e622a620167233d5782d3fd1f637da6d82f060a1b53a1632611a733f362b445ca95dbf192cf4ef0fbca9ccc2193b934622849308eec1d4e429f6477bdf8e491c516d035ff1c4089d95cf5c559aeaa47cc937197a136da520b97f49db02145145aee929ab32f2c39260e2fd595b47040070c7d5dd5d302e26d99a02d91f6c67f2d0a7196e404522c2a252e5465283dee82a915e5ee601bd943cbc786310ab08a4c0d53b65705dda7e17e13365955e0eac05196faa5ae390282ee0880150400be8008009b00", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0800ca000a0101000000"], 0x1604}, {&(0x7f00000024c0)={0x10, 0x19, 0x0, 0x5, 0x25dfdbfc}, 0x10}, {&(0x7f0000004b40)=ANY=[@ANYBLOB="740000002700080025bd7000ffdbdf2504001380eb76111d66175030b1546a96b323b9ed8e985489a40f4d7370456dee6bf2e6f759d810af273e84bff18d963140e750b638a598d49b3dfc2d86e021dee130"], 0x74}, {&(0x7f0000001dc0)={0x7c, 0x20, 0x801, 0x70bd25, 0x8fff, "", [@generic="4b748007741125f0914002486b6aa7489fe11c828c7f3d2de39601380cb4101e973e153ad1b7473ff8919ac9ebf9b6f77fa3a73113a499ab3ba33f2aa345ef4f0a76c3cff9a3ee24fbb9bd6ca65057d6cc9c31b6ab9dc1acda58cfa97ef4e249877e92bcccfb7b5b10b10c9c"]}, 0x7c}, {&(0x7f0000004c00)=ANY=[@ANYBLOB="d80000003b0000022dbd7000fbdbdf255d23ad2690047c182674a815fa02487029bf97139fda6763881cfee37972722595561b795e90416d87f5f588b0ce4e67729aa658f79144db78765cf8c87723d90622cb9e6d33dce784ef40e5081842415111b3ea3c047eb0f125a6b3c543824679685b05cfa40ff4e52afd1cfa237095f7b06f47328e2c26f1a8b88c76b9186e5cdf5950427ec6bf1c46ac32404d97264b1a6bda51d9f0fd820c00bf7b97e2efdcae794f5d5b6f53c3a2ec67d21144bbecc6caff7cfbc8"], 0xd8}, {0x0, 0x304}], 0x8}, 0x0) r5 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0xfc, 0xa, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 1.443723434s ago: executing program 3 (id=1107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x525082, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX], 0x46) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) openat$cgroup_devices(r5, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}, 0x1, 0x0, 0xc00e}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, &(0x7f00000003c0), 0x180000) sendmsg$DEVLINK_CMD_PORT_GET(r2, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x840, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x3ff, "5660359c3245d1c42317afad7d48ed5100400000000000010000000000007362", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r10, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r11}], 0x1, 0x0, 0x0, 0x0) 1.27433871s ago: executing program 4 (id=1108): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x6d8c, 0x400, 0x20040000, 0x22b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000100)=0xfffffff8, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x40020100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000480)={0xb6, 0x0, 0x200000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x5000, 0x10e000}) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000003c0)={0xa, 0x2, 0x0, {0x80000000, 0x1, 0x2, 0x7}}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xffff7fffffff13e9, 0xffffffffffffffff, 0x1d, {0x27ffffbffffffff, 0x9}, 0x54}, 0x1) 987.259425ms ago: executing program 1 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) 986.987429ms ago: executing program 1 (id=1110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRES32], 0x64}}, 0xc000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) fcntl$getownex(r0, 0x10, &(0x7f0000000d80)) getuid() sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000040}, 0x4000880) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) unshare(0x2a020480) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xd5956000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) eventfd(0x5) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) 575.992862ms ago: executing program 3 (id=1111): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x20008000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@local}, &(0x7f0000000400)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x8040) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket(0xf, 0x6, 0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ftruncate(0xffffffffffffffff, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101e00) openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x4, 0x13, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100f5df00000000000300", "2809e8dbe108198948224ad54afac11d07000000b22d0000b420a1a93c5240f45f819e01177d3d458dd4ffff001b00", "91be8b1c551265406c7f306003d8a0f4bd004a33fde5000800000e1dab1c00", [0xf, 0x8]}}) poll(0x0, 0x0, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_vm_writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000700)=""/135, 0x87}], 0x7, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/188, 0xbc}, {&(0x7f00000019c0)=""/235, 0xeb}, {&(0x7f0000001ac0)=""/146, 0x92}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/208, 0xd0}, {&(0x7f0000001cc0)=""/228, 0xe4}, {&(0x7f0000001dc0)=""/100, 0x64}, {&(0x7f0000001e40)=""/232, 0xe8}], 0x8, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 386.008861ms ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000029070b000f000c0000000000b0ab2fc30400018078a449a0"], 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x4000004) 317.144652ms ago: executing program 4 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000010001120022eb"], 0xfdef) 316.469339ms ago: executing program 3 (id=1114): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fchdir(r0) memfd_create(0x0, 0x3) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000000c0)="7940bbd566b556609d23eb117f5120", 0xf}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0xa0, 0x328, 0x240, 0xa0, 0x240, 0x404, 0x404, 0x404, 0x404, 0x404, 0x6, &(0x7f0000000580), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff, 0xffffff00, 'geneve1\x00', 'sit0\x00', {}, {0xff}, 0x6c, 0x1, 0x43}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x8, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff000000, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x1d, 0x2, 0xa}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x0, 0x9d}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x0, 0x32}, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xd}}, @inet=@rpfilter={{0x24}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x61, @rand_addr=0x64010100, 0x4e21}}}, {{@ip={@empty, @multicast2, 0x0, 0xff, 'ip6_vti0\x00', 'hsr0\x00', {0xff}, {}, 0x2f, 0x1, 0x2}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@ttl={{0x24}, {0x3}}, @common=@ttl={{0x24}, {0x0, 0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x3f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3}}, @common=@inet=@socket3={{0x24}, 0x5}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x9, 0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4f4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=ANY=[@ANYBLOB="28000000fddbdf25ac141425000000000000000000000000000004d20200ff0c"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) r8 = dup2(r6, r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r8}, 0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r8, 0x20, &(0x7f0000000540)={&(0x7f0000000600)=""/224, 0xe0, 0x0, &(0x7f0000000700)=""/89, 0x59}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="f49900"/14, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 229.649376ms ago: executing program 4 (id=1115): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xf, 0xf9, 0x55}, 0x10) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0xada0d4317990e9ad}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001ac0)='syzkaller\x00', 0x34c, 0xdf, &(0x7f0000001b00)=""/223, 0x41000, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80), 0x10, 0x10000}, 0x94) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000280)={0x550, 0x20, 0x30, 0x4b0, 0x747f, 0x2, 0x18, 0x0, {0x1, 0x8, 0x1}, {0xfffffff8, 0x7, 0x1}, {0x9, 0x3}, {0x2, 0x2}, 0x0, 0x80, 0xfffffffe, 0x8, 0x0, 0x4, 0xf5, 0xe04, 0x9, 0xa, 0x8, 0x4, 0x0, 0x100, 0x2}) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0xbb5, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xb7f, 0x0, 0x0, @private2, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c10"}}}}}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x400, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {&(0x7f0000000840)={0x104, 0x19, 0x310, 0x70bd2c, 0x25dfdbfd, "", [@generic="330fdbaf28e79cb77bcb0a96e87ae364c0a7083aae0aa83467032771c9b35f04eb7643d3d4bb3e6e7d689c8b7f793eee6e75e1080e37d5b01747a16fddef6e9ffafacddea62e7490f2267d6db40e72ba1ec670ce15653014e85b2073042305de04e6c33e9da59373f5fc7ef598c93f055c6d6247435ce459f1130cf47f9c4c595f6a962efe2a310103c1eb5bdfc8fb6fdfd025279311b6801abef4f5e72c2435ac6695478435c59be37131aa31645674ed78cec153e36ebec6cbe191d76adb34f00b4a7e8c21061763063214c211cc8c15a4613bbbfbe1baeb8f5b8895f083982ff6de198178d030ddb5bd0230acfb7f7e"]}, 0x104}, {&(0x7f0000007300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0800ca000a0101000000"], 0x1604}, {&(0x7f00000024c0)={0x10, 0x19, 0x0, 0x5, 0x25dfdbfc}, 0x10}, {&(0x7f0000004b40)=ANY=[@ANYBLOB="740000002700080025bd7000ffdbdf2504001380eb76111d66175030b1546a96b323b9ed8e985489a40f4d7370456dee6bf2e6f759d810af273e84bff18d963140e750b638a598d49b3dfc2d86e021dee130"], 0x74}, {&(0x7f0000001dc0)={0x7c, 0x20, 0x801, 0x70bd25, 0x8fff, "", [@generic="4b748007741125f0914002486b6aa7489fe11c828c7f3d2de39601380cb4101e973e153ad1b7473ff8919ac9ebf9b6f77fa3a73113a499ab3ba33f2aa345ef4f0a76c3cff9a3ee24fbb9bd6ca65057d6cc9c31b6ab9dc1acda58cfa97ef4e249877e92bcccfb7b5b10b10c9c"]}, 0x7c}, {&(0x7f0000004c00)=ANY=[@ANYBLOB="d80000003b0000022dbd7000fbdbdf255d23ad2690047c182674a815fa02487029bf97139fda6763881cfee37972722595561b795e90416d87f5f588b0ce4e67729aa658f79144db78765cf8c87723d90622cb9e6d33dce784ef40e5081842415111b3ea3c047eb0f125a6b3c543824679685b05cfa40ff4e52afd1cfa237095f7b06f47328e2c26f1a8b88c76b9186e5cdf5950427ec6bf1c46ac32404d97264b1a6bda51d9f0fd820c00bf7b97e2efdcae794f5d5b6f53c3a2ec67d21144bbecc6caff7cfbc8"], 0xd8}, {0x0, 0x304}], 0x8}, 0x0) r5 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0xfc, 0xa, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 194.386641ms ago: executing program 4 (id=1116): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000f05e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 180.384793ms ago: executing program 3 (id=1117): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r1}) r3 = syz_usb_connect_ath9k(0x3, 0x0, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc7}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "929eb598", {0x1, 0x101, 0xb72, 0x7f, 0x24}}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3002000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r7}, 0x18) 106.781467ms ago: executing program 4 (id=1118): openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xf, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x1000c882}, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x16, 0x3, 0x3, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 78.818403ms ago: executing program 1 (id=1119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x24040801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r5, 0x2, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f00000004c0)="264ec7b33c953be0a24e96fd579d5164d31a403568b24320b31a5a5b47e1b027ff7137c17598101f200736b3fb8b63c3d045d69338e8358845ecfe5b00e5eae0e6d71f86ee4d5b330f39d2b304eee940a58469114b659ba05042acfcf17150231c0433d000fabd97a91cdd3f551ad4d0bc9961dd48c10a1948d9fb444f6560636b00f99ee6e3ba618433849b9706c683393d55160e407f4021a2f12a04dfc83c96424eadb04aa2eaba107c1ea5d0ee0fa97fe3b5f05f0e3a479c7cd2d5d8baddc31c", 0xc2, 0x4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x6, r4, &(0x7f0000000640)="60c4942a13dd6e42c8a0255a63c733f29ccfd732920ae8e2cf6daed8712a0c85301d5e6dc4a2538772e549b1f3ffc9a056b722fafff215f8d5a7", 0x3a, 0x800, 0x0, 0x2}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r7 = syz_open_procfs(r6, &(0x7f0000000740)='fdinfo\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b81000085"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYRES64=r6, @ANYRES32=r8, @ANYRESHEX=r0, @ANYRES64=r9, @ANYBLOB='Y\n', @ANYBLOB="06ce37d3e105c1429a6d61d98a4fb3338356c89ecfeef86e49", @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32=r5, @ANYRESOCT=r1, @ANYBLOB="08e77bd3000101010000000082d6e99e80c8a83c3f6bfbcb7a53ef25fe2c189ccb3cb9b91bdc1e79435336053648c8bc3769b6018904e387259c36ebff3c1cf83f059e5f27622d459032c51c129bf0fd95add1a35e1ae74f0f898c7404eafa67aa87f11ed16ed34888932f8f7c6a638f6c29d2184dd72cb098b579527e998a830640ceccfcabd45849af2020fb1b4089180788388c37227e0f4be4b41ca29ae34183a21a6452b2e5436b415cd7a597b3f8caed4e76ab2382aef6ff05508ebebb9b868060d63645a86e833998c225ad2891ae3f6a63c2722e33c95a56fc5005bbc2995fed31b17f02c5ec93d4a2b5ecf4fcc7c0f421e083983d8f28d9a256f25e7db9bc873f6c2f95c3163b4f347a509ddef600db55ef7692f15fa6021547d009782df99efec4b57498", @ANYRES32=r6, @ANYRES32=r5, @ANYRES16=r5, @ANYRES16=r5, @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYRESOCT=r3], 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x440440d4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0008000800030071d30080de36600f0ca3594964f05988d3064647470272d6facb52ef39b2c520229ad6a67d4c4f63a3f1cf83328faeb7d67a42d9a12a6d1741d5bcc8599cf770d3915484f4a3e6bccbb30d74d7630d6271c0e97eb259602eaae5f65aa826115e04d42b65ed8c66e9267d26b15cd9aca9a625e7beda044d4006f243d628bfb76ff12a94cc8874e4c0a30b7c40fa5e1ad9e3ad787dce4d1ee884a592df79c1f71d06f3fb135048c1b9231001d45ac27ca01e74000a5d48290b2767f3225d3024f100e4aadf6a6acdff1c9d74a7f92e63be140d82762e9a2db95dbaf9b4fd49547936fdc822ab8c944afd2c27fc3d2a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000700)=0x610c, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800df25090002007301043100006237076f000008004100f5786500140033007378040074756e000000000000000000000000000000000000000000ccd021ca776907d8fd9687d8c07a06db32084d32b5753e88c3fb6156e8c02ef019a4889b6e4c4508c4d67683d3e903a60c6a68b8783c20f870af3be1cf754713d13f706cbb202f92d873f7cfdc7687d8800d08f18813510a33"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 0s ago: executing program 1 (id=1120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1b, 0x0}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ring): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.501866][ T6838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 93.566987][ T6113] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.727340][ T6113] usb 6-1: Using ep0 maxpacket: 16 [ 93.785973][ T6113] usb 6-1: unable to get BOS descriptor or descriptor too short [ 93.789486][ T6113] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 93.791869][ T6113] usb 6-1: can't read configurations, error -71 [ 93.846547][ T6858] netlink: 'syz.3.205': attribute type 13 has an invalid length. [ 93.850219][ T6858] netlink: 'syz.3.205': attribute type 17 has an invalid length. [ 93.866382][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.910802][ T6838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.020019][ T6838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.100505][ T6838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.186256][ T1139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.193802][ T1139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201604][ T1139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.212885][ T1224] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.276815][ T6874] tmpfs: Unknown parameter 'hash' [ 96.793396][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 96.793407][ T40] audit: type=1326 audit(1758109094.938:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.801927][ T40] audit: type=1326 audit(1758109094.938:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.810852][ T40] audit: type=1326 audit(1758109094.938:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.833029][ T40] audit: type=1326 audit(1758109094.938:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.844076][ T40] audit: type=1326 audit(1758109094.938:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.851337][ T40] audit: type=1326 audit(1758109094.938:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.858657][ T40] audit: type=1326 audit(1758109094.938:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.865802][ T40] audit: type=1326 audit(1758109094.938:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.878924][ T40] audit: type=1326 audit(1758109094.938:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 96.886317][ T40] audit: type=1326 audit(1758109094.958:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 97.065932][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 97.741065][ T6938] No source specified [ 97.763337][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.226'. [ 98.204943][ T6948] netlink: 'syz.2.230': attribute type 13 has an invalid length. [ 98.207538][ T6948] netlink: 'syz.2.230': attribute type 17 has an invalid length. [ 98.433811][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.022636][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 99.146573][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.198075][ T6974] netlink: 'syz.3.238': attribute type 13 has an invalid length. [ 99.200769][ T6974] netlink: 'syz.3.238': attribute type 17 has an invalid length. [ 99.223581][ T6974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.431466][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.440320][ T6977] bond0: (slave bond_slave_0): Releasing backup interface [ 99.447745][ T6977] bond0: (slave bond_slave_1): Releasing backup interface [ 99.458907][ T6977] team0: Port device team_slave_0 removed [ 99.465654][ T6977] team0: Port device team_slave_1 removed [ 99.471690][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.474107][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.483571][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.486341][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.499992][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.544485][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.721627][ T6989] netlink: 'syz.2.245': attribute type 13 has an invalid length. [ 99.724266][ T6989] netlink: 'syz.2.245': attribute type 17 has an invalid length. [ 100.264062][ T6989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.621115][ T6977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.844325][ T6977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.916526][ T6977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.000809][ T6977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.011280][ T7011] trusted_key: encrypted_key: key user:syz not found [ 101.141323][ T1059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.157119][ T1059] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.175711][ T1059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.196462][ T79] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.309436][ T7024] kernel profiling enabled (shift: 17) [ 101.398360][ T7024] process 'syz.3.253' launched './file0' with NULL argv: empty string added [ 102.011084][ T7038] netlink: 'syz.1.258': attribute type 13 has an invalid length. [ 102.013744][ T7038] netlink: 'syz.1.258': attribute type 17 has an invalid length. [ 102.078167][ T7038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.415761][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 102.857689][ T7060] netlink: 'syz.3.266': attribute type 6 has an invalid length. [ 102.918249][ T7063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 103.052670][ T7066] bridge_slave_0: left allmulticast mode [ 103.054501][ T7066] bridge_slave_0: left promiscuous mode [ 103.056523][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.062295][ T7066] bridge_slave_1: left allmulticast mode [ 103.064168][ T7066] bridge_slave_1: left promiscuous mode [ 103.066746][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.075712][ T7066] bond0: (slave bond_slave_0): Releasing backup interface [ 103.084265][ T7066] bond0: (slave bond_slave_1): Releasing backup interface [ 103.098438][ T7066] team0: Port device team_slave_0 removed [ 103.120985][ T7066] team0: Port device team_slave_1 removed [ 103.123330][ T7070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.267'. [ 103.127328][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.129761][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.133533][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.135821][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.149747][ T7066] bond1: (slave geneve2): Releasing active interface [ 103.162258][ T7070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.267'. [ 103.165295][ T1059] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.174245][ T1059] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.183844][ T1059] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.188476][ T1059] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.259479][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 103.343806][ T7066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.443886][ T7066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.546522][ T7066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.641057][ T7081] netlink: 104 bytes leftover after parsing attributes in process `syz.2.271'. [ 103.644111][ T7066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.744847][ T1224] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.753379][ T1224] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.768419][ T1139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.771157][ T1139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.969606][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 103.972445][ T7089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 103.985503][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 103.989005][ T7094] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 104.240805][ T7099] tmpfs: Unknown parameter 'hash' [ 104.493266][ T7091] ceph: No mds server is up or the cluster is laggy [ 104.583901][ T7105] No source specified [ 104.595827][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 105.187287][ T7113] trusted_key: encrypted_key: key user:syz not found [ 105.494688][ T839] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 105.503483][ T839] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 105.540825][ T7129] fido_id[7129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.837037][ T7138] netlink: 'syz.2.285': attribute type 13 has an invalid length. [ 105.839599][ T7138] netlink: 'syz.2.285': attribute type 17 has an invalid length. [ 105.845583][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.896345][ T7140] tipc: Started in network mode [ 105.900426][ T7140] tipc: Node identity 167cba4d043, cluster identity 4711 [ 105.905922][ T7140] tipc: Enabled bearer , priority 0 [ 105.915619][ T7140] syzkaller0: entered promiscuous mode [ 105.917929][ T7140] syzkaller0: entered allmulticast mode [ 105.978972][ T7140] tipc: Resetting bearer [ 105.983043][ T7139] tipc: Resetting bearer [ 105.992782][ T7139] tipc: Disabling bearer [ 106.071722][ T7144] netlink: 'syz.3.287': attribute type 4 has an invalid length. [ 106.307100][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 106.307116][ T40] audit: type=1326 audit(1758109104.458:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.319784][ T40] audit: type=1326 audit(1758109104.458:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.342886][ T40] audit: type=1326 audit(1758109104.458:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.353535][ T40] audit: type=1326 audit(1758109104.458:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.365176][ T40] audit: type=1326 audit(1758109104.458:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.380087][ T40] audit: type=1326 audit(1758109104.458:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.402106][ T40] audit: type=1326 audit(1758109104.458:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.423393][ T7148] wireguard0: entered promiscuous mode [ 106.425794][ T7148] wireguard0: entered allmulticast mode [ 106.657257][ T40] audit: type=1326 audit(1758109104.468:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.736932][ T40] audit: type=1326 audit(1758109104.468:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 106.743681][ T40] audit: type=1326 audit(1758109104.468:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 109.910468][ T7230] wireguard0: entered promiscuous mode [ 109.914908][ T7230] wireguard0: entered allmulticast mode [ 109.997096][ T6011] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 110.226347][ T6011] usb 5-1: not running at top speed; connect to a high speed hub [ 110.230267][ T6011] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.233573][ T6011] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.237817][ T6011] usb 5-1: config 1 interface 0 has no altsetting 0 [ 110.241407][ T6011] usb 5-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.40 [ 110.244195][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.246666][ T6011] usb 5-1: Product: syz [ 110.248275][ T6011] usb 5-1: Manufacturer: syz [ 110.249727][ T6011] usb 5-1: SerialNumber: syz [ 110.258556][ T7228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.666072][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.677624][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.744474][ T6011] usbhid 5-1:1.0: can't add hid device: -71 [ 110.746981][ T6011] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 110.752539][ T6011] usb 5-1: USB disconnect, device number 2 [ 110.911185][ T7245] comedi comedi3: comedi_config --init_data is deprecated [ 111.408921][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 112.956212][ T7273] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 112.967834][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 113.170022][ T7279] bond1: (slave geneve2): making interface the new active one [ 113.174308][ T7279] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 113.186024][ T1224] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.389698][ T1224] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.394062][ T1224] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.405320][ T1224] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.440360][ T7298] input: syz1 as /devices/virtual/input/input8 [ 113.580111][ T7304] netlink: 'syz.0.331': attribute type 13 has an invalid length. [ 113.582565][ T7304] netlink: 'syz.0.331': attribute type 17 has an invalid length. [ 113.966820][ T7313] tmpfs: Unknown parameter 'hash' [ 114.158065][ T7317] netlink: 'syz.2.335': attribute type 5 has an invalid length. [ 114.499855][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.564179][ T7315] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 114.593151][ T7321] Failed to get privilege flags for destination (handle=0x2:0x0) [ 114.710649][ T7328] netlink: 'syz.2.337': attribute type 13 has an invalid length. [ 114.713229][ T7328] netlink: 'syz.2.337': attribute type 17 has an invalid length. [ 114.750317][ T7328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.788334][ T7329] netlink: 'syz.3.338': attribute type 13 has an invalid length. [ 114.791408][ T7329] netlink: 'syz.3.338': attribute type 17 has an invalid length. [ 114.801450][ T7329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.595400][ T7340] tmpfs: Unknown parameter 'hash' [ 115.842872][ T7358] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 116.652665][ T7363] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 117.070689][ T7369] netlink: 'syz.2.352': attribute type 13 has an invalid length. [ 117.076435][ T7369] netlink: 'syz.2.352': attribute type 17 has an invalid length. [ 117.401066][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 117.403937][ T7372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'. [ 117.414876][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 117.471541][ T7369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.848992][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 118.433906][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 118.597832][ T7402] bridge1: entered promiscuous mode [ 118.599541][ T7402] bridge1: entered allmulticast mode [ 118.615401][ T6119] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.625673][ T6119] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 118.625821][ T7405] loop6: detected capacity change from 0 to 524287999 [ 119.017066][ T5919] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.146937][ T5919] usb 6-1: device descriptor read/64, error -71 [ 119.386933][ T5919] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.446730][ T7418] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 119.458096][ T7418] bond0: entered promiscuous mode [ 119.514830][ T7424] fuse: Bad value for 'group_id' [ 119.516453][ T7424] fuse: Bad value for 'group_id' [ 119.538195][ T5919] usb 6-1: device descriptor read/64, error -71 [ 119.603948][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 119.603958][ T40] audit: type=1326 audit(1758109117.748:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.613931][ T40] audit: type=1326 audit(1758109117.748:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.621114][ T40] audit: type=1326 audit(1758109117.748:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.628422][ T40] audit: type=1326 audit(1758109117.748:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.635242][ T40] audit: type=1326 audit(1758109117.748:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.642133][ T40] audit: type=1326 audit(1758109117.748:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.647912][ T5919] usb usb6-port1: attempt power cycle [ 119.649305][ T40] audit: type=1326 audit(1758109117.748:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.658100][ T40] audit: type=1326 audit(1758109117.748:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.664579][ T40] audit: type=1326 audit(1758109117.748:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.671697][ T40] audit: type=1326 audit(1758109117.758:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=24 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 119.773526][ T7431] mmap: syz.0.367 (7431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.842093][ T7438] netlink: 'syz.2.368': attribute type 13 has an invalid length. [ 119.845468][ T7438] netlink: 'syz.2.368': attribute type 17 has an invalid length. [ 119.858810][ T7438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.067262][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.088261][ T5919] usb 6-1: device descriptor read/8, error -71 [ 120.354744][ T5919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 120.417342][ T5919] usb 6-1: device descriptor read/8, error -71 [ 120.513320][ T7442] pim6reg: entered allmulticast mode [ 120.517850][ T7442] pim6reg: left allmulticast mode [ 120.527094][ T5919] usb usb6-port1: unable to enumerate USB device [ 120.730885][ T7451] No source specified [ 120.745602][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'. [ 121.451170][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 121.454860][ T9] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 122.394197][ T7478] netlink: 'syz.0.380': attribute type 13 has an invalid length. [ 122.396778][ T7478] netlink: 'syz.0.380': attribute type 17 has an invalid length. [ 122.401164][ T7478] bond0: left promiscuous mode [ 122.403062][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.414325][ T7478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.634273][ T7486] netlink: 'syz.2.383': attribute type 8 has an invalid length. [ 122.859498][ T7493] warning: `syz.2.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.185090][ T7509] netlink: 'syz.0.388': attribute type 21 has an invalid length. [ 123.187667][ T7509] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 123.190044][ T7509] netlink: 144 bytes leftover after parsing attributes in process `syz.0.388'. [ 123.478827][ T7513] bond0: (slave bond_slave_0): Releasing backup interface [ 123.489555][ T7513] bond0: (slave bond_slave_1): Releasing backup interface [ 123.505815][ T7513] team0: Port device team_slave_0 removed [ 123.514205][ T7513] team0: Port device team_slave_1 removed [ 123.517536][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.519895][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.525170][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.529861][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.552439][ T7513] team0: Port device geneve0 removed [ 123.561243][ T7513] bond1: (slave geneve2): Releasing active interface [ 123.579671][ T7513] bond2: (slave geneve3): Releasing active interface [ 123.583787][ T7516] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 123.613878][ T7514] team0: Mode changed to "loadbalance" [ 123.622832][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.627076][ T7516] team0: Port device bond0 added [ 123.628989][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 123.631773][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 123.634508][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 123.638019][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 123.664640][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 123.718940][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.735790][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.740251][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.743982][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.748408][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.753290][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.757392][ T7513] team0 (unregistering): Port device bond0 removed [ 123.760038][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.764614][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.769390][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.773799][ T7518] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.756073][ T7541] FAULT_INJECTION: forcing a failure. [ 124.756073][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.760294][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT(full) [ 124.760310][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.760316][ T7541] Call Trace: [ 124.760320][ T7541] [ 124.760324][ T7541] dump_stack_lvl+0x16c/0x1f0 [ 124.760345][ T7541] should_fail_ex+0x512/0x640 [ 124.760364][ T7541] _copy_to_iter+0x29f/0x1710 [ 124.760376][ T7541] ? __free_frozen_pages+0x8ec/0x10f0 [ 124.760389][ T7541] ? __pfx__copy_to_iter+0x10/0x10 [ 124.760401][ T7541] ? __folio_put+0x32e/0x450 [ 124.760415][ T7541] ? __pfx___folio_put+0x10/0x10 [ 124.760432][ T7541] copy_page_to_iter+0x12a/0x1e0 [ 124.760445][ T7541] anon_pipe_read+0x47e/0x1210 [ 124.760463][ T7541] ? __pfx_anon_pipe_read+0x10/0x10 [ 124.760478][ T7541] ? common_file_perm+0x1a9/0x340 [ 124.760493][ T7541] ? bpf_lsm_file_permission+0x9/0x10 [ 124.760508][ T7541] ? security_file_permission+0x71/0x210 [ 124.760524][ T7541] fifo_pipe_read+0x1e/0xd0 [ 124.760537][ T7541] vfs_read+0xa98/0xcf0 [ 124.760552][ T7541] ? __pfx_vfs_read+0x10/0x10 [ 124.760562][ T7541] ? find_held_lock+0x2b/0x80 [ 124.760582][ T7541] ksys_read+0x1f8/0x250 [ 124.760593][ T7541] ? __pfx_ksys_read+0x10/0x10 [ 124.760606][ T7541] ? rcu_is_watching+0x12/0xc0 [ 124.760619][ T7541] __do_fast_syscall_32+0x7c/0x300 [ 124.760638][ T7541] do_fast_syscall_32+0x32/0x80 [ 124.760647][ T7541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 124.760660][ T7541] RIP: 0023:0xf70ee579 [ 124.760669][ T7541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 124.760679][ T7541] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 124.760690][ T7541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 124.760696][ T7541] RDX: 000000000000ffa6 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.760702][ T7541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.760709][ T7541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.760714][ T7541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.760727][ T7541] [ 124.869962][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 124.957182][ T7552] loop6: detected capacity change from 0 to 524287999 [ 125.022673][ T7555] netlink: 'syz.1.401': attribute type 13 has an invalid length. [ 125.025212][ T7555] netlink: 'syz.1.401': attribute type 17 has an invalid length. [ 125.188657][ T7555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.776954][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 125.981678][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 125.988503][ T9] usb 7-1: config 0 has no interfaces? [ 125.991873][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.994656][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.006962][ T9] usb 7-1: Product: syz [ 126.008302][ T9] usb 7-1: Manufacturer: syz [ 126.009750][ T9] usb 7-1: SerialNumber: syz [ 126.013006][ T9] usb 7-1: config 0 descriptor?? [ 126.227324][ T6119] usb 7-1: USB disconnect, device number 3 [ 127.177870][ T7594] netlink: 'syz.2.410': attribute type 6 has an invalid length. [ 127.786030][ T7604] netlink: 'syz.3.413': attribute type 13 has an invalid length. [ 127.874101][ T7604] netlink: 'syz.3.413': attribute type 17 has an invalid length. [ 127.891125][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.898241][ T7604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.533386][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 128.536278][ T7630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.419'. [ 128.541771][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 129.480711][ T7644] sctp_transport_update_pmtu: 332 callbacks suppressed [ 129.480725][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.486259][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.490141][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.493950][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.497968][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.502475][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.507224][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.511748][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.516210][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.520789][ T7644] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 129.816831][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 129.817175][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 130.077155][ T6113] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 130.191449][ T7665] No source specified [ 130.195226][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'. [ 130.231283][ T6113] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 130.235109][ T6113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.238254][ T6113] usb 8-1: Product: syz [ 130.240530][ T6113] usb 8-1: Manufacturer: syz [ 130.242805][ T6113] usb 8-1: SerialNumber: syz [ 130.934807][ T6113] rtl8150 8-1:1.0: couldn't reset the device [ 130.938320][ T6113] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 130.947545][ T6113] usb 8-1: USB disconnect, device number 2 [ 132.309830][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.311927][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.653290][ T7725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.661657][ T7725] netlink: 'syz.2.443': attribute type 29 has an invalid length. [ 132.664558][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 133.093827][ T7731] ======================================================= [ 133.093827][ T7731] WARNING: The mand mount option has been deprecated and [ 133.093827][ T7731] and is ignored by this kernel. Remove the mand [ 133.093827][ T7731] option from the mount to silence this warning. [ 133.093827][ T7731] ======================================================= [ 133.110287][ T7731] evm: overlay not supported [ 133.191144][ T7730] fuse: Bad value for 'fd' [ 133.206133][ T7735] netlink: 'syz.0.446': attribute type 13 has an invalid length. [ 133.208729][ T7735] netlink: 'syz.0.446': attribute type 17 has an invalid length. [ 133.293263][ T7735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.383240][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 133.392292][ T40] audit: type=1326 audit(1758109131.514:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.400223][ T40] audit: type=1326 audit(1758109131.514:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.408951][ T40] audit: type=1326 audit(1758109131.524:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.416779][ T40] audit: type=1326 audit(1758109131.524:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.423950][ T40] audit: type=1326 audit(1758109131.524:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.430686][ T40] audit: type=1326 audit(1758109131.524:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.437449][ T40] audit: type=1326 audit(1758109131.524:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.445549][ T40] audit: type=1326 audit(1758109131.524:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.454709][ T40] audit: type=1326 audit(1758109131.524:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 133.463345][ T40] audit: type=1326 audit(1758109131.524:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.447" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2579 code=0x7ffc0000 [ 134.386805][ T7762] loop6: detected capacity change from 0 to 524287999 [ 135.268537][ T7776] sctp_transport_update_pmtu: 104 callbacks suppressed [ 135.268555][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.271404][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 135.274176][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.276790][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.454'. [ 135.280337][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.286495][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.290200][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.293519][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.297102][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.300422][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.303916][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.306985][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 135.309591][ T7776] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.312225][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 135.390428][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 135.457024][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 135.460461][ T9] usb 6-1: config 0 has no interfaces? [ 135.466954][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.469847][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.472288][ T9] usb 6-1: Product: syz [ 135.473590][ T9] usb 6-1: Manufacturer: syz [ 135.475038][ T9] usb 6-1: SerialNumber: syz [ 135.475331][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 135.477651][ T9] usb 6-1: config 0 descriptor?? [ 135.699457][ T7787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.702591][ T7787] block device autoloading is deprecated and will be removed. [ 135.748870][ T9] usb 6-1: USB disconnect, device number 8 [ 135.926328][ T7796] loop6: detected capacity change from 0 to 524287999 [ 136.227061][ T839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.388591][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 136.401782][ T839] usb 5-1: config 0 has no interfaces? [ 136.407211][ T839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.415971][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.420963][ T839] usb 5-1: Product: syz [ 136.422293][ T839] usb 5-1: Manufacturer: syz [ 136.423847][ T839] usb 5-1: SerialNumber: syz [ 136.456140][ T839] usb 5-1: config 0 descriptor?? [ 136.687145][ T6119] usb 5-1: USB disconnect, device number 3 [ 136.971504][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 137.094169][ T7813] wireguard0: entered promiscuous mode [ 137.096629][ T7813] wireguard0: entered allmulticast mode [ 137.280275][ T7821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.469'. [ 137.563327][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 137.670983][ T7832] loop6: detected capacity change from 0 to 524287999 [ 137.967001][ T839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.116929][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 138.123258][ T839] usb 5-1: config 0 has no interfaces? [ 138.148975][ T839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.153052][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.155969][ T839] usb 5-1: Product: syz [ 138.158300][ T839] usb 5-1: Manufacturer: syz [ 138.159870][ T839] usb 5-1: SerialNumber: syz [ 138.167569][ T839] usb 5-1: config 0 descriptor?? [ 138.216086][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 138.235777][ T7836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.473'. [ 138.568621][ T839] usb 5-1: USB disconnect, device number 4 [ 139.148863][ T7862] syz.2.480 (7862): /proc/7860/oom_adj is deprecated, please use /proc/7860/oom_score_adj instead. [ 139.758423][ T7875] tmpfs: Unknown parameter 'hash' [ 140.323837][ T7888] pim6reg: entered allmulticast mode [ 140.334323][ T7888] pim6reg: left allmulticast mode [ 140.452572][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 140.480655][ T29] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 140.592767][ T7901] fido_id[7901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.112837][ T7913] bond3: entered promiscuous mode [ 141.115026][ T7913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.327154][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.330482][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.333605][ T7921] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 141.361502][ T7926] __nla_validate_parse: 3 callbacks suppressed [ 141.361512][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 141.387536][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 141.387547][ T40] audit: type=1326 audit(1758109139.534:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.396002][ T40] audit: type=1326 audit(1758109139.534:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.405796][ T40] audit: type=1326 audit(1758109139.534:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.414943][ T40] audit: type=1326 audit(1758109139.534:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.422612][ T40] audit: type=1326 audit(1758109139.534:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.429523][ T40] audit: type=1326 audit(1758109139.534:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.436145][ T40] audit: type=1326 audit(1758109139.534:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.442713][ T40] audit: type=1326 audit(1758109139.534:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.449316][ T40] audit: type=1326 audit(1758109139.534:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 141.455854][ T40] audit: type=1326 audit(1758109139.534:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.1.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 142.348945][ T7942] FAULT_INJECTION: forcing a failure. [ 142.348945][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.353096][ T7942] CPU: 3 UID: 0 PID: 7942 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT(full) [ 142.353112][ T7942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.353118][ T7942] Call Trace: [ 142.353123][ T7942] [ 142.353127][ T7942] dump_stack_lvl+0x16c/0x1f0 [ 142.353212][ T7942] should_fail_ex+0x512/0x640 [ 142.353250][ T7942] _copy_to_user+0x32/0xd0 [ 142.353262][ T7942] simple_read_from_buffer+0xcb/0x170 [ 142.353275][ T7942] proc_fail_nth_read+0x197/0x240 [ 142.353287][ T7942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.353299][ T7942] ? rw_verify_area+0xcf/0x6c0 [ 142.353310][ T7942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.353321][ T7942] vfs_read+0x1e4/0xcf0 [ 142.353335][ T7942] ? __pfx_vfs_read+0x10/0x10 [ 142.353346][ T7942] ? find_held_lock+0x2b/0x80 [ 142.353360][ T7942] ? __fget_files+0x20e/0x3c0 [ 142.353376][ T7942] ksys_read+0x12a/0x250 [ 142.353387][ T7942] ? __pfx_ksys_read+0x10/0x10 [ 142.353399][ T7942] ? fput+0x9b/0xd0 [ 142.353413][ T7942] ? rcu_is_watching+0x12/0xc0 [ 142.353426][ T7942] __do_fast_syscall_32+0x7c/0x300 [ 142.353444][ T7942] do_fast_syscall_32+0x32/0x80 [ 142.353453][ T7942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.353467][ T7942] RIP: 0023:0xf70de579 [ 142.353475][ T7942] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 142.353486][ T7942] RSP: 002b:00000000f54ce590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 142.353496][ T7942] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ce620 [ 142.353503][ T7942] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000 [ 142.353509][ T7942] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 142.353515][ T7942] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 142.353521][ T7942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.353533][ T7942] [ 142.491290][ T7946] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 142.495218][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 142.526242][ T7955] 9pnet_fd: Insufficient options for proto=fd [ 142.529277][ T7955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.907535][ T7965] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 143.253986][ T7987] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.264417][ T7987] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.671136][ T7987] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.675103][ T7987] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.810103][ T7987] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.814230][ T7987] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 144.455526][ T8014] bridge0: port 1(syz_tun) entered blocking state [ 144.460392][ T8014] bridge0: port 1(syz_tun) entered disabled state [ 144.462632][ T8014] syz_tun: entered allmulticast mode [ 144.470488][ T8014] syz_tun: entered promiscuous mode [ 144.476508][ T8014] bridge0: port 1(syz_tun) entered blocking state [ 144.479536][ T8014] bridge0: port 1(syz_tun) entered forwarding state [ 145.055847][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 145.712200][ T7987] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.715306][ T7987] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.857431][ T1059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 145.861162][ T1059] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.871053][ T1251] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 145.873774][ T1251] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.885181][ T1251] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 145.890147][ T1251] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.893936][ T1251] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 145.897050][ T1251] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.023326][ T8031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.921061][ T8042] sctp_transport_update_pmtu: 47 callbacks suppressed [ 146.921075][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.927345][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.930789][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.933001][ T8044] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.934588][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.937747][ T8044] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.941271][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.943987][ T8044] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.947441][ T8042] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.950748][ T8044] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.070872][ T8047] netlink: 'syz.2.539': attribute type 13 has an invalid length. [ 147.073438][ T8047] netlink: 'syz.2.539': attribute type 17 has an invalid length. [ 147.138158][ T8047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.442157][ T8051] netlink: 'syz.3.540': attribute type 13 has an invalid length. [ 147.444633][ T8051] netlink: 'syz.3.540': attribute type 17 has an invalid length. [ 147.455812][ T8051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.854407][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 147.858205][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 148.045791][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 148.371424][ T8070] netlink: 'syz.3.545': attribute type 13 has an invalid length. [ 148.374040][ T8070] netlink: 'syz.3.545': attribute type 17 has an invalid length. [ 149.210777][ T8070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.246790][ T8074] netlink: 14 bytes leftover after parsing attributes in process `syz.3.546'. [ 150.325711][ T8095] netlink: 'syz.2.552': attribute type 13 has an invalid length. [ 150.328304][ T8095] netlink: 'syz.2.552': attribute type 17 has an invalid length. [ 150.344238][ T8095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.718907][ T8107] No source specified [ 150.725563][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 150.733005][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 150.734147][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.549'. [ 150.747903][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 150.986588][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 151.560603][ T8123] netlink: 'syz.0.561': attribute type 13 has an invalid length. [ 151.566940][ T8123] netlink: 'syz.0.561': attribute type 17 has an invalid length. [ 151.607029][ T8123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.770634][ T8138] tmpfs: Unknown parameter 'hash' [ 152.307191][ T8162] loop6: detected capacity change from 0 to 524287999 [ 152.553719][ T8153] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.710209][ T8170] netlink: 'syz.0.574': attribute type 13 has an invalid length. [ 152.712681][ T8170] netlink: 'syz.0.574': attribute type 17 has an invalid length. [ 152.732136][ T8170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.925801][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.114948][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 153.626936][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 153.630158][ T60] usb 8-1: config 0 has no interfaces? [ 153.633440][ T60] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.636503][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.639734][ T60] usb 8-1: Product: syz [ 153.641158][ T60] usb 8-1: Manufacturer: syz [ 153.642763][ T60] usb 8-1: SerialNumber: syz [ 153.647119][ T60] usb 8-1: config 0 descriptor?? [ 153.880453][ T60] usb 8-1: USB disconnect, device number 3 [ 154.151439][ T8198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.276807][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 154.285036][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 154.527929][ T8214] netlink: 'syz.3.588': attribute type 13 has an invalid length. [ 154.530363][ T8214] netlink: 'syz.3.588': attribute type 17 has an invalid length. [ 154.536280][ T8214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.039300][ T8225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.809165][ T8246] netlink: 'syz.1.599': attribute type 13 has an invalid length. [ 155.812279][ T8246] netlink: 'syz.1.599': attribute type 17 has an invalid length. [ 155.844817][ T8246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.424522][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 156.572529][ T8256] mkiss: ax0: crc mode is auto. [ 156.660038][ T8257] bond2: entered promiscuous mode [ 156.662172][ T8257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.901938][ T8262] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 156.906286][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 156.960237][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.603'. [ 156.963132][ T8264] netlink: 'syz.1.603': attribute type 3 has an invalid length. [ 157.363756][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 157.578926][ T8277] FAULT_INJECTION: forcing a failure. [ 157.578926][ T8277] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.583434][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.0.607 Not tainted syzkaller #0 PREEMPT(full) [ 157.583465][ T8277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.583473][ T8277] Call Trace: [ 157.583478][ T8277] [ 157.583489][ T8277] dump_stack_lvl+0x16c/0x1f0 [ 157.583515][ T8277] should_fail_ex+0x512/0x640 [ 157.583540][ T8277] should_fail_alloc_page+0xe7/0x130 [ 157.583560][ T8277] prepare_alloc_pages+0x3c2/0x610 [ 157.583584][ T8277] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 157.583606][ T8277] ? check_irq_usage+0xcb/0x920 [ 157.583622][ T8277] ? find_held_lock+0x2b/0x80 [ 157.583639][ T8277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.583657][ T8277] ? check_path.constprop.0+0x24/0x50 [ 157.583680][ T8277] ? lockdep_unlock+0x64/0xe0 [ 157.583692][ T8277] ? __lock_acquire+0x107f/0x1ce0 [ 157.583709][ T8277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.583730][ T8277] ? policy_nodemask+0xea/0x4e0 [ 157.583750][ T8277] alloc_pages_mpol+0x1fb/0x550 [ 157.583768][ T8277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 157.583791][ T8277] folio_alloc_mpol_noprof+0x36/0x2f0 [ 157.583811][ T8277] vma_alloc_folio_noprof+0xed/0x1e0 [ 157.583831][ T8277] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 157.583850][ T8277] ? rcu_read_unlock+0x2d/0xb0 [ 157.583869][ T8277] do_wp_page+0x1136/0x4f00 [ 157.583895][ T8277] ? __pfx_do_wp_page+0x10/0x10 [ 157.583916][ T8277] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.583935][ T8277] ? ___pte_offset_map+0x2ad/0x4f0 [ 157.583958][ T8277] __handle_mm_fault+0x1b2d/0x2a50 [ 157.583974][ T8277] ? mt_find+0x3ef/0xa30 [ 157.583988][ T8277] ? __pfx___handle_mm_fault+0x10/0x10 [ 157.584000][ T8277] ? __pfx_mt_find+0x10/0x10 [ 157.584023][ T8277] ? find_vma+0xbf/0x140 [ 157.584040][ T8277] ? __pfx_find_vma+0x10/0x10 [ 157.584059][ T8277] handle_mm_fault+0x589/0xd10 [ 157.584073][ T8277] ? trace_raw_output_exceptions+0x131/0x150 [ 157.584097][ T8277] do_user_addr_fault+0x7a6/0x1370 [ 157.584115][ T8277] ? rcu_is_watching+0x12/0xc0 [ 157.584128][ T8277] exc_page_fault+0x5c/0xb0 [ 157.584182][ T8277] asm_exc_page_fault+0x26/0x30 [ 157.584192][ T8277] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 157.584204][ T8277] Code: fc 4d 85 f6 0f 85 52 ff ff ff e8 8d 6d db fc 4c 8b 74 24 18 89 de 4c 89 f7 e8 5e dc 40 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 157.584227][ T8277] RSP: 0018:ffffc900034379f8 EFLAGS: 00050246 [ 157.584237][ T8277] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000240 [ 157.584243][ T8277] RDX: 0000000000000000 RSI: ffff88806c961dc0 RDI: 000000008000a000 [ 157.584250][ T8277] RBP: 0000000080009240 R08: 0000000000000000 R09: ffffed100d92c3ff [ 157.584256][ T8277] R10: ffff88806c961fff R11: 0000000000000000 R12: ffffc90003437d88 [ 157.584262][ T8277] R13: 000000008000a240 R14: ffff88806c961000 R15: 00007ffffffff000 [ 157.584277][ T8277] ? _copy_to_iter+0x372/0x1710 [ 157.584289][ T8277] ? __free_frozen_pages+0x8ec/0x10f0 [ 157.584301][ T8277] ? __pfx__copy_to_iter+0x10/0x10 [ 157.584313][ T8277] ? __folio_put+0x32e/0x450 [ 157.584326][ T8277] ? __pfx___folio_put+0x10/0x10 [ 157.584343][ T8277] copy_page_to_iter+0x12a/0x1e0 [ 157.584357][ T8277] anon_pipe_read+0x47e/0x1210 [ 157.584376][ T8277] ? __pfx_anon_pipe_read+0x10/0x10 [ 157.584392][ T8277] ? common_file_perm+0x1a9/0x340 [ 157.584406][ T8277] ? bpf_lsm_file_permission+0x9/0x10 [ 157.584422][ T8277] ? security_file_permission+0x71/0x210 [ 157.584438][ T8277] fifo_pipe_read+0x1e/0xd0 [ 157.584451][ T8277] vfs_read+0xa98/0xcf0 [ 157.584466][ T8277] ? __pfx_vfs_read+0x10/0x10 [ 157.584477][ T8277] ? find_held_lock+0x2b/0x80 [ 157.584500][ T8277] ksys_read+0x1f8/0x250 [ 157.584512][ T8277] ? __pfx_ksys_read+0x10/0x10 [ 157.584525][ T8277] ? rcu_is_watching+0x12/0xc0 [ 157.584537][ T8277] __do_fast_syscall_32+0x7c/0x300 [ 157.584556][ T8277] do_fast_syscall_32+0x32/0x80 [ 157.584565][ T8277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.584578][ T8277] RIP: 0023:0xf70ee579 [ 157.584586][ T8277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.584596][ T8277] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 157.584605][ T8277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 157.584611][ T8277] RDX: 000000000000ffa6 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.584617][ T8277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.584623][ T8277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.584629][ T8277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.584642][ T8277] [ 158.167578][ T8293] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 158.222370][ T8294] netlink: 'syz.1.611': attribute type 13 has an invalid length. [ 158.225354][ T8294] netlink: 'syz.1.611': attribute type 17 has an invalid length. [ 158.461674][ T8294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.101244][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 159.105577][ T8316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.818285][ T8346] sctp_transport_update_pmtu: 104 callbacks suppressed [ 160.818298][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.823853][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.827930][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.831764][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.835258][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.838936][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.842275][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.845665][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.849429][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.853577][ T8346] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 160.921626][ T8346] FAULT_INJECTION: forcing a failure. [ 160.921626][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.925633][ T8346] CPU: 3 UID: 0 PID: 8346 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 160.925648][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.925655][ T8346] Call Trace: [ 160.925658][ T8346] [ 160.925663][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 160.925682][ T8346] should_fail_ex+0x512/0x640 [ 160.925700][ T8346] _copy_from_user+0x2e/0xd0 [ 160.925712][ T8346] sctp_setsockopt+0x2045/0xb870 [ 160.925724][ T8346] ? ksys_write+0x190/0x250 [ 160.925739][ T8346] ? __pfx_sctp_setsockopt+0x10/0x10 [ 160.925750][ T8346] ? find_held_lock+0x2b/0x80 [ 160.925762][ T8346] ? aa_sock_opt_perm+0xfd/0x1c0 [ 160.925773][ T8346] ? sock_common_setsockopt+0x2e/0xf0 [ 160.925784][ T8346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.925797][ T8346] do_sock_setsockopt+0xf0/0x1d0 [ 160.925809][ T8346] __sys_setsockopt+0x120/0x1a0 [ 160.925826][ T8346] __ia32_sys_setsockopt+0xbc/0x160 [ 160.925841][ T8346] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.925856][ T8346] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 160.925873][ T8346] __do_fast_syscall_32+0x7c/0x300 [ 160.925890][ T8346] do_fast_syscall_32+0x32/0x80 [ 160.925900][ T8346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.925913][ T8346] RIP: 0023:0xf70fe579 [ 160.925922][ T8346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.925933][ T8346] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 160.925943][ T8346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 160.925949][ T8346] RDX: 0000000000000009 RSI: 0000000080000200 RDI: 000000000000009c [ 160.925955][ T8346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.925961][ T8346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.925967][ T8346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.925979][ T8346] [ 161.037250][ T8353] input: syz1 as /devices/virtual/input/input9 [ 161.877291][ T60] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 162.027008][ T60] usb 7-1: Invalid ep0 maxpacket: 64 [ 162.054406][ T8372] netlink: 'syz.1.632': attribute type 13 has an invalid length. [ 162.057097][ T8372] netlink: 'syz.1.632': attribute type 17 has an invalid length. [ 162.101477][ T8372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.328553][ T8381] netlink: 14 bytes leftover after parsing attributes in process `syz.1.635'. [ 162.371997][ T8383] netlink: 'syz.1.636': attribute type 2 has an invalid length. [ 162.376981][ T60] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 162.400923][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.634'. [ 162.546957][ T60] usb 7-1: Invalid ep0 maxpacket: 64 [ 162.548835][ T60] usb usb7-port1: attempt power cycle [ 162.907118][ T60] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 162.928523][ T60] usb 7-1: Invalid ep0 maxpacket: 64 [ 163.067028][ T60] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 163.097281][ T60] usb 7-1: Invalid ep0 maxpacket: 64 [ 163.100155][ T60] usb usb7-port1: unable to enumerate USB device [ 164.395628][ T8420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 164.397724][ T8420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.548285][ T8420] vhci_hcd vhci_hcd.0: Device attached [ 164.581192][ T8419] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 164.699522][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 164.874324][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 164.877237][ T8432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 164.883597][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 165.008292][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.011099][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 165.041939][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 165.047530][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 165.160108][ T8447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.165029][ T8421] vhci_hcd: connection reset by peer [ 165.167027][ T1139] vhci_hcd: stop threads [ 165.168383][ T1139] vhci_hcd: release socket [ 165.170231][ T1139] vhci_hcd: disconnect device [ 166.864052][ T8462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 166.928590][ T8476] tmpfs: Unknown parameter 'hash' [ 167.027087][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 167.027370][ T5334] Bluetooth: hci4: command 0x1003 tx timeout [ 168.013210][ T8493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.015806][ T8493] IPv6: NLM_F_CREATE should be set when creating new route [ 168.018134][ T8493] IPv6: NLM_F_CREATE should be set when creating new route [ 168.103975][ T8496] tipc: Started in network mode [ 168.105610][ T8496] tipc: Node identity 96747fd80ea4, cluster identity 4711 [ 168.112113][ T8496] tipc: Enabled bearer , priority 0 [ 168.117411][ T8496] syzkaller0: entered promiscuous mode [ 168.119156][ T8496] syzkaller0: entered allmulticast mode [ 168.132297][ T8495] tipc: Resetting bearer [ 168.142103][ T8495] tipc: Disabling bearer [ 168.771483][ T8512] ucma_write: process 523 (syz.0.676) changed security contexts after opening file descriptor, this is not allowed. [ 169.175211][ T8521] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.752913][ T8540] loop6: detected capacity change from 0 to 524287999 [ 170.039827][ T8547] netlink: 'syz.3.685': attribute type 10 has an invalid length. [ 170.042605][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 170.147036][ T29] usb 44-1: device descriptor read/8, error -110 [ 170.237708][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 170.237756][ T5976] Bluetooth: hci1: command 0x0406 tx timeout [ 170.386915][ T1327] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 170.567860][ T29] usb usb44-port1: attempt power cycle [ 170.607001][ T1327] usb 7-1: Using ep0 maxpacket: 16 [ 170.618913][ T1327] usb 7-1: config 0 has no interfaces? [ 170.629493][ T1327] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.632721][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.635401][ T1327] usb 7-1: Product: syz [ 170.637151][ T1327] usb 7-1: Manufacturer: syz [ 170.639693][ T1327] usb 7-1: SerialNumber: syz [ 170.647434][ T1327] usb 7-1: config 0 descriptor?? [ 170.895195][ T53] usb 7-1: USB disconnect, device number 8 [ 170.908728][ T8568] 9pnet_fd: Insufficient options for proto=fd [ 171.101067][ T8575] binder: 8574:8575 ioctl 400c620e 80000100 returned -22 [ 171.107858][ T8575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 171.109960][ T8575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.113227][ T8575] vhci_hcd vhci_hcd.0: Device attached [ 171.133375][ T8577] vhci_hcd: connection closed [ 171.136239][ T79] vhci_hcd: stop threads [ 171.137463][ T29] usb usb44-port1: unable to enumerate USB device [ 171.139746][ T79] vhci_hcd: release socket [ 171.144470][ T79] vhci_hcd: disconnect device [ 171.321381][ T8582] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 171.324684][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 171.657644][ T8590] tmpfs: Unknown parameter 'hash' [ 172.435556][ T8602] syz_tun: left allmulticast mode [ 172.437441][ T8602] syz_tun: left promiscuous mode [ 172.439145][ T8602] bridge0: port 1(syz_tun) entered disabled state [ 172.928234][ T8618] FAULT_INJECTION: forcing a failure. [ 172.928234][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.932470][ T8618] CPU: 3 UID: 0 PID: 8618 Comm: syz.3.706 Not tainted syzkaller #0 PREEMPT(full) [ 172.932484][ T8618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.932491][ T8618] Call Trace: [ 172.932495][ T8618] [ 172.932500][ T8618] dump_stack_lvl+0x16c/0x1f0 [ 172.932520][ T8618] should_fail_ex+0x512/0x640 [ 172.932539][ T8618] _copy_to_iter+0x29f/0x1710 [ 172.932553][ T8618] ? __free_frozen_pages+0x8ec/0x10f0 [ 172.932566][ T8618] ? __pfx__copy_to_iter+0x10/0x10 [ 172.932579][ T8618] ? __folio_put+0x32e/0x450 [ 172.932592][ T8618] ? __pfx___folio_put+0x10/0x10 [ 172.932608][ T8618] copy_page_to_iter+0x12a/0x1e0 [ 172.932622][ T8618] anon_pipe_read+0x47e/0x1210 [ 172.932645][ T8618] ? __pfx_anon_pipe_read+0x10/0x10 [ 172.932674][ T8618] ? common_file_perm+0x1a9/0x340 [ 172.932698][ T8618] ? bpf_lsm_file_permission+0x9/0x10 [ 172.932721][ T8618] ? security_file_permission+0x71/0x210 [ 172.932747][ T8618] fifo_pipe_read+0x1e/0xd0 [ 172.932765][ T8618] vfs_read+0xa98/0xcf0 [ 172.932781][ T8618] ? __pfx_vfs_read+0x10/0x10 [ 172.932791][ T8618] ? find_held_lock+0x2b/0x80 [ 172.932811][ T8618] ksys_read+0x1f8/0x250 [ 172.932823][ T8618] ? __pfx_ksys_read+0x10/0x10 [ 172.932836][ T8618] ? rcu_is_watching+0x12/0xc0 [ 172.932849][ T8618] __do_fast_syscall_32+0x7c/0x300 [ 172.932867][ T8618] do_fast_syscall_32+0x32/0x80 [ 172.932892][ T8618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.932905][ T8618] RIP: 0023:0xf7fb2579 [ 172.932914][ T8618] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 172.932924][ T8618] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 172.932935][ T8618] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 172.932941][ T8618] RDX: 000000000000ffa6 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.932947][ T8618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.932953][ T8618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 172.932959][ T8618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.932972][ T8618] [ 174.637744][ T8656] loop6: detected capacity change from 0 to 524287999 [ 174.911950][ T8647] ceph: No mds server is up or the cluster is laggy [ 175.915320][ T8683] sctp_transport_update_pmtu: 102 callbacks suppressed [ 175.915339][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.921517][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.924862][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.929410][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.932877][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.936193][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.939727][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.942872][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.946165][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.952665][ T8683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 175.982823][ T8683] FAULT_INJECTION: forcing a failure. [ 175.982823][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 175.986723][ T8683] CPU: 2 UID: 0 PID: 8683 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(full) [ 175.986739][ T8683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.986745][ T8683] Call Trace: [ 175.986749][ T8683] [ 175.986754][ T8683] dump_stack_lvl+0x16c/0x1f0 [ 175.986773][ T8683] should_fail_ex+0x512/0x640 [ 175.986791][ T8683] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.986820][ T8683] should_failslab+0xc2/0x120 [ 175.986835][ T8683] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 175.986849][ T8683] ? __alloc_skb+0x2b2/0x380 [ 175.986867][ T8683] __alloc_skb+0x2b2/0x380 [ 175.986881][ T8683] ? __pfx___alloc_skb+0x10/0x10 [ 175.986916][ T8683] _sctp_make_chunk+0x51/0x270 [ 175.986932][ T8683] sctp_make_control+0x2f/0x2d0 [ 175.986945][ T8683] sctp_make_heartbeat+0xa7/0x2e0 [ 175.986958][ T8683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.986971][ T8683] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 175.986988][ T8683] ? sctp_sm_lookup_event+0x15b/0x570 [ 175.987001][ T8683] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 175.987015][ T8683] ? __pfx_sctp_pname+0x10/0x10 [ 175.987027][ T8683] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 175.987039][ T8683] ? __pfx_sctp_pname+0x10/0x10 [ 175.987051][ T8683] sctp_do_sm+0x181/0x5c80 [ 175.987067][ T8683] ? __pfx_sctp_do_sm+0x10/0x10 [ 175.987078][ T8683] ? kasan_save_stack+0x42/0x60 [ 175.987090][ T8683] ? kasan_save_track+0x14/0x30 [ 175.987101][ T8683] ? __kasan_kmalloc+0xaa/0xb0 [ 175.987111][ T8683] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 175.987124][ T8683] ? sctp_setsockopt+0x4ce/0xb870 [ 175.987134][ T8683] ? do_sock_setsockopt+0xf0/0x1d0 [ 175.987164][ T8683] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 175.987178][ T8683] sctp_apply_peer_addr_params+0x113/0x3400 [ 175.987197][ T8683] sctp_setsockopt+0x143b/0xb870 [ 175.987207][ T8683] ? ksys_write+0x190/0x250 [ 175.987222][ T8683] ? __pfx_sctp_setsockopt+0x10/0x10 [ 175.987232][ T8683] ? find_held_lock+0x2b/0x80 [ 175.987244][ T8683] ? aa_sock_opt_perm+0xfd/0x1c0 [ 175.987255][ T8683] ? sock_common_setsockopt+0x2e/0xf0 [ 175.987266][ T8683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.987278][ T8683] do_sock_setsockopt+0xf0/0x1d0 [ 175.987291][ T8683] __sys_setsockopt+0x120/0x1a0 [ 175.987308][ T8683] __ia32_sys_setsockopt+0xbc/0x160 [ 175.987323][ T8683] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.987338][ T8683] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 175.987358][ T8683] __do_fast_syscall_32+0x7c/0x300 [ 175.987376][ T8683] do_fast_syscall_32+0x32/0x80 [ 175.987385][ T8683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.987398][ T8683] RIP: 0023:0xf70de579 [ 175.987407][ T8683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 175.987417][ T8683] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 175.987428][ T8683] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 175.987435][ T8683] RDX: 0000000000000009 RSI: 0000000080000200 RDI: 000000000000009c [ 175.987441][ T8683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.987447][ T8683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 175.987453][ T8683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.987466][ T8683] [ 176.770802][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 178.666470][ T8726] mkiss: ax0: crc mode is auto. [ 178.763317][ T8730] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 178.977719][ T8730] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.203221][ T8737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.738'. [ 180.147060][ T5919] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.155590][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 180.278340][ T5919] usb 5-1: device descriptor read/64, error -71 [ 180.341939][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 180.539126][ T8776] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 180.567864][ T5919] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.697615][ T5919] usb 5-1: device descriptor read/64, error -71 [ 180.822267][ T5919] usb usb5-port1: attempt power cycle [ 181.197009][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.217305][ T5919] usb 5-1: device descriptor read/8, error -71 [ 181.456974][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.551012][ T5919] usb 5-1: device descriptor read/8, error -71 [ 181.657095][ T5919] usb usb5-port1: unable to enumerate USB device [ 182.220450][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 182.550483][ T8814] netlink: 'syz.3.756': attribute type 6 has an invalid length. [ 182.637126][ T8815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 182.639233][ T8815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.641888][ T8815] vhci_hcd vhci_hcd.0: Device attached [ 182.986978][ T53] usb 40-1: SetAddress Request (6) to port 0 [ 182.989001][ T53] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 183.217449][ T8816] vhci_hcd: connection reset by peer [ 183.219803][ T1251] vhci_hcd: stop threads [ 183.221219][ T1251] vhci_hcd: release socket [ 183.223373][ T1251] vhci_hcd: disconnect device [ 183.301175][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 183.805250][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 183.808179][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.763'. [ 183.813990][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 184.512064][ T8848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.516097][ T8848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.573850][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 184.583931][ T8848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.597311][ T8848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.686596][ T8849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 184.745452][ T8848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.748749][ T8848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.871694][ T8848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.874731][ T8848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.960691][ T8866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.963087][ T8866] IPv6: NLM_F_CREATE should be set when creating new route [ 184.965384][ T8866] IPv6: NLM_F_CREATE should be set when creating new route [ 185.443951][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.446740][ T46] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.459499][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.484583][ T46] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.502921][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.507064][ T46] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.526217][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 185.529094][ T1139] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.590240][ T8877] tmpfs: Unknown parameter 'hash' [ 186.226770][ T8883] block device autoloading is deprecated and will be removed. [ 186.300299][ T8892] loop6: detected capacity change from 0 to 524287999 [ 186.686956][ T6011] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 186.837699][ T6011] usb 7-1: Using ep0 maxpacket: 16 [ 186.840645][ T6011] usb 7-1: config 0 has no interfaces? [ 186.844037][ T6011] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.847185][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.849766][ T6011] usb 7-1: Product: syz [ 186.851159][ T6011] usb 7-1: Manufacturer: syz [ 186.852657][ T6011] usb 7-1: SerialNumber: syz [ 186.863454][ T6011] usb 7-1: config 0 descriptor?? [ 186.981518][ T8906] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 186.984860][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 187.077771][ T29] usb 7-1: USB disconnect, device number 9 [ 187.816976][ T1327] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 187.981431][ T1327] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.984863][ T1327] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.988404][ T1327] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.999143][ T1327] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.003131][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.006431][ T1327] usb 6-1: Product: syz [ 188.008066][ T1327] usb 6-1: Manufacturer: syz [ 188.009786][ T1327] usb 6-1: SerialNumber: syz [ 188.019178][ T1327] hub 6-1:1.0: bad descriptor, ignoring hub [ 188.021845][ T1327] hub 6-1:1.0: probe with driver hub failed with error -5 [ 188.066989][ T53] usb 40-1: device descriptor read/8, error -110 [ 188.143012][ T8928] tmpfs: Unknown parameter 'hash' [ 188.254769][ T1327] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.527408][ T53] usb usb40-port1: attempt power cycle [ 188.846277][ T8937] netlink: 'syz.2.796': attribute type 10 has an invalid length. [ 188.849402][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 188.851724][ T8919] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 189.097589][ T53] usb usb40-port1: unable to enumerate USB device [ 190.036961][ T8955] netlink: 'syz.3.801': attribute type 13 has an invalid length. [ 190.858464][ T6010] usb 6-1: USB disconnect, device number 9 [ 190.867284][ T6010] usblp0: removed [ 192.038634][ T8989] loop6: detected capacity change from 0 to 524287999 [ 192.330429][ T8993] netlink: 'syz.1.812': attribute type 13 has an invalid length. [ 192.938608][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 193.362387][ T9002] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 193.375975][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.396200][ T9002] bond0: (slave geneve0): making interface the new active one [ 193.399292][ T9002] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 193.482868][ T79] bond0 (unregistering): (slave geneve0): Releasing active interface [ 193.577937][ T79] bond0 (unregistering): Released all slaves [ 194.576651][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.579460][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.919527][ T9017] block nbd3: Attempted send on invalid socket [ 195.921545][ T9017] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.924892][ T9017] FAT-fs (nbd3): unable to read boot sector [ 196.852854][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 197.335667][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 197.372851][ T9042] wireguard0: entered promiscuous mode [ 197.377821][ T9042] wireguard0: entered allmulticast mode [ 198.166118][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 198.810141][ T9061] netlink: 'syz.3.829': attribute type 13 has an invalid length. [ 198.812685][ T9061] netlink: 'syz.3.829': attribute type 17 has an invalid length. [ 198.824223][ T9061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.664481][ T9066] netlink: 'syz.3.831': attribute type 23 has an invalid length. [ 199.867802][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 200.298173][ T9094] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 200.310687][ T9094] cramfs: wrong magic [ 201.812099][ T9120] netlink: 64 bytes leftover after parsing attributes in process `syz.3.840'. [ 202.023082][ T9119] syz.3.840 (9119): drop_caches: 2 [ 202.024932][ T9119] syz.3.840 (9119): drop_caches: 2 [ 202.030618][ T5334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.034266][ T5334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.041631][ T5334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.044752][ T5334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.048680][ T5334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.160833][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 202.228178][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.230800][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.233045][ T9124] bridge_slave_0: entered allmulticast mode [ 202.235756][ T9124] bridge_slave_0: entered promiscuous mode [ 202.240730][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.243015][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.245226][ T9124] bridge_slave_1: entered allmulticast mode [ 202.248581][ T9124] bridge_slave_1: entered promiscuous mode [ 202.289330][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.294538][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.301035][ T1139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.337750][ T9124] team0: Port device team_slave_0 added [ 202.341107][ T9124] team0: Port device team_slave_1 added [ 202.374176][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.376358][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.384419][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.391408][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.393566][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.402030][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.407661][ T1139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.451636][ T9124] hsr_slave_0: entered promiscuous mode [ 202.453828][ T9124] hsr_slave_1: entered promiscuous mode [ 202.455841][ T9124] debugfs: 'hsr0' already exists in 'hsr' [ 202.457726][ T9124] Cannot create hsr debugfs directory [ 202.475532][ T1139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.559075][ T1139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.608271][ T9124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.612553][ T9124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.617164][ T9124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.622067][ T9124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.642448][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.644648][ T9124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.646998][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.649142][ T9124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.044112][ T1139] bond0 (unregistering): Released all slaves [ 203.051071][ T1139] bond1 (unregistering): Released all slaves [ 203.108631][ T1139] bond2 (unregistering): Released all slaves [ 203.114567][ T1139] bond3 (unregistering): Released all slaves [ 203.129762][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.132928][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.151475][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.161593][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.167233][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.169470][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.177312][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.179553][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.297811][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.439941][ T1139] hsr_slave_0: left promiscuous mode [ 203.442535][ T1139] hsr_slave_1: left promiscuous mode [ 203.462787][ T1139] veth1_macvtap: left promiscuous mode [ 203.464763][ T1139] veth0_macvtap: left promiscuous mode [ 204.068704][ T5981] Bluetooth: hci2: command tx timeout [ 204.389716][ T9124] veth0_vlan: entered promiscuous mode [ 204.395182][ T9124] veth1_vlan: entered promiscuous mode [ 204.412682][ T9124] veth0_macvtap: entered promiscuous mode [ 204.416550][ T9124] veth1_macvtap: entered promiscuous mode [ 204.425012][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.435109][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.441406][ T1059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.444184][ T1059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.452725][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.456262][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.508090][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.511385][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.525177][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.528967][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.147062][ T5981] Bluetooth: hci2: command tx timeout [ 207.014565][ T9210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.844'. [ 207.159029][ T9214] syz.2.844 (9214): drop_caches: 2 [ 207.162349][ T9214] syz.2.844 (9214): drop_caches: 2 [ 207.551018][ T9219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.846'. [ 207.678422][ T9222] syz.4.846 (9222): drop_caches: 2 [ 207.680233][ T9222] syz.4.846 (9222): drop_caches: 2 [ 208.237087][ T5981] Bluetooth: hci2: command tx timeout [ 208.519375][ T9234] loop6: detected capacity change from 0 to 524287999 [ 208.836587][ T9238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.850'. [ 208.866998][ T6113] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 208.984120][ T9241] syz.4.850 (9241): drop_caches: 2 [ 208.987532][ T9241] syz.4.850 (9241): drop_caches: 2 [ 209.170538][ T6113] usb 7-1: Using ep0 maxpacket: 16 [ 209.491303][ T6113] usb 7-1: unable to get BOS descriptor or descriptor too short [ 209.499472][ T6113] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 209.504662][ T6113] usb 7-1: can't read configurations, error -71 [ 210.063737][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 210.095351][ T9255] tmpfs: Unknown parameter 'hash' [ 210.387104][ T5981] Bluetooth: hci2: command tx timeout [ 213.058823][ T9284] 9pnet_fd: Insufficient options for proto=fd [ 213.428482][ T839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 214.843185][ T6119] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 214.852532][ T6119] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 214.969483][ T9392] fido_id[9392]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.490059][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 217.492896][ T9456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.884'. [ 217.498766][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 217.672012][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 217.743335][ T9471] xt_l2tp: v2 tid > 0xffff: 37482740 [ 217.762705][ T9471] PID 9471 killed due to inadequate hugepage pool [ 217.934490][ T9487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.936998][ T9487] IPv6: NLM_F_CREATE should be set when creating new route [ 217.939366][ T9487] IPv6: NLM_F_CREATE should be set when creating new route [ 217.954700][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.896'. [ 217.967641][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 217.970385][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.896'. [ 217.973137][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.896'. [ 218.046415][ T9493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.898'. [ 218.177692][ T9496] syz.1.898 (9496): drop_caches: 2 [ 218.180808][ T9496] syz.1.898 (9496): drop_caches: 2 [ 218.325296][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 218.990761][ T9512] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 219.101535][ T9510] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.293725][ T9510] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.606528][ T9510] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.971167][ T9534] tmpfs: Unknown parameter 'hash' [ 220.080367][ T9510] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.304896][ T9544] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 220.307575][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.310103][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.315942][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.318315][ T9544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.321325][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.323580][ T9544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.329890][ T9544] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.340703][ T9544] bridge_slave_1: left allmulticast mode [ 220.342507][ T9544] bridge_slave_1: left promiscuous mode [ 220.344344][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.724635][ T9544] bridge_slave_0: left allmulticast mode [ 220.726642][ T9544] bridge_slave_0: left promiscuous mode [ 220.730490][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.764544][ T9544] bond0: (slave bridge0): Releasing backup interface [ 220.870931][ T1251] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.888288][ T1251] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.899889][ T1251] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.915889][ T1251] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.214662][ T9585] syz.2.917 (9585): drop_caches: 2 [ 222.219924][ T9585] syz.2.917 (9585): drop_caches: 2 [ 224.897975][ T9639] loop6: detected capacity change from 0 to 524287999 [ 225.207135][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 225.421058][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 225.430750][ T9] usb 9-1: config 0 has no interfaces? [ 225.472665][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.475798][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.479148][ T9] usb 9-1: Product: syz [ 225.480600][ T9] usb 9-1: Manufacturer: syz [ 225.482410][ T9] usb 9-1: SerialNumber: syz [ 225.503700][ T9] usb 9-1: config 0 descriptor?? [ 225.617714][ T9647] __nla_validate_parse: 2 callbacks suppressed [ 225.617783][ T9647] netlink: 64 bytes leftover after parsing attributes in process `syz.3.933'. [ 225.649164][ T9646] serio: Serial port ptm0 [ 225.726592][ T9] usb 9-1: USB disconnect, device number 2 [ 225.771953][ T9647] syz.3.933 (9647): drop_caches: 2 [ 225.778295][ T9647] syz.3.933 (9647): drop_caches: 2 [ 226.154331][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 226.154365][ T40] audit: type=1326 audit(1758109224.276:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.166284][ T40] audit: type=1326 audit(1758109224.276:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.181977][ T40] audit: type=1326 audit(1758109224.286:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.204935][ T40] audit: type=1326 audit(1758109224.286:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.214970][ T40] audit: type=1326 audit(1758109224.286:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.274700][ T40] audit: type=1326 audit(1758109224.286:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.289344][ T40] audit: type=1326 audit(1758109224.286:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.320437][ T40] audit: type=1326 audit(1758109224.286:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.328054][ T40] audit: type=1326 audit(1758109224.286:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 226.335398][ T40] audit: type=1326 audit(1758109224.306:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.2.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 227.231670][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 227.571886][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'. [ 227.732123][ T9688] No source specified [ 228.502813][ T9707] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 228.505721][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 228.530104][ T9709] tmpfs: Unknown parameter 'hash' [ 229.678345][ T9726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 229.681550][ T9726] /dev/nullb0: Can't open blockdev [ 229.889083][ T9715] overlayfs: statfs failed on './file0' [ 230.013757][ T9731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.957'. [ 230.164031][ T9735] syz.1.957 (9735): drop_caches: 2 [ 230.170925][ T9735] syz.1.957 (9735): drop_caches: 2 [ 232.874926][ T9775] netlink: 64 bytes leftover after parsing attributes in process `syz.2.967'. [ 232.975716][ T9778] syz.2.967 (9778): drop_caches: 2 [ 232.979749][ T9778] syz.2.967 (9778): drop_caches: 2 [ 233.791434][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 233.795940][ T9800] netlink: 64 bytes leftover after parsing attributes in process `syz.4.978'. [ 233.970711][ T9798] syz.4.978 (9798): drop_caches: 2 [ 233.972609][ T9798] syz.4.978 (9798): drop_caches: 2 [ 235.522960][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.984'. [ 235.678654][ T9828] bond1: (slave geneve2): Releasing active interface [ 235.696688][ T1059] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 235.701189][ T1059] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 235.703840][ T1059] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 235.706454][ T1059] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 236.273019][ T9847] netlink: 64 bytes leftover after parsing attributes in process `syz.3.986'. [ 236.348842][ T9853] syz.3.986 (9853): drop_caches: 2 [ 236.350664][ T9853] syz.3.986 (9853): drop_caches: 2 [ 237.086945][ T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 237.237991][ T9865] FAULT_INJECTION: forcing a failure. [ 237.237991][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.239218][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.241737][ T9865] CPU: 3 UID: 0 PID: 9865 Comm: syz.3.992 Not tainted syzkaller #0 PREEMPT(full) [ 237.241752][ T9865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.241758][ T9865] Call Trace: [ 237.241763][ T9865] [ 237.241767][ T9865] dump_stack_lvl+0x16c/0x1f0 [ 237.241787][ T9865] should_fail_ex+0x512/0x640 [ 237.241807][ T9865] _copy_to_iter+0x29f/0x1710 [ 237.241826][ T9865] ? __free_frozen_pages+0x8ec/0x10f0 [ 237.241839][ T9865] ? __pfx__copy_to_iter+0x10/0x10 [ 237.241851][ T9865] ? __folio_put+0x32e/0x450 [ 237.241865][ T9865] ? __pfx___folio_put+0x10/0x10 [ 237.241881][ T9865] copy_page_to_iter+0x12a/0x1e0 [ 237.241894][ T9865] anon_pipe_read+0x47e/0x1210 [ 237.241913][ T9865] ? __pfx_anon_pipe_read+0x10/0x10 [ 237.241928][ T9865] ? common_file_perm+0x1a9/0x340 [ 237.241943][ T9865] ? bpf_lsm_file_permission+0x9/0x10 [ 237.241959][ T9865] ? security_file_permission+0x71/0x210 [ 237.241975][ T9865] fifo_pipe_read+0x1e/0xd0 [ 237.241987][ T9865] vfs_read+0xa98/0xcf0 [ 237.242002][ T9865] ? __pfx_vfs_read+0x10/0x10 [ 237.242012][ T9865] ? find_held_lock+0x2b/0x80 [ 237.242032][ T9865] ksys_read+0x1f8/0x250 [ 237.242044][ T9865] ? __pfx_ksys_read+0x10/0x10 [ 237.242057][ T9865] ? rcu_is_watching+0x12/0xc0 [ 237.242069][ T9865] __do_fast_syscall_32+0x7c/0x300 [ 237.242087][ T9865] do_fast_syscall_32+0x32/0x80 [ 237.242097][ T9865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.242110][ T9865] RIP: 0023:0xf7fb2579 [ 237.242118][ T9865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 237.242129][ T9865] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 237.242139][ T9865] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 237.242146][ T9865] RDX: 000000000000ffa6 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.242152][ T9865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.242160][ T9865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.242168][ T9865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.242187][ T9865] [ 237.327020][ T53] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.335788][ T53] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.368577][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.371395][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.373852][ T53] usb 9-1: Product: syz [ 237.375145][ T53] usb 9-1: Manufacturer: syz [ 237.376669][ T53] usb 9-1: SerialNumber: syz [ 237.380595][ T53] hub 9-1:1.0: bad descriptor, ignoring hub [ 237.382481][ T53] hub 9-1:1.0: probe with driver hub failed with error -5 [ 237.457351][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 237.698359][ T53] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.049602][ T9882] random: crng reseeded on system resumption [ 238.427008][ T9849] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 238.519419][ T9899] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 239.319724][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 239.499911][ T9920] sctp_transport_update_pmtu: 99 callbacks suppressed [ 239.499924][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.505362][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.508870][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.513057][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.516563][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.520125][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.523550][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.527935][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.531224][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.534634][ T9920] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 239.568547][ T9920] FAULT_INJECTION: forcing a failure. [ 239.568547][ T9920] name failslab, interval 1, probability 0, space 0, times 0 [ 239.572402][ T9920] CPU: 3 UID: 0 PID: 9920 Comm: syz.3.1009 Not tainted syzkaller #0 PREEMPT(full) [ 239.572417][ T9920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.572424][ T9920] Call Trace: [ 239.572427][ T9920] [ 239.572432][ T9920] dump_stack_lvl+0x16c/0x1f0 [ 239.572452][ T9920] should_fail_ex+0x512/0x640 [ 239.572472][ T9920] should_failslab+0xc2/0x120 [ 239.572487][ T9920] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 239.572500][ T9920] ? sctp_chunkify+0x51/0x2d0 [ 239.572515][ T9920] sctp_chunkify+0x51/0x2d0 [ 239.572528][ T9920] _sctp_make_chunk+0x148/0x270 [ 239.572541][ T9920] sctp_make_control+0x2f/0x2d0 [ 239.572554][ T9920] sctp_make_heartbeat+0xa7/0x2e0 [ 239.572567][ T9920] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.572580][ T9920] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 239.572597][ T9920] ? sctp_sm_lookup_event+0x15b/0x570 [ 239.572610][ T9920] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 239.572624][ T9920] ? __pfx_sctp_pname+0x10/0x10 [ 239.572638][ T9920] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 239.572650][ T9920] ? __pfx_sctp_pname+0x10/0x10 [ 239.572662][ T9920] sctp_do_sm+0x181/0x5c80 [ 239.572676][ T9920] ? __lock_acquire+0xb97/0x1ce0 [ 239.572691][ T9920] ? __pfx_sctp_do_sm+0x10/0x10 [ 239.572701][ T9920] ? kasan_save_stack+0x42/0x60 [ 239.572713][ T9920] ? kasan_save_track+0x14/0x30 [ 239.572724][ T9920] ? __kasan_kmalloc+0xaa/0xb0 [ 239.572735][ T9920] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 239.572748][ T9920] ? sctp_setsockopt+0x4ce/0xb870 [ 239.572757][ T9920] ? do_sock_setsockopt+0xf0/0x1d0 [ 239.572790][ T9920] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 239.572805][ T9920] sctp_apply_peer_addr_params+0x113/0x3400 [ 239.572823][ T9920] sctp_setsockopt+0x143b/0xb870 [ 239.572833][ T9920] ? ksys_write+0x190/0x250 [ 239.572848][ T9920] ? __pfx_sctp_setsockopt+0x10/0x10 [ 239.572859][ T9920] ? find_held_lock+0x2b/0x80 [ 239.572870][ T9920] ? aa_sock_opt_perm+0xfd/0x1c0 [ 239.572881][ T9920] ? sock_common_setsockopt+0x2e/0xf0 [ 239.572892][ T9920] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.572905][ T9920] do_sock_setsockopt+0xf0/0x1d0 [ 239.572917][ T9920] __sys_setsockopt+0x120/0x1a0 [ 239.572934][ T9920] __ia32_sys_setsockopt+0xbc/0x160 [ 239.572950][ T9920] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.572965][ T9920] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 239.572982][ T9920] __do_fast_syscall_32+0x7c/0x300 [ 239.573002][ T9920] do_fast_syscall_32+0x32/0x80 [ 239.573012][ T9920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.573025][ T9920] RIP: 0023:0xf7fb2579 [ 239.573034][ T9920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.573044][ T9920] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 239.573054][ T9920] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 239.573061][ T9920] RDX: 0000000000000009 RSI: 0000000080000200 RDI: 000000000000009c [ 239.573067][ T9920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.573072][ T9920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 239.573078][ T9920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.573091][ T9920] [ 239.909952][ T9] usb 9-1: USB disconnect, device number 3 [ 239.916249][ T9] usblp0: removed [ 240.718163][ T9951] pim6reg: entered allmulticast mode [ 240.894171][ T9956] serio: Serial port ptm0 [ 241.346982][ T1327] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 241.510423][ T1327] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.513752][ T1327] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.516752][ T1327] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.522991][ T1327] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 241.525869][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.528521][ T1327] usb 7-1: Product: syz [ 241.529857][ T1327] usb 7-1: Manufacturer: syz [ 241.531333][ T1327] usb 7-1: SerialNumber: syz [ 241.537986][ T1327] hub 7-1:1.0: bad descriptor, ignoring hub [ 241.539929][ T1327] hub 7-1:1.0: probe with driver hub failed with error -5 [ 241.739732][ T1327] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 242.132594][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 242.427860][ T9974] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.467280][T10002] serio: Serial port ptm0 [ 243.945687][ T9] usb 7-1: USB disconnect, device number 12 [ 243.950535][ T9] usblp0: removed [ 244.055848][T10015] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 244.061185][T10015] cramfs: wrong magic [ 244.803861][T10025] input: syz1 as /devices/virtual/input/input10 [ 244.950123][T10037] netlink: 'syz.2.1042': attribute type 5 has an invalid length. [ 245.437017][ T839] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 245.566006][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 245.588316][T10048] wireguard0: entered promiscuous mode [ 245.591059][T10048] wireguard0: entered allmulticast mode [ 245.598343][ T839] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.601553][ T839] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.604770][ T839] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.610878][ T839] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.613854][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.616325][ T839] usb 7-1: Product: syz [ 245.618178][ T839] usb 7-1: Manufacturer: syz [ 245.619700][ T839] usb 7-1: SerialNumber: syz [ 245.630768][ T839] hub 7-1:1.0: bad descriptor, ignoring hub [ 245.632636][ T839] hub 7-1:1.0: probe with driver hub failed with error -5 [ 245.833508][ T839] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.018495][ T60] usb 7-1: USB disconnect, device number 13 [ 248.023702][ T60] usblp0: removed [ 248.771450][T10097] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 248.783718][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.794150][T10097] bond0: (slave geneve0): making interface the new active one [ 248.798445][T10097] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 248.889081][ T61] bond0 (unregistering): (slave geneve0): Releasing active interface [ 248.956633][ T61] bond0 (unregistering): Released all slaves [ 249.814564][T10126] IPVS: set_ctl: invalid protocol: 52118 255.255.255.255:20000 [ 249.817640][T10127] IPVS: set_ctl: invalid protocol: 52118 255.255.255.255:20000 [ 250.160225][T10131] FAULT_INJECTION: forcing a failure. [ 250.160225][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.164259][T10131] CPU: 2 UID: 0 PID: 10131 Comm: syz.3.1069 Not tainted syzkaller #0 PREEMPT(full) [ 250.164284][T10131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.164291][T10131] Call Trace: [ 250.164295][T10131] [ 250.164300][T10131] dump_stack_lvl+0x16c/0x1f0 [ 250.164320][T10131] should_fail_ex+0x512/0x640 [ 250.164339][T10131] _copy_from_user+0x2e/0xd0 [ 250.164351][T10131] get_compat_msghdr+0xa7/0x170 [ 250.164367][T10131] ? __pfx_get_compat_msghdr+0x10/0x10 [ 250.164387][T10131] ___sys_sendmsg+0x1ae/0x1d0 [ 250.164404][T10131] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.164427][T10131] ? find_held_lock+0x2b/0x80 [ 250.164448][T10131] __sys_sendmsg+0x16d/0x220 [ 250.164464][T10131] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.164486][T10131] ? rcu_is_watching+0x12/0xc0 [ 250.164499][T10131] __do_fast_syscall_32+0x7c/0x300 [ 250.164517][T10131] do_fast_syscall_32+0x32/0x80 [ 250.164526][T10131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.164540][T10131] RIP: 0023:0xf7fb2579 [ 250.164548][T10131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.164559][T10131] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 250.164569][T10131] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000180 [ 250.164576][T10131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.164581][T10131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.164587][T10131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 250.164593][T10131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.164606][T10131] [ 250.433017][T10134] netlink: 'syz.1.1070': attribute type 13 has an invalid length. [ 250.435921][T10134] netlink: 'syz.1.1070': attribute type 17 has an invalid length. [ 250.483471][T10134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.013051][T10141] netlink: 'syz.2.1072': attribute type 13 has an invalid length. [ 251.015622][T10141] netlink: 'syz.2.1072': attribute type 17 has an invalid length. [ 251.027699][T10141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.278184][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 251.278220][ T40] audit: type=1326 audit(1758109249.426:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.310734][ T40] audit: type=1326 audit(1758109249.436:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.311157][ T1224] Bluetooth: hci4: Frame reassembly failed (-84) [ 251.318629][ T40] audit: type=1326 audit(1758109249.436:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318656][ T40] audit: type=1326 audit(1758109249.436:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318677][ T40] audit: type=1326 audit(1758109249.436:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318696][ T40] audit: type=1326 audit(1758109249.436:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318716][ T40] audit: type=1326 audit(1758109249.436:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318736][ T40] audit: type=1326 audit(1758109249.436:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318755][ T40] audit: type=1326 audit(1758109249.436:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.318775][ T40] audit: type=1326 audit(1758109249.436:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 251.996791][ T60] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 252.003994][ T60] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 252.173143][T10166] fido_id[10166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 252.635428][T10185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1088'. [ 252.836826][T10194] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 252.836825][T10193] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 252.845636][T10193] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 253.347028][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.347084][ T5334] Bluetooth: hci4: command 0x1003 tx timeout [ 253.856384][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 253.859524][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1091'. [ 253.870145][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1091'. [ 253.980264][T10217] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 253.986006][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 254.711987][T10241] No source specified [ 254.747030][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 254.928374][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.932666][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.935812][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.941999][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.944982][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.947760][ T24] usb 7-1: Product: syz [ 254.949750][ T24] usb 7-1: Manufacturer: syz [ 254.952891][ T24] usb 7-1: SerialNumber: syz [ 254.968932][ T24] hub 7-1:1.0: bad descriptor, ignoring hub [ 254.971065][ T24] hub 7-1:1.0: probe with driver hub failed with error -5 [ 255.175034][ T24] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.193425][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764741][T10261] sp0: Synchronizing with TNC [ 255.862439][T10267] netlink: 'syz.4.1116': attribute type 10 has an invalid length. [ 255.865219][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 255.991088][T10275] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 255.999335][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.004412][T10275] bond0: (slave wpan1): Enslaving as an active interface with an up link [ 256.038981][ T6010] ================================================================== [ 256.042648][ T6010] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x19f/0x570 [ 256.045684][ T6010] Write of size 4 at addr 000000000000004c by task kworker/3:2/6010 [ 256.050498][ T6010] [ 256.051487][ T6010] CPU: 3 UID: 0 PID: 6010 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 256.051501][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.051508][ T6010] Workqueue: mld mld_ifc_work [ 256.051522][ T6010] Call Trace: [ 256.051526][ T6010] [ 256.051530][ T6010] dump_stack_lvl+0x116/0x1f0 [ 256.051547][ T6010] kasan_report+0xe0/0x110 [ 256.051562][ T6010] ? mac802154_header_create+0x19f/0x570 [ 256.051576][ T6010] kasan_check_range+0x100/0x1b0 [ 256.051592][ T6010] mac802154_header_create+0x19f/0x570 [ 256.051605][ T6010] ? __pfx_mac802154_header_create+0x10/0x10 [ 256.051622][ T6010] ? __pfx_mac802154_header_create+0x10/0x10 [ 256.051634][ T6010] neigh_connected_output+0x366/0x620 [ 256.051656][ T6010] ip6_finish_output2+0xaee/0x2020 [ 256.051673][ T6010] __ip6_finish_output+0x3cd/0x1010 [ 256.051687][ T6010] ip6_output+0x1ca/0x3e0 [ 256.051702][ T6010] mld_sendpack+0x9ea/0x1270 [ 256.051712][ T6010] ? __pfx_mld_sendpack+0x10/0x10 [ 256.051724][ T6010] mld_ifc_work+0x740/0xbf0 [ 256.051735][ T6010] process_one_work+0x9cf/0x1b70 [ 256.051747][ T6010] ? __pfx_process_one_work+0x10/0x10 [ 256.051765][ T6010] ? assign_work+0x1a0/0x250 [ 256.051780][ T6010] worker_thread+0x6c8/0xf10 [ 256.051791][ T6010] ? __kthread_parkme+0x19e/0x250 [ 256.051804][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 256.051813][ T6010] kthread+0x3c5/0x780 [ 256.051828][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.051843][ T6010] ? rcu_is_watching+0x12/0xc0 [ 256.051854][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.051869][ T6010] ret_from_fork+0x56d/0x730 [ 256.051885][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.051905][ T6010] ret_from_fork_asm+0x1a/0x30 [ 256.051921][ T6010] [ 256.051924][ T6010] ================================================================== [ 256.127077][ T6010] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.129473][ T6010] CPU: 3 UID: 0 PID: 6010 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 256.132442][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.136162][ T6010] Workqueue: mld mld_ifc_work [ 256.137713][ T6010] Call Trace: [ 256.138847][ T6010] [ 256.139777][ T6010] dump_stack_lvl+0x3d/0x1f0 [ 256.141287][ T6010] vpanic+0x6e8/0x7a0 [ 256.142622][ T6010] ? __pfx_vpanic+0x10/0x10 [ 256.144108][ T6010] ? __pfx_vprintk_emit+0x10/0x10 [ 256.145803][ T6010] ? mac802154_header_create+0x19f/0x570 [ 256.147619][ T6010] panic+0xca/0xd0 [ 256.148866][ T6010] ? __pfx_panic+0x10/0x10 [ 256.150331][ T6010] ? mac802154_header_create+0x19f/0x570 [ 256.152132][ T6010] ? preempt_schedule_common+0x44/0xc0 [ 256.153891][ T6010] ? preempt_schedule_thunk+0x16/0x30 [ 256.155692][ T6010] ? check_panic_on_warn+0x1f/0xb0 [ 256.157352][ T6010] check_panic_on_warn+0xab/0xb0 [ 256.158978][ T6010] end_report+0x107/0x170 [ 256.160392][ T6010] kasan_report+0xee/0x110 [ 256.161861][ T6010] ? mac802154_header_create+0x19f/0x570 [ 256.163665][ T6010] kasan_check_range+0x100/0x1b0 [ 256.165339][ T6010] mac802154_header_create+0x19f/0x570 [ 256.167102][ T6010] ? __pfx_mac802154_header_create+0x10/0x10 [ 256.169029][ T6010] ? __pfx_mac802154_header_create+0x10/0x10 [ 256.171146][ T6010] neigh_connected_output+0x366/0x620 [ 256.172914][ T6010] ip6_finish_output2+0xaee/0x2020 [ 256.174621][ T6010] __ip6_finish_output+0x3cd/0x1010 [ 256.176421][ T6010] ip6_output+0x1ca/0x3e0 [ 256.177873][ T6010] mld_sendpack+0x9ea/0x1270 [ 256.179407][ T6010] ? __pfx_mld_sendpack+0x10/0x10 [ 256.181052][ T6010] mld_ifc_work+0x740/0xbf0 [ 256.182579][ T6010] process_one_work+0x9cf/0x1b70 [ 256.184189][ T6010] ? __pfx_process_one_work+0x10/0x10 [ 256.185939][ T6010] ? assign_work+0x1a0/0x250 [ 256.187535][ T6010] worker_thread+0x6c8/0xf10 [ 256.189066][ T6010] ? __kthread_parkme+0x19e/0x250 [ 256.190718][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 256.192396][ T6010] kthread+0x3c5/0x780 [ 256.193775][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.195310][ T6010] ? rcu_is_watching+0x12/0xc0 [ 256.196882][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.198436][ T6010] ret_from_fork+0x56d/0x730 [ 256.200084][ T6010] ? __pfx_kthread+0x10/0x10 [ 256.201609][ T6010] ret_from_fork_asm+0x1a/0x30 [ 256.203192][ T6010] [ 256.204953][ T6010] Kernel Offset: disabled [ 256.206396][ T6010] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:40:54 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff91462819 RBX=0000000000000002 RCX=ffffffff91462818 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc90000007a20 RSP=ffffc90000007968 R8 =ffffffff9146281c R9 =0000000000000000 R10=0000000000000002 R11=000000000000a67a R12=ffffc90000007a28 R13=ffffc900000079d8 R14=0000000000000005 R15=ffffc90000007a78 RIP=ffffffff816abaff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008005a018 CR3=00000000290cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000009c3321 RBX=0000000000000001 RCX=ffffffff8b919b29 RDX=0000000000000000 RSI=ffffffff8de4f4d1 RDI=ffffffff8c163700 RBP=ffffed1003bd9488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deca440 R14=ffffffff90aba990 R15=0000000000000000 RIP=ffffffff8b91866f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53f4da4 CR3=00000000290cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e5c1420 RCX=ffffc90002bb8001 RDX=0000000000000000 RSI=ffffffff8c163680 RDI=ffffffff8c1636c0 RBP=0000000000000001 RSP=ffffc90002bb7068 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000011cf2 R12=ffffffff816ab8a4 R13=ffffc90002bb7148 R14=ffffc90002bb7868 R15=ffffc90002bb717c RIP=ffffffff8b91a2d5 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7f04142300 ffffffff 00c00000 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e0c67f6f40 CR3=000000004bd89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561dc95 RDI=ffffffff9b102740 RBP=ffffffff9b102700 RSP=ffffc90003337210 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303030303057 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b102700 R15=ffffffff8561dc30 RIP=ffffffff8561dcbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc55c0 CR3=000000006b001000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000