last executing test programs: 52.27362429s ago: executing program 2 (id=1575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) 52.27286082s ago: executing program 2 (id=1576): r0 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7da}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (rerun: 32) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 52.188433777s ago: executing program 2 (id=1577): openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x303000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x800) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 51.957277545s ago: executing program 2 (id=1578): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x2000001, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) r4 = socket$nl_generic(0x11, 0x3, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) (async) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x0, "90f526a541d061909103f1fbbc2bd3c9f144d76e440110000000000000e7cb8393"}}) 51.902671352s ago: executing program 2 (id=1579): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x10}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x400}, 0x8) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 51.902093164s ago: executing program 2 (id=1580): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=0x0, @ANYBLOB="0800040000f7ff000800030001000000"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c060000) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) 43.309483669s ago: executing program 0 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 43.27015223s ago: executing program 0 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80047453, &(0x7f0000005280)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, r8, &(0x7f00000001c0)={0x80000000, 0x2d5, 0x0, 0xb, 0xfffffffffffffff9, 0xc, 0x9, 0xffffffffffff72ef, 0x1}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, r6, 0x1, 0x0, 0x2, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41001}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="a4d7f5509d49a98cba7b60bff6d5ca90ba3ad39a6dc46f7b759d1462b84b838a8177696b814e4e22b3cd541011659cab2d5379a018b07c05056e1d18252c1fede247015866e715dd32fcdeea572d106ab2bc932d03f4094c4f4161c123a51183053f021e3838a0228120e823e99a0f70ff55fc", 0x73}], 0x1}, 0x210bc92d76aeff36) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000010104000000000000ecfdf1c80000240001801400018008000100ac1414bb08000200ac1414bb0c000280050001e65bcd8d002400028014000180080001000000000008000200000000000c00028005000100ffffffe908000740000000000c000e800600034000030000"], 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c001680080404"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022f896e404096502f792039ef10a2b99f41dc08dd92e245cdcf3a92d19"], 0x0}, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x84a00, 0x0) ioctl$CDROMRESET(r10, 0x1260) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 41.678372804s ago: executing program 0 (id=1637): syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000005740)={0x2020}, 0x2020) (fail_nth: 7) 41.576548956s ago: executing program 0 (id=1638): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x303000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49adf892d6bf24eb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x0, 0x24, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {0xf, 0xfff1}, {0x9, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x101}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0x6, "cdb35adb3379c624ac52bfbc0439c757"}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x0) getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800e5d56e9083910a73000000000000000f000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000580)='i2c_read\x00', r3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000a108000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ec7329ceba21933c6543dfc340641b9d8e77ab55aadfcd3fda3e0960d1fc12d92fefae28d69732", @ANYBLOB="0000000001000000009000"/24], 0x34}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28004814, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) dup(r9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 41.271864503s ago: executing program 0 (id=1640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000000)="e52048e4b4c42397434a00f7087b70cbac50694d8f", 0x15}, {&(0x7f0000000280)="17f4822e31694c3349a3f45477897d64341f40dc12a412f263281af65cab99300cbeb4643973277480d7d0ff0b6964692c287ab4f99f5159a27fdac780cee4fcc08810e62fed2d773709bf412d1d726829b1d40e27b46ed89e13a4e002516447ae63b9acaee1998749c34829e7b92019b942017dd211da57807401101e492ed73c84385e394b6315ff8884b268753d989e61e47fe93e833c", 0x98}, {&(0x7f00000014c0)="6c37ab910a15ce58828e57389734d0ff2d5061fb6d166c292716b60dd72f797a0f8143c95b085f17d927a2ece21b3a0516885c9ff8f061af8ee99e48308420db1914da50dfcb38d643e2c5c2b0e8f72d5f3ed5df2aa261bd0f2c304e62cd2458be34042fd176b97a3bbfeb29137f0310ce1ad55973921cfb260d02dda10e174df44d18caffb92ebcf57d434684d929c73f8665157398cecb2b5fb045f18afe163e35794adf4563442f0383b3e3bc7184a3aae7b489d5c56e0b60724eb0b28b078700bc66999088d371490c3883aaf0da82e4e23891d269125d8785df791358e56512700e8e0d1cb3254402939018b036abec7d32eca7076a2186eea75ddfb9c55ed3e412acfd043c7c4c9ca5e8b910119c7811f94d8ab5c87dfc8f6f6015acb08db03c75bf9f8ec7641cfa92074b0505f7ce6d8b049ddce44cc4fd60e58c7102196adadf04a94d7f6dcf6dba6ac464c5f8bdbdaf5dd1b71d8b114cf53e3b6cce1609a836e13fb70e43f0ec8fd9dcf434208d1103657be25edb17b665b23aa34e27016923e56c54b3bd4089261480b1987ed31a96013a9fd7c934d284104e38cf082f8112f3fe7e344ef069c52b11d3e2ca0259118e2a455b4dab744e603425bf1408c080cb7d58f49f74ada69853a6df7f117d219bb9d164e6165bff9cacc4e7372e7e13455086cd4cd0affa6050e358f1cf76d93ab688d1acc4965c350ff278b67ad079f375b8ed990eb465de679ffaf27b464d3c5dd2136430ba7544fc5df014eedc59a7b14462775f9616b8235dd59846d1562f01a10b9a76f751127b4c162341fc44c788d63a1e9727125f6e10236b8fa8727d668dcd68ab53a9d3e70ad0fca34ec7c52b2a3aabe249e32a0e3b9a1f7804164d4d68df24f9fec3be525703b663576c0bc592bc857e039980ed40bad684a16113461ce39c5b89b9ab355bcaac5924f9623a10e3ba8ef7826d077b970dde0facb554bc8d607f3ecb934f6a9117ce312a8748a5811a38d487cd6344f4daea623412e8797f02a2524eb4afa09b2d97db7ddbc975c7e2295ce0d9c573046e9c43f1ac141cb22cfc16a0845e66228d6a19561f9efbb8d530787918a79495229e2e594fb9e4c34e0c5d6418696f27fbafe1dfdec431435c70693d1f34d7e0d5f7276e2c10c4a1e9fc3e0f2a1108c3e808555f644bb4c7509c09876ac2b2f702a174e9eccff3f7c10c3e85f219336ef74fa2547082a30a1905513c63e3f8a6490e9c9c527bf3a7373b51a9f9d6bfc84a5cedc4b6db15cdfc1e8b050ec4574fd223ef5b0ae8a9df8083dee925f2ef5a25b063a60a61c689b20916f37d0ffa5488690981cb19579bf4068435bedad692a0b615f0eb6d62ff7e4d0e18a887848a1f28d197a66aa68198d09d87c271b16cf6430d47a1679b36bf8bc867ce65481f6f472dddb87ba13ffbb4ae6c2e11947c34efaf37f02a496aa396c242b257413024e77ba78164f94863497ed8ae3e66a99ee31ef9d7a7ad8437fbb2f5b8bf49ee3878d17c99af291859b76f06e9e41c0e0e530a6cbeb3de107299f69f600e69f9925ee29015ed1d618be6f93e975c3b6972d21b675fa4bc8d0676721dec911426ea3d9ddfb24295073bd47a9538c0d40d952667444d97dd6b06cd510acc57ac570f1cb21cc557e7af43f3709d815bda7b91ce68b6e4e123c776a8963d5836165be9cd23e10c972e2e3506b3eada88e0f6f7d731cfadf554037e3ee9ae44f974f50aa5cc623e544c87f97d10cd6a008b3bee7695dc5c38262cff9b691e74022c88f097a4218ebd4a38924844749c2a30f47993418f17c85f5bcdf2371b74aaa8a25b449c658cacb8aae9e16156911ce959ff551103ef26e5138038d14c3cf2334093001731e15026af268a4967a5585b768514f6ad460e760b42b69748cc5de98aab5245b781da650b0d883a7bfec730f764acb4012e11a5f391046012e52cf25e07a02c6b2043670b9963db8b875bb90fd6cb1d7ba3e486f178a5119aca0fa0a904bc9494551138c76745dd7b1bd51a945f647b17687a1e374c4c7bda603453dc1d05b85485d8d9e5d4b52d88578ba40daa8c229363afa24834864316cdd22f29059473844aa19d8b3ecfe8e28503c2bf51f769823d532248a684821f91c24f5d5eddd2a0c50517a7afde848f11645c5139533dae825447fd41a83bc284967eb95e82150ca96f6454615228f5f54a3c4958703487d2efac36f7f7f90add16a70882d0ecb76d96a77de41ebf94bdee5f2983a048b8987d87e63aeff118cded77cbbeb3f1ae28e74e72bff123c55a61da1d7a5a8935e1ca4508a1cfcbecd340f854dee05336662859093c10dd0f504cd59041269a0413cdc89f064c59934bd049f187a748b62bcdfce0a9e8abfb7fe61eaffc0f2953473322ab605ee43d8985cfacf342f5910486dcaa1e468b13379b9dc5ae386c17f84265df5b46d21a1a6bb28e4b476bd4d6f9b7dd1caf1b7bd7a2dfc4506dd9c11b280ca35990dab539325ad1db04142fda2403653c1721047b6b3ee02cc794b781e8cd8e50451cdcc527bf461f5c344946b1837c04f592164b648d76909051c302fe72e2924b016cef6a4046ef24d272dc1e77a5b308c4640a6951957e18ad49f094c2a7194d3c3396e9764fc127c1d676e3b5192f7f638d42fee2f05fff43097788421b65f60d976f0303366116c016e29a742fea03255c09bc99f7aaf0e3435c4c3bd9410e5c1902848c699159577c55397dee2a50b4ffeba647cf057e558fc5a2d83f96403178596870c90142c6aa2ead3e2f349bdae304ba7c3358a84423a2aa796eaf7f58714029f9a565dba48d5b604dfe4336d15976d37a885a69c30fb85ceb2f832e49e58b774be481e5012ed254ef74e9360bf68a54c7ba36571b7da9f95c50b2b8f18238ce475be6e41b1a8f5acda1437ece73686a356ad241f098f9e8f9b803470b60e97a8e920a03149c659f8ab1b27a2e866fb12a913e59a710c6fe671d293627562759c7b07351b8724f083c72859edd4e98f33bafa2fed6442bbde0f7c16a42e724c1b74073740bed78dbdca46e8dec02e2ac4d5ca6969e92058ed06b27e40d0373b1c41bc897a751da04ca1ff701a2190761ad0f09d912eff9dc20b7de1b6981ed62710582f72c7e7613149830b9068bd93486eb248b77a87573b5e0feff88ad23fd0e5a14acdeab4cfbb3b67e8c8ea9bd15ba3bcb00dfb75b2300544b9cc91d2abfc5022fa320eedcb53c94172e2ac8cca92748f3aa384862f4ff50d3ce74957b5900bafd2be8200386a37b963dcc291dd693f69453fc145cf43a28e81598e8de1af881b23e15c692b0c616671fc2e202c83fde00e3c42fc47243e3418d3068b9ca83069552898135c964a4344b3ba2c1653af47707083a5b1c968cb8a17ba27557395a0cd7481cf6af3ae4ec54818d4bb23747d0c4380debebbe6eef6ffadc6d22f23d8179097bb07c338474ec49186dc547433475e098e69dace46d343439037eb06e37cbb088d2aff54f3741a9ac80cf53d104c500a306b92f798f3d51758edd6ae801e4a15942e9a3a0e3245c9169bcf4b94af7f03bf887d5f4c5daa6912d497e4b94227c35f1d8112aa4ff9bb5c3728fcb808532e690b5f5d3d548a784313c72288aba5567f5a12333ebadb1794ff78d5962414f8aca7cf453fbeeaf0c52177bf9d238e05774aaf37d5fba6f0ebc58a253eb754dce237de04944b1054d5a4eadc0c301129784b3e62c1a4d83babc8084b95db1cf337a9219165c26cd747109c120d99221979528beda0b8614e40cabc10c9cfc6f4105ef683e2bf8b46a08da45424be4609eac759d70e91ef6698e97b43196298ad07a189a5dbb9b4270723575ba94ede82fa1220f31824a83cd2d3f2e536d0d10dc46b3a6b7ba7a29ce6d370fc64610b2797fe25d9d077c403422dc3a117f9f76a7e71355ca84f128cf432ed8bc50f249ca3fc2a7cdf567f4aef2da598824a61275111190ef450d818817357711c2ad03a9faa54e258ddbd481b8b72897b40163cadbab812232735ad4765e52a10640ed9b867e3272e08a976c220d5346fab2f03c7a74fe3e1929d799ce815bd2f70b632a845f12f7786f79d1f68296a06bfc49748c8303b9fa8ee3fe14bd3a81e545d2d3b91e0eaf54294feb4a05005674d5a67e8bcf51a7efa36ff3fe052c744ab1c201f2cb05cf5deedbb63347b8452610142510ef59defd1986af34119d4a831faabf99debccea9f73e04d6ad29ecc19d27434c37afc7d3fdedf82466993a2ab529068b8198930b3b077580a47fdf8a7e1e9e653d514d0d0158ad571419bb8b881b27241b98cab6cd0995948a720c32318b2f67eba615022aa1f72ca2499054d42fe5240761c731efb902586b067cd7c35109622a1fdd63df51635e22a0297b565ba5b47e4b64478e05c4916b189c99f67be5235b73f84d861bc4b6a158e76976e7e1148b9fa23eb5de9b0c5d4cdb5729f2f4df7933e7401ff3ab0e69ab215bc0633f15b0b7ef66ac0733f6a2179dc334d09d50ad71099e0335a103c5ffd28f542c1b287e4db1615fb22c4ca15817e99880e57fd2154a80633c3604e0087b4638a799d8f71c742c81d44330b8cbfbfb53532552b3f418f4776baf0d98ce027fe335bd6c0a12ba4ee8e1faa4e67335369af72ef6f4bfc48bbfa5104fc5e6cac4eb1ccb1402ae3a6c036be7450c45afe51558953fbe795466f83e7ccb0a4507fa1b612c51771d296085f7ce365af6b79e64b07599cbbf1b415abd273967314d8d8a3dd0ebc0c7265aa313733f99341fc9f2fe43b90a48d0566f5e48f26a28698fe2c1bba7cb29686041340d9f102a7d8e7becf9f2a47be4b0c03ef6d1836f0f885ad2ec992e9fc0c315a1ab6336005f23be8b3eea96d3e962c1807e9148441ddeb0cf571b83205194357058ae560cf9847f90a69026bd66da39f981aea77350234dc3044592ca8db9fa3433b89b81737790ac341cdcb017030f7fe9006b3ab041cd270c43606349414362b5b50dee42d82661c08dbeb2015dbedbe0ffd05abee7f99ceafafcc31db26776d857070b0cdad9112dbb6ee0ac54f2b39ff8e356c9cf8fd5f273fb8d234ba4fc1429f4f707a4215ead64003ff0264e7d1c35d095206dc76b3cf7315ecb5749cf3dcbb847bccbab28a20d3c0ed528b3516b885955bfa7e419225f52d4fe9e5f05f3d364775a9a1a1229a74ee02b93013961b0e9a07e51be601101536cacd36ac29661d70046d3da643516b80c029f157800ce03607cb57e6440bc36fb1a78678512e9aae5dd135a96f3b38e7b6dd8affa26f9073d75706c61a5322fc9fb1cb9d405defb83cb791541a37e787a0aadaca6429c63bcdc34dbcfc1e4d3cb17c30b42758b1708fee4116b77bab56a014c77e5657bb4df7e970542893fda6f136110ea288158e8445768df1bbc0f464480ef9d7bb95f8351458272ea24d7e20d2d2836e358c4df521d22b428a66814829ab7540aacf7f777ead9dfcbb876ba8dd908482203a806cbbb65f66131b6f5ea8bfd591e03b2830ca8e8763ca4bb777ad8949a9777ce093ad5007a58e1d8a63af7dcdcd0fd196b7175fb4663a0c47741b08bd070bca6a03ee30233f9ddc06fae079191fcfe92248ed110aa4ff5dedf66a6b288b8990322296eb3c11d4a0407518ad6b0787c111374c0d5153ebedcf7dbae0dbc9a362384ccf05c65534aae1479bc5bafa5894e0a0c264c02dbd11d393d204e5809799dc2df9abf19ba58b7bd2ed94489d4becf35e6afb46986fada07fe37bccf94bc87ad64", 0x1000}], 0x3, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0xc}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}], 0x54, 0x8181}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000580)="5ca7bb8fde0ce88fa02d07eec0fa3052b3b19477a8440b3167a4cd48bed723681afe25e1ee1d5875477d31cc830ebc626b5f3b365ce4bbef89520e9868956159a16ec3360589", 0x3d5bb649f2c3467, 0x40000d5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001480)="f74e4317dc", 0x5, 0x10, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x23}}}, 0xa) 41.271538571s ago: executing program 0 (id=1641): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x36408, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xbf, 0x0, 0x2, [0x0, 0x6, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r0, 0x0, 0x700, 0x19, 0x1, {{0x6, 0x4, 0x3, 0x37, 0x18, 0x67, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@end]}}}}}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x14000070}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x4) socket$kcm(0x2b, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioprio_get$uid(0x3, 0x0) shutdown(r4, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x2008044, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 36.793807821s ago: executing program 32 (id=1580): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=0x0, @ANYBLOB="0800040000f7ff000800030001000000"], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c060000) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) 26.365062377s ago: executing program 33 (id=1641): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x36408, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x9, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0xf, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xbf, 0x0, 0x2, [0x0, 0x6, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r0, 0x0, 0x700, 0x19, 0x1, {{0x6, 0x4, 0x3, 0x37, 0x18, 0x67, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@end]}}}}}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x14000070}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x4) socket$kcm(0x2b, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioprio_get$uid(0x3, 0x0) shutdown(r4, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x2008044, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 8.588905224s ago: executing program 5 (id=1850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200080100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000dc000380d80000800800034000000002cc000a"], 0x19c}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x3, 0x7fe2, 0x1, 0x1300, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xf3) close(0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}}, 0x0) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r8, 0x2284, &(0x7f0000003f80)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 7.440981573s ago: executing program 4 (id=1854): r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x4, 0x800}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffc7d, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x56555958}}) write$UHID_CREATE2(r5, &(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESOCT=r2, @ANYRES8=r4, @ANYRES8=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) ftruncate(r9, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r10, &(0x7f0000000280)="6624d31fe92df5808c1ed4c951c1e63f8cfc3ccdcddc135d3e58d72b22d779a5ec91b21ed7565cf851edddfbc216c0f8306c07075f58", 0x36, 0x40, 0x0, 0x0) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="28200000008c560e1d950056aa7400"/34], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000036ba00000000358c41644cfdcc404df3b800"/31, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r12}, 0x10) 7.159272412s ago: executing program 5 (id=1858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = dup3(r4, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x85e6], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fchown(r2, 0xffffffffffffffff, 0xee00) 6.875036428s ago: executing program 5 (id=1860): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3a, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0xc0292455bad3be63, 0x0, 0x0, [{0x3}, {}, {0x1}, {0x0, 0xfffffffd}, {0x3}, {}, {0xffffac84}], 0x1, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, 0x0, &(0x7f0000000280)) gettid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f00000002c0), 0xcbf) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x100000000, &(0x7f0000000040), 0x0, &(0x7f0000000440), {0xb}, &(0x7f00000006c0)=""/165, 0xa5, &(0x7f00000005c0)=""/99, &(0x7f0000000480)=[r0], 0x1, {r1}}, 0x58) socket$isdn(0x22, 0x2, 0x22) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="fa00", 0x2}, {&(0x7f0000000080)="eaef7c917e", 0x5}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 6.103056525s ago: executing program 4 (id=1861): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="0b0368fce0ff6400020047540064dec888a8", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @local}, 0x14) 6.102787655s ago: executing program 4 (id=1862): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000240)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}]}}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) mq_open(&(0x7f0000000440)='127.0.0.1\x00', 0x40, 0x0, &(0x7f0000000480)={0x0, 0x4, 0x23cfbd70}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000450300000008000007"]) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000002c0)={0x6, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r9, 0xffffffffffffffff}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "0bcdcdcf689e56a0", "48a6c248f3558c1420ef37d306f6c4ea", "93fad761", "e120cbd6f3084acb"}, 0x28) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0xe8c) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r12, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"bde5fb608d2ff91ad9c865dfb47b794310fa03f1d76f109cec2783c673111c28", r10}) 6.046429097s ago: executing program 1 (id=1863): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(r0, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r4, 0x2}}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r6, 0x3e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000100100000d000000"], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 5.630856915s ago: executing program 5 (id=1864): r0 = eventfd2(0x100, 0x801) write$eventfd(r0, &(0x7f0000000280)=0xfffffffffffffffb, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x1fffffffffffffd2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(r3, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000037c0), r2) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x40, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f00000003c0)=@v3={0x3000000, [{0x8, 0x9}, {0x2f3b1ff7, 0xfffffc01}]}, 0x18, 0x1) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b00)={&(0x7f00000009c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000e00)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r10, 0x4020aeb2, &(0x7f0000000080)) unlink(&(0x7f0000000100)='./file0/file0\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0x0) 5.465420655s ago: executing program 1 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1c, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffe4f, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x4000) 5.456310992s ago: executing program 1 (id=1866): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x303000, 0x0) sched_yield() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000400)="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", 0x1f7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) preadv2(r0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f00000003c0)=""/51, 0x33}, {0x0}, {&(0x7f0000000800)=""/77, 0x4d}], 0x6, 0x9, 0x7, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)) dup(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000480)={0x0, 0xffffffff, 0x800, 0x4, 0xfc, "8dd7088c06ef8b55d55cd9a0b466f33bb03e22", 0x0, 0x3}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa77288c38fc72aaaa000000000000080045000024000000007ece903805000000ffffffff00004e26000001000200000080000000ba0fce46c51bb014f732"], 0x0) r5 = dup(r3) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) ioctl$EVIOCGMASK(r7, 0x541b, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000003c0)=ANY=[], 0x27) 5.217016656s ago: executing program 4 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80047453, &(0x7f0000005280)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, r8, &(0x7f00000001c0)={0x80000000, 0x2d5, 0x0, 0xb, 0xfffffffffffffff9, 0xc, 0x9, 0xffffffffffff72ef, 0x1}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, r6, 0x1, 0x0, 0x2, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41001}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="a4d7f5509d49a98cba7b60bff6d5ca90ba3ad39a6dc46f7b759d1462b84b838a8177696b814e4e22b3cd541011659cab2d5379a018b07c05056e1d18252c1fede247015866e715dd32fcdeea572d106ab2bc932d03f4094c4f4161c123a51183053f021e3838a0228120e823e99a0f70ff55fc", 0x73}], 0x1}, 0x210bc92d76aeff36) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000010104000000000000ecfdf1c80000240001801400018008000100ac1414bb08000200ac1414bb0c000280050001e65bcd8d002400028014000180080001000000000008000200000000000c00028005000100ffffffe908000740000000000c000e800600034000030000"], 0x70}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c001680080404"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x84a00, 0x0) ioctl$CDROMRESET(r10, 0x1260) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x8004480e, &(0x7f00000000c0)) 4.712681297s ago: executing program 5 (id=1868): r0 = syz_clone(0x80040100, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xd, 0x1, '[\'+%!%-!\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c000008000100", @ANYRES32=r0], 0x1c}}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x101101, 0x0) 4.233678391s ago: executing program 3 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000080) 4.233307894s ago: executing program 3 (id=1870): io_uring_setup(0x2e34, &(0x7f0000000180)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1d, r2, 0x0, 0xff000000}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a38fddef8ec7fe03"}}, 0x48}}, 0x0) 4.025884023s ago: executing program 3 (id=1871): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x7, 0xa}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4000) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x2, 0x2400000}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0010"]) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) socket(0x1, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.938369778s ago: executing program 1 (id=1872): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) 3.864360476s ago: executing program 1 (id=1873): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3a, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x7, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f0000000280)) socket$isdn(0x22, 0x2, 0x25) r3 = gettid() setpgid(0x0, r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f00000002c0), 0xcbf) r5 = openat$cgroup_root(0xffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x100000000, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440), {0xb}, &(0x7f00000006c0)=""/165, 0xa5, &(0x7f00000005c0)=""/99, &(0x7f0000000480)=[r4], 0x1, {r5}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="fa00", 0x2}, {&(0x7f0000000080)="eaef7c917e", 0x5}], 0x2) close_range(r6, 0xffffffffffffffff, 0x0) 3.804869476s ago: executing program 4 (id=1874): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0) io_setup(0x589, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(r0, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r4, 0x2}}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r6, 0x3e) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r7, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000100100000d000000"], 0x10, 0xe000}, 0x5}], 0x1, 0xfffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2.787019973s ago: executing program 5 (id=1875): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (fail_nth: 7) 1.174061894s ago: executing program 3 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}}, 0x0) 463.847945ms ago: executing program 4 (id=1877): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3a, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0xc0292455bad3be63, 0x0, 0x0, [{0x3}, {}, {0x1}, {0x0, 0xfffffffd}, {0x3}, {}, {0xffffac84}], 0x1, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, 0x0, &(0x7f0000000280)) gettid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f00000002c0), 0xcbf) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000780)={0x100000000, &(0x7f0000000040), &(0x7f0000000400), 0x0, {0xb}, &(0x7f00000006c0)=""/165, 0xa5, &(0x7f00000005c0)=""/99, &(0x7f0000000480)=[r0], 0x1, {r1}}, 0x58) socket$isdn(0x22, 0x2, 0x22) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="fa00", 0x2}, {&(0x7f0000000080)="eaef7c917e", 0x5}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 463.631818ms ago: executing program 3 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000080) 463.394931ms ago: executing program 3 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000009500000000000000f4b9c4ded6e8da84b38b9181"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x50000}}, 0x20}}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x24}}, 0x0) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r6, 0xc0045004, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x6, 0x9, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) mq_getsetattr(r5, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x4}, 0x0) 0s ago: executing program 1 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0xff80) kernel console output (not intermixed with test programs): [ 316.899124][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.069489][T23523] xt_NFQUEUE: number of total queues is 0 [ 317.939114][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.268818][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 318.929292][ T56] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 318.969025][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.064422][T24054] lo speed is unknown, defaulting to 1000 [ 319.082757][ T56] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.085653][ T56] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.088267][ T56] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.091520][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.095437][T23849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.101083][ T56] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.125107][T24055] lo speed is unknown, defaulting to 1000 [ 319.205500][T24075] dccp_v4_rcv: dropped packet with invalid checksum [ 319.303062][T23849] program syz.3.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.317279][ T5950] usb 8-1: USB disconnect, device number 54 [ 319.882112][T24263] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 319.893262][T24263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.011676][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.106257][T24371] xt_NFQUEUE: number of total queues is 0 [ 320.159175][ T56] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 320.360987][ T56] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 320.363550][ T56] usb 6-1: config 0 has no interface number 0 [ 320.365208][ T56] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.368038][ T56] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 320.372116][ T56] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 320.375582][ T56] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 320.378723][ T56] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.383160][ T56] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 320.385930][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.390458][ T56] usb 6-1: config 0 descriptor?? [ 320.392491][T24266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.398776][ T56] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 320.619149][ T5950] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 320.759069][ T30] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 320.772224][ T5950] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.775601][ T5950] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.779074][ T5950] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.785818][ T5950] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 320.788747][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.792553][ T5950] usb 7-1: Product: syz [ 320.793803][ T5950] usb 7-1: Manufacturer: syz [ 320.795032][ T5950] usb 7-1: SerialNumber: syz [ 320.921410][ T30] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 320.923761][ T30] usb 8-1: config 0 has no interface number 0 [ 320.925802][ T30] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.929357][ T30] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 320.932629][ T30] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 320.935754][ T30] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 320.938630][ T30] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.942338][ T30] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 320.944777][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.948230][ T30] usb 8-1: config 0 descriptor?? [ 320.950333][T24578] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.954076][ T30] ldusb 8-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 321.005859][ T5950] usblp 7-1:1.0: usblp2: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 321.049080][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.226721][ T7213] usb 8-1: USB disconnect, device number 55 [ 321.300383][ T56] usb 7-1: USB disconnect, device number 58 [ 322.089016][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.729997][ T56] usblp2: removed [ 322.730002][ T7213] ldusb 8-1:0.55: LD USB Device #1 now disconnected [ 322.731863][T24265] delete_channel: no stack [ 322.735697][T24476] delete_channel: no stack [ 322.736227][ T6013] usb 6-1: USB disconnect, device number 52 [ 322.746689][ T6013] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 322.988561][T25308] xt_NFQUEUE: number of total queues is 0 [ 323.139126][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.169092][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.539103][ T5950] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 324.549170][ T6013] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 324.619237][ T71] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 324.700520][ T6013] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.703385][ T6013] usb 8-1: config 0 has no interface number 0 [ 324.705205][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.707962][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 324.710478][ T5950] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.711295][ T6013] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 324.716207][ T6013] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 324.719464][ T6013] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.719625][ T5950] usb 6-1: config 0 has no interface number 0 [ 324.724787][ T6013] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.724803][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.727024][ T6013] usb 8-1: config 0 descriptor?? [ 324.728793][ T5950] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.736350][T25723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.738889][ T5950] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 324.741481][ T6013] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 324.742674][ T5950] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 324.748247][ T5950] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 324.751459][ T5950] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.755799][ T5950] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.758491][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.762766][ T5950] usb 6-1: config 0 descriptor?? [ 324.764795][T25720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.768124][ T5950] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 324.770653][ T71] usb 5-1: Using ep0 maxpacket: 32 [ 324.776495][ T71] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 324.778855][ T71] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.781562][ T71] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.783991][ T71] usb 5-1: config 1 has no interface number 0 [ 324.785779][ T71] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.788439][ T71] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 324.791984][ T71] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 324.794610][ T71] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.799860][ T71] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 324.954785][T26037] syz.2.1490[26037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.954839][T26037] syz.2.1490[26037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.957911][T26037] syz.2.1490[26037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.081071][ T6013] usb 6-1: USB disconnect, device number 53 [ 325.087119][T25720] delete_channel: no stack [ 325.091032][ T6013] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 325.209090][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.394943][T26545] xt_NFQUEUE: number of total queues is 0 [ 326.089140][ T5950] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 326.241303][ T5950] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.244370][ T5950] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 326.247546][ T5950] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.251161][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.255707][ T5950] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 326.258360][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.260716][ T5950] usb 6-1: Product: syz [ 326.262136][ T5950] usb 6-1: Manufacturer: syz [ 326.263377][ T5950] usb 6-1: SerialNumber: syz [ 326.472816][ T5950] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 326.775876][ T30] usb 6-1: USB disconnect, device number 54 [ 326.778585][ T30] usblp1: removed [ 327.130107][ T6013] usb 8-1: USB disconnect, device number 56 [ 327.133367][T25723] delete_channel: no stack [ 327.136249][ T6013] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 327.231174][T27671] block nbd3: NBD_DISCONNECT [ 327.234409][T27671] block nbd3: Disconnected due to user request. [ 327.236775][T27671] block nbd3: shutting down sockets [ 327.288486][ T71] snd_usb_pod 5-1:1.1: set_interface failed [ 327.290149][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.292079][ T71] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 327.293997][ T71] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 327.296917][ T71] usb 5-1: USB disconnect, device number 46 [ 327.394053][T27807] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1507'. [ 327.447515][T27882] ptrace attach of "/syz-executor exec"[5948] was attempted by "/syz-executor exec"[27882] [ 328.062707][ T30] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 328.207556][ T30] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 328.209834][ T30] usb 7-1: config 0 has no interface number 0 [ 328.211472][ T30] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.214401][ T30] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 328.217895][ T30] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 328.220853][ T30] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 328.223694][ T30] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.227607][ T30] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.230023][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.235611][ T30] usb 7-1: config 0 descriptor?? [ 328.237438][T27994] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.241165][ T30] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.291411][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.016627][ T6013] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 329.159987][ T6013] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.162879][ T6013] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.165448][ T6013] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.169124][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.174303][T28719] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 329.178490][ T6013] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.281619][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.331117][ T71] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 329.359465][T29039] xt_NFQUEUE: number of total queues is 0 [ 329.371713][T28719] program syz.3.1520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.380937][ T6013] usb 8-1: USB disconnect, device number 57 [ 329.474900][ T71] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.477897][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 329.480622][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.483213][ T71] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.486863][ T71] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.489102][ T71] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.493502][ T71] usb 5-1: config 0 descriptor?? [ 329.887909][T28832] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1525'. [ 329.890380][T28832] netlink: 'syz.0.1525': attribute type 3 has an invalid length. [ 330.108031][ T71] usbhid 5-1:0.0: can't add hid device: -71 [ 330.109854][ T71] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.114640][ T71] usb 5-1: USB disconnect, device number 47 [ 330.282155][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.481941][T29347] xt_NFQUEUE: number of total queues is 0 [ 330.590166][ T71] usb 7-1: USB disconnect, device number 59 [ 330.595063][T27994] delete_channel: no stack [ 330.600860][ T71] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 330.748543][T29550] FAULT_INJECTION: forcing a failure. [ 330.748543][T29550] name failslab, interval 1, probability 0, space 0, times 0 [ 330.753410][T29550] CPU: 3 UID: 0 PID: 29550 Comm: syz.0.1535 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 330.757163][T29550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.760952][T29550] Call Trace: [ 330.762271][T29550] [ 330.763354][T29550] dump_stack_lvl+0x16c/0x1f0 [ 330.764834][T29550] should_fail_ex+0x497/0x5b0 [ 330.766466][T29550] ? fs_reclaim_acquire+0xae/0x150 [ 330.768373][T29550] should_failslab+0xc2/0x120 [ 330.770386][T29550] __kmalloc_cache_noprof+0x6b/0x310 [ 330.772511][T29550] ? genl_start+0x1e7/0x950 [ 330.772813][T29553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.774367][T29550] genl_start+0x1e7/0x950 [ 330.779369][T29550] __netlink_dump_start+0x615/0x980 [ 330.781387][T29550] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 330.783584][T29550] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 330.785913][T29550] ? genl_op_from_small+0x25/0x440 [ 330.787931][T29550] ? __pfx_genl_start+0x10/0x10 [ 330.790046][T29550] ? __pfx_genl_dumpit+0x10/0x10 [ 330.791970][T29550] ? __pfx_genl_done+0x10/0x10 [ 330.793868][T29550] ? bpf_lsm_capable+0x9/0x10 [ 330.795635][T29550] ? security_capable+0x7e/0x260 [ 330.797476][T29550] genl_rcv_msg+0x470/0x800 [ 330.799124][T29550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.801061][T29550] ? __pfx_ip_vs_genl_dump_daemons+0x10/0x10 [ 330.803224][T29550] netlink_rcv_skb+0x165/0x410 [ 330.804914][T29550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.806272][T29550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.808019][T29550] ? down_read+0xc9/0x330 [ 330.809788][T29550] ? __pfx_down_read+0x10/0x10 [ 330.811656][T29550] ? netlink_deliver_tap+0x1ae/0xcf0 [ 330.813876][T29550] genl_rcv+0x28/0x40 [ 330.815803][T29550] netlink_unicast+0x53c/0x7f0 [ 330.817662][T29550] ? __pfx_netlink_unicast+0x10/0x10 [ 330.819647][T29550] ? __phys_addr_symbol+0x30/0x80 [ 330.821062][T29550] ? __check_object_size+0x488/0x710 [ 330.822531][T29550] netlink_sendmsg+0x8b8/0xd70 [ 330.823928][T29550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.825805][T29550] ____sys_sendmsg+0x9ae/0xb40 [ 330.827565][T29550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.829854][T29550] ? get_compat_msghdr+0x11b/0x170 [ 330.831724][T29550] ? __pfx___lock_acquire+0x10/0x10 [ 330.833639][T29550] ___sys_sendmsg+0x135/0x1e0 [ 330.834856][T29550] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.836361][T29550] ? lock_acquire+0x2f/0xb0 [ 330.837553][T29550] ? __fget_files+0x40/0x3f0 [ 330.838789][T29550] ? fdget+0x176/0x210 [ 330.839892][T29550] __sys_sendmsg+0x117/0x1f0 [ 330.841557][T29550] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.843029][T29550] ? __fget_files+0x244/0x3f0 [ 330.844457][T29550] __do_fast_syscall_32+0x73/0x120 [ 330.845936][T29550] do_fast_syscall_32+0x32/0x80 [ 330.847367][T29550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.849510][T29550] RIP: 0023:0xf7f54579 [ 330.850733][T29550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.856193][T29550] RSP: 002b:00000000f56d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 330.858362][T29550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 330.860557][T29550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.862510][T29550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.864705][T29550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 330.866900][T29550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.869031][T29550] [ 331.095705][T29631] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 331.263391][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.931670][T30080] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 331.934021][T30080] netlink: 9312 bytes leftover after parsing attributes in process `syz.3.1547'. [ 331.936520][T30080] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 332.263478][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.391725][T30500] usb 2-1: USB disconnect, device number 2 [ 332.398204][T30499] nvme_fabrics: unknown parameter or missing value 'ïÃ' in ctrl creation request [ 332.402135][T30499] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1555'. [ 332.406224][T30499] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 332.408721][T30499] FAULT_INJECTION: forcing a failure. [ 332.408721][T30499] name failslab, interval 1, probability 0, space 0, times 0 [ 332.412401][T30499] CPU: 2 UID: 0 PID: 30499 Comm: syz.1.1555 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 332.415362][T30499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.418954][T30499] Call Trace: [ 332.419866][T30499] [ 332.420664][T30499] dump_stack_lvl+0x16c/0x1f0 [ 332.421904][T30499] should_fail_ex+0x497/0x5b0 [ 332.423141][T30499] ? fs_reclaim_acquire+0xae/0x150 [ 332.424497][T30499] should_failslab+0xc2/0x120 [ 332.425739][T30499] kmem_cache_alloc_node_noprof+0x71/0x310 [ 332.427349][T30499] ? __alloc_skb+0x2b3/0x380 [ 332.428624][T30499] __alloc_skb+0x2b3/0x380 [ 332.429798][T30499] ? __pfx___alloc_skb+0x10/0x10 [ 332.431088][T30499] ? __lock_acquire+0xbdd/0x3ce0 [ 332.432546][T30499] ? aa_label_sk_perm+0x19d/0x5a0 [ 332.433979][T30499] alloc_skb_with_frags+0xe4/0x850 [ 332.435393][T30499] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 332.437003][T30499] sock_alloc_send_pskb+0x7f1/0x980 [ 332.438622][T30499] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 332.440243][T30499] ? __pfx_lock_release+0x10/0x10 [ 332.441532][T30499] ? trace_lock_acquire+0x14a/0x1d0 [ 332.442906][T30499] ? __pfx___might_resched+0x10/0x10 [ 332.444511][T30499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 332.446194][T30499] hci_sock_sendmsg+0x1c8/0x25e0 [ 332.447844][T30499] ? aa_file_perm+0x4d5/0xfe0 [ 332.449323][T30499] ? __pfx_aa_sk_perm+0x10/0x10 [ 332.450726][T30499] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 332.452180][T30499] sock_write_iter+0x4fe/0x5b0 [ 332.453510][T30499] ? __pfx_sock_write_iter+0x10/0x10 [ 332.455029][T30499] ? bpf_lsm_file_permission+0x9/0x10 [ 332.456986][T30499] ? security_file_permission+0x71/0x210 [ 332.458594][T30499] vfs_write+0x5ae/0x1150 [ 332.459773][T30499] ? __pfx_sock_write_iter+0x10/0x10 [ 332.461217][T30499] ? trace_lock_acquire+0x14a/0x1d0 [ 332.462693][T30499] ? __pfx_vfs_write+0x10/0x10 [ 332.464013][T30499] ? __fget_files+0x40/0x3f0 [ 332.465264][T30499] ksys_write+0x1fa/0x260 [ 332.466401][T30499] ? __pfx_ksys_write+0x10/0x10 [ 332.467698][T30499] __do_fast_syscall_32+0x73/0x120 [ 332.469066][T30499] do_fast_syscall_32+0x32/0x80 [ 332.470458][T30499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.472564][T30499] RIP: 0023:0xf748e579 [ 332.474065][T30499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.480006][T30499] RSP: 002b:00000000f577655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 332.482360][T30499] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000000 [ 332.484473][T30499] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.486582][T30499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.488721][T30499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 332.491449][T30499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.494075][T30499] [ 332.553212][T30528] hub 2-0:1.0: USB hub found [ 332.557798][T30528] hub 2-0:1.0: 6 ports detected [ 332.613363][T30897] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1557'. [ 332.777494][ T30] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 332.946592][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 332.949127][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 332.951216][ T30] usb 2-1: Product: QEMU USB Tablet [ 332.952610][ T30] usb 2-1: Manufacturer: QEMU [ 332.953839][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 332.968960][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input9 [ 333.048329][ T30] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 333.120766][ T71] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 333.244656][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.273091][ T71] usb 7-1: Using ep0 maxpacket: 8 [ 333.275751][ T71] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 333.278131][ T71] usb 7-1: config 179 has no interface number 0 [ 333.280492][ T71] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 333.283906][ T71] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 333.287112][ T71] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.290718][ T71] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.294558][ T71] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 333.298281][ T71] usb 7-1: config 179 interface 65 has no altsetting 0 [ 333.300121][ T71] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 333.302605][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.306193][T31219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.315384][ T71] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input10 [ 333.691125][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 333.694278][ T71] usb 7-1: USB disconnect, device number 60 [ 333.696474][ T71] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 333.778147][ T6013] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 333.920748][ T7213] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 333.932610][ T6013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.936149][ T6013] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 333.939550][ T6013] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.946469][ T6013] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 333.950363][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.953576][ T6013] usb 6-1: Product: syz [ 333.954992][ T6013] usb 6-1: Manufacturer: syz [ 333.956536][ T6013] usb 6-1: SerialNumber: syz [ 334.066616][ T7213] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.070183][ T7213] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.073021][ T7213] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.076012][ T7213] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.081189][T31842] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 334.089824][ T7213] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.125099][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 334.162095][ T6013] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 334.235042][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.279473][T31842] program syz.3.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.292514][ T7213] usb 8-1: USB disconnect, device number 58 [ 334.350182][ T71] usb 6-1: USB disconnect, device number 55 [ 334.381138][T32357] veth1_macvtap: left promiscuous mode [ 334.382622][T32357] macsec0: entered promiscuous mode [ 334.384157][T32357] macsec0: entered allmulticast mode [ 334.542631][T31736] usblp0: removed [ 335.235121][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.806761][ T5950] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 335.961067][ T5950] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.964257][ T5950] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.967267][ T5950] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.972809][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.979506][T32679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.078044][T32685] netlink: 'syz.0.1592': attribute type 10 has an invalid length. [ 336.081934][T32685] bond0: (slave netdevsim0): Releasing backup interface [ 336.090649][T32685] netlink: 'syz.0.1592': attribute type 10 has an invalid length. [ 336.093974][T32685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 336.180613][T32679] program syz.1.1591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.216250][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.795805][T32692] xt_NFQUEUE: number of total queues is 0 [ 337.216474][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.767014][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 338.207063][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.718696][ T648] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 338.897829][ T650] xt_NFQUEUE: number of total queues is 0 [ 339.188649][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.179446][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.452821][ T1095] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1610'. [ 341.132292][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 341.169739][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.503407][ T6012] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 341.666049][ T6012] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 341.669211][ T6012] usb 5-1: config 0 has no interface number 0 [ 341.686971][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.696957][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 341.706704][ T6012] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 341.716623][ T6012] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 341.719930][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.723466][ T6012] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.740410][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.782805][ T6012] usb 5-1: config 0 descriptor?? [ 341.786377][ T1341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.792626][ T6012] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 342.097875][ T6013] usb 5-1: USB disconnect, device number 48 [ 342.097931][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 342.101959][ T1340] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 342.104243][ T6013] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 342.169940][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.204996][ T1555] netlink: 'syz.1.1620': attribute type 9 has an invalid length. [ 342.206960][ T1555] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1620'. [ 342.627101][ T1864] tmpfs: Bad value for 'mpol' [ 342.693506][ T1972] siw: device registration error -23 [ 343.055850][ T6013] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 343.151184][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.199908][ T6013] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.202958][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 343.205848][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 343.208552][ T6013] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.211816][ T6013] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.214420][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.217603][ T6013] usb 5-1: config 0 descriptor?? [ 343.607173][ T1978] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1630'. [ 343.609935][ T1978] netlink: 'syz.0.1630': attribute type 3 has an invalid length. [ 343.680991][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 343.808516][ T6013] usbhid 5-1:0.0: can't add hid device: -71 [ 343.810175][ T6013] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 343.815251][ T6013] usb 5-1: USB disconnect, device number 49 [ 343.836927][T32252] sound midiC3D0: rawmidi drain error (avail = 4056, buffer_size = 4096) [ 344.141958][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.188256][ T2292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.350894][ T2294] FAULT_INJECTION: forcing a failure. [ 344.350894][ T2294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.354662][ T2294] CPU: 3 UID: 0 PID: 2294 Comm: syz.0.1637 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 344.357606][ T2294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 344.361024][ T2294] Call Trace: [ 344.361923][ T2294] [ 344.362720][ T2294] dump_stack_lvl+0x16c/0x1f0 [ 344.363996][ T2294] should_fail_ex+0x497/0x5b0 [ 344.365384][ T2294] _copy_from_user+0x2e/0xd0 [ 344.366613][ T2294] copy_from_buffer+0x86/0xb0 [ 344.367871][ T2294] copy_uabi_to_xstate+0xb5/0x670 [ 344.369258][ T2294] ? find_held_lock+0x2d/0x110 [ 344.370532][ T2294] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 344.372162][ T2294] ? __pfx_lock_release+0x10/0x10 [ 344.373504][ T2294] ? trace_lock_acquire+0x14a/0x1d0 [ 344.375400][ T2294] ? __fpu_restore_sig+0xc2c/0x1430 [ 344.377216][ T2294] ? __local_bh_enable_ip+0xa4/0x120 [ 344.378570][ T2294] __fpu_restore_sig+0x1070/0x1430 [ 344.379934][ T2294] ? __pfx___fpu_restore_sig+0x10/0x10 [ 344.382101][ T2294] ? lock_acquire+0x2f/0xb0 [ 344.383396][ T2294] ? __might_fault+0xe3/0x190 [ 344.384926][ T2294] fpu__restore_sig+0x113/0x190 [ 344.386663][ T2294] ia32_restore_sigcontext+0x40f/0x5d0 [ 344.388584][ T2294] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 344.390770][ T2294] ? __pfx_lock_release+0x10/0x10 [ 344.392755][ T2294] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.395159][ T2294] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.397286][ T2294] __do_compat_sys_rt_sigreturn+0x121/0x1f0 [ 344.399701][ T2294] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 344.402111][ T2294] do_int80_emulation+0x104/0x200 [ 344.403880][ T2294] asm_int80_emulation+0x1a/0x20 [ 344.405674][ T2294] RIP: 0023:0xf7f54577 [ 344.407146][ T2294] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 344.412350][ T2294] RSP: 002b:00000000f56d655c EFLAGS: 00000296 [ 344.414083][ T2294] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000020005740 [ 344.416935][ T2294] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.419417][ T2294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.422298][ T2294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.425004][ T2294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.427815][ T2294] [ 345.132637][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.277065][ T2756] siw: device registration error -23 [ 346.123286][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.389609][ T3337] xt_NFQUEUE: number of total queues is 0 [ 347.123406][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.138602][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 348.104771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.104476][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.274601][ T8193] delete_channel: no stack [ 349.283777][ T8824] delete_channel: no stack [ 349.310348][ T7606] delete_channel: no stack [ 349.310493][ T6150] delete_channel: no stack [ 349.322064][ T6755] delete_channel: no stack [ 349.327513][ T6198] delete_channel: no stack [ 349.341621][ T7423] delete_channel: no stack [ 349.348770][ T8032] delete_channel: no stack [ 349.358537][ T8607] delete_channel: no stack [ 349.359439][ T7935] delete_channel: no stack [ 349.374054][ T6799] delete_channel: no stack [ 349.377907][ T6638] delete_channel: no stack [ 349.380773][T10987] delete_channel: no stack [ 349.389094][ T8305] delete_channel: no stack [ 349.391901][ T8254] delete_channel: no stack [ 349.395497][ T8392] delete_channel: no stack [ 349.401933][ T7548] delete_channel: no stack [ 349.406630][ T7981] delete_channel: no stack [ 349.465222][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.469179][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.477062][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.479668][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.482453][ T5964] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.485664][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.504931][ T5962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.513438][ T5962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.515701][ T5962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.523337][ T5962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.533417][ T5962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.537600][ T5962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.554386][ T3665] lo speed is unknown, defaulting to 1000 [ 349.613482][ T3665] chnl_net:caif_netlink_parms(): no params data found [ 349.661346][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.663231][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.665145][ T3665] bridge_slave_0: entered allmulticast mode [ 349.667442][ T3665] bridge_slave_0: entered promiscuous mode [ 349.670078][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.671982][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.673883][ T3665] bridge_slave_1: entered allmulticast mode [ 349.675887][ T3665] bridge_slave_1: entered promiscuous mode [ 349.686112][ T8972] delete_channel: no stack [ 349.700294][ T3665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.703824][ T3665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.726630][ T3665] team0: Port device team_slave_0 added [ 349.749792][ T3659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.752854][ T3659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.761204][ T3665] team0: Port device team_slave_1 added [ 349.778163][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.780052][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.787167][ T3665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.791812][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.793653][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.800541][ T3665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.833509][ T3659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.836230][ T3659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.842586][ T3665] hsr_slave_0: entered promiscuous mode [ 349.844544][ T3665] hsr_slave_1: entered promiscuous mode [ 349.846337][ T3665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.848387][ T3665] Cannot create hsr debugfs directory [ 349.916068][ T3659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.919142][ T3659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.930914][ T3665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.935423][ T3665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.938456][ T3665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.941923][ T3665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.951588][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.953662][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.955619][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.957702][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.981806][ T3659] bond0: (slave netdevsim0): Releasing backup interface [ 349.985238][ T3659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.988716][ T3659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.000837][ T3665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.009464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.012573][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.024368][ T3665] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.034071][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.036093][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.042755][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.044712][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.082679][ T3659] bridge_slave_1: left allmulticast mode [ 350.084373][ T3659] bridge_slave_1: left promiscuous mode [ 350.086161][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.087289][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.092738][ T3659] bridge_slave_0: left allmulticast mode [ 350.094226][ T3659] bridge_slave_0: left promiscuous mode [ 350.095994][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.153705][ T3651] delete_channel: no stack [ 350.378114][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.383306][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.387532][ T3659] bond0 (unregistering): Released all slaves [ 350.469932][ T3659] bond1 (unregistering): Released all slaves [ 350.516917][ T3659] tipc: Left network mode [ 350.547107][ T3665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.556573][ T3659] IPVS: stopping master sync thread 8891 ... [ 350.671758][ T3665] veth0_vlan: entered promiscuous mode [ 350.675934][ T3665] veth1_vlan: entered promiscuous mode [ 350.699276][ T3665] veth0_macvtap: entered promiscuous mode [ 350.705928][ T3659] hsr_slave_0: left promiscuous mode [ 350.707872][ T3659] hsr_slave_1: left promiscuous mode [ 350.709766][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.711977][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.714935][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.716871][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.732295][ T3659] veth1_macvtap: left promiscuous mode [ 350.734971][ T3659] veth0_macvtap: left promiscuous mode [ 350.736455][ T3659] veth1_vlan: left promiscuous mode [ 350.738865][ T3659] veth0_vlan: left promiscuous mode [ 351.077411][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.099429][ T3654] delete_channel: no stack [ 351.116198][ T3699] tracefs: Unknown parameter '017777777777777777777770x0000000000000000' [ 351.119545][ T3699] dlm: no locking on control device [ 351.463450][ T5964] Bluetooth: hci4: command tx timeout [ 352.056240][ T6012] lo speed is unknown, defaulting to 1000 [ 352.062377][ T3665] veth1_macvtap: entered promiscuous mode [ 352.076447][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.080042][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.082687][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.085179][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.089758][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.092375][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.094927][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.099777][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.110012][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.112679][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.115415][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.118155][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.120703][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.123391][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.135646][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.140012][ T3665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.142276][ T3665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.144996][ T3665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.147252][ T3665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.190035][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.197846][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.227158][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.230907][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.057607][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.440811][ T5964] Bluetooth: hci4: command tx timeout [ 353.601139][T32252] sound midiC3D0: rawmidi drain error (avail = 3997, buffer_size = 4096) [ 354.024288][ T4182] syz.1.1672: attempt to access beyond end of device [ 354.024288][ T4182] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 354.027871][ T4182] FAT-fs (nbd1): unable to read boot sector [ 354.048632][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.074346][ T4185] xt_NFQUEUE: number of total queues is 0 [ 354.265892][ T4289] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 354.307987][ T4289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1674'. [ 354.883138][ T4292] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 354.885277][ T4292] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1675'. [ 354.897115][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 355.039336][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.421698][ T5964] Bluetooth: hci4: command tx timeout [ 355.632486][ T4714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.634459][ T4714] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 355.646241][ T4714] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 355.730374][ T4918] netlink: 'syz.3.1685': attribute type 4 has an invalid length. [ 355.733208][ T4918] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1685'. [ 355.741699][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 355.748768][ T4920] xt_NFQUEUE: number of total queues is 0 [ 355.870844][ T5022] xt_NFQUEUE: number of total queues is 0 [ 356.039328][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.621322][ T5134] delete_channel: no stack [ 356.680565][ T5239] xt_NFQUEUE: number of total queues is 0 [ 356.982258][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 357.020637][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.109165][ T5962] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 357.699460][ T5472] xt_NFQUEUE: number of total queues is 0 [ 358.020710][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.054488][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 358.222487][ T5586] binder: Unknown parameter 'dont_hash' [ 358.526051][ T56] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 358.736858][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.739329][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.742567][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.745037][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.001915][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.253112][ T56] usb 9-1: usb_control_msg returned -32 [ 359.254534][ T56] usbtmc 9-1:16.0: can't read capabilities [ 359.714164][ T6761] delete_channel: no stack [ 359.731603][ T7109] delete_channel: no stack [ 359.751292][T13773] delete_channel: no stack [ 359.760888][ T8326] delete_channel: no stack [ 359.769417][ T1342] delete_channel: no stack [ 359.776904][ T6787] delete_channel: no stack [ 359.949237][ T6253] delete_channel: no stack [ 359.992566][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.996162][ T7314] delete_channel: no stack [ 359.998813][T21259] delete_channel: no stack [ 360.046175][T19860] delete_channel: no stack [ 360.050591][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.053955][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.056387][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.065068][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.065749][ T5812] FAULT_INJECTION: forcing a failure. [ 360.065749][ T5812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.072768][ T5964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.074963][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.099757][ T8771] delete_channel: no stack [ 360.103641][ T5812] CPU: 2 UID: 0 PID: 5812 Comm: syz.3.1709 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 360.106925][ T5812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.110173][ T5812] Call Trace: [ 360.111076][ T5812] [ 360.111877][ T5812] dump_stack_lvl+0x16c/0x1f0 [ 360.113144][ T5812] should_fail_ex+0x497/0x5b0 [ 360.114469][ T5812] _copy_to_user+0x32/0xd0 [ 360.115670][ T5812] simple_read_from_buffer+0xd0/0x160 [ 360.117173][ T5812] proc_fail_nth_read+0x198/0x270 [ 360.118545][ T5812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.120079][ T5812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.121567][ T5812] vfs_read+0x1df/0xbe0 [ 360.122684][ T5812] ? __fget_files+0x23a/0x3f0 [ 360.124389][ T5812] ? fdget_pos+0x24c/0x360 [ 360.125733][ T5812] ? __pfx_lock_release+0x10/0x10 [ 360.127181][ T5812] ? trace_lock_acquire+0x14a/0x1d0 [ 360.128595][ T5812] ? __pfx_vfs_read+0x10/0x10 [ 360.129797][ T5812] ? __pfx___mutex_lock+0x10/0x10 [ 360.131271][ T5812] ? __fget_files+0x244/0x3f0 [ 360.132613][ T5812] ksys_read+0x12f/0x260 [ 360.133770][ T5812] ? __pfx_ksys_read+0x10/0x10 [ 360.135113][ T5812] __do_fast_syscall_32+0x73/0x120 [ 360.136552][ T5812] do_fast_syscall_32+0x32/0x80 [ 360.137219][T17281] delete_channel: no stack [ 360.137876][ T5812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.140982][ T5812] RIP: 0023:0xf7f17579 [ 360.142121][ T5812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 360.147698][ T5812] RSP: 002b:00000000f5696590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 360.150264][ T5812] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5696620 [ 360.152503][ T5812] RDX: 000000000000000f RSI: 00000000f739cff4 RDI: 0000000000000000 [ 360.154615][ T5812] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 360.156742][ T5812] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 360.158847][ T5812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.161013][ T5812] [ 360.174120][ T6578] delete_channel: no stack [ 360.176258][T16414] delete_channel: no stack [ 360.226690][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 360.315470][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.317600][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.319512][ T5809] bridge_slave_0: entered allmulticast mode [ 360.321514][ T5809] bridge_slave_0: entered promiscuous mode [ 360.324678][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.326683][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.328582][ T5809] bridge_slave_1: entered allmulticast mode [ 360.330708][ T5809] bridge_slave_1: entered promiscuous mode [ 360.371668][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.379450][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.410545][ T5809] team0: Port device team_slave_0 added [ 360.415326][ T5809] team0: Port device team_slave_1 added [ 360.439102][ T5939] xt_NFQUEUE: number of total queues is 0 [ 360.441693][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.444257][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.451868][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.456423][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.458224][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.468314][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.527946][ T5809] hsr_slave_0: entered promiscuous mode [ 360.530360][ T5809] hsr_slave_1: entered promiscuous mode [ 360.533055][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.535969][ T5809] Cannot create hsr debugfs directory [ 360.638613][ T5809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.642551][ T5809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.646116][ T5809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.670209][ T5809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.679943][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.681823][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.683763][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.685745][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.715447][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.725007][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.730864][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.746912][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.757618][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.759649][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.771016][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.773124][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.866523][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.971026][ T5809] veth0_vlan: entered promiscuous mode [ 360.975456][ T5809] veth1_vlan: entered promiscuous mode [ 360.978146][ T2283] usb 9-1: USB disconnect, device number 2 [ 360.983010][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.004700][ T5809] veth0_macvtap: entered promiscuous mode [ 361.008357][ T5809] veth1_macvtap: entered promiscuous mode [ 361.017159][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.019903][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.023906][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.026595][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.029141][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.032005][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.034537][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.037236][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.040930][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.047082][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.051099][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.053741][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.056515][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.059142][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.061912][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.064520][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.067224][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.071140][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.076134][ T5809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.078751][ T5809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.081821][ T5809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.084070][ T5809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.134804][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.136930][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.153543][ T5814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.155897][ T5814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.214436][ T6106] xt_NFQUEUE: number of total queues is 0 [ 361.518195][ T6311] netlink: 'syz.4.1714': attribute type 10 has an invalid length. [ 361.521517][ T6311] batman_adv: batadv0: Adding interface: team0 [ 361.521529][ T6311] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.521543][ T6311] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 361.722545][ T6313] tty tty2: ldisc open failed (-12), clearing slot 1 [ 361.765138][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 361.767802][ T6421] FAULT_INJECTION: forcing a failure. [ 361.767802][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 361.767871][ T6421] CPU: 2 UID: 0 PID: 6421 Comm: syz.3.1719 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 361.767893][ T6421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.767906][ T6421] Call Trace: [ 361.768202][ T6421] [ 361.768213][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 361.768231][ T6421] should_fail_ex+0x497/0x5b0 [ 361.768243][ T6421] ? fs_reclaim_acquire+0xae/0x150 [ 361.768257][ T6421] should_failslab+0xc2/0x120 [ 361.768272][ T6421] __kmalloc_node_noprof+0xd1/0x440 [ 361.768287][ T6421] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 361.768304][ T6421] __kvmalloc_node_noprof+0xad/0x1a0 [ 361.791108][ T6421] xfrm_user_rcv_msg_compat+0x371/0x12e0 [ 361.791134][ T6421] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 361.791145][ T6421] ? ___sys_sendmsg+0x135/0x1e0 [ 361.791156][ T6421] ? __do_fast_syscall_32+0x73/0x120 [ 361.791184][ T6421] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 361.791196][ T6421] xfrm_user_rcv_msg+0x30f/0xb30 [ 361.791213][ T6421] ? kfree_skbmem+0x1a4/0x1f0 [ 361.791227][ T6421] ? find_held_lock+0x2d/0x110 [ 361.791240][ T6421] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 361.791256][ T6421] ? hlock_class+0x4e/0x130 [ 361.791267][ T6421] ? __lock_acquire+0x163e/0x3ce0 [ 361.791296][ T6421] ? __mutex_trylock_common+0xea/0x250 [ 361.791313][ T6421] netlink_rcv_skb+0x165/0x410 [ 361.791328][ T6421] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 361.791345][ T6421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.791357][ T6421] ? __mutex_lock+0x1a6/0x9c0 [ 361.791377][ T6421] ? netlink_deliver_tap+0x1ae/0xcf0 [ 361.791392][ T6421] xfrm_netlink_rcv+0x71/0x90 [ 361.791405][ T6421] netlink_unicast+0x53c/0x7f0 [ 361.791420][ T6421] ? __pfx_netlink_unicast+0x10/0x10 [ 361.791434][ T6421] ? __phys_addr_symbol+0x30/0x80 [ 361.791446][ T6421] ? __check_object_size+0x488/0x710 [ 361.791463][ T6421] netlink_sendmsg+0x8b8/0xd70 [ 361.791479][ T6421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.791497][ T6421] ____sys_sendmsg+0x9ae/0xb40 [ 361.791512][ T6421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.791525][ T6421] ? get_compat_msghdr+0x11b/0x170 [ 361.791541][ T6421] ? __pfx___lock_acquire+0x10/0x10 [ 361.791557][ T6421] ___sys_sendmsg+0x135/0x1e0 [ 361.791569][ T6421] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.791587][ T6421] ? lock_acquire+0x2f/0xb0 [ 361.791600][ T6421] ? __fget_files+0x40/0x3f0 [ 361.791621][ T6421] ? fdget+0x176/0x210 [ 361.791633][ T6421] __sys_sendmsg+0x117/0x1f0 [ 361.791645][ T6421] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.791654][ T6421] ? __fget_files+0x244/0x3f0 [ 361.791675][ T6421] __do_fast_syscall_32+0x73/0x120 [ 361.791686][ T6421] do_fast_syscall_32+0x32/0x80 [ 361.791696][ T6421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.791708][ T6421] RIP: 0023:0xf7f17579 [ 361.791717][ T6421] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 361.791728][ T6421] RSP: 002b:00000000f569655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 361.791739][ T6421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 361.791746][ T6421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.791752][ T6421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.791758][ T6421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.791764][ T6421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.791777][ T6421] [ 361.855321][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 361.974100][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.054119][ T5964] Bluetooth: hci1: command tx timeout [ 362.329299][ T6534] tty tty2: ldisc open failed (-12), clearing slot 1 [ 362.530038][ T6752] FAULT_INJECTION: forcing a failure. [ 362.530038][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 362.530069][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.4.1728 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 362.530091][ T6752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.530103][ T6752] Call Trace: [ 362.530110][ T6752] [ 362.530118][ T6752] dump_stack_lvl+0x16c/0x1f0 [ 362.530143][ T6752] should_fail_ex+0x497/0x5b0 [ 362.530162][ T6752] ? fs_reclaim_acquire+0xae/0x150 [ 362.530187][ T6752] should_failslab+0xc2/0x120 [ 362.530213][ T6752] __kmalloc_noprof+0xcb/0x410 [ 362.530236][ T6752] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.530269][ T6752] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 362.530304][ T6752] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 362.530333][ T6752] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 362.530367][ T6752] ? bpf_lsm_capable+0x9/0x10 [ 362.530391][ T6752] ? security_capable+0x7e/0x260 [ 362.530417][ T6752] ? ns_capable+0xd7/0x110 [ 362.530435][ T6752] genl_rcv_msg+0x565/0x800 [ 362.530461][ T6752] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.530485][ T6752] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 362.530517][ T6752] netlink_rcv_skb+0x165/0x410 [ 362.530541][ T6752] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.530570][ T6752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.530606][ T6752] ? down_read+0xc9/0x330 [ 362.530625][ T6752] ? __pfx_down_read+0x10/0x10 [ 362.530645][ T6752] ? netlink_deliver_tap+0x1ae/0xcf0 [ 362.530672][ T6752] genl_rcv+0x28/0x40 [ 362.530696][ T6752] netlink_unicast+0x53c/0x7f0 [ 362.530723][ T6752] ? __pfx_netlink_unicast+0x10/0x10 [ 362.530747][ T6752] ? __phys_addr_symbol+0x30/0x80 [ 362.530769][ T6752] ? __check_object_size+0x488/0x710 [ 362.530797][ T6752] netlink_sendmsg+0x8b8/0xd70 [ 362.530826][ T6752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.530861][ T6752] ____sys_sendmsg+0x9ae/0xb40 [ 362.530888][ T6752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.530918][ T6752] ? get_compat_msghdr+0x11b/0x170 [ 362.530947][ T6752] ? __pfx___lock_acquire+0x10/0x10 [ 362.530978][ T6752] ___sys_sendmsg+0x135/0x1e0 [ 362.531000][ T6752] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.531033][ T6752] ? lock_acquire+0x2f/0xb0 [ 362.531057][ T6752] ? __fget_files+0x40/0x3f0 [ 362.531087][ T6752] ? fdget+0x176/0x210 [ 362.531109][ T6752] __sys_sendmsg+0x117/0x1f0 [ 362.531129][ T6752] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.531146][ T6752] ? __fget_files+0x244/0x3f0 [ 362.531185][ T6752] __do_fast_syscall_32+0x73/0x120 [ 362.531205][ T6752] do_fast_syscall_32+0x32/0x80 [ 362.531224][ T6752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.531244][ T6752] RIP: 0023:0xf7fe8579 [ 362.531259][ T6752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 362.531276][ T6752] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 362.531296][ T6752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 362.531309][ T6752] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.531321][ T6752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.531333][ T6752] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 362.531345][ T6752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.531372][ T6752] [ 362.964154][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.119562][ T6898] FAULT_INJECTION: forcing a failure. [ 363.119562][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 363.123115][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.1.1735 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 363.126164][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.129060][ T6898] Call Trace: [ 363.130217][ T6898] [ 363.131104][ T6898] dump_stack_lvl+0x16c/0x1f0 [ 363.132496][ T6898] should_fail_ex+0x497/0x5b0 [ 363.133771][ T6898] ? fs_reclaim_acquire+0xae/0x150 [ 363.135120][ T6898] should_failslab+0xc2/0x120 [ 363.136369][ T6898] __kmalloc_cache_noprof+0x6b/0x310 [ 363.137960][ T6898] ? rtnl_newlink+0x49/0xa0 [ 363.139168][ T6898] rtnl_newlink+0x49/0xa0 [ 363.140345][ T6898] ? __pfx_rtnl_newlink+0x10/0x10 [ 363.141665][ T6898] rtnetlink_rcv_msg+0x3c7/0xea0 [ 363.143201][ T6898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.144724][ T6898] ? __pfx___dev_queue_xmit+0x10/0x10 [ 363.146197][ T6898] netlink_rcv_skb+0x165/0x410 [ 363.147897][ T6898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.149498][ T6898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.151139][ T6898] ? netlink_deliver_tap+0x1ae/0xcf0 [ 363.152562][ T6898] netlink_unicast+0x53c/0x7f0 [ 363.153834][ T6898] ? __pfx_netlink_unicast+0x10/0x10 [ 363.155230][ T6898] ? __phys_addr_symbol+0x30/0x80 [ 363.156467][ T6898] ? __check_object_size+0x488/0x710 [ 363.158094][ T6898] netlink_sendmsg+0x8b8/0xd70 [ 363.159368][ T6898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.160796][ T6898] ____sys_sendmsg+0x9ae/0xb40 [ 363.162060][ T6898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.163446][ T6898] ? get_compat_msghdr+0x11b/0x170 [ 363.165058][ T6898] ? __pfx___lock_acquire+0x10/0x10 [ 363.166447][ T6898] ___sys_sendmsg+0x135/0x1e0 [ 363.167733][ T6898] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.169377][ T6898] ? lock_acquire+0x2f/0xb0 [ 363.170742][ T6898] ? __fget_files+0x40/0x3f0 [ 363.171868][ T6898] ? fdget+0x176/0x210 [ 363.172951][ T6898] __sys_sendmsg+0x117/0x1f0 [ 363.174186][ T6898] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.175548][ T6898] ? __fget_files+0x244/0x3f0 [ 363.176835][ T6898] __do_fast_syscall_32+0x73/0x120 [ 363.178182][ T6898] do_fast_syscall_32+0x32/0x80 [ 363.179464][ T6898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.182229][ T6898] RIP: 0023:0xf748e579 [ 363.183904][ T6898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.189678][ T6898] RSP: 002b:00000000f577655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 363.191971][ T6898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200006c0 [ 363.194630][ T6898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.196831][ T6898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.198856][ T6898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.201329][ T6898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.204140][ T6898] [ 363.348074][ T7009] xt_NFQUEUE: number of total queues is 0 [ 363.355326][T32252] sound midiC3D0: rawmidi drain error (avail = 3997, buffer_size = 4096) [ 363.408402][ T5950] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.429061][ T5950] usb 6-1: USB disconnect, device number 56 [ 363.594396][ T3667] udevd[3667]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.634127][ T7021] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1743'. [ 363.637241][ T7021] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1743'. [ 363.642980][ T7021] FAULT_INJECTION: forcing a failure. [ 363.642980][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 363.648385][ T7021] CPU: 3 UID: 0 PID: 7021 Comm: syz.4.1743 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 363.652339][ T7021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.656036][ T7021] Call Trace: [ 363.656956][ T7021] [ 363.657730][ T7021] dump_stack_lvl+0x16c/0x1f0 [ 363.658993][ T7021] should_fail_ex+0x497/0x5b0 [ 363.660322][ T7021] ? fs_reclaim_acquire+0xae/0x150 [ 363.661668][ T7021] should_failslab+0xc2/0x120 [ 363.662936][ T7021] kmem_cache_alloc_node_noprof+0x71/0x310 [ 363.664518][ T7021] ? __alloc_skb+0x2b3/0x380 [ 363.666155][ T7021] __alloc_skb+0x2b3/0x380 [ 363.667314][ T7021] ? __pfx___alloc_skb+0x10/0x10 [ 363.668725][ T7021] netlink_ack+0x164/0xb20 [ 363.669915][ T7021] netlink_rcv_skb+0x327/0x410 [ 363.671188][ T7021] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 363.672632][ T7021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.674046][ T7021] ? __mutex_lock+0x1a6/0x9c0 [ 363.675423][ T7021] ? netlink_deliver_tap+0x1ae/0xcf0 [ 363.676841][ T7021] xfrm_netlink_rcv+0x71/0x90 [ 363.678106][ T7021] netlink_unicast+0x53c/0x7f0 [ 363.679390][ T7021] ? __pfx_netlink_unicast+0x10/0x10 [ 363.681318][ T7021] ? __phys_addr_symbol+0x30/0x80 [ 363.682877][ T7021] ? __check_object_size+0x488/0x710 [ 363.684381][ T7021] netlink_sendmsg+0x8b8/0xd70 [ 363.685729][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.687265][ T7021] ____sys_sendmsg+0x9ae/0xb40 [ 363.688677][ T7021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.690208][ T7021] ? get_compat_msghdr+0x11b/0x170 [ 363.691751][ T7021] ? __pfx___lock_acquire+0x10/0x10 [ 363.693192][ T7021] ___sys_sendmsg+0x135/0x1e0 [ 363.694452][ T7021] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.695879][ T7021] ? lock_acquire+0x2f/0xb0 [ 363.697114][ T7021] ? __fget_files+0x40/0x3f0 [ 363.698361][ T7021] ? fdget+0x176/0x210 [ 363.700132][ T7021] __sys_sendmsg+0x117/0x1f0 [ 363.701756][ T7021] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.703293][ T7021] ? __fget_files+0x244/0x3f0 [ 363.704777][ T7021] __do_fast_syscall_32+0x73/0x120 [ 363.706359][ T7021] do_fast_syscall_32+0x32/0x80 [ 363.707816][ T7021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.709703][ T7021] RIP: 0023:0xf7fe8579 [ 363.710861][ T7021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 363.716252][ T7021] RSP: 002b:00000000f576655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 363.718581][ T7021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 363.721031][ T7021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.723365][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.725481][ T7021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 363.728079][ T7021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.730336][ T7021] [ 363.837178][ T5964] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 363.954968][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.031936][ T5964] Bluetooth: hci1: command tx timeout [ 364.066367][ T7257] FAULT_INJECTION: forcing a failure. [ 364.066367][ T7257] name failslab, interval 1, probability 0, space 0, times 0 [ 364.069754][ T7257] CPU: 3 UID: 0 PID: 7257 Comm: syz.5.1747 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 364.072621][ T7257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.075431][ T7257] Call Trace: [ 364.076330][ T7257] [ 364.077121][ T7257] dump_stack_lvl+0x16c/0x1f0 [ 364.078367][ T7257] should_fail_ex+0x497/0x5b0 [ 364.079617][ T7257] ? fs_reclaim_acquire+0xae/0x150 [ 364.080983][ T7257] should_failslab+0xc2/0x120 [ 364.082354][ T7257] kmem_cache_alloc_node_noprof+0x71/0x310 [ 364.083907][ T7257] ? __alloc_skb+0x2b3/0x380 [ 364.085132][ T7257] __alloc_skb+0x2b3/0x380 [ 364.086628][ T7257] ? __pfx___alloc_skb+0x10/0x10 [ 364.088203][ T7257] netlink_alloc_large_skb+0x69/0x130 [ 364.089744][ T7257] netlink_sendmsg+0x689/0xd70 [ 364.091133][ T7257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.092585][ T7257] ____sys_sendmsg+0x9ae/0xb40 [ 364.093862][ T7257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.095258][ T7257] ? get_compat_msghdr+0x11b/0x170 [ 364.096632][ T7257] ? __pfx___lock_acquire+0x10/0x10 [ 364.098012][ T7257] ___sys_sendmsg+0x135/0x1e0 [ 364.099259][ T7257] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.100666][ T7257] ? lock_acquire+0x2f/0xb0 [ 364.102035][ T7257] ? __fget_files+0x40/0x3f0 [ 364.103327][ T7257] ? fdget+0x176/0x210 [ 364.104428][ T7257] __sys_sendmsg+0x117/0x1f0 [ 364.105650][ T7257] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.106985][ T7257] ? __fget_files+0x244/0x3f0 [ 364.108691][ T7257] __do_fast_syscall_32+0x73/0x120 [ 364.110053][ T7257] do_fast_syscall_32+0x32/0x80 [ 364.111344][ T7257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.113014][ T7257] RIP: 0023:0xf746e579 [ 364.114099][ T7257] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 364.119105][ T7257] RSP: 002b:00000000f575655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 364.121309][ T7257] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 364.123368][ T7257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.125430][ T7257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.127502][ T7257] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 364.129566][ T7257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.131889][ T7257] [ 364.207205][ T2404] syz_tun (unregistering): left promiscuous mode [ 364.348819][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 364.393334][ T8] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 364.429500][ T3664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.499594][ T7276] md0: using deprecated bitmap file support [ 364.501276][ T7276] md0: error: failed to get bitmap file [ 364.516404][ T3664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.574380][ T8] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 364.576484][ T8] usb 8-1: config 0 has no interface number 0 [ 364.578085][ T8] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.581734][ T8] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 364.586283][ T8] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 364.589228][ T8] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 364.592442][ T8] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.593534][ T3664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.597534][ T8] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 364.600961][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.606721][ T8] usb 8-1: config 0 descriptor?? [ 364.611227][ T7253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.616149][ T8] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 364.703162][ T3664] bond0: (slave netdevsim0): Releasing backup interface [ 364.714590][ T3664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.820320][ T3664] bridge_slave_1: left allmulticast mode [ 364.822183][ T3664] bridge_slave_1: left promiscuous mode [ 364.824408][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.831122][ T3664] bridge_slave_0: left allmulticast mode [ 364.833130][ T3664] bridge_slave_0: left promiscuous mode [ 364.836250][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.948161][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.953236][ T7605] FAULT_INJECTION: forcing a failure. [ 364.953236][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 364.958825][ T7605] CPU: 2 UID: 0 PID: 7605 Comm: syz.1.1759 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 364.961839][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 364.964942][ T7605] Call Trace: [ 364.965835][ T7605] [ 364.966621][ T7605] dump_stack_lvl+0x16c/0x1f0 [ 364.967880][ T7605] should_fail_ex+0x497/0x5b0 [ 364.969155][ T7605] ? fs_reclaim_acquire+0xae/0x150 [ 364.970493][ T7605] should_failslab+0xc2/0x120 [ 364.971735][ T7605] __kmalloc_noprof+0xcb/0x410 [ 364.972995][ T7605] ? __pfx___mutex_trylock_common+0x10/0x10 [ 364.974529][ T7605] ? genl_rcv_msg+0x580/0x800 [ 364.975770][ T7605] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 364.977630][ T7605] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 364.979079][ T7605] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 364.980667][ T7605] ? __radix_tree_lookup+0x21f/0x2c0 [ 364.982039][ T7605] genl_rcv_msg+0x565/0x800 [ 364.983238][ T7605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.984592][ T7605] ? __pfx_tipc_nl_peer_rm+0x10/0x10 [ 364.985978][ T7605] netlink_rcv_skb+0x165/0x410 [ 364.987226][ T7605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.988592][ T7605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.989989][ T7605] ? down_read+0xc9/0x330 [ 364.991128][ T7605] ? __pfx_down_read+0x10/0x10 [ 364.992397][ T7605] ? netlink_deliver_tap+0x1ae/0xcf0 [ 364.993777][ T7605] genl_rcv+0x28/0x40 [ 364.994834][ T7605] netlink_unicast+0x53c/0x7f0 [ 364.996094][ T7605] ? __pfx_netlink_unicast+0x10/0x10 [ 364.997470][ T7605] ? __phys_addr_symbol+0x30/0x80 [ 364.998802][ T7605] ? __check_object_size+0x488/0x710 [ 365.000201][ T7605] netlink_sendmsg+0x8b8/0xd70 [ 365.001465][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.003138][ T7605] ____sys_sendmsg+0x9ae/0xb40 [ 365.004427][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.005819][ T7605] ? get_compat_msghdr+0x11b/0x170 [ 365.007844][ T7605] ? __pfx___lock_acquire+0x10/0x10 [ 365.009289][ T7605] ___sys_sendmsg+0x135/0x1e0 [ 365.010626][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.012280][ T7605] ? lock_acquire+0x2f/0xb0 [ 365.013576][ T7605] ? __fget_files+0x40/0x3f0 [ 365.014734][ T7605] ? fdget+0x176/0x210 [ 365.015826][ T7605] __sys_sendmsg+0x117/0x1f0 [ 365.017046][ T7605] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.018383][ T7605] ? __fget_files+0x244/0x3f0 [ 365.019637][ T7605] __do_fast_syscall_32+0x73/0x120 [ 365.021001][ T7605] do_fast_syscall_32+0x32/0x80 [ 365.022484][ T7605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.024235][ T7605] RIP: 0023:0xf748e579 [ 365.025315][ T7605] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 365.030759][ T7605] RSP: 002b:00000000f577655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 365.033124][ T7605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 365.035397][ T7605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.037796][ T7605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.040216][ T7605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 365.042772][ T7605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.044878][ T7605] [ 365.328604][ T3664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.344777][ T3664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.366472][ T3664] bond0 (unregistering): Released all slaves [ 365.372201][ T3664] bond1 (unregistering): Released all slaves [ 365.445472][ T3664] tipc: Disabling bearer [ 365.448065][ T3664] tipc: Left network mode [ 365.654349][ T3664] batadv_slave_0: left promiscuous mode [ 365.659999][ T3664] hsr_slave_0: left promiscuous mode [ 365.662679][ T3664] hsr_slave_1: left promiscuous mode [ 365.664706][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.667525][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.673865][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.675810][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.701895][ T3664] veth0_macvtap: left promiscuous mode [ 365.703439][ T3664] veth1_vlan: left promiscuous mode [ 365.704893][ T3664] veth0_vlan: left promiscuous mode [ 366.024018][ T5962] Bluetooth: hci1: command tx timeout [ 366.128631][ T5964] block nbd5: Receive control failed (result -32) [ 366.148834][ T7814] block nbd5: shutting down sockets [ 366.159448][ T6013] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 366.304444][ T6013] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.309642][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.313577][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 366.316216][ T6013] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.320424][ T6013] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.323171][ T6013] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.326922][ T6013] usb 9-1: config 0 descriptor?? [ 366.724732][ T7823] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1763'. [ 366.728594][ T7823] netlink: 'syz.4.1763': attribute type 3 has an invalid length. [ 366.940710][ T6013] usbhid 9-1:0.0: can't add hid device: -71 [ 366.942732][ T6013] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 366.950010][ T6013] usb 9-1: USB disconnect, device number 3 [ 367.089879][ T7253] delete_channel: no stack [ 367.092126][ T8] usb 8-1: USB disconnect, device number 59 [ 367.099485][ T8] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 367.379114][ T6013] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 367.441459][ T8] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 367.518955][ T6013] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.522184][ T6013] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.525343][ T6013] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.532611][ T6013] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 367.535242][ T6013] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.537791][ T6013] usb 10-1: Product: syz [ 367.538994][ T6013] usb 10-1: Manufacturer: syz [ 367.540302][ T6013] usb 10-1: SerialNumber: syz [ 367.596936][ T8] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.600340][ T8] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.603851][ T8] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.610140][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 367.614844][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.617757][ T8] usb 8-1: Product: syz [ 367.619647][ T8] usb 8-1: Manufacturer: syz [ 367.621221][ T8] usb 8-1: SerialNumber: syz [ 367.699736][ T5964] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 367.703379][ T5964] Bluetooth: hci4: Injecting HCI hardware error event [ 367.707079][ T5964] Bluetooth: hci4: hardware error 0x00 [ 367.736995][ T6013] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 367.829249][ T8] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 367.836068][ T7952] FAULT_INJECTION: forcing a failure. [ 367.836068][ T7952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.840314][ T7952] CPU: 2 UID: 0 PID: 7952 Comm: syz.1.1768 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 367.844289][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.847286][ T7952] Call Trace: [ 367.848195][ T7952] [ 367.848991][ T7952] dump_stack_lvl+0x16c/0x1f0 [ 367.850263][ T7952] should_fail_ex+0x497/0x5b0 [ 367.851520][ T7952] ? fs_reclaim_acquire+0xae/0x150 [ 367.853382][ T7952] should_fail_alloc_page+0xe7/0x130 [ 367.854995][ T7952] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 367.857099][ T7952] __alloc_pages_noprof+0x190/0x25a0 [ 367.858828][ T7952] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 367.860703][ T7952] ? find_held_lock+0x2d/0x110 [ 367.862541][ T7952] ? local_lock_release+0x99/0x140 [ 367.864485][ T7952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.866836][ T7952] ? policy_nodemask+0xea/0x4e0 [ 367.868415][ T7952] alloc_pages_mpol_noprof+0x2c9/0x610 [ 367.870241][ T7952] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 367.871913][ T7952] ? lockdep_init_map_type+0x16d/0x7d0 [ 367.873724][ T7952] get_free_pages_noprof+0xc/0x40 [ 367.875245][ T7952] pgd_alloc+0x2b/0x2a0 [ 367.876535][ T7952] mm_init+0x69b/0xf50 [ 367.877774][ T7952] mm_alloc+0x9f/0xc0 [ 367.878937][ T7952] alloc_bprm+0x25d/0xc50 [ 367.880183][ T7952] ? strncpy_from_user+0x1e6/0x2c0 [ 367.881907][ T7952] do_execveat_common.isra.0+0x1cd/0x630 [ 367.883577][ T7952] __ia32_compat_sys_execveat+0xe0/0x120 [ 367.885340][ T7952] __do_fast_syscall_32+0x73/0x120 [ 367.886883][ T7952] do_fast_syscall_32+0x32/0x80 [ 367.888290][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.890290][ T7952] RIP: 0023:0xf748e579 [ 367.891455][ T7952] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.896788][ T7952] RSP: 002b:00000000f577655c EFLAGS: 00000296 ORIG_RAX: 0000000000000166 [ 367.899464][ T7952] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000140 [ 367.901925][ T7952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.904276][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.906446][ T7952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.908693][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.910947][ T7952] [ 367.927978][ T6013] usb 10-1: USB disconnect, device number 2 [ 367.994211][ T5962] Bluetooth: hci1: command tx timeout [ 368.027720][ T2283] usb 8-1: USB disconnect, device number 60 [ 368.030856][ T2283] usblp1: removed [ 368.122961][ T7831] usblp0: removed [ 368.231324][ T3664] IPVS: stop unused estimator thread 0... [ 368.731782][ T8307] block device autoloading is deprecated and will be removed. [ 368.785240][ T8301] md0: using deprecated bitmap file support [ 368.786835][ T8301] md0: error: failed to get bitmap file [ 368.938338][ T35] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 369.013068][ T8] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 369.092340][ T35] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.096892][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.101279][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.104634][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.109181][ T35] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.111895][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.116112][ T35] usb 10-1: config 0 descriptor?? [ 369.157344][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.160314][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.163214][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.166837][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.172045][ T8314] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 369.176626][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.369951][ T8314] program syz.3.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.379637][ T8] usb 8-1: USB disconnect, device number 61 [ 369.467877][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 369.507529][ T8305] netlink: 4272 bytes leftover after parsing attributes in process `syz.5.1775'. [ 369.510605][ T8305] netlink: 'syz.5.1775': attribute type 3 has an invalid length. [ 369.670350][ T5964] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 369.706925][ T35] usbhid 10-1:0.0: can't add hid device: -71 [ 369.708632][ T35] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 369.716475][ T35] usb 10-1: USB disconnect, device number 3 [ 369.837220][ T8348] xt_NFQUEUE: number of total queues is 0 [ 370.080260][ T2283] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 370.227143][ T2283] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.230230][ T2283] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.233897][ T2283] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.236375][ T2283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.240807][ T8345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.244378][ T2283] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.251918][ T6013] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 370.397644][ T6013] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.401644][ T6013] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.406377][ T6013] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.414359][ T6013] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 370.418311][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.421346][ T6013] usb 8-1: Product: syz [ 370.423047][ T6013] usb 8-1: Manufacturer: syz [ 370.424296][ T6013] usb 8-1: SerialNumber: syz [ 370.442758][ T8345] program syz.1.1781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.448769][ T5900] usb 6-1: USB disconnect, device number 57 [ 370.621972][ T6013] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 370.814127][ T6013] usb 8-1: USB disconnect, device number 62 [ 371.005024][ T8353] usblp0: removed [ 371.343137][ T8478] xt_NFQUEUE: number of total queues is 0 [ 371.537977][ T8582] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 371.790481][ T8692] xt_NFQUEUE: number of total queues is 0 [ 372.548792][ T35] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 372.652241][ T30] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 372.678297][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 372.681586][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 372.701826][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.705293][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 372.708031][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.710924][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.714677][ T8800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.718052][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.805916][ T30] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 372.808032][ T30] usb 9-1: config 0 has no interface number 0 [ 372.810111][ T30] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.813181][ T30] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 372.816471][ T30] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 372.819900][ T30] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 372.822816][ T30] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.826775][ T30] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 372.829154][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.832553][ T30] usb 9-1: config 0 descriptor?? [ 372.835120][ T8584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 372.838771][ T30] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 372.852440][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 372.853778][ T8914] bond_slave_0: entered promiscuous mode [ 372.857279][ T8914] bond_slave_1: entered promiscuous mode [ 372.860713][ T8914] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.865183][ T8914] macsec2: entered promiscuous mode [ 372.867056][ T8914] bond0: entered promiscuous mode [ 372.869211][ T8914] macsec2: entered allmulticast mode [ 372.871214][ T8914] bond0: entered allmulticast mode [ 372.873191][ T8914] bond_slave_0: entered allmulticast mode [ 372.875327][ T8914] bond_slave_1: entered allmulticast mode [ 372.877467][ T8914] syz_tun: entered allmulticast mode [ 372.879527][ T8914] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 372.883666][ T8914] bond0: left allmulticast mode [ 372.885708][ T8914] bond_slave_0: left allmulticast mode [ 372.887796][ T8914] bond_slave_1: left allmulticast mode [ 372.890448][ T8914] syz_tun: left allmulticast mode [ 372.892279][ T8914] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 372.894613][ T8914] bond0: left promiscuous mode [ 372.896266][ T8914] bond_slave_0: left promiscuous mode [ 372.897684][ T8914] bond_slave_1: left promiscuous mode [ 372.899262][ T8914] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 372.910620][ T8800] program syz.1.1797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.915998][ T35] usb 6-1: USB disconnect, device number 58 [ 372.996596][ T8] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.000489][ T8] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 373.003641][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.009973][ T8] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 373.012870][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.015817][ T8] usb 10-1: Product: syz [ 373.017188][ T8] usb 10-1: Manufacturer: syz [ 373.018706][ T8] usb 10-1: SerialNumber: syz [ 373.078931][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 373.080680][ T30] usb 9-1: USB disconnect, device number 4 [ 373.083354][ T8584] ldusb 9-1:0.55: Couldn't submit interrupt_out_urb -19 [ 373.085600][ T30] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 373.088755][ T8583] delete_channel: no stack [ 373.219447][ T8] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 373.411670][ T30] usb 10-1: USB disconnect, device number 4 [ 373.605621][ T8805] usblp0: removed [ 373.677685][ T9131] xt_NFQUEUE: number of total queues is 0 [ 373.891790][ T9237] raw_sendmsg: syz.1.1809 forgot to set AF_INET. Fix it! [ 373.895179][ T9237] FAULT_INJECTION: forcing a failure. [ 373.895179][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 373.898964][ T9237] CPU: 2 UID: 0 PID: 9237 Comm: syz.1.1809 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 373.901916][ T9237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 373.904870][ T9237] Call Trace: [ 373.905762][ T9237] [ 373.906551][ T9237] dump_stack_lvl+0x16c/0x1f0 [ 373.907809][ T9237] should_fail_ex+0x497/0x5b0 [ 373.909113][ T9237] should_failslab+0xc2/0x120 [ 373.910444][ T9237] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 373.912217][ T9237] ? skb_clone+0x190/0x3f0 [ 373.913577][ T9237] skb_clone+0x190/0x3f0 [ 373.914678][ T9237] dev_queue_xmit_nit+0x38f/0xba0 [ 373.916016][ T9237] ? __pfx_passthru_features_check+0x10/0x10 [ 373.917800][ T9237] dev_hard_start_xmit+0x56/0x790 [ 373.919399][ T9237] __dev_queue_xmit+0x7c7/0x4350 [ 373.921048][ T9237] ? ebt_do_table+0x1bd1/0x21b0 [ 373.922584][ T9237] ? __local_bh_enable_ip+0xa4/0x120 [ 373.924229][ T9237] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.925602][ T9237] ? ebt_do_table+0x1bd1/0x21b0 [ 373.926882][ T9237] ? __local_bh_enable_ip+0xa4/0x120 [ 373.928277][ T9237] ? __pfx___dev_queue_xmit+0x10/0x10 [ 373.929679][ T9237] ? find_held_lock+0x2d/0x110 [ 373.930913][ T9237] ? nf_hook+0x4a3/0x7d0 [ 373.932098][ T9237] ? __pfx_lock_release+0x10/0x10 [ 373.933614][ T9237] ? br_nf_post_routing+0x59f/0x11b0 [ 373.935111][ T9237] ? nf_hook+0x4a3/0x7d0 [ 373.936334][ T9237] ? nf_hook_slow+0x132/0x200 [ 373.937947][ T9237] br_dev_queue_push_xmit+0x274/0x880 [ 373.939544][ T9237] ? __pfx_nf_hook+0x10/0x10 [ 373.940885][ T9237] ? __pfx_br_forward_finish+0x10/0x10 [ 373.942387][ T9237] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 373.943952][ T9237] ? __pfx_br_forward_finish+0x10/0x10 [ 373.945371][ T9237] ? __pfx_br_multicast_count+0x10/0x10 [ 373.946837][ T9237] br_forward_finish+0xf5/0x130 [ 373.948158][ T9237] __br_forward+0x1e5/0x5b0 [ 373.949369][ T9237] br_flood+0x35f/0x5c0 [ 373.950484][ T9237] br_dev_xmit+0xf7d/0x1890 [ 373.951703][ T9237] ? __pfx_br_dev_xmit+0x10/0x10 [ 373.953232][ T9237] ? __pfx_lock_release+0x10/0x10 [ 373.954669][ T9237] ? __pfx_packet_rcv+0x10/0x10 [ 373.956034][ T9237] ? dev_queue_xmit_nit+0x87e/0xba0 [ 373.957442][ T9237] dev_hard_start_xmit+0x143/0x790 [ 373.958764][ T9237] __dev_queue_xmit+0x7c7/0x4350 [ 373.960206][ T9237] ? lockdep_unlock+0x11a/0x290 [ 373.961494][ T9237] ? __lock_acquire+0x2110/0x3ce0 [ 373.962891][ T9237] ? __pfx___dev_queue_xmit+0x10/0x10 [ 373.964753][ T9237] ? hlock_class+0x40/0x130 [ 373.966021][ T9237] ? __pfx___lock_acquire+0x10/0x10 [ 373.967389][ T9237] ? __pfx_mark_lock+0x10/0x10 [ 373.968661][ T9237] ? find_held_lock+0x2d/0x110 [ 373.969918][ T9237] ? ip_finish_output2+0x82d/0x2530 [ 373.971272][ T9237] ? __pfx_lock_release+0x10/0x10 [ 373.972620][ T9237] ? trace_lock_acquire+0x14a/0x1d0 [ 373.973962][ T9237] ? skb_push+0x9a/0xf0 [ 373.975045][ T9237] ? eth_header+0x16a/0x1f0 [ 373.976248][ T9237] neigh_resolve_output+0x5bc/0x950 [ 373.977578][ T9237] ip_finish_output2+0x82d/0x2530 [ 373.978904][ T9237] ? nf_hook+0x3bf/0x6d0 [ 373.980044][ T9237] ? __pfx_ip_finish_output2+0x10/0x10 [ 373.981472][ T9237] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 373.982794][ T9237] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 373.984129][ T9237] ? __pfx_nf_hook+0x10/0x10 [ 373.985263][ T9237] __ip_finish_output+0x49e/0x950 [ 373.986500][ T9237] ip_finish_output+0x31/0x310 [ 373.987750][ T9237] ip_output+0x13b/0x2a0 [ 373.988868][ T9237] ? __pfx_ip_output+0x10/0x10 [ 373.990154][ T9237] ip_push_pending_frames+0x2fb/0x5b0 [ 373.991663][ T9237] raw_sendmsg+0x1475/0x3ad0 [ 373.992958][ T9237] ? __pfx_raw_sendmsg+0x10/0x10 [ 373.994265][ T9237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 373.995803][ T9237] ? __pfx___lock_acquire+0x10/0x10 [ 373.997244][ T9237] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 373.998986][ T9237] ? __pfx___might_resched+0x10/0x10 [ 374.000428][ T9237] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.001809][ T9237] ? __pfx_raw_sendmsg+0x10/0x10 [ 374.003284][ T9237] ? inet_sendmsg+0x119/0x140 [ 374.004626][ T9237] inet_sendmsg+0x119/0x140 [ 374.006087][ T9237] __sys_sendto+0x426/0x4d0 [ 374.007374][ T9237] ? __pfx___sys_sendto+0x10/0x10 [ 374.008815][ T9237] ? ksys_write+0x1ad/0x260 [ 374.010147][ T9237] ? __pfx_ksys_write+0x10/0x10 [ 374.011428][ T9237] __ia32_sys_sendto+0xdd/0x1b0 [ 374.012847][ T9237] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.014211][ T9237] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 374.016003][ T9237] __do_fast_syscall_32+0x73/0x120 [ 374.017348][ T9237] do_fast_syscall_32+0x32/0x80 [ 374.018633][ T9237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.020334][ T9237] RIP: 0023:0xf748e579 [ 374.021560][ T9237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.028668][ T9237] RSP: 002b:00000000f577655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 374.031804][ T9237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 374.034771][ T9237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 374.037651][ T9237] RBP: 000000000000006e R08: 0000000000000000 R09: 0000000000000000 [ 374.040779][ T9237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.043120][ T9237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.045230][ T9237] [ 374.203952][ T9249] FAULT_INJECTION: forcing a failure. [ 374.203952][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 374.208965][ T9249] CPU: 2 UID: 0 PID: 9249 Comm: syz.5.1812 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 374.212828][ T9249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 374.216879][ T9249] Call Trace: [ 374.217998][ T9249] [ 374.219003][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 374.220581][ T9249] should_fail_ex+0x497/0x5b0 [ 374.222226][ T9249] should_failslab+0xc2/0x120 [ 374.223845][ T9249] __kmalloc_noprof+0xcb/0x410 [ 374.225433][ T9249] ? hash_ip6_add+0x8c9/0x2900 [ 374.227088][ T9249] hash_ip6_add+0x1454/0x2900 [ 374.228746][ T9249] ? ip_set_get_extensions+0x331/0xbf0 [ 374.230632][ T9249] ? __pfx_hash_ip6_add+0x10/0x10 [ 374.232865][ T9249] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 374.235143][ T9249] hash_ip6_uadt+0x4be/0x680 [ 374.236733][ T9249] ? __pfx_hash_ip6_add+0x10/0x10 [ 374.238439][ T9249] ? __pfx_hash_ip6_uadt+0x10/0x10 [ 374.240264][ T9249] ? __pfx_lock_release+0x10/0x10 [ 374.241984][ T9249] ? __pfx___lock_acquire+0x10/0x10 [ 374.243771][ T9249] call_ad.constprop.0+0x16c/0x910 [ 374.245525][ T9249] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 374.247401][ T9249] ? __pfx___nla_validate_parse+0x10/0x10 [ 374.249472][ T9249] ? net_generic+0xea/0x2a0 [ 374.251063][ T9249] ? __nla_parse+0x40/0x60 [ 374.252629][ T9249] ip_set_ad.constprop.0.isra.0+0x67b/0x880 [ 374.254645][ T9249] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 374.256820][ T9249] ? nfnetlink_rcv_msg+0x8a8/0x11e0 [ 374.258630][ T9249] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 374.260621][ T9249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.262574][ T9249] ? find_held_lock+0x2d/0x110 [ 374.264234][ T9249] netlink_rcv_skb+0x165/0x410 [ 374.265754][ T9249] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 374.267603][ T9249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.269434][ T9249] ? __pfx_aa_get_newest_label+0x10/0x10 [ 374.271884][ T9249] ? bpf_lsm_capable+0x9/0x10 [ 374.273645][ T9249] ? security_capable+0x7e/0x260 [ 374.275318][ T9249] ? ns_capable+0xd7/0x110 [ 374.276707][ T9249] nfnetlink_rcv+0x1b4/0x430 [ 374.278297][ T9249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 374.280240][ T9249] ? netlink_deliver_tap+0x1ae/0xcf0 [ 374.282075][ T9249] netlink_unicast+0x53c/0x7f0 [ 374.283721][ T9249] ? __pfx_netlink_unicast+0x10/0x10 [ 374.285529][ T9249] ? __phys_addr_symbol+0x30/0x80 [ 374.287208][ T9249] ? __check_object_size+0x488/0x710 [ 374.289028][ T9249] netlink_sendmsg+0x8b8/0xd70 [ 374.290683][ T9249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.292508][ T9249] ____sys_sendmsg+0x9ae/0xb40 [ 374.294351][ T9249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.296169][ T9249] ? get_compat_msghdr+0x11b/0x170 [ 374.297897][ T9249] ? __pfx___lock_acquire+0x10/0x10 [ 374.299713][ T9249] ___sys_sendmsg+0x135/0x1e0 [ 374.301284][ T9249] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.303009][ T9249] ? lock_acquire+0x2f/0xb0 [ 374.304650][ T9249] ? __fget_files+0x40/0x3f0 [ 374.306244][ T9249] ? fdget+0x176/0x210 [ 374.307629][ T9249] __sys_sendmsg+0x117/0x1f0 [ 374.309214][ T9249] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.311450][ T9249] ? __fget_files+0x244/0x3f0 [ 374.313296][ T9249] __do_fast_syscall_32+0x73/0x120 [ 374.314982][ T9249] do_fast_syscall_32+0x32/0x80 [ 374.316646][ T9249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.319168][ T9249] RIP: 0023:0xf746e579 [ 374.320647][ T9249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 374.327510][ T9249] RSP: 002b:00000000f575655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 374.330302][ T9249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200002c0 [ 374.333099][ T9249] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.335828][ T9249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.338528][ T9249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 374.341208][ T9249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.343962][ T9249] [ 374.465192][ T9358] 9pnet_fd: Insufficient options for proto=fd [ 374.679798][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.700199][ T30] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 374.714463][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1824'. [ 374.719780][ T9478] program syz.1.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.839023][ T9555] xt_NFQUEUE: number of total queues is 0 [ 374.876979][ T30] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.879079][ T30] usb 10-1: config 0 has no interface number 0 [ 374.880990][ T30] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.886025][ T30] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 374.889493][ T30] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 374.892761][ T30] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 374.896079][ T30] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.899581][ T30] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.901978][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.911454][ T30] usb 10-1: config 0 descriptor?? [ 374.915567][ T9354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.922209][ T30] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 375.208964][ T30] usb 10-1: USB disconnect, device number 5 [ 375.492561][ T9354] ld_usb_open - error, can't find device for minor 0 [ 375.549699][ T1404] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.551583][ T1404] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.604530][ T30] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 375.783638][T10004] FAULT_INJECTION: forcing a failure. [ 375.783638][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 375.787729][T10004] CPU: 1 UID: 0 PID: 10004 Comm: syz.3.1830 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 375.790523][T10004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.793455][T10004] Call Trace: [ 375.794396][T10004] [ 375.795194][T10004] dump_stack_lvl+0x16c/0x1f0 [ 375.796493][T10004] should_fail_ex+0x497/0x5b0 [ 375.797819][T10004] should_failslab+0xc2/0x120 [ 375.799132][T10004] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 375.800596][T10004] ? skb_clone+0x190/0x3f0 [ 375.801940][T10004] skb_clone+0x190/0x3f0 [ 375.803249][T10004] packet_rcv+0x60d/0x15a0 [ 375.804517][T10004] ? __pfx_packet_rcv+0x10/0x10 [ 375.804751][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 375.805823][T10004] dev_queue_xmit_nit+0x373/0xba0 [ 375.805847][T10004] dev_hard_start_xmit+0x56/0x790 [ 375.805863][T10004] ? __dev_queue_xmit+0x252/0x4350 [ 375.805880][T10004] __dev_queue_xmit+0x7c7/0x4350 [ 375.805902][T10004] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.805933][T10004] ? rcu_is_watching+0x12/0xc0 [ 375.805947][T10004] ? __copy_skb_header+0x2e8/0x5b0 [ 375.805958][T10004] ? __skb_clone+0x570/0x760 [ 375.805973][T10004] netlink_deliver_tap+0xa8a/0xcf0 [ 375.821323][T10004] netlink_unicast+0x5e1/0x7f0 [ 375.822556][T10004] ? __pfx_netlink_unicast+0x10/0x10 [ 375.823931][T10004] ? __phys_addr_symbol+0x30/0x80 [ 375.825512][T10004] ? __check_object_size+0x488/0x710 [ 375.827009][T10004] netlink_sendmsg+0x8b8/0xd70 [ 375.828384][T10004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.830010][T10004] ____sys_sendmsg+0x9ae/0xb40 [ 375.831310][T10004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.832712][T10004] ? get_compat_msghdr+0x11b/0x170 [ 375.834057][T10004] ? __pfx___lock_acquire+0x10/0x10 [ 375.835386][T10004] ___sys_sendmsg+0x135/0x1e0 [ 375.836624][T10004] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.837958][T10004] ? lock_acquire+0x2f/0xb0 [ 375.839098][T10004] ? __fget_files+0x40/0x3f0 [ 375.840435][T10004] ? fdget+0x176/0x210 [ 375.841696][T10004] __sys_sendmsg+0x117/0x1f0 [ 375.843000][T10004] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.844370][T10004] ? __fget_files+0x244/0x3f0 [ 375.845560][T10004] __do_fast_syscall_32+0x73/0x120 [ 375.846890][T10004] do_fast_syscall_32+0x32/0x80 [ 375.848255][T10004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.850206][T10004] RIP: 0023:0xf7f17579 [ 375.851371][T10004] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 375.856605][T10004] RSP: 002b:00000000f569655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 375.858684][T10004] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000020000140 [ 375.860802][T10004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.862929][T10004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.864933][T10004] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 375.866904][T10004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.868890][T10004] [ 375.876850][T10004] bond_slave_0: entered promiscuous mode [ 375.878294][T10004] bond_slave_1: entered promiscuous mode [ 375.879810][T10004] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 375.882016][T10004] macsec2: entered promiscuous mode [ 375.883434][T10004] bond0: entered promiscuous mode [ 375.886074][T10004] macsec2: entered allmulticast mode [ 375.887565][T10004] bond0: entered allmulticast mode [ 375.889271][T10004] bond_slave_0: entered allmulticast mode [ 375.891256][T10004] bond_slave_1: entered allmulticast mode [ 375.892759][T10004] syz_tun: entered allmulticast mode [ 375.900356][T10004] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 375.905706][T10004] bond0: left allmulticast mode [ 375.907216][T10004] bond_slave_0: left allmulticast mode [ 375.908972][T10004] bond_slave_1: left allmulticast mode [ 375.910695][T10004] syz_tun: left allmulticast mode [ 375.912400][T10004] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 375.914406][T10004] bond0: left promiscuous mode [ 375.916748][T10004] bond_slave_0: left promiscuous mode [ 375.918588][T10004] bond_slave_1: left promiscuous mode [ 375.920189][T10004] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 376.043320][ T35] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 376.124464][T10015] xt_NFQUEUE: number of total queues is 0 [ 376.126828][T10010] ptrace attach of ""[10017] was attempted by "/syz-executor exec"[10010] [ 376.130169][T10013] program syz.3.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.200154][ T35] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.202158][ T35] usb 6-1: config 0 has no interface number 0 [ 376.203637][ T35] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.206758][ T35] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 376.209670][ T35] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 376.212320][ T35] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 376.215764][ T35] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.220474][ T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.223477][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.236246][ T35] usb 6-1: config 0 descriptor?? [ 376.236811][T10006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.245119][ T35] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.292979][T10023] xt_NFQUEUE: number of total queues is 0 [ 376.618729][ T6013] usb 6-1: USB disconnect, device number 59 [ 376.644962][ T6013] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 377.164325][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 377.205023][ T6013] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 377.333168][T10430] program syz.5.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.349825][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.353383][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 377.356283][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.359368][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.362824][ T6013] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.365231][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.372370][ T6013] usb 6-1: config 0 descriptor?? [ 377.607099][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 377.660672][T10458] usb 2-1: USB disconnect, device number 3 [ 377.753241][T10455] team0 (unregistering): Port device team_slave_0 removed [ 377.760918][T10455] team0 (unregistering): Port device team_slave_1 removed [ 377.772911][T10236] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.1843'. [ 377.775638][T10236] netlink: 'syz.1.1843': attribute type 3 has an invalid length. [ 377.802974][T10560] xt_NFQUEUE: number of total queues is 0 [ 377.975003][ T6013] usbhid 6-1:0.0: can't add hid device: -71 [ 377.977175][ T6013] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 377.981459][ T6013] usb 6-1: USB disconnect, device number 60 [ 378.086567][ T5964] block nbd4: Receive control failed (result -32) [ 378.094809][T10449] block nbd4: shutting down sockets [ 378.709091][T10775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1855'. [ 378.892430][T10885] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 379.053427][ T8] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 379.197560][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.201814][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.205947][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.208423][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.214421][T10779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.218587][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.410067][T10779] program syz.1.1857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.417369][ T9] usb 6-1: USB disconnect, device number 61 [ 379.443787][ T35] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 379.600003][ T35] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 379.602121][ T35] usb 10-1: config 0 has no interface number 0 [ 379.603726][ T35] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.606860][ T35] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 379.609795][ T35] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 379.612591][ T35] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 632, setting to 64 [ 379.617143][ T35] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.620444][ T35] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 379.622711][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.625803][ T35] usb 10-1: config 0 descriptor?? [ 379.628025][T10905] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 379.631716][ T35] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 379.903413][ T6013] usb 10-1: USB disconnect, device number 6 [ 379.905048][ C2] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 379.906718][T10905] ldusb 10-1:0.55: Couldn't submit interrupt_out_urb -19 [ 379.911192][ T6013] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 379.915554][T10904] delete_channel: no stack [ 380.559227][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1865'. [ 380.844274][ T35] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 381.006908][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.009652][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.013202][ T35] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.018432][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 381.021249][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.023251][ T35] usb 6-1: Product: syz [ 381.024348][ T35] usb 6-1: Manufacturer: syz [ 381.025926][ T35] usb 6-1: SerialNumber: syz [ 381.100994][ T30] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 381.230397][ T35] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 381.258011][ T30] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.261878][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.265641][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 381.268850][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.273346][ T30] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.276219][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.280208][ T30] usb 9-1: config 0 descriptor?? [ 381.421014][ T6012] usb 6-1: USB disconnect, device number 62 [ 381.612328][T11056] usblp0: removed [ 381.676278][T11059] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1867'. [ 381.678928][T11059] netlink: 'syz.4.1867': attribute type 3 has an invalid length. [ 381.685260][ T30] usbhid 9-1:0.0: can't add hid device: -71 [ 381.687435][ T30] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 381.690894][ T30] usb 9-1: USB disconnect, device number 5 [ 381.771244][T10888] delete_channel: no stack [ 381.945137][T11064] cgroup: fork rejected by pids controller in /syz5 [ 386.321452][ T6013] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 386.449481][ T30] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 386.453278][ T30] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 386.456772][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 386.460329][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 386.463174][ T30] Workqueue: events swap_reclaim_work [ 386.464614][ T30] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 386.466453][ T30] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 386.471682][ T30] RSP: 0018:ffffc9000057fc30 EFLAGS: 00010202 [ 386.473338][ T30] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880451ff078 [ 386.475426][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 386.477428][ T30] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 386.479524][ T30] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 386.481904][ T30] R13: ffffffffffffffb8 R14: ffff8880451ff000 R15: ffffc90000e36000 [ 386.484341][ T30] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 386.486742][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.488706][ T30] CR2: 0000000056a7e4c0 CR3: 0000000058c96000 CR4: 0000000000352ef0 [ 386.491000][ T30] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.493094][ T30] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.495224][ T30] Call Trace: [ 386.496127][ T30] [ 386.496883][ T30] ? die_addr+0x3b/0xa0 [ 386.497952][ T30] ? exc_general_protection+0x155/0x230 [ 386.499671][ T30] ? asm_exc_general_protection+0x26/0x30 [ 386.501539][ T30] ? __list_del_entry_valid_or_report+0x20/0x1c0 [ 386.503631][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.505229][ T30] swap_reclaim_full_clusters+0x109/0x460 [ 386.507020][ T30] swap_reclaim_work+0x2e/0x40 [ 386.508390][ T30] process_one_work+0x958/0x1b30 [ 386.509678][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 386.511283][ T30] ? __pfx_process_one_work+0x10/0x10 [ 386.512749][ T30] ? assign_work+0x1a0/0x250 [ 386.513990][ T30] worker_thread+0x6c8/0xf00 [ 386.515228][ T30] ? __pfx_worker_thread+0x10/0x10 [ 386.516597][ T30] kthread+0x2c1/0x3a0 [ 386.517686][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.519059][ T30] ? __pfx_kthread+0x10/0x10 [ 386.520305][ T30] ret_from_fork+0x45/0x80 [ 386.521491][ T30] ? __pfx_kthread+0x10/0x10 [ 386.522842][ T30] ret_from_fork_asm+0x1a/0x30 [ 386.524369][ T30] [ 386.525363][ T30] Modules linked in: [ 386.526569][ T30] ---[ end trace 0000000000000000 ]--- [ 386.527955][ T30] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 386.529749][ T30] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 386.534875][ T30] RSP: 0018:ffffc9000057fc30 EFLAGS: 00010202 [ 386.536494][ T30] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880451ff078 [ 386.538633][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 386.541143][ T30] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 386.543162][ T30] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 386.545148][ T30] R13: ffffffffffffffb8 R14: ffff8880451ff000 R15: ffffc90000e36000 [ 386.547248][ T30] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 386.549550][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.551386][ T30] CR2: 0000000056a7e4c0 CR3: 0000000058c96000 CR4: 0000000000352ef0 [ 386.553768][ T30] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.555858][ T30] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.557975][ T30] Kernel panic - not syncing: Fatal exception [ 386.560075][ T30] Kernel Offset: disabled [ 386.561224][ T30] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:54:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff203a4b7 RDX=ffff88806941a440 RSI=ffffffff813c4884 RDI=ffffffff813c4871 RBP=ffff88802b43fdd4 RSP=ffffc90007cbde90 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cf2cf R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffff88802b43fdc0 R15=0000000000040000 RIP=ffffffff813c4886 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000200 CR3=0000000059062000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85046415 RDI=ffffffff9a644320 RBP=ffffffff9a6442e0 RSP=ffffc9000057f610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000005d R14=ffffffff850463b0 R15=0000000000000000 RIP=ffffffff8504643f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056a7e4c0 CR3=0000000058c96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004d000000000 0000000b00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff203a4b7 RDX=ffff888000754880 RSI=ffffffff813c4884 RDI=ffffffff813c4871 RBP=ffff8880451ff288 RSP=ffffc900066b77f0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cf2cf R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fdc0 R15=ffffed1008a3fe51 RIP=ffffffff813c4886 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdafd8e8280 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561ecb28f6c0 CR3=0000000000842000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=8200002022100080 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff10f79e40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e0a99083c233e0c 73732568f0e73779 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 00000000302e7465 676461672d776172 2f73726576697264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574616470756372 0000561ee27ae541 0000000000000041 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f1 0000561b83949e7e 0000003165730000 307761726469682f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea00013d7bc0 RCX=ffffffff81c12b4d RDX=fffff9400027af79 RSI=0000000000000008 RDI=ffffea00013d7bc0 RBP=ffffea00013d7bc0 RSP=ffffc90007d0f208 R8 =0000000000000001 R9 =fffff9400027af78 R10=ffffea00013d7bc7 R11=0000000000012041 R12=0000000000b5d000 R13=ffff88804ba54958 R14=0000000000001000 R15=ffff88804ba549a8 RIP=ffffffff81edf8d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7369474 CR3=0000000068e3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e9531c958199afb c66704fc197b7017 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4616834f4ec2daf 320d1b72be60823b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 27d1c821303e0220 81433b883465f4aa ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8639d3f34932fa1 64f542d34397f3fa ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79c4a9dc3479be9e e3441312f3aa3d96 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a68a60fd03abcd50 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 18fc753307ea7591 816e7e0956a7237c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5156e3200000000 596e1a587ef3acb6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37ab8be848961086 2a8430680f08a658 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4796ad988da7f5 80fa65e6983e3b1f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000