last executing test programs: 2m18.281049626s ago: executing program 2 (id=22): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$dir(0xffffff9c, &(0x7f0000000180)='./file1\x00', 0x10000, 0x88) fchmodat(r4, &(0x7f0000000200)='./file1\x00', 0x20) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') 2m17.210603135s ago: executing program 2 (id=29): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x3, 0x34324152, 0x5, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xff}, {}, {}, {0x0, 0x4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000740)=""/162, 0xa2}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_setup(0x1fc3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r4, 0x0, 0x0) syz_io_uring_setup(0x29c5, &(0x7f0000000380)={0x0, 0x5fa, 0x100, 0x3, 0x29d}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000100), 0x12) listen(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008000000070e49d23918000000000000ae3b99c71036f73a783e86090d0e19156719661c9d877feb83e41a5debe0979deb6f95426c28bac01e37cba6b7dbbf74ca7775f389d134f11b949458f827bdb2291f04bf38514ccab142f4", @ANYRES32, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m16.3266628s ago: executing program 2 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0x21, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x48, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m15.299035737s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount$afs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="6175746f63656c6c2c666c6f636b3d7374726963742c64796e2c666c6f636b3d6c6f63616c2c666c6f636b3d6c6f63616c2c666c6f636b3d6f70656e6166732c666c6f7ff43d6f70656e6166732c66756e633d4d0200554c455f434845434b2c736d61636b6673726f6f743d242c61707072616973652c00"]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006bc9e7d800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, '\x00', 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x40}, {0x10000}, {}, {0x5}, 0x0, 0x5}}}}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') r3 = io_uring_setup(0x71db, &(0x7f0000000380)={0x0, 0xfffffffb, 0x1000, 0x0, 0x6ffffffe}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x290, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x94, 0x3, 0x0, 0x6, 0x1, 0x5, 0x10, 0x2}}, {0x8, 0x2, [0x5, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x2, 0x8c9, 0x2, 0x2, 0x0, 0x9}}, {0x16, 0x2, [0x4, 0x34b, 0x0, 0x5, 0x8, 0x0, 0x10, 0xfffa, 0x4]}}, {{0x1c, 0x1, {0x40, 0x2, 0x6, 0xe, 0x2, 0x800, 0x6, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x9, 0x0, 0x6, 0x8, 0x0, 0xd4, 0xfff, 0x1}}, {0x6, 0x2, [0x200]}}, {{0x1c, 0x1, {0xc, 0x2, 0x100, 0x6, 0x1, 0x1, 0xd, 0x6}}, {0x10, 0x2, [0xfffe, 0x1, 0x7fff, 0x8, 0x1, 0x3]}}, {{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x1, 0xb9d, 0x10000, 0x8}}, {0x14, 0x2, [0x0, 0x1ff, 0xc, 0x6586, 0x7, 0x7f6, 0x0, 0x9]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8, 0x7, 0x0, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x1, 0xc, 0xe33, 0xfffffffc, 0x0, 0x7, 0x6, 0x4}}, {0xc, 0x2, [0x6, 0x3, 0x3, 0x3]}}, {{0x1c, 0x1, {0x9e, 0xfe, 0x6, 0x96, 0x0, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0xdb, 0x401, 0xfff8]}}, {{0x1c, 0x1, {0x1, 0x8, 0x8, 0x2, 0x2, 0x401, 0x0, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x6, 0x0, 0x1, 0x0, 0xb, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0x7, 0x6, 0x4, 0x9, 0x1]}}, {{0x1c, 0x1, {0x9, 0xf4, 0x2, 0x8, 0x1, 0x10001, 0x9d, 0x7}}, {0x12, 0x2, [0xc41, 0x7, 0xd102, 0x8, 0x100, 0xc8f, 0x8]}}, {{0x1c, 0x1, {0xdb, 0x4, 0xdf, 0x1, 0x0, 0x6, 0x101, 0x7}}, {0x12, 0x2, [0x5, 0xfc00, 0x6, 0xc7, 0xfffd, 0x160, 0x7ff]}}, {{0x1c, 0x1, {0xfb, 0x3, 0x81, 0x7, 0x1, 0x3ff, 0x2, 0x2}}, {0x8, 0x2, [0x5, 0x800]}}]}]}, 0x290}}, 0x0) r8 = dup(r4) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000005c76d4000095000000000000005c9a4debc6b95dad89e079b4076899cdc78075b8bfd62cb927ecd21eb6ec8c903ca8b7e5a047071b15a0b27068b8547b481073abdba33514e29b4b625b1e422b2d24cb9188a01c187d7744b704845e458dfdab7d8e87dfff0f926ff2dd5d0645d908c5973391c300dac0dc96637cf1138c2e4804ea4eccdcd783c34fd09f5c3e65385a8d7501d0aba29e1abbdffde181b10cb85b794f54dff56c505691659bc8d8815ef834cf06b7bc69ac0aac871347ba328f7fd16a265e3411cb01de006e"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r9}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x400600, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000001500)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2d0, 0x1e8, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff000000, 0x0, 0x0, {}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:iptables_unit_file_t:s0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x5, 0x0, 0x0, 0x0, 0xfffc, 0x0, 'bridge0\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0xa}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x42b) r11 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r11, 0x2, 0x0) 2m14.700704119s ago: executing program 2 (id=41): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x600000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='P'}, {&(0x7f0000000080)="6356c5cf1b3419574ea180a6d8edd7d1a07d86fc8085eed3d9d5"}]}}], 0x400020d, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000300)={0xd, 0x21, 0x3, 0x19, 0x8, 0x8, 0x5, 0x4f, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) bind$inet6(0xffffffffffffffff, 0x0, 0x37) mkdir(0x0, 0x20) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 2m14.401087273s ago: executing program 2 (id=49): socket(0x23, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffff9c, &(0x7f00000004c0), 0x301883, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000500)) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000140)}}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x3f00, 0x0, 0x0) 2m14.353558725s ago: executing program 32 (id=49): socket(0x23, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffff9c, &(0x7f00000004c0), 0x301883, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000500)) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000140)}}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x3f00, 0x0, 0x0) 1m57.440298927s ago: executing program 0 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x401, 0x8000000, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}}, 0x0) 1m57.4400276s ago: executing program 0 (id=160): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) close(0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x5b, 0x3, 0x3, 0x8, 0x2, [0x1ff, 0x5, 0x5, 0x9]}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002d0001fffffff30000f0ffff01"], 0x114}], 0x1}, 0x40) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1d9800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m56.554189447s ago: executing program 0 (id=172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x22, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x60}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7c1f, 0x6000, 0x10, 0x0, 0xfffffffffffffef0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) lseek(0xffffffffffffffff, 0xae7e, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4001, 0x2000047, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r7 = openat$audio1(0xffffffffffffff9c, 0x0, 0x60202, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) write$dsp(r7, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r9) ptrace$pokeuser(0x6, r9, 0x102, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000500)={{0x0, 0x0, 0x80}}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1m53.434585838s ago: executing program 0 (id=190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)='Os', 0x2, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000003c0)='Os', 0x2, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$inet(0x2, 0x6, 0x100) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) recvmmsg(r7, &(0x7f0000002380)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/240, 0xf0}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f00000015c0)=""/144, 0x90}, {&(0x7f0000001680)=""/192, 0xc0}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000001740)=""/139, 0x8b}, {&(0x7f0000001800)=""/200, 0xc8}, {&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/143, 0x8f}, {&(0x7f0000001a00)=""/244, 0xf4}], 0x9, &(0x7f0000001b80)=""/140, 0x8c}, 0x9c0}, {{&(0x7f0000001c40)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001d00)=""/127, 0x7f}, {0x0}, {&(0x7f0000001dc0)=""/190, 0xbe}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/215, 0xd7}, {&(0x7f0000002000)=""/187, 0xbb}, {&(0x7f00000020c0)=""/129, 0x81}, {&(0x7f0000002180)=""/207, 0xcf}], 0x8, &(0x7f0000002300)=""/119, 0x77}, 0x7f}], 0x3, 0x100, &(0x7f0000002400)={0x77359400}) (async) recvmmsg(r7, &(0x7f0000002380)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/240, 0xf0}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0x1000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f00000015c0)=""/144, 0x90}, {&(0x7f0000001680)=""/192, 0xc0}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000001740)=""/139, 0x8b}, {&(0x7f0000001800)=""/200, 0xc8}, {&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/143, 0x8f}, {&(0x7f0000001a00)=""/244, 0xf4}], 0x9, &(0x7f0000001b80)=""/140, 0x8c}, 0x9c0}, {{&(0x7f0000001c40)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001d00)=""/127, 0x7f}, {0x0}, {&(0x7f0000001dc0)=""/190, 0xbe}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/215, 0xd7}, {&(0x7f0000002000)=""/187, 0xbb}, {&(0x7f00000020c0)=""/129, 0x81}, {&(0x7f0000002180)=""/207, 0xcf}], 0x8, &(0x7f0000002300)=""/119, 0x77}, 0x7f}], 0x3, 0x100, &(0x7f0000002400)={0x77359400}) 1m53.251720319s ago: executing program 0 (id=193): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x401, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}, 0x1, 0xffff0000, 0x0, 0x8000}, 0x4000040) 1m53.213775814s ago: executing program 33 (id=193): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x401, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}, 0x1, 0xffff0000, 0x0, 0x8000}, 0x4000040) 17.076412138s ago: executing program 4 (id=913): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x3, 0x34324152, 0x5, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xff}, {}, {}, {0x0, 0x4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000740)=""/162, 0xa2}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_setup(0x1fc3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r4, 0x0, 0x0) syz_io_uring_setup(0x29c5, &(0x7f0000000380)={0x0, 0x5fa, 0x100, 0x3, 0x29d}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000100), 0x12) listen(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008000000070e49d23918000000000000ae3b99c71036f73a783e86090d0e19156719661c9d877feb83e41a5debe0979deb6f95426c28bac01e37cba6b7dbbf74ca7775f389d134f11b949458f827bdb2291f04bf38514ccab142f4", @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.297286303s ago: executing program 4 (id=916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x13, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x0, 0xb, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746befabc86455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000600)) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 15.387336064s ago: executing program 4 (id=923): socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xffff, 0x4) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 15.316685934s ago: executing program 4 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x39, 0x20000009, 0x5, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1801002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r4}}, 0x48) r5 = dup2(r3, r3) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r4, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x80]}, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x483f03, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000340)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r8, 0x4004743a, &(0x7f0000000300)) write$binfmt_aout(r7, &(0x7f0000000100)=ANY=[], 0xfce1) 15.238577654s ago: executing program 4 (id=925): getpid() (async) r0 = socket$inet6(0xa, 0x6, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2, 0x11) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) (async) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x1}, [{0x2, 0x5, r3}], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/239, 0xef}, {&(0x7f0000001140)=""/151, 0x97}, {&(0x7f0000001200)=""/86, 0x56}, {&(0x7f0000001280)=""/98, 0x62}], 0x5}, 0x3}, {{&(0x7f0000001340)=@qipcrtr, 0x80, &(0x7f0000001900)=[{&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/86, 0x56}, {&(0x7f0000001500)=""/172, 0xac}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/65, 0x41}, {&(0x7f0000001700)=""/75, 0x4b}, {&(0x7f00000019c0)=""/179, 0xb3}, {&(0x7f0000001840)=""/1, 0x1}, {&(0x7f0000001880)=""/74, 0x4a}], 0x9}, 0x7db}], 0x2, 0x40000000, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x5, 0xc8, "958d7a519d91c932"}}}}, 0xf) 15.10692237s ago: executing program 4 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={&(0x7f0000009d40)=@deltclass={0x434, 0x29, 0x0, 0x0, 0x0, {}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404}]}}]}, 0x434}}, 0x0) recvmmsg(r6, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000080)=""/44, 0x2c}], 0x2}}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r7, &(0x7f00000006c0)='./cgroup\x00', r7, &(0x7f00000003c0)='./mnt\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000d004"]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000940)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xffffffffffffff38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 15.068578862s ago: executing program 34 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={&(0x7f0000009d40)=@deltclass={0x434, 0x29, 0x0, 0x0, 0x0, {}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404}]}}]}, 0x434}}, 0x0) recvmmsg(r6, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000080)=""/44, 0x2c}], 0x2}}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r7, &(0x7f00000006c0)='./cgroup\x00', r7, &(0x7f00000003c0)='./mnt\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000d004"]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000940)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xffffffffffffff38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 2.138024928s ago: executing program 3 (id=1018): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000001, 0x13, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x9}, 0x50) 2.066919682s ago: executing program 6 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)={0x390, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x36c, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback={0x1000000}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.061970362s ago: executing program 3 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x3000}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}}, 0xc000) 2.061777101s ago: executing program 6 (id=1022): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x3, 0x34324152, 0x5, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xff}, {}, {}, {0x0, 0x4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000740)=""/162, 0xa2}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_setup(0x1fc3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r4, 0x0, 0x0) syz_io_uring_setup(0x29c5, &(0x7f0000000380)={0x0, 0x5fa, 0x100, 0x3, 0x29d}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000100), 0x12) listen(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008000000070e49d23918000000000000ae3b99c71036f73a783e86090d0e19156719661c9d877feb83e41a5debe0979deb6f95426c28bac01e37cba6b7dbbf74ca7775f389d134f11b949458f827bdb2291f04bf38514ccab142f4", @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.927199994s ago: executing program 3 (id=1023): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0xa041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = epoll_create(0x400) (async) r2 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000300)=""/246, 0xf6, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638877fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000040)={0x2, 0x0, 0x7ff, 0x2}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000074010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003400000003808000a40000000020c000b"], 0x2f4}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 1.451004689s ago: executing program 5 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x6000, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 1.331545301s ago: executing program 6 (id=1026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000002000000001000000000000", @ANYRES32], 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x4f21, &(0x7f0000000500)={0x0, 0xc541, 0x20, 0x0, 0x800000}, 0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x5, 0x0, 0x1, {0x0, 0x0, r2}}) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x54000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xcbe) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000060000000430000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000e30000e3ffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000001dd8a6f5ffffffffff009812026d00002f2ac41f0014c0c667f6c68d1b7f23c42f7e8a905f25ba4a72e31df3c3b12b1af5e845e1677d4fab8e7d836e6317c20408d62246a3414f0d4227389892cb490000000000a583aa903678cb4d33"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r7}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.327070965s ago: executing program 5 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x8, 0x149181) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000020000a1180002000000000000000e1208000f0100810401a8001600040001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000140)) (rerun: 64) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0xfffc0000}}, './file0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYRES8=r4, @ANYBLOB="0800060000000000080006030000000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="08157809000000d50f000600011700a0e45619b052a50800010000000000001100000000", @ANYBLOB="00008f6376988469f96c1ed0d9381c00a9a8b15df0a730026d63ffd074d6338cda76f50db962886c49c9c82b564d7dd770f35e", @ANYRES64, @ANYRESOCT=0x0, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4008811}, 0x40) r7 = dup(r4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c000900000000000000000095213fde8787f67e"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x3, "eaa508e1014154a6c5cd518443d4ff6d9f3adc6ea3bf76213fb661e04219fb7d", 0x20493859}) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r10 = syz_open_dev$usbfs(&(0x7f0000000440), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x5f, 0x0, 0x0}) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x2, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (rerun: 64) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r11, 0x84, 0x1, &(0x7f0000001200)=""/4113, &(0x7f0000000000)=0x1011) (async, rerun: 64) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) (rerun: 64) 1.218756204s ago: executing program 1 (id=1028): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x140, 0x148, 0x94, 0x140, 0x94, 0x314, 0x314, 0x314, 0x314, 0x314, 0x6, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x1c}}}, {{@uncond, 0x0, 0x70, 0xac, 0x0, {0x100000000000000}}, @inet=@TPROXY1={0x3c}}, {{@uncond, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x404) 1.204581201s ago: executing program 1 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], 0x21c0}}, 0x0) 1.204320349s ago: executing program 1 (id=1030): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000001c0)='contention_end\x00'}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix_mp={0x8, 0x0, 0x32314d4e, 0x6, 0xb, [{0x7, 0x3}, {0xffffff1c, 0x40}, {0x5, 0xe}, {0xf2d, 0xfffffeff}, {0xa, 0x80000001}, {0x4, 0x7}, {0x6, 0x3}, {0xc, 0x4}], 0x6, 0x3, 0x7, 0x1, 0x6}}, 0x101}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x140, 0xa4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}}, 0x140) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x800809, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="e72543bc39d8581a933cbd2846623438da3054af732bbbe466c0fe6c4f45e1331605e6a86a8b38b32733a6b5274ec157a545f60711d0e9a807f3c4044437ec37f0a279a916973799f08b61d50715d770074bd4b4b13c685ab86cee1301d941303b0e09073b7e5c42baea815f95d9fe18099a6a0300000000000000d132dc", @ANYRESHEX=r2, @ANYRES16=r0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES64=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_connmark={0xa0, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x6f, 0x6, "e285a3927ffeb3233e48323fba9adaf5d45386f5a1354c565a2e896ab2392ef22c9dae91c84b6e4fb74f07008ebd3d5cc45767e7c319b5bbc822f8f815e32ba36a4b4d68fe847fc812111cf700000000000000000000000000000099a108509ace70758dfce9454e3cfbec"}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x62000868, 0xffff}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x5fe, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff}}}}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000008c0)=""/164, 0x98}], 0x200000000000024d, &(0x7f0000000240)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x62, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$kcm(0x10, 0x2, 0x10) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) io_uring_setup(0x7bd4, &(0x7f0000000080)={0x0, 0xffffffff, 0x1000, 0x1, 0x12003}) socket(0x200000100000011, 0x3, 0x0) 1.118719582s ago: executing program 5 (id=1031): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_EMULATED_HOST(r2, 0x2283, &(0x7f0000000480)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0xa, 0x0, 0x0, 0x7ff, 0x1951, 0x71d5, 0x7ff, 0x60f4, 0x100, 0xb, 0x8, 0x404, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x4071, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x44, 0xfd7d, 0x80, 0x3b, 0x4, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80020000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000240)=ANY=[], 0x48) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2, 0x20010, r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x148}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) 828.798975ms ago: executing program 3 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000310001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) 658.667804ms ago: executing program 3 (id=1033): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x7007, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x9}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x7, "fd0abc17790000cc"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) syz_open_pts(r4, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x4, 0x0, 0xb0f, 0x7fffffffffffffff}, 0x0, &(0x7f00000002c0)={0x158cd599, 0x0, 0x6, 0x0, 0x800000200000, 0x0, 0x81}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, 0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 397.320048ms ago: executing program 3 (id=1034): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x3, 0x34324152, 0x5, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xff}, {}, {}, {0x0, 0x4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000740)=""/162, 0xa2}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_setup(0x1fc3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r4, 0x0, 0x0) syz_io_uring_setup(0x29c5, &(0x7f0000000380)={0x0, 0x5fa, 0x100, 0x3, 0x29d}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000100), 0x12) listen(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008000000070e49d23918000000000000ae3b99c71036f73a783e86090d0e19156719661c9d877feb83e41a5debe0979deb6f95426c28bac01e37cba6b7dbbf74ca7775f389d134f11b949458f827bdb2291f04bf38514ccab142f4", @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 269.060464ms ago: executing program 6 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="14007a57"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x700}, 0xc000) 262.905228ms ago: executing program 5 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x3, 0x2, 0x0, 0x2}}, 0xfffffffffffffe3c) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)={0xb0, 0xffffffda, 0x3, [{{0x4, 0x0, 0x8000000000000000, 0x4, 0x0, 0xff, {0x1, 0x6, 0x5, 0x9c, 0x81, 0x7e, 0x0, 0x7, 0x46e, 0x8000, 0x8c50, r3, r4, 0x4, 0x81}}, {0x0, 0x2, 0x1, 0x7, '\x00'}}]}, 0xb0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000003440)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r7, &(0x7f0000007700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r8, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000003c0)={0x7fff, 0x1, {0x0}, {0xee01}, 0x2, 0xffffff00}) r11 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000005480)={0x6, 0x0, {}, {0xffffffffffffffff}, 0x9, 0x60}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000003640)=ANY=[@ANYRES16=r2, @ANYRESHEX=r13, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303094514dde607c58b1303034303030302c757365725f69643d", @ANYRES16=r3, @ANYBLOB=',group_id=', @ANYRES64=r9, @ANYBLOB=',\x00']) read$FUSE(r13, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r14, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003dc0)=ANY=[@ANYBLOB="e803000000000000", @ANYRES64=0x0, @ANYBLOB="06000000000000000100000000000000070000000000fcff0900000000000000080000000000000004000000000ed0e2f4000000030000000000000001000080ffffffffef0c000000000000b90000000000000006000000000000000004000064000000fe00000000a00000", @ANYRESOCT=r13, @ANYRES32=0x0, @ANYBLOB="03000000000000000000000005000000000000000e000000000000000c00000004000000267b975b252f5e237d5b2d5d0000000004000000000000000200000000000000ffffffff000000000100000000000000b5f2ffff05000000000000000000000053ac0000000000000600000000000000343a0000000000000100008000000000080000000000000000010000030000001200000000c0000002000000", @ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="8de6464a30810cd9e197ee3b2d4adbaeb3b1116a308aa0859ff974e01b414c15547d94a09843eb14a9a4558b2202c80bd0df7cabf9a9a9a9dc3bdd36a71fd1283893bda80c763276df1b190cc8b1aaf66598545f5974f6e14dbef18e1465c7e16aafdab6aff630e84462ee77eeaa6cfe6ee366290b54eb60", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0400000001010000000000000600000000000000060000000000000004009d0008ac3c82000000245b2f2f00000800040000000000000000ffffffffffffff2e00000000000000be70b502ffffff7f0300000000000000090000000000000002000000000000001705000000000000018000000000000003000000000000000e000000010001000000008000a00000070000000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="01000000000000000000000005000000000000000000000001000000020000008a080000275b00000000000003000000000000000000000000000000ffffffffffffffff07000000000000000100008000100000010000000000000008000000000000000900000000000000b94c000000000000000001000000000005000000000000000300000004000000000040000060000005000000", @ANYRES32=r12, @ANYRES32=0xee00, @ANYBLOB="0700000000000000000000000100000000000000080000000000000009000000020000006664696e666f2f3300000000000000000300000000000000010000000000000008000000000000000700000000000000ff000000010000800100000000000000080000000000000006000000000000000200000000000000ffffffffffffffff0800000000000000020000000d0000000900000000600000bf2d0000", @ANYRES32=r14, @ANYRES32=0xee01, @ANYBLOB="070000000100000000000000040000000000000000000000000000000c0000000100000024373a5c7b21292c2f7d287b00000000"], 0x3e8) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x1000, &(0x7f0000002440)="5a38cc2680f7d2974f18f9e0201ed7d1e83bdcd8ecc520640758526ee062bac14cfc6ddb1f9b2ce4cd00a7f68c51fc2aa6fece9c76c072ced16ea017a5cc791edab7724cdb98766954aec6496b893c38154041ce1eb4b50810281062006839f82a8e4c3a292013f53e2ed019fe291d59d4b4b015dcbc9c8aeedf6edacc85e41133713babcfb78a1bc403ef053cff6da171ead54c8265b780943518c62dbcfa507e655343cef52c1426afc1ea023bb7c1e1b19cf7e6387eb641e74db6ed7309298a0a64c7c5721771daa85bef414b19a990e52e75d5d1f8d05a5e4fb4f7c6c72fe3245616ad32e3fe5c5f6211a296f7b8d85932321aa12ed7276182d2ccdc517917d85eb5e0e71c0ebb1d7445300a07ef5bdeedfc976ff3df3daf1fca82f2d495b4f800512431d42e42c1d8a398abf3a217e11994ef4f76b93640f0a8f5c3a7a70c84e57d00dc034b6f7a0b108b7493fa8486083b4823829912fbfec3bb082a1a6e48cb7e02706f5bebed89f9c3e374ef9f033b3ce431d06008d96eecbbf0a059d12b12cffbb5360ba6faf09ac00943af98c358e06b578776a34b35245b4be8986c8eaf8d8a4e6a4d55eeb70073213059024ba0b173c87ea07807c0ff00993f73f085fbeb3e574bc02642bd12aeb911d5f7779c1a57e80d30fc892eca156d9f38cf36618a0302e9fd16603f7dcd701af856c6a8b090be3d8d6424d6e9a7a8ec0f6d5c0b0c15ba6992dd3f78ad50c9f4766b8de18a92bb5d80878f5d20fb9e24f4126327fc7c986be2bb411dd4446b4cb2a145dc054ad0bdd87a84d41b6efb760a1c43150ed4091b723a6c1d55f66db886e905e05290aebbb3f713a52273fd62ee3250ad89321abad2b10bdb1ee292da13564a21b84322d577b33d5c695c7ea4c1ec0cdf5ad811159d61b0cffb3db71b4657a0c8888f6d8408794711966639281e670b0f3379e2c1db246a94a0ae9783fdd8ae5dcd423f567b756551b868ad1a5ae84e85c9d187bebccf4921bf281df31328a09bd7a7dae13aa0941d899893ca454732226bd2e204d133eb8e6bca820e1022a483e3efba837e322f266d39c8c1985eaa0a76a6bcd2633d250ed8255e69cdc00953f2449471ab7a2bf566215af27f80cf54a6fda92c3729e37f9f6b1447b5d940d8fcce7568c5410af6149b0b9b30d6f85b8a372ece1a37dc9576b266b34f644e752faf02e042d3bc3ee93248e7cf5e48bac139acbc76d06b59d62c7becbdcd204d44f926f9f782d1d65e11b6278e0b569c45e9175017388ce1f4154f21bca306a1ceaa4eca4cdd5258c5bee55f28ca3d1ec86493b8f38285579c0bfa34aca470465856fc7bd3d7232d4fa9d8b2f146a42c5f3eb19a4268fe5e149bdd9cb95d238b6afba1e8c6963d35dcb0c977c53f3a6f968ddee58834912fdd93db426208a0138ec35a59a81c6910eab6b21a7a9fd2320d325907d86ce9309a8e6a21c3e3fe5b7d3f255c4b6bfe240f7264d25a52bcf49149905597ed373da41f3330eaf61deaac8f0ad928c157ae950c0b4c17eb3bcadbffb7727f258087c385b504f1f67fa8ec4874bb323e0ec63d1f9e7520ab705a8bea1995be814c6a8fb226bf525c3fd24c7c972c44062e8b5475516fff20f41cc9dd6508b5399fa61bc95e69c9d4e85be715a7f0cb9c0ca74fef8c5a3dffb81475d8c5c005b9fba84f33766c492dab90ae762046b00728a7cb9a6de966fc51f9797310ce2cdfb2420fe283eb083c685c6f8214284e80c568ba93409f89c63d7e647b113e497666397393cb0fce6508c2ff0311e65fcf46279617bbfaa96d18d38d7084367d12b10abf8139b0f329fca0744c88d57d3dbda19947a8c4091269c82c04fde22b948cbd4d2c6578fafaed949c6c2bcaf52c0ac1d537e978771d1888bd8f93dc0c1450c278181b1b6fbc6e1fba968236a4af4cedc18c474d629c01f64fa81bd8f9574de7eb9c896b362afe629f205bc410e977b38ceaa5a54022b1e6cff5a9ce552786cef768bd064940f9f1ea3f462a49bf2fb44126658e40c130729215e4c128a832835ab6a2dbbe8b75e8c478b90894c2f7e4da981a46cb91e76cca5a3397171b60ffd446872ab6874a96f39f6d0851feb51053c60912f75ed8ad4687d32c61da62b97d09b4fc428f670b28b2455e1c9ccf2bf759f2f3d90c83d02793bc0569e426e232914b689f1ab4712a89eb570da13f00b397342bf697555cde26e7cb3e7b9cd23d77e462222d9ed4c3cdedc37869c9686d16a32bb8356a84217a52b3ff865be855b17a4c811830a64c17e83bf976253a782b3296ba41ee7c51139e5ba28edfe67c2bad0a3161f77f3574056643f77c5c59506fe3bef21e90ac3075f2b247271cd2bf1a909c5d0d5d76dacfd190acd51bdb02b5d4f2840ad5f0a2b1c550ca47f339f62b5784bf691cbb07d116ff366f70a2f82bc3872ee600d2dd0e778ae12c879701576da30a6434e96186789d46a7b57426b5864baba4137458a82241f0a4d0dab12fd2e6dfbabfc3ed779fc96e82b2a80964f2fcfaa4dce3ee734b1717441e5e6ec53b20859d314747da6c0d928cf17da07ab164f1132de43b581836c0e34fe237833c685ef3c4def34f364c03e356657d166d2860ab024fd50b373adea23dfc38267291c0f86a883361b18245aef2ff11ac24ba99ebbd16d04e664eaa80e4bcb2dc26bfb7e162c9dae91b986030792d24f0b71d9b292484325631fbd0b4ca88bfc969deac86bafdd7fa6a1fbd09fd53bc3792adb4e6caed09b6dce5e06f4e33f61e249061a3c46b73d956759cb7087f80448ef386b5b9c5d6e0ca6e4d1d5b0c2b6462ed869186212ea11e610294b9713da7979054f1342a9330db9f23149f1d312cffc6449d8f53ba82f2e171a4e5f73f3f6f9417524dd5a8afa047fbf1dc684be5227d71e368559df7080d0ffc1eb679b590cc08f2678b7bdef1886d91613804ca3139ae8807cc5144a916ecd03715ec497a9b400c3a4bb21fb011aebc61601a7a58fc8f6cd4b5953327d3090a9a96ef2c007e14911ffd4439ca96a928e1834a794c3e6e0a164702285c078eab347bf0ded2bd1413c088b1a5279634336df0118713e4bb6fedf171f6ce9ac53922e12bea829f4930a8354f8bf9f17ba55fafcd09b9aadd5b32e2d545b0520b1ae77a668cd8667fddf4d809ce7be4558333342c8b76efea05ea2dcb3d23c1eba977ac7b0f22550c173db696215466891e66788bcd43f49db2670ef964c088753eefa2d2061f83d1198e320480d2bc2864dedc2396c42efe340e54a6beafd6b76b93d5940e6d516472b645631481e93996931f0de7589b303ddbc912f37c3830230687ee8b15ddddc2fc5f7573869abbbdabe944bf305a5500d028c351e81e9461656bc40c7653a16c4fc329e04a3f172869095b2a4c851c46d966d7b1465d239ba581fefcde3d529bef52a01b5f1cebdd8e6bfe2c4631b1d8f2b3d7e7f22a7a8b99eb067faf7390bdbec2fda830ad3d02355b079e7c4397b3b8db97000d3f9f6da4705cf1c353969b7203313c945ad2efd69a568c4b8f48e1a7cec22567dc14ceb15825e4a811190e891d83fc38f476b5323775e5edcedcc71414b101401170877123b01e7af8db689f71c5d64aa1f7c472e5c0f79780279685010b5af56f7331e35f21b18a4be4b7f9e534712dfcf41278bf39f7fbf3e2ea93e4e78176837df307d1c7a577ad8c64686ef9ee93a04ccf4038b4ed525a7a6c16b6e26755f73fa1b5eb28b45347ada2d578d76399e40f71c9b050e78ae73609c1edba31ed5a3b35dee3beecf7557783d25445c939b4ee84d3aa4c30358dc6596840964a314ced22f37ab479c7873eeb24a4d388f8a1e7dbecb3655e7c3edf647354f5257b39b8d7982487071d90d4b6b1fc156297b76781f1efeaa830315eade3752c8d442205066bc678294a5fa3086a5874e9bb9c1082bec2df39c864800700fa135297fd2d98965e21f88436fe84fc639fabf2bbb6cf363f2c69c858530d4a75b7752855bbdf3ed872995d165e1c6f8fd0863f4bf2a66610eb97a17550cfe4c422583218a66cbef4ce5b4c080a1fa12a053be7ffa1e36b939e0a991560f37361d3ba7609df3c72133ed3712473099e1a37b5237e5c1d7dd882ede2517bbbf77c37863a5050a3465ebfbd38ee5aec4e24013b1a27f0cf55ecca17872892534ce448c20169d7f40cc135610d1350c2b8ddb41ce4ec09980b373ae4d31d870f14e8f5bba68c024c46b1c0dbb21dab2f289c344064926121e1f44fd38d39d7ad1d89ae5bbfba530c02efebc8e682cd4dff83908ba92f00947269f3be5bfc3895bc423f67143528a96dc5428ead59223fc9fda24300d40062f39dfc9e3b1beab6609363adea92295b3f9231efbd5ef4c6117bb24bd0fb4592799564bd29a6f705eb31b438635319a3ff8cf493a8bb84daec67c15b4ca9cdd8a334dabb2928cf1e34522b454c578613071cb11902747d006538371e5c6ece5122320ad55498baf90ba9752d2496b03f7d9e8a0c38c60975a02ced64832e62c9637f55bab11bd9edd136a578bf971af8a01d9142c5138dfac246d2dc624e39182dc0ae87bc888066799b450914238dbe8334eb8e2c80bf5d88eb4b8ea0b6fdccfc97994ac3e9266c1ce2cd219ba0c840049fe1462804bda9026353e70fad3f26b64e202156acdb368e95cec1d79652f30f26e3ba4599e75c398fca3808fb11155dd224becd8cbe9593bf231e7db8ac99877ba5192e0fd29bb375f5fb6551131a4a2a3b61211b0bd73b3d09f66dd602b059f1beaf1cccae625d601a6fd474d5d866dec5bdf829c284d4ffba58597a416336c52c5ff228adcb81d3fd1d010327bd5233867a715682c7751cae6074184d0c2994cc68ecb2b42a88db30b478173d165068362b818995ed3ac385207c299a21be31dba1c2bb3a7a17d6728d77607b868c3f272b572507005c960149e5418bab2b6b9420ac30911e81b050688770410b960621cee0a73cb7dabf7186def05a442abb55d2391dd675901e1ee7498c701e2dcfb7686fbb580a8e4b255551e7a24ce8ecb02d34a66e941442b2b2aee02f5e2a490bb6d8cda9fb452e4b71c40a4857c61eadd6db78bce631c80088b0dfda8d8dd64e325306bdef2461d1b5b5b85e150a35f221e3ef680b5bcbc8b2266e6a741a4cb019ab54616ba49dc72fa5fc1e429da86d72161a698c827743ba2d59dc35013263677bdcdf0d5fe581e7af2a5e6750832343d8661d934328677f5bb9aac6a18e51f50ee4b8a05b3c13940891ba3ca244fcdfe705638255fb1fd2c949013d5598ed05ca92da6ecc421cbee5fe7382a23d582aa0d5256d3994b45db7b493adde3541e8b867299dc8f7dd75fe37afbeaa20125a95e91cdde3c724f5b541babdc47f7606ed120aa7ac3696dd7f6385113bbf117c7cfcb51a50612787a38affcf0c97746cb6b40de82f594bc6d63c9fb39216d83837972b31e791bdec27c2d644ee606970bf02e4d9c9ffea9c28791fde2d6e1d773710b0c0537849e063f5df15642a5648cdbf26f7a0298da0497861799bfd07f6b393b19bfb6fd5cf2ab6117c14c1673affd4b0fc4ca595c173daf263b0a64c92774d77938355e0e739c245a8918be5455fe43d58d04c1ed5555d6903b85f3d6ec1bd46160076abe808dd69211a6702f408aa8a38820f54784c0bad370381f7df2d775d5c42ca601ec10cbbc6b629b7ca81239c9b89e8f4287604c0bc41ab9d2e9b6d91b178f9ab568d3c4e0027e04c94e32bd656a168e7a01e506278ef9f2139c227"}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003540)=ANY=[@ANYBLOB="1877e3cc3ddebd4ff386b7a1eca2c0512d07500cef3e61cf18a9bc03ec66dba422d0d6a1c3f69dac24c2b8927757809cc8a993d57b58d359c944d0884b932973d49a9fb79e67fb0bef20fcbaf4668dc64a64d2ddf0ad380af16297565aea87404b0e064c44e7b68e000000002a0150e52a81bd8ea8672c9fc4e944c97c72fdd4be55fb938ba0a3b34e3e23248e000000000000000000", @ANYRES16=r15, @ANYBLOB="020029bd7000020020000500000008000900020000000000060007000000000003000400000000002000fc0100000000000000000000000000000100120022000000"], 0x3c}}, 0x20) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r18, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r18, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$TIPC_CONN_TIMEOUT(r18, 0x10f, 0x82, &(0x7f00000000c0)=0x9, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r17, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}}, 0x0) 198.51297ms ago: executing program 1 (id=1037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1, 0x0, 0x20000}}], 0x1, 0x12021, 0x0) sendmsg$sock(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="9e71b93506a6a947b3", 0x9}], 0x1}, 0x4004001) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)={0xff8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0xff, 0x77}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xfd0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0xfcc, 0x4, 0x0, 0x1, [{0xfc8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd}, @NL80211_PKTPAT_PATTERN={0x99, 0x2, "171c2c48b15d502d8f6b26a77c306f056c6e4e2ee4a19dd89cd8fb0063d17bceba8137ee34726766882e148ecc98b9d69eb4980d7a839b85e1b0e430f4697b88a695b7b45a165dcce8fa341bda338019ef0d25e586b2d6c47964ce7e7fa91c1ffbdd292e58c58b47006f06b81051fb7b928b2cad76e4ecdf2ab62783629331e6e1d58ae93fe31be6855b8c133da4a80a11a1246ef2"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xf15, 0x2, "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"}]}]}]}]}, 0xff8}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 149.016726ms ago: executing program 6 (id=1038): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mq_open(&(0x7f0000000280)='rmdF\x17\x16\xbc\xec\xfd\x9f\x7f\x8f\x8bZ\xb0\x99\x1dC\x8b\xc7\xb2\x16A\xcbT\x99\xfbc\xe8\xa9\xa8ot\x174w\xc8\v&\xb9\xb0\xd6\'_4\x83%\xbckS\x15\xa8L\x10\xa5Q+\xa9\x8f5\xa9\x85u\xb7\xce\x91a\xc8O\xe5V9,\xaf\x1b\x11\xd1\x01\x86\xe9\xd9=_\xa6\b\r$\x06\xbe\xd2\xbb\x03\x90IV\xd1\x11\xd3\xa6\xcf\xd5\xd2\xe1O>@6u\x1a\xae\xbd\xad\x9aw\xf9\\\x97\x16-\xbf\xd2Gt\xc4\xd2?\xac\xc7\x15F%x\xb1\a^\xe0\xdc\xd8\x950xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 57.038006ms ago: executing program 6 (id=1041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x13, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x0, 0xb, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746befabc86455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000600)) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 55.565976ms ago: executing program 1 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030343030302929fa10659a5f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x9, 0x0, 0xffffffffffffff80, 0x1, 0x2, 0x9, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x5, 0x2000000004, 0x0, 0x2, 0x0, 0xff, 0x4, 0x0, 0x4, 0x1000, 0x7, r2, 0x0, 0x8, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) 0s ago: executing program 1 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x7, 0x1, 0xd, 0xe, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x6, 0x9, 0x2, 0x30, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, &(0x7f00000002c0), 0x40f00, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xc, 0x7fff, 0x162}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r2, 0x0, 0x800}, 0xffffffffffffff7b) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) flock(r7, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) close(0x3) kernel console output (not intermixed with test programs): could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.343009][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.347321][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.349617][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.365199][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.447521][ T6843] hsr_slave_0: entered promiscuous mode [ 71.450225][ T6843] hsr_slave_1: entered promiscuous mode [ 71.452874][ T6843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.455421][ T6843] Cannot create hsr debugfs directory [ 71.511092][ T63] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 71.542013][ T1229] hsr_slave_0: left promiscuous mode [ 71.544379][ T1229] hsr_slave_1: left promiscuous mode [ 71.546677][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.549832][ T1229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.680494][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 71.692156][ T63] usb 9-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 71.696192][ T63] usb 9-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 71.700037][ T63] usb 9-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 1023 [ 71.704134][ T63] usb 9-1: config 1 interface 0 has no altsetting 0 [ 71.711706][ T63] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.716986][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.720025][ T63] usb 9-1: Product: syz [ 71.722114][ T63] usb 9-1: Manufacturer: syz [ 71.724052][ T63] usb 9-1: SerialNumber: syz [ 71.732224][ T6854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.734775][ T6854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.942853][ T6854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.944888][ T6854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 71.955351][ T63] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 71.962252][ T63] usb 9-1: USB disconnect, device number 4 [ 72.169705][ T1229] team0 (unregistering): Port device team_slave_1 removed [ 72.252870][ T1229] team0 (unregistering): Port device team_slave_0 removed [ 72.507202][ T6885] 9pnet: Unknown protocol version 9p20\++} [ 72.576583][ T6877] kvm: apic: phys broadcast and lowest prio [ 72.762393][ T5946] Bluetooth: hci3: command tx timeout [ 72.892218][ T6843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.895783][ T6843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.909327][ T6843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.921669][ T6843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.050074][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.058144][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.062894][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.064779][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.076849][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078657][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.106099][ T6843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.109595][ T6843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.188893][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.284643][ T6928] mkiss: ax0: crc mode is auto. [ 73.326869][ T6843] veth0_vlan: entered promiscuous mode [ 73.337910][ T6843] veth1_vlan: entered promiscuous mode [ 73.363989][ T6843] veth0_macvtap: entered promiscuous mode [ 73.367215][ T6843] veth1_macvtap: entered promiscuous mode [ 73.373443][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.376444][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.378932][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.382171][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.385301][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.390433][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.393164][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.396298][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.398968][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.404300][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.412182][ T6936] overlayfs: unescaped trailing colons in lowerdir mount option. [ 73.412815][ T6932] mkiss: ax0: crc mode is auto. [ 73.414097][ T6843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.414116][ T6843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.419645][ T6843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.422422][ T6843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.449505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.457233][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.466526][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.468562][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.539626][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.194'. [ 73.758234][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.212'. [ 73.771622][ T39] audit: type=1804 audit(1733717230.845:3): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.212" name="/newroot/4/file0/bus" dev="hugetlbfs" ino=15363 res=1 errno=0 [ 74.004152][ T39] audit: type=1804 audit(1733717231.075:4): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.213" name="/newroot/5/file0/file0" dev="9p" ino=36701662 res=1 errno=0 [ 74.655077][ T7004] netlink: 'syz.1.220': attribute type 3 has an invalid length. [ 74.658801][ T7004] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 74.660077][ T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 74.839960][ T5946] Bluetooth: hci3: command tx timeout [ 74.842365][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 74.850938][ T56] usb 9-1: config 0 has no interfaces? [ 74.853103][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.855576][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.864992][ T56] usb 9-1: config 0 descriptor?? [ 75.072325][ T6003] usb 9-1: USB disconnect, device number 5 [ 75.413464][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 75.649826][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.810431][ T35] cfg80211: failed to load regulatory.db [ 75.815129][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 75.818310][ T8] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 75.821285][ T8] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 75.830377][ T39] audit: type=1326 audit(1733717232.895:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.834021][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.228'. [ 75.838193][ T39] audit: type=1326 audit(1733717232.895:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.842149][ T8] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 75.845776][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.849931][ T39] audit: type=1326 audit(1733717232.895:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.849950][ T39] audit: type=1326 audit(1733717232.895:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.849965][ T39] audit: type=1326 audit(1733717232.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.849979][ T39] audit: type=1326 audit(1733717232.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.849994][ T39] audit: type=1326 audit(1733717232.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.850008][ T39] audit: type=1326 audit(1733717232.895:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 75.971772][ T8] usb 8-1: Product: syz [ 75.976074][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 75.987175][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 76.126334][ T8] usb 8-1: Manufacturer: syz [ 76.127690][ T8] usb 8-1: SerialNumber: syz [ 76.137196][ T8] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 76.140196][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 76.167874][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.170702][ T8] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 76.173872][ T8] usb 8-1: media controller created [ 76.179544][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.186183][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 76.187706][ T8] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 76.189777][ T62] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 76.193953][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 76.197282][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 76.199095][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 76.219761][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 76.342445][ T62] usb 10-1: Using ep0 maxpacket: 16 [ 76.344672][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'. [ 76.345783][ T62] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.349516][ T62] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 76.349636][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 76.353782][ T8] dvb-usb: error while querying for an remote control event. [ 76.354435][ T6003] usb 8-1: USB disconnect, device number 3 [ 76.367195][ T62] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.369549][ T62] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.369856][ T6003] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 76.374615][ T62] usb 10-1: Product: Т [ 76.375674][ T62] usb 10-1: Manufacturer: п [ 76.376858][ T62] usb 10-1: SerialNumber: 盬䩤ꤪౚ薹薺 [ 76.591043][ T62] cdc_ncm 10-1:1.0: bind() failure [ 76.594964][ T62] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 76.597597][ T62] cdc_ncm 10-1:1.1: bind() failure [ 76.601961][ T62] usb 10-1: USB disconnect, device number 2 [ 76.903013][ T7058] Invalid logical block size (524287999) [ 76.919638][ T5946] Bluetooth: hci3: command tx timeout [ 77.086559][ T7069] use of bytesused == 0 is deprecated and will be removed in the future, [ 77.088960][ T7069] use the actual size instead. [ 77.160126][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 77.201489][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 77.369586][ T7085] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.512322][ T7083] vcan0: Master is either lo or non-ether device [ 77.733787][ T7081] 9pnet_fd: Insufficient options for proto=fd [ 77.869704][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 77.878970][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 78.099349][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 78.204707][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.225308][ T8] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 78.225735][ T7099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 78.230261][ T7099] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.233548][ T7099] vhci_hcd vhci_hcd.0: Device attached [ 78.235821][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.238657][ T8] usb 9-1: Product: syz [ 78.240277][ T8] usb 9-1: Manufacturer: syz [ 78.241948][ T8] usb 9-1: SerialNumber: syz [ 78.246882][ T8] usb 9-1: config 0 descriptor?? [ 78.250164][ T8] hub 9-1:0.0: bad descriptor, ignoring hub [ 78.252282][ T8] hub 9-1:0.0: probe with driver hub failed with error -5 [ 78.314242][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 78.422700][ T30] vhci_hcd: vhci_device speed not set [ 78.489263][ T30] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 78.600576][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input14 [ 78.641221][ T8] usb 9-1: USB disconnect, device number 6 [ 78.999251][ T5946] Bluetooth: hci3: command tx timeout [ 79.485880][ T7103] vhci_hcd: connection reset by peer [ 79.492072][ T11] vhci_hcd: stop threads [ 79.493484][ T11] vhci_hcd: release socket [ 79.496428][ T11] vhci_hcd: disconnect device [ 79.514797][ T7125] __nla_validate_parse: 1 callbacks suppressed [ 79.514817][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.5.256'. [ 81.227481][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 81.237493][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 81.478274][ T7185] netlink: 'syz.1.270': attribute type 2 has an invalid length. [ 81.491781][ T7185] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 81.494729][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 81.504996][ T7181] 9pnet_virtio: no channels available for device syz [ 81.514109][ T7181] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 81.516661][ T7181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.268'. [ 83.389802][ T7240] xt_NFQUEUE: number of total queues is 0 [ 83.649748][ T30] vhci_hcd: vhci_device speed not set [ 84.207484][ T7245] netlink: 'syz.1.285': attribute type 21 has an invalid length. [ 84.218391][ T7245] netlink: 144 bytes leftover after parsing attributes in process `syz.1.285'. [ 84.237684][ T7245] mkiss: ax0: crc mode is auto. [ 84.286916][ T35] kernel write not supported for file bpf-map (pid: 35 comm: kworker/3:0) [ 84.422645][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 84.463918][ T7260] fuse: Bad value for 'fd' [ 84.803041][ T7277] netlink: 'syz.1.292': attribute type 21 has an invalid length. [ 84.807425][ T7277] netlink: 144 bytes leftover after parsing attributes in process `syz.1.292'. [ 85.345170][ T7297] netlink: 176 bytes leftover after parsing attributes in process `syz.4.295'. [ 85.795819][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 86.058059][ T62] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.196656][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 86.209482][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 86.214961][ T62] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 86.217318][ T62] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 86.223198][ T62] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 86.224132][ T7324] trusted_key: syz.4.299 sent an empty control message without MSG_MORE. [ 86.225777][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.230871][ T62] usb 6-1: Product: syz [ 86.231976][ T62] usb 6-1: Manufacturer: syz [ 86.233225][ T62] usb 6-1: SerialNumber: syz [ 86.241557][ T62] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 86.244949][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 86.259053][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.263259][ T62] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 86.268715][ T62] usb 6-1: media controller created [ 86.275163][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.280594][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 86.282179][ T62] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 86.286325][ T62] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input15 [ 86.290404][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 86.292277][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 86.307901][ T62] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 86.449112][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 86.449334][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'. [ 86.451054][ T62] dvb-usb: error while querying for an remote control event. [ 86.458512][ T35] usb 6-1: USB disconnect, device number 9 [ 86.486461][ T35] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 86.534503][ T7342] [U] [ 86.535593][ T7342] [U] [ 86.536580][ T7342] [U] [ 86.537536][ T7342] [U] [ 86.539410][ T7342] [U] [ 86.540365][ T7342] [U] [ 86.541339][ T7342] [U] [ 86.542297][ T7342] [U] [ 86.543432][ T7342] [U] [ 86.544230][ T7342] [U] [ 86.544981][ T7342] [U] [ 86.545724][ T7342] [U] [ 86.546634][ T7342] [U] [ 86.547577][ T7342] [U] [ 86.548573][ T7342] [U] [ 86.549495][ T7342] [U] [ 86.550676][ T7342] [U] [ 86.551638][ T7342] [U] [ 86.552585][ T7342] [U] [ 86.553547][ T7342] [U] [ 86.554584][ T7342] [U] [ 86.555533][ T7342] [U] [ 86.556487][ T7342] [U] [ 86.557481][ T7342] [U] [ 86.558617][ T7342] [U] [ 86.559520][ T7342] [U] [ 86.560499][ T7342] [U] [ 86.561454][ T7342] [U] [ 86.562929][ T7342] [U] [ 86.563845][ T7342] [U] [ 86.564810][ T7342] [U] [ 86.565775][ T7342] [U] [ 86.567388][ T7342] [U] [ 86.568352][ T7342] [U] [ 86.569382][ T7342] [U] [ 86.570240][ T7342] [U] [ 86.571752][ T7342] [U] [ 86.572734][ T7342] [U] [ 86.573720][ T7342] [U] [ 86.574697][ T7342] [U] [ 86.575809][ T7342] [U] [ 86.576723][ T7342] [U] [ 86.577688][ T7342] [U] [ 86.578666][ T7342] [U] [ 86.579827][ T7342] [U] [ 86.580737][ T7342] [U] [ 86.581701][ T7342] [U] [ 86.582681][ T7342] [U] [ 86.583715][ T7342] [U] [ 86.584615][ T7342] [U] [ 86.585579][ T7342] [U] [ 86.586563][ T7342] [U] [ 86.586804][ T7338] netlink: 'syz.4.301': attribute type 27 has an invalid length. [ 86.587656][ T7342] [U] [ 86.590597][ T7342] [U] [ 86.591560][ T7342] [U] [ 86.592564][ T7342] [U] [ 86.593886][ T7342] [U] [ 86.594841][ T7342] [U] [ 86.595793][ T7342] [U] [ 86.596759][ T7342] [U] [ 86.598017][ T7342] [U] [ 86.599011][ T7342] [U] [ 86.599931][ T7342] [U] [ 86.600882][ T7342] [U] [ 86.601959][ T7342] [U] [ 86.602921][ T7342] [U] [ 86.603889][ T7342] [U] [ 86.604855][ T7342] [U] [ 86.605937][ T7342] [U] [ 86.606897][ T7342] [U] [ 86.607864][ T7342] [U] [ 86.608950][ T7342] [U] [ 86.610470][ T7342] [U] [ 86.611481][ T7342] [U] [ 86.612278][ T7342] [U] [ 86.613043][ T7342] [U] [ 86.614506][ T7342] [U] [ 86.615260][ T7342] [U] [ 86.615988][ T7342] [U] [ 86.616731][ T7342] [U] [ 86.617645][ T7342] [U] [ 86.618411][ T7342] [U] [ 86.619329][ T7342] [U] [ 86.620054][ T7342] [U] [ 86.620987][ T7342] [U] [ 86.621719][ T7342] [U] [ 86.622454][ T7342] [U] [ 86.623369][ T7342] [U] [ 86.625874][ T7342] [U] [ 86.626942][ T7342] [U] [ 86.627957][ T7342] [U] [ 86.628956][ T7342] [U] [ 86.632805][ T7342] [U] [ 86.633827][ T7342] [U] [ 86.634858][ T7342] [U] [ 86.635879][ T7342] [U] [ 86.637022][ T7342] [U] [ 86.638074][ T7342] [U] [ 86.639087][ T7342] [U] [ 86.640100][ T7342] [U] [ 86.643235][ T7342] [U] [ 86.644308][ T7342] [U] [ 86.645337][ T7342] [U] [ 86.646376][ T7342] [U] [ 86.651694][ T7342] [U] [ 86.652718][ T7342] [U] [ 86.653726][ T7342] [U] [ 86.654738][ T7342] [U] [ 86.655689][ T7342] [U] [ 86.656682][ T7342] [U] [ 86.657704][ T7342] [U] [ 86.658769][ T7342] [U] [ 86.662199][ T7342] [U] [ 86.663227][ T7342] [U] [ 86.664201][ T7342] [U] [ 86.664991][ T7342] [U] [ 86.666027][ T7342] [U] [ 86.666916][ T7342] [U] [ 86.667946][ T7342] [U] [ 86.668968][ T7342] [U] [ 86.670824][ T7342] [U] [ 86.671852][ T7342] [U] [ 86.672865][ T7342] [U] [ 86.673882][ T7342] [U] [ 86.675118][ T7342] [U] [ 86.675321][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.676109][ T7342] [U] [ 86.678759][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.679411][ T7342] [U] [ 86.683732][ T7342] [U] [ 86.777200][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.787162][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.838243][ T7338] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.841274][ T7338] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.844340][ T7338] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.846626][ T7338] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.946105][ T7362] Process accounting resumed [ 88.085599][ T7387] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.161697][ T7387] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.191480][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 88.250460][ T7387] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.379721][ T7387] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.511276][ T7387] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.515986][ T7387] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.522245][ T7387] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.527366][ T7387] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.811274][ T7403] overlay: filesystem on ./file0 is read-only [ 88.814878][ T7403] overlay: filesystem on ./file0 is read-only [ 89.943694][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 89.990089][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 90.164879][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 90.197803][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 90.245163][ T7441] hsr_slave_1 (unregistering): left promiscuous mode [ 90.357344][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 90.361490][ T35] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 90.364645][ T35] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 90.369920][ T35] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 90.372657][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.374758][ T35] usb 6-1: Product: syz [ 90.375838][ T35] usb 6-1: Manufacturer: syz [ 90.377028][ T35] usb 6-1: SerialNumber: syz [ 90.380891][ T35] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 90.383792][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 90.398069][ T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.401323][ T35] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 90.404304][ T35] usb 6-1: media controller created [ 90.409825][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.415087][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 90.416607][ T35] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 90.420710][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input16 [ 90.424623][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 90.426494][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 90.447188][ T35] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 90.577211][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 90.580974][ T35] dvb-usb: error while querying for an remote control event. [ 90.599609][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 90.602893][ T35] usb 6-1: USB disconnect, device number 10 [ 90.616759][ T35] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 91.633932][ T7477] unsupported nlmsg_type 40 [ 92.222810][ T7477] orangefs_mount: mount request failed with -4 [ 92.320109][ T7493] 9pnet_fd: Insufficient options for proto=fd [ 92.556831][ T6238] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.716968][ T6238] usb 6-1: Using ep0 maxpacket: 8 [ 92.745598][ T6238] usb 6-1: config 0 has no interfaces? [ 92.749805][ T6238] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 92.752683][ T6238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.754891][ T6238] usb 6-1: Product: syz [ 92.755920][ T6238] usb 6-1: Manufacturer: syz [ 92.757293][ T6238] usb 6-1: SerialNumber: syz [ 92.760481][ T6238] usb 6-1: config 0 descriptor?? [ 93.256213][ T62] usb 6-1: USB disconnect, device number 11 [ 93.822799][ T7517] bridge5: entered promiscuous mode [ 93.824328][ T7517] bridge5: entered allmulticast mode [ 93.827479][ T7517] team0: Device bridge5 is up. Set it down before adding it as a team port [ 93.884737][ T7520] binder: 7518:7520 ioctl c0306201 20000580 returned -14 [ 94.074205][ T7526] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 94.077128][ T7526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.208831][ T7531] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.210900][ T7531] overlayfs: failed to set xattr on upper [ 94.212380][ T7531] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.214147][ T7531] overlayfs: ...falling back to index=off. [ 94.215651][ T7531] overlayfs: ...falling back to uuid=null. [ 94.364429][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 94.364438][ T39] audit: type=1326 audit(1733717251.438:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.376790][ T39] audit: type=1326 audit(1733717251.448:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.384575][ T39] audit: type=1326 audit(1733717251.448:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.392448][ T39] audit: type=1326 audit(1733717251.448:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.400461][ T39] audit: type=1326 audit(1733717251.448:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.407867][ T39] audit: type=1326 audit(1733717251.448:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.413429][ T39] audit: type=1326 audit(1733717251.448:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.419075][ T39] audit: type=1326 audit(1733717251.448:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.424632][ T39] audit: type=1326 audit(1733717251.458:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.430250][ T39] audit: type=1326 audit(1733717251.458:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.5.363" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 94.624851][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.627434][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.630358][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.633307][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.705534][ T63] libceph: connect (1)[c::]:6789 error -101 [ 94.708478][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 94.713965][ T63] libceph: connect (1)[c::]:6789 error -101 [ 94.715682][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 94.786452][ T62] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.904775][ T7552] ceph: No mds server is up or the cluster is laggy [ 94.936379][ T62] usb 8-1: device descriptor read/64, error -71 [ 95.166377][ T62] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.306931][ T62] usb 8-1: device descriptor read/64, error -71 [ 95.417333][ T62] usb usb8-port1: attempt power cycle [ 95.423894][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.369'. [ 95.453926][ T7569] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.522819][ T7556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.524521][ T7556] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 95.592100][ T7581] 9pnet_fd: Insufficient options for proto=fd [ 95.756388][ T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 95.777606][ T62] usb 8-1: device descriptor read/8, error -71 [ 96.036393][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 96.059060][ T62] usb 8-1: device descriptor read/8, error -71 [ 96.176559][ T62] usb usb8-port1: unable to enumerate USB device [ 96.633315][ T7613] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.704731][ T7615] qnx6: unable to read the first superblock [ 97.091192][ T7614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.179869][ T7622] xt_connbytes: Forcing CT accounting to be enabled [ 97.181780][ T7622] Cannot find del_set index 0 as target [ 97.274619][ T7626] overlayfs: failed to resolve './file1': -2 [ 98.623201][ T7669] FAULT_INJECTION: forcing a failure. [ 98.623201][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 98.627693][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.3.400 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 98.631328][ T7669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.634953][ T7669] Call Trace: [ 98.636104][ T7669] [ 98.637125][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 98.638753][ T7669] should_fail_ex+0x497/0x5b0 [ 98.640374][ T7669] ? fs_reclaim_acquire+0xae/0x150 [ 98.642205][ T7669] should_failslab+0xc2/0x120 [ 98.643454][ T7669] __kmalloc_noprof+0xce/0x4f0 [ 98.644647][ T7669] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 98.646025][ T7669] ? tomoyo_realpath_from_path+0xbf/0x710 [ 98.647515][ T7669] tomoyo_realpath_from_path+0xbf/0x710 [ 98.648942][ T7669] ? tomoyo_path_number_perm+0x235/0x5b0 [ 98.650422][ T7669] tomoyo_path_number_perm+0x248/0x5b0 [ 98.651833][ T7669] ? tomoyo_path_number_perm+0x235/0x5b0 [ 98.653277][ T7669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.654837][ T7669] ? __pfx_lock_release+0x10/0x10 [ 98.656132][ T7669] ? trace_lock_acquire+0x14e/0x1f0 [ 98.657469][ T7669] ? lock_acquire+0x2f/0xb0 [ 98.658645][ T7669] ? __fget_files+0x40/0x3a0 [ 98.659945][ T7669] ? __fget_files+0x206/0x3a0 [ 98.661176][ T7669] security_file_ioctl_compat+0x9b/0x240 [ 98.662624][ T7669] __do_compat_sys_ioctl+0x4e/0x2c0 [ 98.663961][ T7669] __do_fast_syscall_32+0x73/0x120 [ 98.665273][ T7669] do_fast_syscall_32+0x32/0x80 [ 98.666526][ T7669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.668360][ T7669] RIP: 0023:0xf7f15579 [ 98.669831][ T7669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.675078][ T7669] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 98.677201][ T7669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045519 [ 98.679206][ T7669] RDX: 0000000020001840 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.681248][ T7669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.683258][ T7669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.685264][ T7669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.687298][ T7669] [ 98.688154][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.690699][ T7669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.901701][ T7671] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 101.176714][ T7736] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 101.181382][ T7736] batman_adv: batadv0: Adding interface: team0 [ 101.183050][ T7736] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.189660][ T7736] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.194376][ T7736] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 101.196596][ T7736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.410'. [ 101.199323][ T7736] team0: entered promiscuous mode [ 101.200740][ T7736] team_slave_0: entered promiscuous mode [ 101.202447][ T7736] team_slave_1: entered promiscuous mode [ 101.205973][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.208162][ T7736] batman_adv: batadv0: Interface activated: team0 [ 101.209941][ T7736] batman_adv: batadv0: Interface deactivated: team0 [ 101.211706][ T7736] batman_adv: batadv0: Removing interface: team0 [ 101.214604][ T7736] bridge0: port 2(team0) entered blocking state [ 101.216594][ T7736] bridge0: port 2(team0) entered disabled state [ 101.218467][ T7736] team0: entered allmulticast mode [ 101.219884][ T7736] team_slave_0: entered allmulticast mode [ 101.221403][ T7736] team_slave_1: entered allmulticast mode [ 101.224159][ T7736] vlan0: entered allmulticast mode [ 101.225827][ T7736] veth0_vlan: entered allmulticast mode [ 101.508922][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.416'. [ 102.949968][ T7773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.422'. [ 103.247867][ T7784] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 103.272972][ T7788] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.277819][ T7788] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 103.408593][ T7786] block device autoloading is deprecated and will be removed. [ 103.649294][ T7791] autofs: Unknown parameter '0xffffffffffffffff' [ 103.854542][ T7799] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.856852][ T7799] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.858947][ T7799] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.861024][ T7799] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.863393][ T7799] vxlan0: entered promiscuous mode [ 103.865182][ T7799] vxlan0: entered allmulticast mode [ 103.874186][ T7799] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.876470][ T7799] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.878580][ T7799] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.880677][ T7799] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.632271][ T7804] wireguard0: entered promiscuous mode [ 104.934887][ T6238] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 105.080731][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 105.080790][ T39] audit: type=1800 audit(1733717262.150:78): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.435" name="cpuset.effective_cpus" dev="9p" ino=36701650 res=0 errno=0 [ 105.113951][ T7817] syz.4.435 (7817) used greatest stack depth: 20352 bytes left [ 105.116214][ T39] audit: type=1800 audit(1733717262.160:79): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.435" name="cpuset.effective_cpus" dev="9p" ino=36701650 res=0 errno=0 [ 105.229141][ T7827] FAULT_INJECTION: forcing a failure. [ 105.229141][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 105.232944][ T7827] CPU: 3 UID: 0 PID: 7827 Comm: syz.4.436 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 105.235593][ T7827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.238343][ T7827] Call Trace: [ 105.239192][ T7827] [ 105.239944][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 105.241205][ T7827] should_fail_ex+0x497/0x5b0 [ 105.242830][ T7827] should_failslab+0xc2/0x120 [ 105.244450][ T7827] __kmalloc_cache_noprof+0x68/0x420 [ 105.246234][ T7827] ? rcu_is_watching+0x12/0xc0 [ 105.247838][ T7827] ? trace_lock_acquire+0x14e/0x1f0 [ 105.249629][ T7827] sctp_add_bind_addr+0x9d/0x3e0 [ 105.251352][ T7827] sctp_copy_local_addr_list+0x39e/0x5a0 [ 105.253251][ T7827] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 105.255399][ T7827] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 105.257446][ T7827] ? sctp_bind_addr_copy+0xe0/0x530 [ 105.259246][ T7827] sctp_bind_addr_copy+0xe0/0x530 [ 105.260974][ T7827] sctp_connect_new_asoc+0x1d8/0x790 [ 105.262800][ T7827] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 105.264783][ T7827] ? lock_acquire+0x2f/0xb0 [ 105.266372][ T7827] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 105.268382][ T7827] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 105.270322][ T7827] sctp_sendmsg+0x162a/0x1f10 [ 105.271960][ T7827] ? __pfx___lock_acquire+0x10/0x10 [ 105.273793][ T7827] ? __pfx_sctp_sendmsg+0x10/0x10 [ 105.275581][ T7827] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.277295][ T7827] ? __pfx_sctp_sendmsg+0x10/0x10 [ 105.279095][ T7827] inet_sendmsg+0x119/0x140 [ 105.280693][ T7827] __sys_sendto+0x42a/0x4f0 [ 105.282276][ T7827] ? __pfx___sys_sendto+0x10/0x10 [ 105.284016][ T7827] ? bpf_trace_run2+0x266/0x590 [ 105.285609][ T7827] __ia32_sys_sendto+0xdd/0x1b0 [ 105.286864][ T7827] ? syscall_trace_enter+0xf0/0x260 [ 105.288330][ T7827] __do_fast_syscall_32+0x73/0x120 [ 105.290147][ T7827] do_fast_syscall_32+0x32/0x80 [ 105.291808][ T7827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.293935][ T7827] RIP: 0023:0xf7f20579 [ 105.295340][ T7827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.301850][ T7827] RSP: 002b:00000000f50a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 105.304690][ T7827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 105.307376][ T7827] RDX: 0000000000000001 RSI: 000000008550f8c0 RDI: 0000000020000100 [ 105.310124][ T7827] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 105.312870][ T7827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.315588][ T7827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.318302][ T7827] [ 105.376101][ T7829] bridge_slave_0: left allmulticast mode [ 105.377676][ T7829] bridge_slave_0: left promiscuous mode [ 105.379262][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.383195][ T7829] bridge_slave_1: left allmulticast mode [ 105.386047][ T7829] bridge_slave_1: left promiscuous mode [ 105.387676][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.391568][ T7829] bond0: (slave bond_slave_0): Releasing backup interface [ 105.394602][ T7829] bond0: (slave bond_slave_1): Releasing backup interface [ 105.402076][ T7829] team0: Port device team_slave_0 removed [ 105.404340][ T7829] team0: Port device team_slave_1 removed [ 105.408878][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.411616][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.418477][ T7829] team0: Mode changed to "activebackup" [ 105.420991][ T7829] tipc: Started in network mode [ 105.422367][ T7829] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 105.424364][ T7829] tipc: Enabled bearer , priority 0 [ 105.484816][ T6238] usb 6-1: Using ep0 maxpacket: 8 [ 105.487417][ T6238] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 105.489544][ T6238] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.492090][ T6238] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.494721][ T6238] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.497513][ T6238] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.500846][ T6238] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.503225][ T6238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.719507][ T6238] usb 6-1: usb_control_msg returned -32 [ 105.721116][ T6238] usbtmc 6-1:16.0: can't read capabilities [ 105.739064][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 105.780807][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 106.434850][ T30] tipc: Node number set to 11578026 [ 107.235342][ T30] usb 6-1: USB disconnect, device number 12 [ 107.508357][ T7866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.604034][ T7866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.622996][ T7870] Cannot find map_set index 0 as target [ 107.695125][ T7866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.790911][ T7866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.862937][ T7866] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.868815][ T7866] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.880894][ T7866] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.885874][ T7866] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.139957][ T7878] tmpfs: Unknown parameter '' [ 109.388734][ T7909] netlink: 'syz.4.459': attribute type 142 has an invalid length. [ 109.627133][ T7911] overlay: Unknown parameter 'smackfshat' [ 109.701161][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 111.274196][ T7957] tipc: Enabled bearer , priority 10 [ 111.565308][ T7969] pim6reg: entered allmulticast mode [ 111.567709][ T7969] pim6reg: left allmulticast mode [ 111.629541][ T7974] netlink: 'syz.5.479': attribute type 3 has an invalid length. [ 111.635070][ T7974] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 111.723163][ T7980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.885536][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'. [ 111.960287][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.489'. [ 112.063825][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.491'. [ 112.099343][ T8009] syz.5.491: attempt to access beyond end of device [ 112.099343][ T8009] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 112.113515][ T8009] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 112.154144][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 112.156436][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 112.208601][ T8022] netlink: 76 bytes leftover after parsing attributes in process `syz.5.497'. [ 112.423449][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 112.444997][ T8029] Invalid logical block size (536870912) [ 112.520018][ T8035] netlink: 'syz.4.496': attribute type 21 has an invalid length. [ 112.522344][ T8035] netlink: 144 bytes leftover after parsing attributes in process `syz.4.496'. [ 112.583807][ T25] usb 6-1: Invalid ep0 maxpacket: 9 [ 112.586127][ T63] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 112.723600][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 112.743358][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 112.751370][ T63] usb 10-1: config 0 has no interfaces? [ 112.753619][ T63] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.757092][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.762508][ T63] usb 10-1: config 0 descriptor?? [ 112.883283][ T25] usb 6-1: Invalid ep0 maxpacket: 9 [ 112.884851][ T25] usb usb6-port1: attempt power cycle [ 112.974188][ T62] usb 10-1: USB disconnect, device number 3 [ 113.186091][ T8040] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.502'. [ 113.233286][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 113.253750][ T25] usb 6-1: Invalid ep0 maxpacket: 9 [ 113.383208][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 113.403644][ T25] usb 6-1: Invalid ep0 maxpacket: 9 [ 113.405179][ T25] usb usb6-port1: unable to enumerate USB device [ 114.249393][ T39] audit: type=1326 audit(1733717271.322:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.3.511" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15579 code=0x0 [ 114.873585][ T8078] 9pnet_fd: Insufficient options for proto=fd [ 115.249074][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 115.252309][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 115.423064][ T8093] netlink: 'syz.3.516': attribute type 7 has an invalid length. [ 115.714346][ T8103] random: crng reseeded on system resumption [ 115.727469][ T8103] syzkaller1: entered promiscuous mode [ 115.729640][ T8103] syzkaller1: entered allmulticast mode [ 116.635782][ T39] audit: type=1326 audit(1733717273.712:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.3.523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 117.168843][ T39] audit: type=1804 audit(1733717274.242:82): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.525" name="/newroot/128/file0/file0" dev="9p" ino=36701662 res=1 errno=0 [ 117.377014][ T8140] tipc: Can't bind to reserved service type 0 [ 117.474762][ T8154] 9pnet_virtio: no channels available for device syz [ 117.494254][ T8148] netlink: 88 bytes leftover after parsing attributes in process `syz.1.533'. [ 117.841444][ T39] audit: type=1326 audit(1733717274.912:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.1.537" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 118.730296][ T39] audit: type=1326 audit(1733717275.802:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.5.544" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x0 [ 118.893911][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 118.896589][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 119.162223][ T63] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 119.323590][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 119.326767][ T63] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 119.329964][ T63] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 119.335598][ T63] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 119.338688][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.341341][ T63] usb 6-1: Product: syz [ 119.344670][ T63] usb 6-1: Manufacturer: syz [ 119.346357][ T63] usb 6-1: SerialNumber: syz [ 119.351746][ T63] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 119.355909][ T63] dvb-usb: bulk message failed: -22 (3/0) [ 119.374106][ T63] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.378083][ T63] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 119.382345][ T63] usb 6-1: media controller created [ 119.392291][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.400648][ T63] dvb-usb: bulk message failed: -22 (6/0) [ 119.402764][ T63] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 119.408469][ T63] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input17 [ 119.415528][ T63] dvb-usb: schedule remote query interval to 150 msecs. [ 119.417910][ T63] dvb-usb: bulk message failed: -22 (3/0) [ 119.442159][ T63] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 119.571945][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 119.576585][ T6238] usb 6-1: USB disconnect, device number 17 [ 119.599071][ T6238] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 119.969013][ T8224] overlayfs: workdir and upperdir must be separate subtrees [ 120.109377][ T39] audit: type=1800 audit(1733717277.183:85): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.557" name="file0" dev="9p" ino=36701662 res=0 errno=0 qemu-system-x86_64: warning: 9p: bad client: T_read request on directory only expected with 9P2000.u protocol version [ 120.138454][ T39] audit: type=1800 audit(1733717277.213:86): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.557" name="file0" dev="9p" ino=36701662 res=0 errno=0 [ 120.272062][ T2294] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 120.300826][ T8239] sd 0:0:0:0: PR command failed: 1026 [ 120.302490][ T8239] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.304897][ T8239] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.374488][ T8249] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 120.415068][ T8250] random: crng reseeded on system resumption [ 120.442030][ T2294] usb 10-1: Using ep0 maxpacket: 32 [ 120.445270][ T2294] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 120.448079][ T2294] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 120.450964][ T2294] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 120.454210][ T2294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.457478][ T2294] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.460744][ T2294] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 120.465463][ T2294] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 120.468608][ T2294] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.474127][ T2294] usb 10-1: config 0 descriptor?? [ 120.683434][ T2294] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 120.702687][ T2294] usb 10-1: USB disconnect, device number 4 [ 120.712719][ T2294] usblp0: removed [ 121.182850][ T2294] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 121.204833][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 121.231667][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 121.255327][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 121.321854][ T2294] usb 10-1: device descriptor read/64, error -71 [ 121.572110][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 121.591793][ T2294] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 121.731783][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 121.731801][ T2294] usb 10-1: device descriptor read/64, error -71 [ 121.735353][ T25] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 121.737655][ T25] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 121.741770][ T25] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 121.744960][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.747768][ T25] usb 8-1: Product: syz [ 121.749195][ T25] usb 8-1: Manufacturer: syz [ 121.750655][ T25] usb 8-1: SerialNumber: syz [ 121.756126][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 121.760166][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 121.783152][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.785916][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 121.789107][ T25] usb 8-1: media controller created [ 121.794947][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.801283][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 121.803519][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 121.808982][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input18 [ 121.814855][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 121.817372][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 121.831774][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 121.852374][ T2294] usb usb10-port1: attempt power cycle [ 121.964823][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 121.968476][ T8] usb 8-1: USB disconnect, device number 9 [ 121.985958][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 122.201732][ T2294] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 122.232416][ T2294] usb 10-1: device descriptor read/8, error -71 [ 122.495392][ T2294] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 122.532951][ T2294] usb 10-1: device descriptor read/8, error -71 [ 122.651738][ T2294] usb usb10-port1: unable to enumerate USB device [ 122.831715][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 122.911560][ T30] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 123.015238][ T8] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 123.029214][ T8] usb 8-1: config 0 has no interfaces? [ 123.041072][ T8] usb 8-1: config 0 has no interfaces? [ 123.054198][ T8] usb 8-1: config 0 has no interfaces? [ 123.083467][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 123.087497][ T8] usb 8-1: config 0 has no interfaces? [ 123.091909][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.093759][ T8] usb 8-1: config 0 has no interfaces? [ 123.100934][ T30] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 123.104559][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.104731][ T8] usb 8-1: config 0 has no interfaces? [ 123.106636][ T30] usb 6-1: Product: syz [ 123.110383][ T30] usb 6-1: Manufacturer: syz [ 123.114371][ T30] usb 6-1: SerialNumber: syz [ 123.127767][ T30] usb 6-1: config 0 descriptor?? [ 123.144848][ T30] hub 6-1:0.0: bad descriptor, ignoring hub [ 123.146498][ T30] hub 6-1:0.0: probe with driver hub failed with error -5 [ 123.146553][ T8] usb 8-1: config 0 has no interfaces? [ 123.149320][ T30] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 123.150973][ T8] usb 8-1: config 0 has no interfaces? [ 123.396190][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.398566][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.400983][ T8] usb 8-1: Product: syz [ 123.405636][ T8] usb 8-1: Manufacturer: syz [ 123.407348][ T8] usb 8-1: SerialNumber: syz [ 123.410081][ T8] usb 8-1: config 0 descriptor?? [ 123.616630][ T9] usb 8-1: USB disconnect, device number 10 [ 123.665689][ T8298] bridge0: port 3(hsr_slave_1) entered blocking state [ 123.668357][ T8298] bridge0: port 3(hsr_slave_1) entered disabled state [ 123.671814][ T8298] hsr_slave_1: entered allmulticast mode [ 123.678284][ T8298] hsr_slave_1: left allmulticast mode [ 123.902831][ T30] usb 6-1: USB disconnect, device number 18 [ 124.261371][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 124.382519][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.579'. [ 124.411369][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 124.429403][ T8305] netlink: 88 bytes leftover after parsing attributes in process `syz.1.581'. [ 124.430720][ T8] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.439411][ T8] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.441781][ T8] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.443835][ T8] usb 8-1: Product: syz [ 124.444859][ T8] usb 8-1: Manufacturer: syz [ 124.446039][ T8] usb 8-1: SerialNumber: syz [ 124.448064][ T8] usb 8-1: config 0 descriptor?? [ 124.450390][ T8283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.656061][ T30] usb 8-1: USB disconnect, device number 11 [ 125.559306][ T8352] 9pnet_fd: Insufficient options for proto=fd [ 125.593987][ T8359] IPVS: Error connecting to the multicast addr [ 125.711072][ T8364] mmap: syz.3.592 (8364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.421449][ T8387] afs: Unknown parameter '' [ 126.969426][ T8388] orangefs_mount: mount request failed with -4 [ 127.688102][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.5.602'. [ 127.742771][ T8407] 9pnet_fd: Insufficient options for proto=fd [ 127.831842][ T8414] xt_NFQUEUE: number of total queues is 0 [ 127.972799][ T8417] No control pipe specified [ 128.544933][ T8423] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 128.744156][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 128.744751][ T39] audit: type=1326 audit(1733717285.824:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.5.610" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f5f579 code=0x0 [ 128.751221][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 128.992798][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'. [ 129.025316][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 129.037755][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 129.195637][ T8449] netlink: 116 bytes leftover after parsing attributes in process `syz.4.617'. [ 129.256055][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 129.312676][ T8449] warning: `syz.4.617' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.660955][ T8460] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.621'. [ 129.663311][ T8460] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 129.941984][ T8462] input: syz0 as /devices/virtual/input/input20 [ 130.139882][ T8472] netlink: 'syz.5.624': attribute type 1 has an invalid length. [ 130.143770][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.624'. [ 130.958713][ T8488] netlink: 'syz.5.630': attribute type 4 has an invalid length. [ 130.974205][ T8488] netlink: 'syz.5.630': attribute type 4 has an invalid length. [ 131.315879][ T8496] 9pnet_fd: Insufficient options for proto=fd [ 132.112275][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.113926][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.363104][ T8532] netlink: 'syz.1.644': attribute type 116 has an invalid length. [ 132.466864][ T8533] binder: 8531:8533 ioctl c0306201 20000680 returned -14 [ 133.206848][ T8543] 9pnet_fd: Insufficient options for proto=fd [ 134.264879][ T8578] __nla_validate_parse: 3 callbacks suppressed [ 134.264890][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 134.272422][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 134.539505][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 134.689506][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 134.692147][ T25] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 134.694556][ T25] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 134.698429][ T25] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 134.700982][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.703374][ T25] usb 8-1: Product: syz [ 134.704548][ T25] usb 8-1: Manufacturer: syz [ 134.705904][ T25] usb 8-1: SerialNumber: syz [ 134.710685][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 134.714240][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 134.732046][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.735713][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 134.739952][ T25] usb 8-1: media controller created [ 134.757795][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.794104][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 134.796126][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 134.811398][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input21 [ 134.816068][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 134.818475][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 134.836417][ T8583] overlayfs: conflicting options: metacopy=off,verity=on [ 134.839878][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 134.930492][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 134.935521][ T30] usb 8-1: USB disconnect, device number 12 [ 134.948348][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 135.179435][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 135.339404][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 135.342227][ T9] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 135.344484][ T9] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 135.349618][ T9] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 135.351935][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.353960][ T9] usb 6-1: Product: syz [ 135.355029][ T9] usb 6-1: Manufacturer: syz [ 135.357917][ T9] usb 6-1: SerialNumber: syz [ 135.364494][ T9] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 135.367529][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 135.390640][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.393404][ T9] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 135.396491][ T9] usb 6-1: media controller created [ 135.402534][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.410495][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 135.412005][ T9] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 135.416071][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input22 [ 135.420585][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 135.423014][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 135.439385][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 135.564409][ T8585] FAULT_INJECTION: forcing a failure. [ 135.564409][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.568132][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.1.659 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 135.570805][ T8585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.573508][ T8585] Call Trace: [ 135.574400][ T8585] [ 135.575173][ T8585] dump_stack_lvl+0x16c/0x1f0 [ 135.576397][ T8585] should_fail_ex+0x497/0x5b0 [ 135.577753][ T8585] _copy_from_user+0x2e/0xd0 [ 135.578951][ T8585] evdev_handle_get_keycode+0xb8/0x180 [ 135.580367][ T8585] ? __pfx_evdev_handle_get_keycode+0x10/0x10 [ 135.581925][ T8585] ? __mutex_trylock_common+0xea/0x250 [ 135.583323][ T8585] ? evdev_ioctl_compat+0x80/0x1a0 [ 135.584637][ T8585] ? rcu_is_watching+0x12/0xc0 [ 135.585873][ T8585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.587533][ T8585] evdev_do_ioctl+0x46d/0x1ae0 [ 135.589164][ T8585] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 135.590991][ T8585] ? trace_lock_acquire+0x14e/0x1f0 [ 135.592811][ T8585] evdev_ioctl_compat+0x16d/0x1a0 [ 135.594592][ T8585] ? __pfx_evdev_ioctl_compat+0x10/0x10 [ 135.596082][ T8585] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 135.597626][ T8585] __do_fast_syscall_32+0x73/0x120 [ 135.599533][ T8585] do_fast_syscall_32+0x32/0x80 [ 135.600987][ T8585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.602620][ T8585] RIP: 0023:0xf747e579 [ 135.603667][ T8585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.608825][ T8585] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 135.610991][ T8585] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080084504 [ 135.612987][ T8585] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.615004][ T8585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.617043][ T8585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.619906][ T8585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.621973][ T8585] [ 135.622974][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 135.624514][ T9] dvb-usb: error while querying for an remote control event. [ 135.628248][ T9] usb 6-1: USB disconnect, device number 19 [ 135.652403][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 137.353512][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 137.357889][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 137.628993][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 137.702060][ T25] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 137.769439][ T8639] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 137.772312][ T8639] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 137.778956][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 137.787863][ T8] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 137.790425][ T8] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 137.795963][ T8] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 137.798515][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.800730][ T8] usb 6-1: Product: syz [ 137.801868][ T8] usb 6-1: Manufacturer: syz [ 137.803159][ T8] usb 6-1: SerialNumber: syz [ 137.811493][ T8] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 137.814484][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 137.830191][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.832979][ T8] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 137.836104][ T8] usb 6-1: media controller created [ 137.847161][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.854484][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 137.857319][ T8] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 137.860725][ T25] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.861843][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input23 [ 137.864136][ T25] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.867371][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 137.869914][ T25] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.871239][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 137.873897][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.882750][ T8644] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 137.889039][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 137.889470][ T8637] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 137.890454][ T8644] syzkaller0: linktype set to 0 [ 137.898420][ T25] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.021466][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'. [ 138.025863][ T8] usb 6-1: USB disconnect, device number 20 [ 138.043016][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 138.128975][ T25] usb 10-1: USB disconnect, device number 9 [ 138.478852][ T63] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 138.648872][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 138.651435][ T63] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.654058][ T63] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 138.656526][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.666078][ T63] usb 9-1: config 0 descriptor?? [ 138.669523][ T63] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input24 [ 138.737582][ T8662] overlayfs: failed to resolve './file1': -2 [ 138.781444][ T8664] openvswitch: netlink: Missing key (keys=40, expected=100) [ 138.785553][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 138.788503][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.684'. [ 138.817957][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.872635][ T8668] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 138.875476][ T8668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.926390][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 138.933856][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 139.477479][ T5345] bcm5974 9-1:0.0: could not read from device [ 139.482459][ T63] usb 9-1: USB disconnect, device number 7 [ 139.488298][ T5345] bcm5974 9-1:0.0: could not read from device [ 139.653024][ T8682] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 139.733869][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 139.745025][ T8680] bridge8: port 1(bridge_slave_1) entered blocking state [ 139.747167][ T8680] bridge8: port 1(bridge_slave_1) entered disabled state [ 139.749371][ T8680] bridge_slave_1: entered allmulticast mode [ 139.751571][ T8680] bridge_slave_1: entered promiscuous mode [ 139.817922][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 139.827192][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 140.098551][ T62] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 140.167529][ T8700] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 140.248539][ T62] usb 9-1: Using ep0 maxpacket: 8 [ 140.258015][ T62] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 140.267927][ T62] usb 9-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 140.272973][ T62] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 140.276006][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.284036][ T62] usb 9-1: Product: syz [ 140.285435][ T62] usb 9-1: Manufacturer: syz [ 140.286904][ T62] usb 9-1: SerialNumber: syz [ 140.292644][ T62] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 140.295505][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 140.309441][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.312187][ T62] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 140.315202][ T62] usb 9-1: media controller created [ 140.320699][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.325957][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 140.327447][ T62] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 140.332605][ T62] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input25 [ 140.337766][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 140.339828][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 140.358446][ T62] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 140.498479][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 140.501008][ T62] dvb-usb: error while querying for an remote control event. [ 140.501145][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 140.507024][ T8] usb 9-1: USB disconnect, device number 8 [ 140.521090][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 141.234428][ T8716] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 141.312629][ T8722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 141.575345][ T8734] netlink: 160 bytes leftover after parsing attributes in process `syz.1.707'. [ 143.032439][ T8777] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 143.035280][ T8777] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 143.339320][ T8792] netlink: 14 bytes leftover after parsing attributes in process `syz.4.718'. [ 143.342272][ T8792] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 143.830139][ T39] audit: type=1326 audit(1733717300.917:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 143.843826][ T8774] 9pnet_fd: p9_fd_create_tcp (8774): problem connecting socket to 127.0.0.1 [ 143.927358][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'. [ 144.083649][ T8824] fuse: Bad value for 'fd' [ 144.891889][ T39] audit: type=1326 audit(1733717301.977:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.898091][ T39] audit: type=1326 audit(1733717301.977:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.904087][ T39] audit: type=1326 audit(1733717301.977:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.910775][ T39] audit: type=1326 audit(1733717301.977:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.917554][ T39] audit: type=1326 audit(1733717301.977:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.924821][ T39] audit: type=1326 audit(1733717301.977:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.932194][ T8840] overlay: Bad value for 'index' [ 144.932297][ T39] audit: type=1326 audit(1733717301.977:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.932317][ T39] audit: type=1326 audit(1733717301.977:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.932332][ T39] audit: type=1326 audit(1733717301.977:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.5.736" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 144.932773][ T8841] overlay: Bad value for 'index' [ 146.000126][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.051065][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.057319][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.093376][ T8880] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.095886][ T8880] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.099110][ T8880] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.101679][ T8880] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.244982][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 146.305833][ T8896] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 146.862159][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 146.984020][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 147.203983][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 147.203990][ T8926] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 147.210287][ T8926] netlink: 244 bytes leftover after parsing attributes in process `syz.1.761'. [ 147.213687][ T8926] NCSI netlink: No device for ifindex 0 [ 147.916055][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 147.918822][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 148.028057][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 148.254772][ T8984] netlink: 'syz.5.778': attribute type 10 has an invalid length. [ 148.942360][ T8984] syz.5.778 (8984): drop_caches: 2 [ 149.235938][ T9014] FAULT_INJECTION: forcing a failure. [ 149.235938][ T9014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.239954][ T9014] CPU: 2 UID: 0 PID: 9014 Comm: syz.5.787 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 149.242668][ T9014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.245404][ T9014] Call Trace: [ 149.246281][ T9014] [ 149.247050][ T9014] dump_stack_lvl+0x16c/0x1f0 [ 149.248290][ T9014] should_fail_ex+0x497/0x5b0 [ 149.249519][ T9014] _copy_from_user+0x2e/0xd0 [ 149.250733][ T9014] get_compat_msghdr+0xa8/0x170 [ 149.251991][ T9014] ? __pfx_get_compat_msghdr+0x10/0x10 [ 149.253467][ T9014] ___sys_sendmsg+0x1b0/0x1e0 [ 149.254702][ T9014] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.256055][ T9014] ? __pfx_lock_release+0x10/0x10 [ 149.257358][ T9014] ? trace_lock_acquire+0x14e/0x1f0 [ 149.258719][ T9014] ? __fget_files+0x206/0x3a0 [ 149.259945][ T9014] __sys_sendmsg+0x16e/0x220 [ 149.261151][ T9014] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.262489][ T9014] __do_fast_syscall_32+0x73/0x120 [ 149.263821][ T9014] do_fast_syscall_32+0x32/0x80 [ 149.265086][ T9014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.266724][ T9014] RIP: 0023:0xf7f5f579 [ 149.267782][ T9014] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.272702][ T9014] RSP: 002b:00000000f50e657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 149.274858][ T9014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 149.276893][ T9014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.278930][ T9014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.280972][ T9014] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.283012][ T9014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.285057][ T9014] [ 149.366070][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 149.446612][ T9024] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 150.290235][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 150.920922][ T9071] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 150.924528][ T9071] netlink: 'syz.1.805': attribute type 17 has an invalid length. [ 150.931623][ T9071] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 152.437736][ T9111] Bluetooth: MGMT ver 1.23 [ 152.745079][ T9118] 9pnet_fd: Insufficient options for proto=fd [ 153.223735][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.823'. [ 153.226997][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.823'. [ 153.496426][ T25] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 153.656208][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 153.660483][ T25] usb 10-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 153.662773][ T25] usb 10-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 153.668478][ T25] usb 10-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 153.670887][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.672940][ T25] usb 10-1: Product: syz [ 153.674056][ T25] usb 10-1: Manufacturer: syz [ 153.675278][ T25] usb 10-1: SerialNumber: syz [ 153.679735][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 153.682652][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 153.699953][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.702807][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 153.705804][ T25] usb 10-1: media controller created [ 153.711194][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.716029][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 153.717702][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 153.721774][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input26 [ 153.725390][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 153.727307][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 153.740517][ T9145] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.743384][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 153.746162][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 153.886215][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 153.886231][ T25] dvb-usb: error while querying for an remote control event. [ 153.896169][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.823'. [ 153.903272][ T30] usb 10-1: USB disconnect, device number 10 [ 153.922362][ T30] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 154.501428][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 154.802557][ T9179] SET target dimension over the limit! [ 154.812979][ T9174] netlink: 'syz.5.834': attribute type 10 has an invalid length. [ 154.824927][ T9174] batman_adv: batadv0: Adding interface: team0 [ 154.826718][ T9174] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.833091][ T9174] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 154.851063][ T9174] netlink: 'syz.5.834': attribute type 10 has an invalid length. [ 154.853192][ T9174] netlink: 2 bytes leftover after parsing attributes in process `syz.5.834'. [ 154.866411][ T9174] team0: entered promiscuous mode [ 154.875158][ T9174] team_slave_0: entered promiscuous mode [ 154.880058][ T9174] team_slave_1: entered promiscuous mode [ 154.886885][ T9174] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.888841][ T9174] batman_adv: batadv0: Interface activated: team0 [ 154.890582][ T9174] batman_adv: batadv0: Interface deactivated: team0 [ 154.892314][ T9174] batman_adv: batadv0: Removing interface: team0 [ 154.906303][ T9174] bridge0: port 3(team0) entered blocking state [ 154.912891][ T9174] bridge0: port 3(team0) entered disabled state [ 154.924582][ T9174] team0: entered allmulticast mode [ 154.927509][ T9174] team_slave_0: entered allmulticast mode [ 154.928995][ T9174] team_slave_1: entered allmulticast mode [ 155.946009][ T9201] syz.3.844[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.946086][ T9201] syz.3.844[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.950027][ T9201] syz.3.844[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.959883][ T9203] overlayfs: failed to resolve 'T [ 155.959883][ T9203] ^Ij %{nݨL [ 155.959883][ T9203] @4OA-֔uW!}JQX- X LHWksv2VXGl[3v+gaRaIXHJ<%KGݯ# [ 155.959883][ T9203] mzA5ƧW}-SR 1.QeRSW4񗀤 Z64': -2 [ 156.060070][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 156.267383][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 157.844740][ T9242] SET target dimension over the limit! [ 158.006423][ T9236] netlink: 'syz.5.858': attribute type 21 has an invalid length. [ 158.008611][ T9236] netlink: 144 bytes leftover after parsing attributes in process `syz.5.858'. [ 158.594784][ T9258] netlink: 'syz.3.865': attribute type 142 has an invalid length. [ 158.775917][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 158.905613][ T25] usb 6-1: device descriptor read/64, error -71 [ 159.145479][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 159.285539][ T25] usb 6-1: device descriptor read/64, error -71 [ 159.398816][ T25] usb usb6-port1: attempt power cycle [ 159.996489][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 160.016156][ T25] usb 6-1: device descriptor read/8, error -71 [ 160.308062][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 160.345438][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 160.366107][ T25] usb 6-1: device descriptor read/8, error -71 [ 160.439604][ T9291] openvswitch: netlink: Key 6 has unexpected len 140 expected 2 [ 160.475411][ T25] usb usb6-port1: unable to enumerate USB device [ 160.506007][ T9293] FAULT_INJECTION: forcing a failure. [ 160.506007][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 160.509466][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.3.875 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 160.513001][ T9293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.516561][ T9293] Call Trace: [ 160.517615][ T9293] [ 160.518408][ T9293] dump_stack_lvl+0x16c/0x1f0 [ 160.519580][ T9293] should_fail_ex+0x497/0x5b0 [ 160.520754][ T9293] should_failslab+0xc2/0x120 [ 160.521974][ T9293] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 160.523333][ T9293] ? skb_clone+0x190/0x3f0 [ 160.524432][ T9293] skb_clone+0x190/0x3f0 [ 160.525495][ T9293] netlink_deliver_tap+0xafd/0xca0 [ 160.526797][ T9293] netlink_unicast+0x5e1/0x7f0 [ 160.528047][ T9293] ? __pfx_netlink_unicast+0x10/0x10 [ 160.529342][ T9293] ? __phys_addr_symbol+0x30/0x80 [ 160.530600][ T9293] ? __check_object_size+0x488/0x710 [ 160.531889][ T9293] netlink_sendmsg+0x8b8/0xd70 [ 160.533393][ T9293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.534919][ T9293] ____sys_sendmsg+0x9ae/0xb40 [ 160.536172][ T9293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.537539][ T9293] ? get_compat_msghdr+0x11b/0x170 [ 160.538886][ T9293] ___sys_sendmsg+0x135/0x1e0 [ 160.540105][ T9293] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.541347][ T9293] ? __pfx_lock_release+0x10/0x10 [ 160.542712][ T9293] ? trace_lock_acquire+0x14e/0x1f0 [ 160.544088][ T9293] ? __fget_files+0x206/0x3a0 [ 160.545259][ T9293] __sys_sendmsg+0x16e/0x220 [ 160.546467][ T9293] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.547862][ T9293] __do_fast_syscall_32+0x73/0x120 [ 160.549179][ T9293] do_fast_syscall_32+0x32/0x80 [ 160.550425][ T9293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.552034][ T9293] RIP: 0023:0xf7f15579 [ 160.553315][ T9293] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 160.558296][ T9293] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 160.560407][ T9293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200012c0 [ 160.562314][ T9293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.564257][ T9293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.566141][ T9293] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 160.568087][ T9293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.570058][ T9293] [ 160.570912][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.443003][ T9321] FAULT_INJECTION: forcing a failure. [ 161.443003][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.447753][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.5.885 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 161.451149][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.454680][ T9321] Call Trace: [ 161.455802][ T9321] [ 161.456775][ T9321] dump_stack_lvl+0x16c/0x1f0 [ 161.458395][ T9321] should_fail_ex+0x497/0x5b0 [ 161.459973][ T9321] _copy_from_user+0x2e/0xd0 [ 161.461649][ T9321] vmemdup_user+0x6c/0x100 [ 161.463167][ T9321] __sys_bpf+0x48cf/0x57a0 [ 161.464663][ T9321] ? __pfx___sys_bpf+0x10/0x10 [ 161.466267][ T9321] ? vfs_write+0x306/0x1150 [ 161.467758][ T9321] ? __mutex_unlock_slowpath+0x164/0x690 [ 161.469745][ T9321] ? fput+0x67/0x440 [ 161.471080][ T9321] ? ksys_write+0x1ba/0x250 [ 161.472597][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 161.474215][ T9321] __ia32_sys_bpf+0x76/0xe0 [ 161.475748][ T9321] __do_fast_syscall_32+0x73/0x120 [ 161.477488][ T9321] do_fast_syscall_32+0x32/0x80 [ 161.479144][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.481294][ T9321] RIP: 0023:0xf7f5f579 [ 161.482721][ T9321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.489218][ T9321] RSP: 002b:00000000f50e657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 161.492037][ T9321] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000020000080 [ 161.494679][ T9321] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.497322][ T9321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.500013][ T9321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.502674][ T9321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.505299][ T9321] [ 161.606969][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 161.609872][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 161.875155][ T62] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 162.045070][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 162.050330][ T62] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 162.052573][ T62] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 162.066870][ T62] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 162.070012][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.072708][ T62] usb 6-1: Product: syz [ 162.074113][ T62] usb 6-1: Manufacturer: syz [ 162.075716][ T62] usb 6-1: SerialNumber: syz [ 162.083279][ T62] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 162.086796][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 162.116714][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.125134][ T62] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 162.128657][ T62] usb 6-1: media controller created [ 162.148271][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.161420][ T62] dvb-usb: bulk message failed: -22 (6/0) [ 162.163486][ T62] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 162.171252][ T62] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input27 [ 162.177677][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 162.180156][ T62] dvb-usb: bulk message failed: -22 (3/0) [ 162.195063][ T62] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 162.299145][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 162.303038][ T8] usb 6-1: USB disconnect, device number 25 [ 162.335216][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 164.159403][ T9377] fuse: Bad value for 'user_id' [ 164.160886][ T9377] fuse: Bad value for 'user_id' [ 164.613879][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 164.618876][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 164.884792][ T63] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 165.034748][ T63] usb 10-1: Using ep0 maxpacket: 8 [ 165.038158][ T63] usb 10-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 165.041236][ T63] usb 10-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 165.045298][ T63] usb 10-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 165.047730][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.050256][ T63] usb 10-1: Product: syz [ 165.051365][ T63] usb 10-1: Manufacturer: syz [ 165.052662][ T63] usb 10-1: SerialNumber: syz [ 165.062549][ T63] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 165.066715][ T63] dvb-usb: bulk message failed: -22 (3/0) [ 165.091881][ T63] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.094870][ T62] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 165.095601][ T63] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 165.101949][ T63] usb 10-1: media controller created [ 165.112717][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.123720][ T63] dvb-usb: bulk message failed: -22 (6/0) [ 165.125973][ T63] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 165.132811][ T63] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input28 [ 165.137387][ T63] dvb-usb: schedule remote query interval to 150 msecs. [ 165.139726][ T63] dvb-usb: bulk message failed: -22 (3/0) [ 165.154824][ T63] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 165.234732][ T62] usb 8-1: device descriptor read/64, error -71 [ 165.271881][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.904'. [ 165.275541][ T25] usb 10-1: USB disconnect, device number 11 [ 165.290768][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 165.474661][ T62] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 165.614653][ T62] usb 8-1: device descriptor read/64, error -71 [ 165.724849][ T62] usb usb8-port1: attempt power cycle [ 166.074641][ T62] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 166.095048][ T62] usb 8-1: device descriptor read/8, error -71 [ 166.183911][ T9408] 9pnet: Could not find request transport: fd0x0000000000000004 [ 166.354591][ T62] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 166.385228][ T62] usb 8-1: device descriptor read/8, error -71 [ 166.496633][ T62] usb usb8-port1: unable to enumerate USB device [ 167.013191][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 167.017285][ T9416] netlink: 'syz.5.914': attribute type 18 has an invalid length. [ 167.028124][ T9416] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.030527][ T9416] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.032716][ T9416] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.035118][ T9416] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.038477][ T9416] vxlan0: entered promiscuous mode [ 167.882149][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 168.289205][ T9445] 9pnet: Could not find request transport: fd0x0000000000000004 [ 168.823856][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.827376][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.831097][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.848550][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.851799][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.855917][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.863069][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.867278][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.869312][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.871603][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.875814][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.878926][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.306508][ T1229] bond0 (unregistering): Released all slaves [ 169.330569][ T9471] sp0: Synchronizing with TNC [ 169.333503][ T9473] bridge0: port 3(syz_tun) entered blocking state [ 169.338386][ T9473] bridge0: port 3(syz_tun) entered disabled state [ 169.344314][ T9473] syz_tun: entered allmulticast mode [ 169.349556][ T9473] syz_tun: entered promiscuous mode [ 169.371291][ T9457] chnl_net:caif_netlink_parms(): no params data found [ 169.429151][ T1229] tipc: Disabling bearer [ 169.436768][ T1229] tipc: Left network mode [ 169.439739][ T9477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'. [ 169.503762][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.508788][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.511185][ T9457] bridge_slave_0: entered allmulticast mode [ 169.514364][ T9457] bridge_slave_0: entered promiscuous mode [ 169.518500][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.522445][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.535096][ T9457] bridge_slave_1: entered allmulticast mode [ 169.537643][ T9457] bridge_slave_1: entered promiscuous mode [ 169.616877][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.636772][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.864826][ T1229] hsr_slave_0: left promiscuous mode [ 169.869537][ T1229] hsr_slave_1: left promiscuous mode [ 170.766881][ T9506] netlink: 176 bytes leftover after parsing attributes in process `syz.1.936'. [ 170.904070][ T66] Bluetooth: hci2: command tx timeout [ 171.368754][ T9457] team0: Port device team_slave_0 added [ 171.372620][ T9457] team0: Port device team_slave_1 added [ 171.468068][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.470629][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.480289][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.495823][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.498431][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.510171][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.599272][ T9457] hsr_slave_0: entered promiscuous mode [ 171.606352][ T9457] hsr_slave_1: entered promiscuous mode [ 171.619124][ T9457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.621781][ T9457] Cannot create hsr debugfs directory [ 172.002349][ T9457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.019178][ T9457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.022702][ T9457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.025953][ T9457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.090978][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.103303][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.130149][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.132029][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.148818][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.151452][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.538613][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.776170][ T9457] veth0_vlan: entered promiscuous mode [ 172.787952][ T9457] veth1_vlan: entered promiscuous mode [ 172.796687][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 172.797095][ T9457] veth0_macvtap: entered promiscuous mode [ 172.804702][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 172.846500][ T9457] veth1_macvtap: entered promiscuous mode [ 172.852801][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.855937][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.859013][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.864379][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.873783][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.877741][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.887365][ T9457] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.890383][ T9457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.894012][ T9457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.906049][ T9457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.943052][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.945234][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.961939][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.965892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.993746][ T66] Bluetooth: hci2: command tx timeout [ 173.083359][ T9546] orangefs_mount: mount request failed with -4 [ 173.269718][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 173.272717][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 173.288883][ T9581] FAULT_INJECTION: forcing a failure. [ 173.288883][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 173.292661][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.1.949 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 173.295379][ T9581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.298152][ T9581] Call Trace: [ 173.299258][ T9581] [ 173.300340][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 173.302069][ T9581] should_fail_ex+0x497/0x5b0 [ 173.303756][ T9581] ? fs_reclaim_acquire+0xae/0x150 [ 173.305483][ T9581] should_failslab+0xc2/0x120 [ 173.306701][ T9581] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 173.308222][ T9581] ? __alloc_skb+0x2b3/0x380 [ 173.309810][ T9581] __alloc_skb+0x2b3/0x380 [ 173.311368][ T9581] ? __pfx___alloc_skb+0x10/0x10 [ 173.313165][ T9581] ? lock_acquire+0x2f/0xb0 [ 173.314824][ T9581] netlink_alloc_large_skb+0x69/0x130 [ 173.316749][ T9581] netlink_sendmsg+0x689/0xd70 [ 173.318520][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.320439][ T9581] ____sys_sendmsg+0x9ae/0xb40 [ 173.321998][ T9581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.323611][ T9581] ? get_compat_msghdr+0x11b/0x170 [ 173.325470][ T9581] ___sys_sendmsg+0x135/0x1e0 [ 173.327172][ T9581] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.329040][ T9581] ? __pfx_lock_release+0x10/0x10 [ 173.330845][ T9581] ? trace_lock_acquire+0x14e/0x1f0 [ 173.332728][ T9581] ? __fget_files+0x206/0x3a0 [ 173.334401][ T9581] __sys_sendmsg+0x16e/0x220 [ 173.336057][ T9581] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.337510][ T9581] __do_fast_syscall_32+0x73/0x120 [ 173.339177][ T9581] do_fast_syscall_32+0x32/0x80 [ 173.340888][ T9581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.343063][ T9581] RIP: 0023:0xf747e579 [ 173.344390][ T9581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.350967][ T9581] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 173.353869][ T9581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 173.356585][ T9581] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.359321][ T9581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.361864][ T9581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.362134][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.946'. [ 173.364621][ T9581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.364648][ T9581] [ 173.504686][ T9595] netlink: 'syz.1.951': attribute type 11 has an invalid length. [ 173.538608][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 173.541580][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 174.178148][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.959'. [ 174.579240][ T9643] block device autoloading is deprecated and will be removed. [ 174.581900][ T9643] syz.1.962: attempt to access beyond end of device [ 174.581900][ T9643] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 174.671655][ T9657] netlink: 'syz.1.966': attribute type 11 has an invalid length. [ 174.697779][ T9657] loop9: detected capacity change from 0 to 6 [ 174.701492][ T9657] Dev loop9: unable to read RDB block 6 [ 174.703000][ T9657] loop9: unable to read partition table [ 174.706818][ T9657] loop9: partition table beyond EOD, truncated [ 174.708487][ T9657] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 174.708487][ T9657] ) failed (rc=-5) [ 175.073546][ T66] Bluetooth: hci2: command tx timeout [ 176.417433][ T9722] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 176.419513][ T9722] tipc: Resetting bearer [ 176.423938][ T9722] batman_adv: batadv0: Adding interface: team0 [ 176.425567][ T9722] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.435660][ T9722] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 176.447875][ T9725] binder: 9724:9725 ioctl c0306201 200005c0 returned -14 [ 176.456631][ T9722] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.465277][ T9722] kvm: pic: non byte read [ 176.472620][ T9727] netlink: 224 bytes leftover after parsing attributes in process `syz.6.975'. [ 176.475685][ T9729] openvswitch: netlink: Missing key (keys=40, expected=100) [ 176.479779][ T9722] kvm: pic: level sensitive irq not supported [ 176.481601][ T9722] kvm: pic: non byte read [ 176.518819][ T9731] 9pnet_fd: Insufficient options for proto=fd [ 176.981182][ T39] kauditd_printk_skb: 57 callbacks suppressed [ 176.981199][ T39] audit: type=1326 audit(1733717334.066:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 176.993493][ T39] audit: type=1326 audit(1733717334.076:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 176.999240][ T39] audit: type=1326 audit(1733717334.076:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.005914][ T39] audit: type=1326 audit(1733717334.086:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.015203][ T39] audit: type=1326 audit(1733717334.086:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.022273][ T39] audit: type=1326 audit(1733717334.086:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.042047][ T39] audit: type=1326 audit(1733717334.086:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf747e598 code=0x7ffc0000 [ 177.043420][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 177.058094][ T39] audit: type=1326 audit(1733717334.086:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.069117][ T39] audit: type=1326 audit(1733717334.086:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.1.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 177.143654][ T66] Bluetooth: hci2: command tx timeout [ 177.203285][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 177.208612][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.212190][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.216873][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.220917][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.227714][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.231025][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.320440][ T9758] input: syz1 as /devices/virtual/input/input30 [ 177.443286][ T25] usb 8-1: GET_CAPABILITIES returned 0 [ 177.444840][ T25] usbtmc 8-1:16.0: can't read capabilities [ 177.692375][ T9771] 9pnet_fd: Insufficient options for proto=fd [ 177.714919][ T9774] usb 8-1: usbtmc_ioctl_clear_out_halt returned -32 [ 177.856631][ T25] usb 8-1: USB disconnect, device number 17 [ 177.953169][ T8] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 178.103303][ T8] usb 11-1: Using ep0 maxpacket: 8 [ 178.105868][ T8] usb 11-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 178.108186][ T8] usb 11-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 178.111979][ T8] usb 11-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 178.114508][ T8] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.116638][ T8] usb 11-1: Product: syz [ 178.117746][ T8] usb 11-1: Manufacturer: syz [ 178.118965][ T8] usb 11-1: SerialNumber: syz [ 178.127178][ T8] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 178.130117][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 178.146323][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.148962][ T8] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 178.151875][ T8] usb 11-1: media controller created [ 178.157637][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.163636][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 178.165154][ T8] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 178.168950][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input31 [ 178.172991][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 178.174933][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 178.193085][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 178.328326][ T9775] cgroup: No subsys list or none specified [ 178.330955][ T25] usb 11-1: USB disconnect, device number 2 [ 178.345749][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 178.551941][ T9791] FAULT_INJECTION: forcing a failure. [ 178.551941][ T9791] name failslab, interval 1, probability 0, space 0, times 0 [ 178.555431][ T9791] CPU: 1 UID: 0 PID: 9791 Comm: syz.1.997 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 178.558143][ T9791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.560898][ T9791] Call Trace: [ 178.561787][ T9791] [ 178.562586][ T9791] dump_stack_lvl+0x16c/0x1f0 [ 178.563831][ T9791] should_fail_ex+0x497/0x5b0 [ 178.565063][ T9791] ? fs_reclaim_acquire+0xae/0x150 [ 178.566405][ T9791] should_failslab+0xc2/0x120 [ 178.567636][ T9791] __kmalloc_cache_noprof+0x68/0x420 [ 178.569059][ T9791] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 178.570984][ T9791] genl_start+0x1e7/0x960 [ 178.572113][ T9791] __netlink_dump_start+0x615/0x980 [ 178.573496][ T9791] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 178.575000][ T9791] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 178.576619][ T9791] ? genl_op_from_small+0x25/0x440 [ 178.577977][ T9791] ? __pfx_genl_start+0x10/0x10 [ 178.579253][ T9791] ? __pfx_genl_dumpit+0x10/0x10 [ 178.580554][ T9791] ? __pfx_genl_done+0x10/0x10 [ 178.581825][ T9791] ? bpf_lsm_capable+0x9/0x10 [ 178.583132][ T9791] ? security_capable+0x7e/0x260 [ 178.584437][ T9791] ? ns_capable+0xd7/0x110 [ 178.585619][ T9791] genl_rcv_msg+0x470/0x800 [ 178.586814][ T9791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.588153][ T9791] ? __pfx_batadv_bla_backbone_dump+0x10/0x10 [ 178.590064][ T9791] ? __pfx___lock_acquire+0x10/0x10 [ 178.591434][ T9791] netlink_rcv_skb+0x165/0x410 [ 178.592680][ T9791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.594011][ T9791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.595395][ T9791] ? down_read+0xc9/0x330 [ 178.596533][ T9791] ? __pfx_down_read+0x10/0x10 [ 178.597803][ T9791] ? netlink_deliver_tap+0x1ae/0xca0 [ 178.599193][ T9791] genl_rcv+0x28/0x40 [ 178.600243][ T9791] netlink_unicast+0x53c/0x7f0 [ 178.601504][ T9791] ? __pfx_netlink_unicast+0x10/0x10 [ 178.602896][ T9791] ? __phys_addr_symbol+0x30/0x80 [ 178.604221][ T9791] ? __check_object_size+0x488/0x710 [ 178.605612][ T9791] netlink_sendmsg+0x8b8/0xd70 [ 178.606868][ T9791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.608266][ T9791] ____sys_sendmsg+0x9ae/0xb40 [ 178.609530][ T9791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.610906][ T9791] ? get_compat_msghdr+0x11b/0x170 [ 178.612255][ T9791] ___sys_sendmsg+0x135/0x1e0 [ 178.613497][ T9791] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.614872][ T9791] ? __pfx_lock_release+0x10/0x10 [ 178.616186][ T9791] ? trace_lock_acquire+0x14e/0x1f0 [ 178.617564][ T9791] ? __fget_files+0x206/0x3a0 [ 178.619036][ T9791] __sys_sendmsg+0x16e/0x220 [ 178.620473][ T9791] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.621823][ T9791] ? ksys_write+0x17f/0x250 [ 178.623028][ T9791] __do_fast_syscall_32+0x73/0x120 [ 178.624894][ T9791] do_fast_syscall_32+0x32/0x80 [ 178.626274][ T9791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.627931][ T9791] RIP: 0023:0xf747e579 [ 178.629014][ T9791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 178.634102][ T9791] RSP: 002b:00000000f514557c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 178.636994][ T9791] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000400 [ 178.639277][ T9791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.641337][ T9791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.643396][ T9791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 178.645460][ T9791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.647517][ T9791] [ 179.364312][ T9814] 9pnet_fd: Insufficient options for proto=fd [ 180.344270][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1009'. [ 180.526198][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1010'. [ 180.528595][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 180.530832][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1010'. [ 180.533228][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1010'. [ 180.642647][ T9841] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 180.717217][ T9844] 9pnet_fd: Insufficient options for proto=fd [ 181.861710][ T9874] random: crng reseeded on system resumption [ 181.882890][ T9870] 9pnet_fd: Insufficient options for proto=fd [ 181.945074][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 181.957156][ T9876] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1023'. [ 182.346509][ T9882] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 182.354446][ T9882] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 182.492728][ T9886] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1027'. [ 182.495310][ T9886] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1027'. [ 182.498191][ T9886] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1027'. [ 183.571453][ T9926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.713931][ T9935] fuse: Bad value for 'rootmode' [ 183.839768][ T9939] overlayfs: upper fs needs to support d_type. [ 183.842296][ T9939] overlayfs: upper fs does not support tmpfile. [ 183.852039][ T9939] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.861466][ T9939] overlayfs: failed to set xattr on upper [ 183.863223][ T9939] overlayfs: ...falling back to redirect_dir=nofollow. [ 183.865049][ T9939] overlayfs: ...falling back to index=off. [ 183.866652][ T9939] overlayfs: ...falling back to uuid=null. [ 183.919782][ T9939] ------------[ cut here ]------------ [ 183.919892][ T9939] WARNING: CPU: 2 PID: 9939 at fs/overlayfs/dir.c:213 ovl_create_real+0x5ab/0x670 [ 183.928843][ T9939] Modules linked in: [ 183.928856][ T9939] CPU: 2 UID: 0 PID: 9939 Comm: syz.1.1043 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 183.928915][ T9939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.928924][ T9939] RIP: 0010:ovl_create_real+0x5ab/0x670 [ 183.937535][ T9939] Code: 89 e2 48 c7 c6 80 9b 89 8b 48 c7 c7 50 34 0d 90 e8 ba 23 bb 01 e9 d9 fb ff ff e8 00 5b ef fe e9 93 fc ff ff e8 06 a5 8c fe 90 <0f> 0b 90 4c 89 e3 49 c7 c4 fb ff ff ff e9 d5 fc ff ff e8 7e 38 0e [ 183.937606][ T9939] RSP: 0018:ffffc90023f8fc28 EFLAGS: 00010287 [ 183.937656][ T9939] RAX: 00000000000051e1 RBX: ffff8880009de178 RCX: ffffc9000c001000 [ 183.937721][ T9939] RDX: 0000000000080000 RSI: ffffffff830c9b7a RDI: ffff8880009de1e0 [ 183.937787][ T9939] RBP: 1ffff920047f1f86 R08: 0000000000000005 R09: 0000000000000000 [ 183.937796][ T9939] R10: 0000000000000000 R11: 0000000000000004 R12: ffff8880009de178 [ 183.953488][ T9939] R13: 0000000000000000 R14: ffff888012c0b9f0 R15: 000000000000a000 [ 183.955635][ T9939] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5166b40 [ 183.958120][ T9939] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 183.958177][ T9939] CR2: 000000000c33e9c8 CR3: 000000005d116000 CR4: 0000000000352ef0 [ 183.962179][ T9939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.962252][ T9939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.962262][ T9939] Call Trace: [ 183.962363][ T9939] [ 183.962370][ T9939] ? __warn+0xea/0x3c0 [ 183.962445][ T9939] ? ovl_create_real+0x5ab/0x670 [ 183.962531][ T9939] ? report_bug+0x3c0/0x580 [ 183.962621][ T9939] ? handle_bug+0x54/0xa0 [ 183.962694][ T9939] ? exc_invalid_op+0x17/0x50 [ 183.962784][ T9939] ? asm_exc_invalid_op+0x1a/0x20 [ 183.962881][ T9939] ? ovl_create_real+0x5aa/0x670 [ 183.962893][ T9939] ? ovl_create_real+0x5ab/0x670 [ 183.962904][ T9939] ? ovl_create_real+0x5aa/0x670 [ 183.962951][ T9939] ? __pfx_ovl_create_real+0x10/0x10 [ 183.963041][ T9939] ovl_create_or_link+0x2a4/0x800 [ 183.963127][ T9939] ? inode_init_owner+0x2d5/0x3c0 [ 183.963199][ T9939] ovl_create_object+0x268/0x300 [ 183.963285][ T9939] ? __pfx_ovl_create_object+0x10/0x10 [ 183.963299][ T9939] ? bpf_lsm_inode_permission+0x9/0x10 [ 183.963388][ T9939] ? security_inode_permission+0xbf/0x260 [ 183.963458][ T9939] ? inode_permission+0xdd/0x5f0 [ 183.963550][ T9939] vfs_symlink+0x3e8/0x660 [ 183.995841][ T9939] do_symlinkat+0x263/0x310 [ 183.997143][ T9939] ? __pfx_do_symlinkat+0x10/0x10 [ 183.998581][ T9939] ? getname_flags.part.0+0x1c5/0x550 [ 183.998676][ T9939] __ia32_sys_symlink+0x74/0x90 [ 183.998766][ T9939] __do_fast_syscall_32+0x73/0x120 [ 183.998839][ T9939] do_fast_syscall_32+0x32/0x80 [ 183.998888][ T9939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.998980][ T9939] RIP: 0023:0xf747e579 [ 183.999020][ T9939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.999033][ T9939] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 183.999102][ T9939] RAX: ffffffffffffffda RBX: 00000000200003c0 RCX: 0000000020000000 [ 183.999184][ T9939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.999201][ T9939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.999256][ T9939] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 183.999319][ T9939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.999390][ T9939] [ 183.999398][ T9939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.999404][ T9939] CPU: 2 UID: 0 PID: 9939 Comm: syz.1.1043 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 183.999417][ T9939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.999432][ T9939] Call Trace: [ 183.999436][ T9939] [ 183.999440][ T9939] dump_stack_lvl+0x3d/0x1f0 [ 183.999454][ T9939] panic+0x71d/0x800 [ 183.999469][ T9939] ? __pfx_panic+0x10/0x10 [ 183.999483][ T9939] ? show_trace_log_lvl+0x29d/0x3d0 [ 183.999500][ T9939] ? ovl_create_real+0x5ab/0x670 [ 183.999510][ T9939] check_panic_on_warn+0xab/0xb0 [ 183.999525][ T9939] __warn+0xf6/0x3c0 [ 183.999538][ T9939] ? ovl_create_real+0x5ab/0x670 [ 183.999548][ T9939] report_bug+0x3c0/0x580 [ 183.999561][ T9939] handle_bug+0x54/0xa0 [ 183.999574][ T9939] exc_invalid_op+0x17/0x50 [ 183.999588][ T9939] asm_exc_invalid_op+0x1a/0x20 [ 183.999600][ T9939] RIP: 0010:ovl_create_real+0x5ab/0x670 [ 183.999610][ T9939] Code: 89 e2 48 c7 c6 80 9b 89 8b 48 c7 c7 50 34 0d 90 e8 ba 23 bb 01 e9 d9 fb ff ff e8 00 5b ef fe e9 93 fc ff ff e8 06 a5 8c fe 90 <0f> 0b 90 4c 89 e3 49 c7 c4 fb ff ff ff e9 d5 fc ff ff e8 7e 38 0e [ 183.999620][ T9939] RSP: 0018:ffffc90023f8fc28 EFLAGS: 00010287 [ 183.999629][ T9939] RAX: 00000000000051e1 RBX: ffff8880009de178 RCX: ffffc9000c001000 [ 183.999636][ T9939] RDX: 0000000000080000 RSI: ffffffff830c9b7a RDI: ffff8880009de1e0 [ 183.999643][ T9939] RBP: 1ffff920047f1f86 R08: 0000000000000005 R09: 0000000000000000 [ 183.999649][ T9939] R10: 0000000000000000 R11: 0000000000000004 R12: ffff8880009de178 [ 183.999656][ T9939] R13: 0000000000000000 R14: ffff888012c0b9f0 R15: 000000000000a000 [ 183.999666][ T9939] ? ovl_create_real+0x5aa/0x670 [ 183.999677][ T9939] ? ovl_create_real+0x5aa/0x670 [ 183.999687][ T9939] ? __pfx_ovl_create_real+0x10/0x10 [ 183.999701][ T9939] ovl_create_or_link+0x2a4/0x800 [ 183.999711][ T9939] ? inode_init_owner+0x2d5/0x3c0 [ 183.999726][ T9939] ovl_create_object+0x268/0x300 [ 183.999736][ T9939] ? __pfx_ovl_create_object+0x10/0x10 [ 183.999747][ T9939] ? bpf_lsm_inode_permission+0x9/0x10 [ 183.999761][ T9939] ? security_inode_permission+0xbf/0x260 [ 183.999774][ T9939] ? inode_permission+0xdd/0x5f0 [ 183.999790][ T9939] vfs_symlink+0x3e8/0x660 [ 183.999802][ T9939] do_symlinkat+0x263/0x310 [ 183.999815][ T9939] ? __pfx_do_symlinkat+0x10/0x10 [ 183.999828][ T9939] ? getname_flags.part.0+0x1c5/0x550 [ 183.999845][ T9939] __ia32_sys_symlink+0x74/0x90 [ 183.999858][ T9939] __do_fast_syscall_32+0x73/0x120 [ 183.999875][ T9939] do_fast_syscall_32+0x32/0x80 [ 183.999889][ T9939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.999904][ T9939] RIP: 0023:0xf747e579 [ 183.999911][ T9939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.999921][ T9939] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 183.999930][ T9939] RAX: ffffffffffffffda RBX: 00000000200003c0 RCX: 0000000020000000 [ 183.999937][ T9939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.999943][ T9939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.999949][ T9939] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 183.999955][ T9939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.999968][ T9939] [ 184.000380][ T9939] Kernel Offset: disabled VM DIAGNOSIS: 03:22:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=00000000200525d8 RDX=0000000000080000 RSI=ffffffff88f44d22 RDI=0000000000000005 RBP=ffffc9000ea6fd60 RSP=ffffc9000ea6f9b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000080000002 R11=0000000000000000 R12=0000000000000000 R13=00000000200525c0 R14=ffffc9000ea6fda4 R15=0000000080000002 RIP=ffffffff8b1a7c97 RFL=00040246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=000000006a606000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffffffff969c1230 RSI=1ffff110039dba6b RDI=ffff88802b528a90 RBP=0000000000000000 RSP=ffffc9000047f928 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff901cc057 R11=0000000000000001 R12=ffff88802b528a88 R13=ffff88801cedc880 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8175f822 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c384c99 CR3=000000006a606000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffffffff2d6e48b RBX=ffffffff969b8b08 RCX=1ffffffff2ba919c RDX=0000000000000006 RSI=000000000002e0eb RDI=ffffffff969b8b64 RBP=ffffffff96b724d8 RSP=ffffc90023f8f240 R8 =0000000000000000 R9 =ffffffff969f06a0 R10=0000000000000003 R11=00000000000003ca R12=ffffffff81753e80 R13=ffffffff96b724c8 R14=dffffc0000000000 R15=ffffffff96b724c8 RIP=ffffffff81758b05 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c33e9c8 CR3=000000005d116000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000498d35 RBX=0000000000000003 RCX=ffffffff8b1ae889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb13940 RBP=ffffed1003a56488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2b2440 R14=ffffffff901cc050 R15=0000000000000000 RIP=ffffffff8b1afc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001180 CR3=00000000228ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000