last executing test programs: 5m38.535402898s ago: executing program 0 (id=1018): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="190200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) syz_emit_vhci(0x0, 0x7) (async, rerun: 64) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000180)={0x980915, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) (async) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x8, 0x4000001, 0x10}}, 0x11c) (async) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x105c81) (async, rerun: 64) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc) (async, rerun: 64) epoll_create(0x2) (async, rerun: 64) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f00000003c0)=""/52, 0x34}], 0x2) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) (async, rerun: 32) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000000040000000']) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) (async) listen(r4, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4003}, {0x6}]}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 64) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) read(r7, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 5m37.641996687s ago: executing program 0 (id=1021): recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="fcffffff00000000000000002d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, &(0x7f00000001c0)}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5m36.582802519s ago: executing program 0 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}}, 0x0) (fail_nth: 7) 5m36.409885463s ago: executing program 0 (id=1030): r0 = socket(0xa, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r2, 0x0, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HOOK={0x184, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x33c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x56, &(0x7f00000003c0)=[{&(0x7f0000000380)={0x10, 0x814, 0x1, 0x20, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x20000070) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x2, [{0x1, 0x1}, {0xd, 0x1}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0x9, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) sendto$inet6(r0, &(0x7f0000000140)="f0", 0x1, 0x20004000, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback, 0x8}, 0x1c) listen(r0, 0x100) 5m34.969419373s ago: executing program 0 (id=1033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m33.549417202s ago: executing program 0 (id=1036): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c010000100005040000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000ff00000f677149000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000060001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000a0190000800000001122334455667788990011223344d566bd43f64a74aac5deac2dc416b96823cfb9266513f69961faad65fd2a66babd33d2a8bfc541c4d750cfd35fa9c8dfcecf6a1b81c1"], 0x14c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[], 0x17) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="09042cbd7000fddbdf257c00000008000300", @ANYRES32, @ANYBLOB="0c00990008000000060000000a00060008021100000100000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf255300000008000300bb20a8b53231721be9350c0cce2c2acaf527ceda3ebf301dccbcb482b552f0e7d352034cf3a094d1c984e7d02aa928fdd775e97ad718e12d0789ce27e8a995ef2806931f7cf7", @ANYRES32=r6, @ANYBLOB="0c009900ff01000062000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x14, 0x0, 0x0) setns(0xc9, 0x0) fcntl$setlease(r1, 0x400, 0x1) r8 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) listen(r2, 0x5) r9 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r9, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r9, &(0x7f0000000600)="12", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)=ANY=[@ANYBLOB="bd7000"/20, @ANYRES32=0x0, @ANYBLOB="04000000680200001800128008000100736974000c00028008000300e0000002"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="675b132afe8fb470dce6a0234241e8f3", 0x10) 5m32.897190539s ago: executing program 32 (id=1036): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c010000100005040000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[], 0x17) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="09042cbd7000fddbdf257c00000008000300", @ANYRES32, @ANYBLOB="0c00990008000000060000000a00060008021100000100000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf255300000008000300bb20a8b53231721be9350c0cce2c2acaf527ceda3ebf301dccbcb482b552f0e7d352034cf3a094d1c984e7d02aa928fdd775e97ad718e12d0789ce27e8a995ef2806931f7cf7", @ANYRES32=r6, @ANYBLOB="0c009900ff01000062000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x14, 0x0, 0x0) setns(0xc9, 0x0) fcntl$setlease(r1, 0x400, 0x1) r8 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) listen(r2, 0x5) r9 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r9, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r9, &(0x7f0000000600)="12", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)=ANY=[@ANYBLOB="bd7000"/20, @ANYRES32=0x0, @ANYBLOB="04000000680200001800128008000100736974000c00028008000300e0000002"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="675b132afe8fb470dce6a0234241e8f3", 0x10) 11.41795399s ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, &(0x7f0000000180)=0xffffffffffffff7a) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 11.372114899s ago: executing program 3 (id=2211): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000440)={0x0, 0x0, [{0x7, 0x0, 0x7}, {0xb1, 0x0, 0xd8b}, {0xff, 0x0, 0xffffffff}, {0x6, 0x0, 0x2}, {0x7, 0x0, 0x1ff}, {0x10}, {0xf216, 0x0, 0x6}, {0x3, 0x0, 0x8}, {0x3ff, 0x0, 0x401}, {0x1, 0x0, 0xf76b331}, {0x0, 0x0, 0x8}, {0x4, 0x0, 0x2}, {0xe6fa, 0x0, 0x7a}, {0x7, 0x0, 0x383}, {0x10001, 0x0, 0x800}, {0x100, 0x0, 0x4}]}) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 9.205800185s ago: executing program 3 (id=2217): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8901, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffff9c, &(0x7f0000019540)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 8.477010485s ago: executing program 1 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060, 0xb}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x109102, 0x40) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x6}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) open_tree(0xffffffffffffffff, 0x0, 0x91000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x24000084) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x3b6000, 0x800, 0x0, 0x3}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 6.843484825s ago: executing program 1 (id=2220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x48050) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r4, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x2, 0x32) lseek(r7, 0x2, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000680)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "ff51ac9efbe275ac"}}}}}, 0x0) write$P9_RREMOVE(r7, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) 6.754117361s ago: executing program 1 (id=2222): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a'], 0xfe33) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'dummy0\x00'}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xf5, 0xb0, &(0x7f00000001c0)="e82add2570c271975c398fa037213d4be180980b0c5f3356411337e0106351434ea0d2eef17ec3acf2a875bab71bdd6ab86168a231ba4acab88057d3bb12f17154d21a5537ec1171e86475e0da6f6ff97e0505a1fe9639ceacf109786372d6c3ab8982d8f089674c316a62e4ceab947120a16a5a418c570db877c990b082a256d6c4e6c34d688cf81ddf47a7d12aa24af6edff8b9c830d9f5f535beb1561fb2636da4281135ebf1640abbae74b07a782a9a844d452798bf9fda4b73eb467a8f8feff42b6993b7363a6416baeace3683078f0cf8a9f16fe2c24482cd629a748aa4955a7d2bd2645ad1a8918ec005ca057d3c3e0b965", &(0x7f00000002c0)=""/176, 0x1, 0x0, 0x56, 0xa8, &(0x7f0000000400)="297b5a6432d12273df8ad3b628923d49dd422fddc1d9f431ba2c53be633df5d3fac8954d6497f1498d94510f6c42f9d5a0d9b18dedb503f95028e458681001a0d0110c617d6ba83bebd78d1eeeaee02e5365059b37ee", &(0x7f0000000480)="7e1fb82c8ece8f558715ebd29118d604d84ba5e9c65a1384f755e9037520334d8df1b97b93ccbc3d4a0f5d0c2e481628b963761295988ac5f6886253a7692fa2016557e47be98e359b0961c3e630bacd990633b042f949e90b137008b9029ea51424115cab476f224bc37203329243ea5797f1e011c3cfa52d52cf16f628a59bd04db6be90cf5e47daab5443d5b52c6328c4c00210f02239e659428bf740f17d44566af96aa2248a", 0x1}, 0x4c) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 6.428731387s ago: executing program 4 (id=2223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x8, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{}, "f758abb80300", "ff7f0039f160fe1351bf76f99b112bd8", "bb7c6052"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'pimreg\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x0, 0x0, "247b6b99a355"}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) 6.355026934s ago: executing program 1 (id=2224): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8901, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffff9c, &(0x7f0000019540)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.333181944s ago: executing program 3 (id=2225): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000440)={0x0, 0x0, [{0x7, 0x0, 0x7}, {0xb1, 0x0, 0xd8b}, {0xff, 0x0, 0xffffffff}, {0x6, 0x0, 0x2}, {0x7, 0x0, 0x1ff}, {0x10}, {0xf216, 0x0, 0x6}, {0x3, 0x0, 0x8}, {0x3ff, 0x0, 0x401}, {0x1, 0x0, 0xf76b331}, {0x0, 0x0, 0x8}, {0x4, 0x0, 0x2}, {0xe6fa, 0x0, 0x7a}, {0x7, 0x0, 0x383}, {0x10001, 0x0, 0x800}, {0x100, 0x0, 0x4}]}) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 6.332508211s ago: executing program 4 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060, 0xb}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x109102, 0x40) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x6}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) open_tree(0xffffffffffffffff, 0x0, 0x91000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x24000084) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x3b6000, 0x800, 0x0, 0x3}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5.712662037s ago: executing program 2 (id=2227): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c000001800000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r3, 0x31f, &(0x7f0000000340)={0x23, 0x1, 0xc, 0x87}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001080)={0x2020}, 0x2020) 4.595992313s ago: executing program 3 (id=2228): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000019100)={0x0, 0x4, 0x3, 0x69}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8901, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$procfs(0xffffff9c, &(0x7f0000019540)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.039166514s ago: executing program 1 (id=2229): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x128, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf79, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000001e40)=""/236, 0xec}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000c80)=""/123, 0x7b}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/71, 0x47}, {&(0x7f0000001d80)=""/56, 0x38}], 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='set', 0x3) write(r5, &(0x7f0000000240)='0000:00:1d.7', 0xc) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r8, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 4.038248014s ago: executing program 2 (id=2230): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x49) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x1ad0, 0x78, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, {}, {0x4, 0x3}, {0x20000}, {0x0, 0x9}, 0x0, 0x0, 0xeffffffd, 0x200, 0x1, 0x4, 0x8, 0x4, 0x1ff, 0x3b, 0x5, 0x3, 0x54, 0x200, 0x1, 0x4}) 2.878595177s ago: executing program 2 (id=2231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.800770278s ago: executing program 2 (id=2232): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xca241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x109, @remote}, 0x10) listen(r1, 0x10) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='vers\x00', &(0x7f0000000200)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f0000000300)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='timeo\x00', &(0x7f0000000380)='600\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='retrans\x00', &(0x7f0000000400)='10\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.799212065s ago: executing program 4 (id=2233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x10, &(0x7f0000001180)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 7) 2.598909442s ago: executing program 4 (id=2234): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000780)=""/185, 0xb9, 0x3c) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "429e25552e9e1563eb6052dc94f4b2d86841e9b28c1c84619b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r5, r3, 0x21, 0x10, 0x0, @void, @value=r3}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r2, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e21, 0x104, @loopback, 0x1}, @ib={0x1b, 0x40, 0x80000001, {"b35e601d9833f3973863a02ebc5b5dd3"}, 0x4, 0x7, 0x3663}}}, 0x118) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x80804120, &(0x7f00000022c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.540648726s ago: executing program 3 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000002000000800451c003c0065000000119078000000000000000000004e220028907804000000f8ffffff0b000000000000003ea481bb3b86ae46b6440f79672a306bb37fd551e4e6207314f9e8e4ff928fbe310bbf47a5398854811595dad9c499b8904bc48a04c388eef72d2ec0bda72e7461e3e7c76cd1250c0329de66ba82d639914d909f1474b539b13fdb556917dc5d9bc8d08dae499143a4969b68a2283dc334f39efa397da588902a3ca8c666f5d55df3f50fee4f1a722cb228f5f61f73ffff00000000000000"], 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x5c) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r7, 0x1) timer_delete(r1) socket$kcm(0x2, 0xa, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$PTRACE_GETSIGMASK(0x420a, r8, 0x8, &(0x7f0000000000)) 2.470749177s ago: executing program 4 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b01, &(0x7f0000000040)) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESOCT=r3, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r8, &(0x7f0000001440)=[{0x0}, {&(0x7f00000002c0)=""/208, 0xd0}, {0x0}], 0x3) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) 1.389837249s ago: executing program 4 (id=2237): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x140, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf79, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000001e40)=""/236, 0xec}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000c80)=""/123, 0x7b}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/71, 0x47}, {&(0x7f0000001d80)=""/56, 0x38}], 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='set', 0x3) write(r5, &(0x7f0000000240)='0000:00:1d.7', 0xc) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r8, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 1.280080145s ago: executing program 2 (id=2238): syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x7fc8, 0x2, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x9, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x38}}, 0x20081000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_ublk_add_dev(r6, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000500)=ANY=[@ANYBLOB="a1e07e2985f0d10180c2000000aaaaaaaaaa4e5796b5d6e2767f58a4d1017f7a26348140000086dd60910100001211fffe8000000000000000000000000000bbfe8000000000000000100000000000aa00000e220012907802030000000000000000"], 0x0) getsockname$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0xfff, 0x400000) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1d, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) syz_ublk_setup_queues(r10, r8, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r7, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$F2FS_IOC_SET_PIN_FILE(r12, 0x4004f50d, &(0x7f0000000040)=0x1) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000005fc0)={@loopback, @private1, @empty, 0x7, 0x5, 0x83d, 0x500, 0x6, 0x19c0012, r13}) 490.371663ms ago: executing program 1 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats\x00') read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write$P9_RSTATu(r4, &(0x7f0000000000)=ANY=[], 0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8, 0x1, 0xeabc, 0x8000, 0x1, 0x60fb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x39000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x1c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r11, &(0x7f0000000840)=ANY=[], 0x11b0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffff5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r13, r14, 0x26, 0x0, @void}, 0x10) close(r14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf8e, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x85, &(0x7f00000001c0)=""/133, 0x41100, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x0, 0x80}, 0x10, 0xdee3, r4, 0x7, &(0x7f00000005c0)=[r5, r7, r8, r9, r11, 0x1, r12, r14], &(0x7f0000000600)=[{0x2, 0x4, 0xf, 0xc}, {0x3, 0x4, 0x2, 0xb}, {0x0, 0x5, 0x5, 0x8}, {0x2, 0x3, 0xc, 0x6}, {0x5, 0x3, 0x9, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x3, 0xc, 0x7}], 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 0s ago: executing program 2 (id=2240): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x101, 0x181902) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)="3434313030232c01000000302c39363030302c3137363430f0950000323030302c3335320000000000", 0x29) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): ame failslab, interval 1, probability 0, space 0, times 0 [ 490.639589][T13264] CPU: 2 UID: 0 PID: 13264 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.639622][T13264] Tainted: [L]=SOFTLOCKUP [ 490.639627][T13264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.639634][T13264] Call Trace: [ 490.639650][T13264] [ 490.639657][T13264] dump_stack_lvl+0x100/0x190 [ 490.639699][T13264] should_fail_ex.cold+0x5/0xa [ 490.639715][T13264] should_failslab+0xc2/0x120 [ 490.639734][T13264] __kmalloc_noprof+0xfc/0x820 [ 490.639750][T13264] ? is_bpf_text_address+0x8a/0x1a0 [ 490.639764][T13264] ? bpf_test_init.isra.0+0x88/0x100 [ 490.639838][T13264] bpf_test_init.isra.0+0x88/0x100 [ 490.639854][T13264] bpf_prog_test_run_skb+0x497/0x3540 [ 490.639874][T13264] ? find_held_lock+0x2b/0x80 [ 490.639891][T13264] ? __fget_files+0x1d0/0x3d0 [ 490.639941][T13264] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 490.639958][T13264] ? fput+0x7c/0x100 [ 490.639976][T13264] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 490.639993][T13264] __sys_bpf+0x2a12/0x4e80 [ 490.640012][T13264] ? __pfx___sys_bpf+0x10/0x10 [ 490.640027][T13264] ? find_held_lock+0x2b/0x80 [ 490.640041][T13264] ? get_pid_task+0xfc/0x250 [ 490.640057][T13264] ? get_pid_task+0xfc/0x250 [ 490.640075][T13264] ? proc_fail_nth_write+0x9f/0x220 [ 490.640096][T13264] ? find_held_lock+0x2b/0x80 [ 490.640114][T13264] ? rcu_read_lock_any_held+0x6a/0x90 [ 490.640130][T13264] ? find_held_lock+0x2b/0x80 [ 490.640145][T13264] ? ksys_write+0x190/0x250 [ 490.640157][T13264] ? ksys_write+0x190/0x250 [ 490.640180][T13264] ? fput+0x7c/0x100 [ 490.640196][T13264] ? __ia32_sys_bpf+0xcc/0x170 [ 490.640210][T13264] __ia32_sys_bpf+0xcc/0x170 [ 490.640225][T13264] ? __do_fast_syscall_32+0xb3/0x8b0 [ 490.640237][T13264] __do_fast_syscall_32+0x13a/0x8b0 [ 490.640247][T13264] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.640264][T13264] do_fast_syscall_32+0x32/0x70 [ 490.640275][T13264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.640289][T13264] RIP: 0023:0xf6fdefec [ 490.640304][T13264] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 490.640309][T13264] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 490.640320][T13264] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800000c0 [ 490.640327][T13264] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.640334][T13264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.640341][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.640347][T13264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.640360][T13264] [ 490.786177][ T42] kauditd_printk_skb: 362 callbacks suppressed [ 490.786192][ T42] audit: type=1326 audit(1787241023.544:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704efec code=0x7ffc0000 [ 490.803029][ T42] audit: type=1326 audit(1787241023.564:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704f017 code=0x7ffc0000 [ 490.818819][ T42] audit: type=1326 audit(1787241023.564:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704efec code=0x7ffc0000 [ 490.827925][ T42] audit: type=1326 audit(1787241023.564:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704f017 code=0x7ffc0000 [ 490.836812][ T42] audit: type=1326 audit(1787241023.564:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704efec code=0x7ffc0000 [ 490.847277][ T42] audit: type=1326 audit(1787241023.564:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704f017 code=0x7ffc0000 [ 490.857853][ T42] audit: type=1326 audit(1787241023.564:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704efec code=0x7ffc0000 [ 490.866958][ T42] audit: type=1326 audit(1787241023.564:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704f017 code=0x7ffc0000 [ 490.877819][ T42] audit: type=1326 audit(1787241023.564:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704efec code=0x7ffc0000 [ 490.888830][ T42] audit: type=1326 audit(1787241023.564:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13256 comm="syz.4.1846" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704f017 code=0x7ffc0000 [ 491.320638][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 491.497569][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.537593][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.559331][T13304] pim6reg: entered allmulticast mode [ 493.577573][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.787023][T13304] team0: entered allmulticast mode [ 493.791940][T13304] team0: left allmulticast mode [ 493.794893][T13304] pim6reg: left allmulticast mode [ 494.617542][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.637904][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 495.657584][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.110863][T13333] netlink: 'syz.4.1866': attribute type 1 has an invalid length. [ 496.241271][T13333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.260779][T13336] FAULT_INJECTION: forcing a failure. [ 496.260779][T13336] name failslab, interval 1, probability 0, space 0, times 0 [ 496.270355][T13336] CPU: 2 UID: 0 PID: 13336 Comm: syz.4.1866 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.270375][T13336] Tainted: [L]=SOFTLOCKUP [ 496.270379][T13336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.270386][T13336] Call Trace: [ 496.270392][T13336] [ 496.270398][T13336] dump_stack_lvl+0x100/0x190 [ 496.270418][T13336] should_fail_ex.cold+0x5/0xa [ 496.270432][T13336] should_failslab+0xc2/0x120 [ 496.270444][T13336] __kvmalloc_node_noprof+0x116/0x970 [ 496.270473][T13336] ? lockdep_init_map_type+0x5c/0x250 [ 496.270490][T13336] ? alloc_netdev_mqs+0xb4e/0x15c0 [ 496.270518][T13336] ? __pfx_veth_setup+0x10/0x10 [ 496.270564][T13336] alloc_netdev_mqs+0xb4e/0x15c0 [ 496.270579][T13336] rtnl_create_link+0xc13/0xf80 [ 496.270596][T13336] rtnl_newlink+0x13bd/0x2380 [ 496.270614][T13336] ? __pfx_rtnl_newlink+0x10/0x10 [ 496.270627][T13336] ? rcu_is_watching+0x13/0xc0 [ 496.270642][T13336] ? kasan_quarantine_put+0x104/0x240 [ 496.270661][T13336] ? kfree_skbmem+0x19a/0x210 [ 496.270675][T13336] ? kmem_cache_free+0x127/0x6b0 [ 496.270695][T13336] ? find_held_lock+0x2b/0x80 [ 496.270715][T13336] ? find_held_lock+0x2b/0x80 [ 496.270729][T13336] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 496.270742][T13336] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 496.270755][T13336] ? __pfx_rtnl_newlink+0x10/0x10 [ 496.270768][T13336] rtnetlink_rcv_msg+0x95e/0xe90 [ 496.270783][T13336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.270800][T13336] ? ref_tracker_free+0x37e/0x6c0 [ 496.270846][T13336] netlink_rcv_skb+0x159/0x420 [ 496.270862][T13336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.270877][T13336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.270897][T13336] ? netlink_deliver_tap+0x1ae/0xcc0 [ 496.270915][T13336] netlink_unicast+0x585/0x850 [ 496.270933][T13336] ? __pfx_netlink_unicast+0x10/0x10 [ 496.270954][T13336] netlink_sendmsg+0x8b0/0xda0 [ 496.270972][T13336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.270990][T13336] ? apparmor_socket_sendmsg+0x15b/0x270 [ 496.271028][T13336] ____sys_sendmsg+0xa4d/0xbe0 [ 496.271043][T13336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.271060][T13336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.271082][T13336] ___sys_sendmsg+0x190/0x1e0 [ 496.271099][T13336] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.271121][T13336] ? find_held_lock+0x2b/0x80 [ 496.271145][T13336] __sys_sendmsg+0x160/0x210 [ 496.271158][T13336] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.271174][T13336] ? __pfx_ksys_write+0x10/0x10 [ 496.271191][T13336] __do_fast_syscall_32+0x13a/0x8b0 [ 496.271203][T13336] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.271220][T13336] do_fast_syscall_32+0x32/0x70 [ 496.271231][T13336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.271245][T13336] RIP: 0023:0xf704efec [ 496.271260][T13336] Code: Unable to access opcode bytes at 0xf704efc2. [ 496.271265][T13336] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 496.271276][T13336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 496.271282][T13336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.271289][T13336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.271295][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.271301][T13336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.271316][T13336] [ 496.271547][T13333] netlink: 'syz.4.1866': attribute type 10 has an invalid length. [ 496.406884][T13337] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 496.410884][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1866'. [ 496.414446][T13333] dummy0: entered promiscuous mode [ 496.456480][T13333] bond1: (slave dummy0): Releasing backup interface [ 496.697577][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 496.755649][T13339] serial 00:04: in use; can't configure [ 496.758519][T13339] ehci-pci 0000:00:1d.7: remove, state 1 [ 496.760428][T13339] usb usb2: USB disconnect, device number 1 [ 496.762381][T13339] usb 2-1: USB disconnect, device number 2 [ 496.788503][T13339] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 496.871535][T13349] wg2 speed is unknown, defaulting to 1000 [ 497.206171][T13355] jffs2: notice: (13355) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 497.223951][T13355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 497.226413][T13355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.229888][T13355] vhci_hcd vhci_hcd.0: Device attached [ 497.250444][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 497.256948][T13357] vhci_hcd: connection closed [ 497.257406][ T13] vhci_hcd vhci_hcd.2: stop threads [ 497.264447][ T13] vhci_hcd vhci_hcd.2: release socket [ 497.271424][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 497.278110][ T9] usb 1-1: new full-speed USB device number 45 using uhci_hcd [ 497.444637][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 497.451447][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 497.479362][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 497.482997][ T9] usb 1-1: Product: QEMU USB Tablet [ 497.485192][ T9] usb 1-1: Manufacturer: QEMU [ 497.487102][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 497.524792][T13362] FAULT_INJECTION: forcing a failure. [ 497.524792][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 497.526379][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.005D/input/input103 [ 497.530001][T13362] CPU: 2 UID: 0 PID: 13362 Comm: syz.4.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.530027][T13362] Tainted: [L]=SOFTLOCKUP [ 497.530033][T13362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.530043][T13362] Call Trace: [ 497.530063][T13362] [ 497.530072][T13362] dump_stack_lvl+0x100/0x190 [ 497.530100][T13362] should_fail_ex.cold+0x5/0xa [ 497.530123][T13362] should_failslab+0xc2/0x120 [ 497.530141][T13362] __kmalloc_noprof+0xfc/0x820 [ 497.530159][T13362] ? __memcg_list_lru_alloc+0x418/0x680 [ 497.530177][T13362] __memcg_list_lru_alloc+0x418/0x680 [ 497.530192][T13362] ? xa_load+0x149/0x2c0 [ 497.530207][T13362] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 497.530228][T13362] ? rcu_read_unlock+0x17/0x60 [ 497.530254][T13362] memcg_list_lru_alloc+0xd3/0x100 [ 497.530278][T13362] __memcg_slab_post_alloc_hook+0x28e/0x1160 [ 497.530302][T13362] ? kasan_save_track+0x14/0x30 [ 497.530324][T13362] kmem_cache_alloc_lru_noprof+0x57f/0x6a0 [ 497.530351][T13362] ? jffs2_alloc_inode+0x25/0x50 [ 497.530401][T13362] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 497.530417][T13362] jffs2_alloc_inode+0x25/0x50 [ 497.530430][T13362] alloc_inode+0x68/0x250 [ 497.530448][T13362] new_inode+0x22/0x1c0 [ 497.530467][T13362] jffs2_new_inode+0xc5/0xcf0 [ 497.530484][T13362] ? trace_kmem_cache_alloc+0xdd/0x100 [ 497.530504][T13362] ? __pfx_jffs2_new_inode+0x10/0x10 [ 497.530523][T13362] ? jffs2_create+0x27/0x390 [ 497.530549][T13362] jffs2_create+0x94/0x390 [ 497.530571][T13362] ? __pfx_jffs2_create+0x10/0x10 [ 497.530590][T13362] lookup_open+0x1255/0x1990 [ 497.530619][T13362] path_openat+0xa2c/0x2440 [ 497.530646][T13362] ? __pfx_path_openat+0x10/0x10 [ 497.530669][T13362] do_file_open+0x20e/0x430 [ 497.530691][T13362] ? __pfx_do_file_open+0x10/0x10 [ 497.530731][T13362] ? _raw_spin_unlock+0x28/0x50 [ 497.530754][T13362] ? alloc_fd+0x471/0x7a0 [ 497.530783][T13362] do_sys_openat2+0x10f/0x1e0 [ 497.530810][T13362] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.530830][T13362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.530849][T13362] __ia32_compat_sys_openat+0x12d/0x210 [ 497.530862][T13362] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 497.530873][T13362] ? fput+0x7c/0x100 [ 497.530888][T13362] ? ksys_write+0x1ac/0x250 [ 497.530900][T13362] ? __pfx_ksys_write+0x10/0x10 [ 497.530920][T13362] __do_fast_syscall_32+0x13a/0x8b0 [ 497.530932][T13362] ? lockdep_hardirqs_on+0x7d/0x110 [ 497.530949][T13362] do_fast_syscall_32+0x32/0x70 [ 497.530960][T13362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.530975][T13362] RIP: 0023:0xf704efec [ 497.530993][T13362] Code: Unable to access opcode bytes at 0xf704efc2. [ 497.531001][T13362] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 497.531030][T13362] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 497.531041][T13362] RDX: 0000000000000042 RSI: 00000000000001ff RDI: 0000000000000000 [ 497.531052][T13362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.531059][T13362] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 497.531066][T13362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.531081][T13362] [ 497.734848][ T9] hid-generic 0003:0627:0001.005D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 497.737594][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.759591][T13344] usb 1-1: USB disconnect, device number 45 [ 498.357931][T13344] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 498.378711][T13344] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 498.395714][T13344] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 498.417727][T13344] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 498.422006][T13344] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 498.432734][T13344] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 498.435376][T13344] usb usb2: Product: EHCI Host Controller [ 498.437200][T13344] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 498.439722][T13344] usb usb2: SerialNumber: 0000:00:1d.7 [ 498.448698][T13344] hub 2-0:1.0: USB hub found [ 498.453508][T13344] hub 2-0:1.0: 6 ports detected [ 498.487389][T13367] fido_id[13367]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 498.500618][T13344] hub 1-0:1.0: USB hub found [ 498.502794][T13344] hub 1-0:1.0: 2 ports detected [ 498.540610][T13344] hub 3-0:1.0: USB hub found [ 498.543263][T13344] hub 3-0:1.0: 2 ports detected [ 498.594791][T13344] hub 4-0:1.0: USB hub found [ 498.602072][T13344] hub 4-0:1.0: 2 ports detected [ 498.727557][ T5817] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 498.777589][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.898391][ T5817] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 498.918692][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 498.922185][ T5817] usb 2-1: Product: QEMU USB Tablet [ 498.924528][ T5817] usb 2-1: Manufacturer: QEMU [ 498.926700][ T5817] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 498.952515][ T5817] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.005E/input/input104 [ 499.022189][ T5817] hid-generic 0003:0627:0001.005E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 499.500566][T13384] Cannot find del_set index 4 as target [ 499.817582][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.863901][T13396] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1875'. [ 499.882267][T13396] tmpfs: Bad value for 'size' [ 500.583070][T13410] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 500.857523][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.114449][T13419] pim6reg: entered allmulticast mode [ 501.268587][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.489853][T13418] team0: entered allmulticast mode [ 501.491599][T13418] team_slave_0: entered allmulticast mode [ 501.493845][T13418] team_slave_1: entered allmulticast mode [ 501.523828][T13418] team0: left allmulticast mode [ 501.525726][T13418] team_slave_0: left allmulticast mode [ 501.527840][T13418] team_slave_1: left allmulticast mode [ 501.530884][T13418] pim6reg: left allmulticast mode [ 501.907518][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.218414][T13435] Console: switching to colour dummy device 80x25 [ 502.303768][T13436] netlink: 'syz.4.1889': attribute type 10 has an invalid length. [ 502.307144][T13436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1889'. [ 502.494909][T13438] xt_HMARK: proto mask must be zero with L3 mode [ 502.518222][T13443] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 502.575217][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 502.603775][T13443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.660792][T13445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1892'. [ 502.704448][T13448] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 502.743959][T13447] vlan2: entered allmulticast mode [ 502.746440][T13447] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 502.751542][T13447] bridge0: port 1(vlan2) entered blocking state [ 502.754978][T13447] bridge0: port 1(vlan2) entered disabled state [ 502.757314][T13448] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 502.760470][T13448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1891'. [ 502.772309][T13447] vlan2: entered promiscuous mode [ 502.774142][T13447] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 502.785777][T13443] dummy0: left promiscuous mode [ 502.798980][T13443] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 502.805295][T13448] dummy0: entered promiscuous mode [ 502.820932][T13448] bond2: (slave dummy0): Releasing backup interface [ 502.916392][T13453] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1893'. [ 502.937507][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.052185][T13453] tmpfs: Bad value for 'size' [ 503.818694][T13467] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 503.839627][T13467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.921945][T13467] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 503.927004][T13471] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 503.955672][T13467] netlink: 'syz.2.1898': attribute type 10 has an invalid length. [ 503.958291][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1898'. [ 503.961293][T13467] dummy0: entered promiscuous mode [ 503.978697][T13467] bond2: (slave dummy0): Releasing backup interface [ 503.987631][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.107121][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 504.317565][ T6441] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 504.342564][ T5742] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 504.345460][ T5742] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 504.489218][ T6441] usb 9-1: Using ep0 maxpacket: 8 [ 504.492235][ T6441] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.514096][ T6441] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.517709][ T6441] usb 9-1: config 0 has no interface number 0 [ 504.520353][ T6441] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 504.525127][ T6441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.533425][ T6441] usb 9-1: config 0 descriptor?? [ 504.539892][ T6441] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 504.671750][ T42] kauditd_printk_skb: 400 callbacks suppressed [ 504.671768][ T42] audit: type=1800 audit(1787241035.438:962): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1902" name="pnp_string" dev="configfs" ino=43066 res=0 errno=0 [ 505.017697][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.101910][T13505] serial 00:04: in use; can't configure [ 505.108159][T13505] ehci-pci 0000:00:1d.7: remove, state 1 [ 505.110511][T13505] usb usb2: USB disconnect, device number 1 [ 505.113038][T13505] usb 2-1: USB disconnect, device number 2 [ 505.279026][ T850] usb 9-1: USB disconnect, device number 12 [ 505.351101][T13505] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 505.766006][ T9] usb 1-1: new full-speed USB device number 46 using uhci_hcd [ 506.067556][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.233652][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 506.237130][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 506.263659][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 506.266367][ T9] usb 1-1: Product: QEMU USB Tablet [ 506.269207][ T9] usb 1-1: Manufacturer: QEMU [ 506.270956][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 506.293259][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.005F/input/input105 [ 506.641512][ T5742] Bluetooth: hci1: unexpected event for opcode 0x100c [ 507.097543][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.769295][ T9] hid-generic 0003:0627:0001.005F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 507.876202][T13506] usb 1-1: USB disconnect, device number 46 [ 507.961342][T13532] fido_id[13532]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 508.054471][T13506] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 508.067011][T13506] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 508.071838][T13506] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 508.087681][T13506] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 508.092602][T13506] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 508.101144][T13506] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 508.104733][T13506] usb usb2: Product: EHCI Host Controller [ 508.107311][T13506] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 508.110535][T13506] usb usb2: SerialNumber: 0000:00:1d.7 [ 508.129598][T13506] hub 2-0:1.0: USB hub found [ 508.133643][T13506] hub 2-0:1.0: 6 ports detected [ 508.137513][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.192116][T13506] hub 1-0:1.0: USB hub found [ 508.197652][T13506] hub 1-0:1.0: 2 ports detected [ 508.240836][T13506] hub 3-0:1.0: USB hub found [ 508.250767][T13506] hub 3-0:1.0: 2 ports detected [ 508.301521][T13506] hub 4-0:1.0: USB hub found [ 508.306730][T13506] hub 4-0:1.0: 2 ports detected [ 508.447710][ T6716] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 508.638301][ T6716] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 508.880590][T13546] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 509.177547][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.301515][T13549] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 509.304370][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1916'. [ 509.446387][ T6716] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 509.449193][ T6716] usb 2-1: Product: QEMU USB Tablet [ 509.450936][ T6716] usb 2-1: Manufacturer: QEMU [ 509.452524][ T6716] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 509.465133][T13546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.472685][ T6716] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0060/input/input106 [ 509.524011][T13552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 509.545252][T13547] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 509.551524][ T6716] hid-generic 0003:0627:0001.0060: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 509.556631][T13548] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 509.571326][T13549] dummy0: entered promiscuous mode [ 509.580019][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 509.582669][T13549] bond3: (slave dummy0): Releasing backup interface [ 509.760380][T13557] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 509.787512][T13557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.905294][T13557] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 509.909437][T13563] dummy0: left promiscuous mode [ 509.914490][T13563] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 510.010911][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 510.207610][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 510.217709][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.584354][T13557] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 510.587573][T13557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1920'. [ 510.594666][T13557] dummy0: entered promiscuous mode [ 510.598275][T13557] bond2: (slave dummy0): Removing an active aggregator [ 510.636928][T13557] bond2: (slave dummy0): Releasing backup interface [ 510.747126][T13572] serial 00:04: in use; can't configure [ 510.754663][T13572] ehci-pci 0000:00:1d.7: remove, state 1 [ 510.756907][T13572] usb usb2: USB disconnect, device number 1 [ 510.759120][T13572] usb 2-1: USB disconnect, device number 2 [ 511.199709][T13572] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 511.267520][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.518708][T13578] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 511.531174][T13570] IPv6: sit1: Disabled Multicast RS [ 511.533605][T13570] sit1: entered allmulticast mode [ 511.956702][ T850] usb 1-1: new full-speed USB device number 47 using uhci_hcd [ 512.297611][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.644519][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 512.648611][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 512.669340][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 512.672717][ T850] usb 1-1: Product: QEMU USB Tablet [ 512.674816][ T850] usb 1-1: Manufacturer: QEMU [ 512.676725][ T850] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 512.698803][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0061/input/input107 [ 512.772008][ T850] hid-generic 0003:0627:0001.0061: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 512.780049][T13574] usb 1-1: USB disconnect, device number 47 [ 512.934965][T13574] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 512.946734][T13574] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 512.956405][T13574] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 512.979265][T13574] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 512.982431][T13574] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 512.986087][T13595] fido_id[13595]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 512.991736][T13574] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 512.996396][T13574] usb usb2: Product: EHCI Host Controller [ 512.999662][T13574] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 513.001851][T13574] usb usb2: SerialNumber: 0000:00:1d.7 [ 513.013859][T13574] hub 2-0:1.0: USB hub found [ 513.016225][T13574] hub 2-0:1.0: 6 ports detected [ 513.061933][T13574] hub 1-0:1.0: USB hub found [ 513.066079][T13574] hub 1-0:1.0: 2 ports detected [ 513.111548][T13574] hub 3-0:1.0: USB hub found [ 513.114490][T13574] hub 3-0:1.0: 2 ports detected [ 513.169540][T13574] hub 4-0:1.0: USB hub found [ 513.175085][T13574] hub 4-0:1.0: 2 ports detected [ 513.307579][ T55] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 513.347654][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.498278][ T55] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 513.515319][ T55] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 513.518541][ T55] usb 2-1: Product: QEMU USB Tablet [ 513.520348][ T55] usb 2-1: Manufacturer: QEMU [ 513.522051][ T55] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 513.546157][ T55] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0062/input/input108 [ 513.623088][ T55] hid-generic 0003:0627:0001.0062: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 513.916312][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1932'. [ 513.921543][T13604] bridge_slave_1: left allmulticast mode [ 513.923528][T13604] bridge_slave_1: left promiscuous mode [ 513.926014][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.967108][T13604] bridge_slave_0: left allmulticast mode [ 513.969472][T13604] bridge_slave_0: left promiscuous mode [ 513.998399][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.238215][T13609] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 514.387552][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.643765][T13613] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 514.666306][T13609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.666375][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1933'. [ 514.924495][T13610] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 514.928659][T13612] dummy0: left promiscuous mode [ 514.979908][T13612] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 514.992716][T13613] dummy0: entered promiscuous mode [ 514.999787][T13613] bond4: (slave dummy0): Releasing backup interface [ 515.019279][T13615] IPv6: sit1: Disabled Multicast RS [ 515.024123][T13615] sit1: entered allmulticast mode [ 515.086104][T13617] fuse: Unknown parameter 'user_id00000000000000000000' [ 515.391309][T13625] serial 00:04: in use; can't configure [ 515.395344][T13625] ehci-pci 0000:00:1d.7: remove, state 1 [ 515.398465][T13625] usb usb2: USB disconnect, device number 1 [ 515.400721][T13625] usb 2-1: USB disconnect, device number 2 [ 515.417674][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.587684][ T9190] page_pool_release_retry() stalled pool shutdown: id 99, 48 inflight 60 sec [ 515.711891][T13627] input: syz0 as /devices/virtual/input/input109 [ 516.010893][T13625] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 516.142907][T13639] program syz.4.1942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.457569][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.970284][T13639] infiniband syz0: set active [ 516.971858][T13639] infiniband syz0: added bond_slave_1 [ 516.979414][T13639] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 516.987502][T13639] infiniband syz0: Couldn't open port 1 [ 516.993527][T13639] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 516.999660][T13639] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 517.006551][T13639] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 517.159284][T13639] RDS/IB: syz0: added [ 517.160962][T13639] smc: adding ib device syz0 with port count 1 [ 517.163414][T13639] smc: ib device syz0 port 1 has no pnetid [ 517.497541][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.777617][ T850] usb 1-1: new full-speed USB device number 48 using uhci_hcd [ 517.943371][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 517.949128][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 517.973065][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 517.978827][ T850] usb 1-1: Product: QEMU USB Tablet [ 517.980483][ T850] usb 1-1: Manufacturer: QEMU [ 517.984965][ T850] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 518.015022][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0063/input/input110 [ 518.101688][ T850] hid-generic 0003:0627:0001.0063: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 518.119294][T13630] usb 1-1: USB disconnect, device number 48 [ 518.310215][T13630] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 518.311982][T13667] fido_id[13667]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 518.373189][T13630] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 518.381662][T13630] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 518.408577][T13630] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 518.433770][T13630] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 518.448125][T13630] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 518.457899][T13630] usb usb2: Product: EHCI Host Controller [ 518.466264][T13630] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 518.478327][T13630] usb usb2: SerialNumber: 0000:00:1d.7 [ 518.500409][T13630] hub 2-0:1.0: USB hub found [ 518.511142][T13630] hub 2-0:1.0: 6 ports detected [ 518.547551][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.625713][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.642068][T13630] hub 1-0:1.0: USB hub found [ 518.653984][T13630] hub 1-0:1.0: 2 ports detected [ 518.691914][T13677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.703854][T13630] hub 3-0:1.0: USB hub found [ 518.706643][T13630] hub 3-0:1.0: 2 ports detected [ 518.739558][T13630] hub 4-0:1.0: USB hub found [ 518.744259][T13630] hub 4-0:1.0: 2 ports detected [ 518.751105][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.867638][ T850] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 519.118400][ T850] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 519.192958][ T850] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 519.203039][ T850] usb 2-1: Product: QEMU USB Tablet [ 519.225222][ T850] usb 2-1: Manufacturer: QEMU [ 519.232806][ T850] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 519.475010][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0064/input/input111 [ 519.579374][ T850] hid-generic 0003:0627:0001.0064: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 519.587588][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.629341][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.646789][T13701] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 521.324535][T13711] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 521.359024][T13711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 521.510452][T13717] serial 00:04: in use; can't configure [ 521.519343][T13717] ehci-pci 0000:00:1d.7: remove, state 1 [ 521.521317][T13717] usb usb2: USB disconnect, device number 1 [ 521.523227][T13717] usb 2-1: USB disconnect, device number 2 [ 521.667555][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.781708][T13717] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 522.067551][ T850] usb 1-1: new full-speed USB device number 49 using uhci_hcd [ 522.243318][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 522.248303][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 522.272123][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 522.277194][ T850] usb 1-1: Product: QEMU USB Tablet [ 522.278980][ T850] usb 1-1: Manufacturer: QEMU [ 522.285086][ T850] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 522.305566][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0065/input/input112 [ 522.390188][ T850] hid-generic 0003:0627:0001.0065: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 522.402870][T13722] usb 1-1: USB disconnect, device number 49 [ 522.622955][T13739] fido_id[13739]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 522.655934][T13722] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 522.661357][T13722] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 522.671744][T13722] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 522.687628][T13722] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 522.691059][T13722] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 522.696363][T13722] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 522.699715][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.714731][T13722] usb usb2: Product: EHCI Host Controller [ 522.717139][T13722] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 522.727660][T13722] usb usb2: SerialNumber: 0000:00:1d.7 [ 522.778827][T13722] hub 2-0:1.0: USB hub found [ 522.784794][T13722] hub 2-0:1.0: 6 ports detected [ 522.834624][T13722] hub 1-0:1.0: USB hub found [ 522.837098][T13722] hub 1-0:1.0: 2 ports detected [ 522.869300][T13722] hub 3-0:1.0: USB hub found [ 522.873796][T13722] hub 3-0:1.0: 2 ports detected [ 522.909943][T13722] hub 4-0:1.0: USB hub found [ 522.914363][T13722] hub 4-0:1.0: 2 ports detected [ 522.997549][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'. [ 523.097534][ T5819] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 523.747513][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.065024][ T5819] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 524.087846][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 524.090559][ T5819] usb 2-1: Product: QEMU USB Tablet [ 524.092230][ T5819] usb 2-1: Manufacturer: QEMU [ 524.093921][ T5819] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 524.136632][ T5819] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0066/input/input113 [ 524.182649][T13753] serial 00:04: in use; can't configure [ 524.189104][T13753] ehci-pci 0000:00:1d.7: remove, state 1 [ 524.191132][T13753] usb usb2: USB disconnect, device number 1 [ 524.202352][ T5819] hid-generic 0003:0627:0001.0066: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 524.210791][T13753] usb 2-1: USB disconnect, device number 2 [ 524.434218][T13763] random: crng reseeded on system resumption [ 524.451573][T13763] Unrecognized hibernate image header format! [ 524.458241][T13763] PM: hibernation: Image mismatch: architecture specific data [ 524.561432][T13753] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 524.627689][T13764] fido_id[13764]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/report_descriptor': No such file or directory [ 524.777688][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.827564][ T850] usb 1-1: new full-speed USB device number 50 using uhci_hcd [ 524.941218][T13769] serial 00:04: in use; can't configure [ 525.550358][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 525.734693][T13771] program syz.2.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.817545][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.884143][T13771] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 525.891029][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 525.913356][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 525.916479][ T850] usb 1-1: Product: QEMU USB Tablet [ 525.918971][ T850] usb 1-1: Manufacturer: QEMU [ 525.920946][ T850] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 525.942464][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0067/input/input114 [ 526.012457][ T850] hid-generic 0003:0627:0001.0067: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 526.270011][T13754] usb 1-1: USB disconnect, device number 50 [ 526.318995][T13772] fido_id[13772]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 526.495334][T13754] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 526.505467][T13754] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 526.516868][T13754] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 526.540652][T13754] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 526.543390][T13754] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 526.547292][T13754] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 526.550707][T13754] usb usb2: Product: EHCI Host Controller [ 526.552559][T13754] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 526.554654][T13754] usb usb2: SerialNumber: 0000:00:1d.7 [ 526.561215][T13754] hub 2-0:1.0: USB hub found [ 526.564471][T13754] hub 2-0:1.0: 6 ports detected [ 526.601553][T13754] hub 1-0:1.0: USB hub found [ 526.605324][T13754] hub 1-0:1.0: 2 ports detected [ 526.640483][T13754] hub 3-0:1.0: USB hub found [ 526.644931][T13754] hub 3-0:1.0: 2 ports detected [ 526.688511][T13754] hub 4-0:1.0: USB hub found [ 526.693465][T13754] hub 4-0:1.0: 2 ports detected [ 526.703863][T13769] ehci-pci 0000:00:1d.7: remove, state 1 [ 526.705752][T13769] usb usb2: USB disconnect, device number 1 [ 526.749567][T13769] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 526.857777][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.019348][ T5889] usb 1-1: new full-speed USB device number 51 using uhci_hcd [ 527.254750][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 527.274050][ T5889] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 527.365439][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 527.441093][ T5889] usb 1-1: Product: QEMU USB Tablet [ 527.570782][ T5889] usb 1-1: Manufacturer: QEMU [ 527.621043][ T5889] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 527.897554][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.940161][ T5889] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0068/input/input115 [ 528.361051][ T5889] hid-generic 0003:0627:0001.0068: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 528.590268][T13770] usb 1-1: USB disconnect, device number 51 [ 528.937549][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.959572][T13795] fido_id[13795]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 529.041536][T13770] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 529.047090][T13770] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 529.059503][T13770] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 529.199239][T13770] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 529.204935][T13770] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 529.210675][T13770] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 529.213976][T13770] usb usb2: Product: EHCI Host Controller [ 529.215956][T13770] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 529.218839][T13770] usb usb2: SerialNumber: 0000:00:1d.7 [ 529.232902][T13770] hub 2-0:1.0: USB hub found [ 529.286662][T13770] hub 2-0:1.0: 6 ports detected [ 529.329514][T13814] program syz.1.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.339674][T13814] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 529.432404][T13770] hub 1-0:1.0: USB hub found [ 529.458160][T13770] hub 1-0:1.0: 2 ports detected [ 529.593665][T13770] hub 3-0:1.0: USB hub found [ 529.646185][T13770] hub 3-0:1.0: 2 ports detected [ 529.688735][ T8378] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 529.987515][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.488518][T13770] hub 4-0:1.0: USB hub found [ 530.490385][T13770] hub 4-0:1.0: 2 ports detected [ 530.881786][ T8378] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 530.910193][ T8378] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 530.912785][ T8378] usb 2-1: Product: QEMU USB Tablet [ 530.914515][ T8378] usb 2-1: Manufacturer: QEMU [ 530.916076][ T8378] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 530.963872][ T8378] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0069/input/input116 [ 530.981248][ T8378] hid-generic 0003:0627:0001.0069: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 531.027589][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.057533][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.246714][T13859] serial 00:04: in use; can't configure [ 532.249653][T13859] ehci-pci 0000:00:1d.7: remove, state 1 [ 532.251971][T13859] usb usb2: USB disconnect, device number 1 [ 532.254420][T13859] usb 2-1: USB disconnect, device number 2 [ 532.269715][T13864] FAULT_INJECTION: forcing a failure. [ 532.269715][T13864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.274228][T13864] CPU: 3 UID: 0 PID: 13864 Comm: syz.2.1999 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.274255][T13864] Tainted: [L]=SOFTLOCKUP [ 532.274261][T13864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.274271][T13864] Call Trace: [ 532.274279][T13864] [ 532.274287][T13864] dump_stack_lvl+0x100/0x190 [ 532.274316][T13864] should_fail_ex.cold+0x5/0xa [ 532.274337][T13864] _copy_from_user+0x2e/0xd0 [ 532.274377][T13864] get_compat_msghdr+0xb3/0x480 [ 532.274399][T13864] ? __pfx_get_compat_msghdr+0x10/0x10 [ 532.274427][T13864] ___sys_sendmsg+0x1b6/0x1e0 [ 532.274452][T13864] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.274485][T13864] ? find_held_lock+0x2b/0x80 [ 532.274523][T13864] __sys_sendmsg+0x160/0x210 [ 532.274541][T13864] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.274582][T13864] ? __pfx_ksys_write+0x10/0x10 [ 532.274617][T13864] __do_fast_syscall_32+0x13a/0x8b0 [ 532.274636][T13864] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.274661][T13864] do_fast_syscall_32+0x32/0x70 [ 532.274677][T13864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.274697][T13864] RIP: 0023:0xf6fdefec [ 532.274716][T13864] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 532.274724][T13864] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 532.274741][T13864] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 532.274752][T13864] RDX: 0000000020008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.274761][T13864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.274771][T13864] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.274781][T13864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.274802][T13864] [ 533.097578][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.163970][T13859] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 533.381010][T13880] input: syz0 as /devices/virtual/input/input117 [ 533.417531][ T9] usb 1-1: new full-speed USB device number 52 using uhci_hcd [ 533.633066][T13884] program syz.4.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.640220][T13884] syz0: rxe_newlink: already configured on bond_slave_1 [ 533.803673][T13889] FAULT_INJECTION: forcing a failure. [ 533.803673][T13889] name failslab, interval 1, probability 0, space 0, times 0 [ 533.813073][T13889] CPU: 3 UID: 0 PID: 13889 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.813094][T13889] Tainted: [L]=SOFTLOCKUP [ 533.813098][T13889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.813105][T13889] Call Trace: [ 533.813111][T13889] [ 533.813117][T13889] dump_stack_lvl+0x100/0x190 [ 533.813137][T13889] should_fail_ex.cold+0x5/0xa [ 533.813152][T13889] should_failslab+0xc2/0x120 [ 533.813166][T13889] __kmalloc_noprof+0xfc/0x820 [ 533.813183][T13889] ? rcu_is_watching+0x13/0xc0 [ 533.813199][T13889] ? tomoyo_realpath_from_path+0xb6/0x690 [ 533.813229][T13889] tomoyo_realpath_from_path+0xb6/0x690 [ 533.813244][T13889] tomoyo_path_number_perm+0x23c/0x580 [ 533.813273][T13889] ? tomoyo_path_number_perm+0x22e/0x580 [ 533.813290][T13889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.813306][T13889] ? get_pid_task+0x106/0x250 [ 533.813334][T13889] ? find_held_lock+0x2b/0x80 [ 533.813350][T13889] ? __fget_files+0x215/0x3d0 [ 533.813364][T13889] ? hook_file_ioctl_common+0x140/0x440 [ 533.813380][T13889] ? __fget_files+0x215/0x3d0 [ 533.813397][T13889] ? __fget_files+0x21f/0x3d0 [ 533.813413][T13889] security_file_ioctl_compat+0xd3/0x230 [ 533.813439][T13889] __ia32_compat_sys_ioctl+0xc2/0x360 [ 533.813456][T13889] __do_fast_syscall_32+0x13a/0x8b0 [ 533.813467][T13889] ? lockdep_hardirqs_on+0x7d/0x110 [ 533.813485][T13889] do_fast_syscall_32+0x32/0x70 [ 533.813496][T13889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.813510][T13889] RIP: 0023:0xf6fdefec [ 533.813524][T13889] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 533.813530][T13889] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 533.813542][T13889] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 533.813549][T13889] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.813556][T13889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.813562][T13889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.813569][T13889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.813583][T13889] [ 533.813600][T13889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.137649][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.177603][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.662652][T13897] jffs2: notice: (13897) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 535.683149][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 535.711775][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 536.020442][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 536.024321][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 536.047339][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 536.050313][ T9] usb 1-1: Product: QEMU USB Tablet [ 536.051969][ T9] usb 1-1: Manufacturer: QEMU [ 536.053399][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 536.054666][T13900] vivid-000: ================= START STATUS ================= [ 536.058973][T13900] vivid-000: Test Pattern: 75% Colorbar [ 536.062979][T13900] vivid-000: Fill Percentage of Frame: 100 [ 536.065070][T13900] vivid-000: Horizontal Movement: No Movement [ 536.066986][T13900] vivid-000: Vertical Movement: Move Down Fast [ 536.072143][T13900] vivid-000: OSD Text Mode: All [ 536.073980][T13900] vivid-000: Show Border: false [ 536.075435][T13900] vivid-000: Show Square: false [ 536.076999][T13900] vivid-000: Sensor Flipped Horizontally: false [ 536.079185][T13900] vivid-000: Sensor Flipped Vertically: false [ 536.081113][T13900] vivid-000: Insert SAV Code in Image: false [ 536.083039][T13900] vivid-000: Insert EAV Code in Image: false [ 536.084909][T13900] vivid-000: Insert Video Guard Band: false [ 536.086768][T13900] vivid-000: Reduced Framerate: false [ 536.088632][T13900] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 536.090976][T13900] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 536.095810][T13900] vivid-000: Enable Capture Cropping: true grabbed [ 536.096153][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.006A/input/input118 [ 536.098231][T13900] vivid-000: Enable Capture Composing: true grabbed [ 536.104095][T13900] vivid-000: Enable Capture Scaler: true grabbed [ 536.172033][ T9] hid-generic 0003:0627:0001.006A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 536.186556][T13900] vivid-000: Timestamp Source: End of Frame [ 536.188567][T13900] vivid-000: Colorspace: Rec. 709 [ 536.190892][T13900] vivid-000: Transfer Function: Default [ 536.227671][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.249318][T13865] usb 1-1: USB disconnect, device number 52 [ 536.252258][T13908] loop4: detected capacity change from 0 to 7 [ 536.255571][T13900] vivid-000: Y'CbCr Encoding: Default [ 536.257340][T13900] vivid-000: HSV Encoding: Hue 0-179 [ 536.261101][T13900] vivid-000: Quantization: Default [ 536.262848][T13900] vivid-000: Apply Alpha To Red Only: false [ 536.264986][T13908] Dev loop4: unable to read RDB block 7 [ 536.266744][T13908] loop4: AHDI p2 p3 [ 536.268104][T13900] vivid-000: Standard Aspect Ratio: 4x3 [ 536.269898][T13900] vivid-000: DV Timings Signal Mode: Current DV Timings [ 536.272176][T13908] loop4: partition table partially beyond EOD, truncated [ 536.274543][T13908] loop4: p3 start 335544320 is beyond EOD, truncated [ 536.278528][T13900] vivid-000: DV Timings: 640x480p59 inactive [ 536.280528][T13900] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 536.283127][T13900] vivid-000: Maximum EDID Blocks: 2 [ 536.284895][T13900] vivid-000: Limited RGB Range (16-235): true [ 536.286954][T13900] vivid-000: Rx RGB Quantization Range: Automatic [ 536.289133][T13900] vivid-000: Power Present: 0x00000001 [ 536.290961][T13900] tpg source WxH: 1280x720 (Luma) [ 536.292636][T13900] tpg field: 1 [ 536.293820][T13900] tpg crop: (0,0)/928x720 [ 536.295279][T13900] tpg compose: (0,0)/232x720 [ 536.296883][T13900] tpg colorspace: 3 [ 536.298219][T13900] tpg transfer function: 0/1 [ 536.299783][T13900] tpg quantization: 0/1 [ 536.301215][T13900] tpg RGB range: 0/1 [ 536.302545][T13900] vivid-000: ================== END STATUS ================== [ 536.604391][T13865] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 536.623550][T13865] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 536.635457][T13865] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 536.658138][T13865] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 536.705356][T13865] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 536.773536][T13865] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 536.787288][T13865] usb usb2: Product: EHCI Host Controller [ 536.798309][T13865] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 536.813314][T13865] usb usb2: SerialNumber: 0000:00:1d.7 [ 536.975812][T13865] hub 2-0:1.0: USB hub found [ 536.987347][T13865] hub 2-0:1.0: 6 ports detected [ 537.038073][T13913] fido_id[13913]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 537.054340][T13865] hub 1-0:1.0: USB hub found [ 537.061635][T13865] hub 1-0:1.0: 2 ports detected [ 537.114506][T13865] hub 3-0:1.0: USB hub found [ 537.116597][T13865] hub 3-0:1.0: 2 ports detected [ 537.150006][T13865] hub 4-0:1.0: USB hub found [ 537.151991][T13865] hub 4-0:1.0: 2 ports detected [ 537.257555][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.287532][ T6441] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 537.310772][T13920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 537.918394][ T6441] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 538.297522][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.336881][ T6441] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 538.339560][ T6441] usb 2-1: Product: QEMU USB Tablet [ 538.341260][ T6441] usb 2-1: Manufacturer: QEMU [ 538.342850][ T6441] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 538.386440][ T6441] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006B/input/input119 [ 538.560786][ T6441] hid-generic 0003:0627:0001.006B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 539.337527][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.387517][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.596501][T13964] serial 00:04: in use; can't configure [ 540.651874][T13964] ehci-pci 0000:00:1d.7: remove, state 1 [ 540.654695][T13964] usb usb2: USB disconnect, device number 1 [ 540.657676][T13964] usb 2-1: USB disconnect, device number 2 [ 541.417519][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.640299][T13964] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 541.719986][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 541.918531][ T5889] usb 1-1: new full-speed USB device number 53 using uhci_hcd [ 542.084641][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 542.093730][ T5889] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 542.133366][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 542.147859][ T5889] usb 1-1: Product: QEMU USB Tablet [ 542.149578][ T5889] usb 1-1: Manufacturer: QEMU [ 542.155685][ T5889] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 542.457536][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.133374][ T5889] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.006C/input/input120 [ 543.200464][ T5889] hid-generic 0003:0627:0001.006C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 543.295239][T13994] fuse: Unknown parameter '0x0000000000000004' [ 543.497570][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.926256][T14008] serial 00:04: in use; can't configure [ 544.537581][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.670128][T14008] usb 1-1: USB disconnect, device number 53 [ 544.884402][T14008] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 544.891654][T14008] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 544.895954][T14008] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 544.918182][T14008] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 544.921304][T14008] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 544.926359][T14008] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 544.929600][T14008] usb usb2: Product: EHCI Host Controller [ 544.931558][T14008] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 544.933712][T14008] usb usb2: SerialNumber: 0000:00:1d.7 [ 544.941193][T14008] hub 2-0:1.0: USB hub found [ 544.941415][T14008] hub 2-0:1.0: 6 ports detected [ 544.991821][T14008] hub 1-0:1.0: USB hub found [ 544.994580][T14008] hub 1-0:1.0: 2 ports detected [ 545.029342][T14008] hub 3-0:1.0: USB hub found [ 545.034929][T14008] hub 3-0:1.0: 2 ports detected [ 545.071897][T14008] hub 4-0:1.0: USB hub found [ 545.074702][T14008] hub 4-0:1.0: 2 ports detected [ 545.117622][ T6716] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 545.217540][ T9] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 545.268441][ T6716] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.273554][ T6716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.277994][ T6716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.281623][ T6716] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.286410][ T6716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.293284][ T6716] usb 7-1: config 0 descriptor?? [ 545.377939][ T6441] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 545.398266][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 545.430558][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 545.435561][ T9] usb 2-1: Product: QEMU USB Tablet [ 545.438687][ T9] usb 2-1: Manufacturer: QEMU [ 545.440255][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 545.463570][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006D/input/input121 [ 545.531565][ T9] hid-generic 0003:0627:0001.006D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 545.577535][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.711730][ T6716] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 546.367734][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 546.538421][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 546.541530][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 546.545182][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.548532][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.552125][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.555132][T14044] fuse: Unknown parameter 'fd0x0000000000000004' [ 546.555444][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.561685][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.565350][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.569903][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.575530][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.583126][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.586602][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.589720][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.593256][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.596607][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.599997][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.604036][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.607749][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.610620][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.614089][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.617560][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.617699][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.623384][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.626860][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.630203][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.633100][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.636523][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.640983][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 546.643647][ T9] usb 6-1: Product: syz [ 546.645022][ T9] usb 6-1: Manufacturer: syz [ 546.646533][ T9] usb 6-1: SerialNumber: syz [ 546.650923][ T9] usb 6-1: config 0 descriptor?? [ 546.659698][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 547.162966][ T5889] usb 6-1: USB disconnect, device number 23 [ 547.187566][ T5889] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 547.190958][T14054] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2044'. [ 547.200911][T14054] tipc: Started in network mode [ 547.202750][T14054] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 547.206074][T14054] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 547.209267][T14054] tipc: Enabled bearer , priority 10 [ 547.657536][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.765551][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 547.769543][T14061] vlan2: left promiscuous mode [ 547.771216][T14061] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 547.773675][T14061] bridge0: port 1(vlan2) entered disabled state [ 547.942224][T14064] serial 00:04: in use; can't configure [ 547.945790][T14064] ehci-pci 0000:00:1d.7: remove, state 1 [ 547.949240][T14064] usb usb2: USB disconnect, device number 1 [ 547.952510][T14064] usb 2-1: USB disconnect, device number 2 [ 548.227646][ T9190] tipc: Node number set to 1 [ 548.697595][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.812927][T14064] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 549.077622][ T5889] usb 1-1: new full-speed USB device number 54 using uhci_hcd [ 549.183899][ T6441] usb 7-1: USB disconnect, device number 30 [ 549.233673][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 549.236237][ T5889] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 549.257246][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 549.260054][ T5889] usb 1-1: Product: QEMU USB Tablet [ 549.261726][ T5889] usb 1-1: Manufacturer: QEMU [ 549.263219][ T5889] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 549.279480][ T5889] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.006F/input/input122 [ 549.340139][ T5889] hid-generic 0003:0627:0001.006F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 549.348439][T14065] usb 1-1: USB disconnect, device number 54 [ 549.443584][T14066] fido_id[14066]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 549.491731][T14065] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 549.495414][T14065] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 549.499846][T14065] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 549.517890][T14065] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 549.520523][T14065] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 549.524101][T14065] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 549.526641][T14065] usb usb2: Product: EHCI Host Controller [ 549.528524][T14065] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 549.530586][T14065] usb usb2: SerialNumber: 0000:00:1d.7 [ 549.535990][T14065] hub 2-0:1.0: USB hub found [ 549.538589][T14065] hub 2-0:1.0: 6 ports detected [ 549.569612][T14065] hub 1-0:1.0: USB hub found [ 549.571860][T14065] hub 1-0:1.0: 2 ports detected [ 549.609820][T14065] hub 3-0:1.0: USB hub found [ 549.613827][T14065] hub 3-0:1.0: 2 ports detected [ 549.649124][T14065] hub 4-0:1.0: USB hub found [ 549.653999][T14065] hub 4-0:1.0: 2 ports detected [ 549.737560][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.807833][ T6716] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 549.980570][ T6716] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 549.997826][ T6716] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 550.000938][ T6716] usb 2-1: Product: QEMU USB Tablet [ 550.002816][ T6716] usb 2-1: Manufacturer: QEMU [ 550.004684][ T6716] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 550.029884][ T6716] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0070/input/input123 [ 550.095693][ T6716] hid-generic 0003:0627:0001.0070: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 550.777541][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.817690][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.408040][ T8378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 552.487326][T14098] fuse: Unknown parameter 'fd0x0000000000000004' [ 552.867514][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.127681][ T8378] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 553.278227][ T8378] usb 9-1: Invalid ep0 maxpacket: 16 [ 553.417545][ T8378] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 553.578415][ T8378] usb 9-1: Invalid ep0 maxpacket: 16 [ 553.581252][ T8378] usb usb9-port1: attempt power cycle [ 553.907537][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.927546][ T8378] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 553.949255][ T8378] usb 9-1: Invalid ep0 maxpacket: 16 [ 554.092152][T14129] serial 00:04: in use; can't configure [ 554.096475][T14129] ehci-pci 0000:00:1d.7: remove, state 1 [ 554.098588][T14129] usb usb2: USB disconnect, device number 1 [ 554.100535][T14129] usb 2-1: USB disconnect, device number 2 [ 554.521364][ T8378] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 554.620430][T14129] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 554.700748][ T94] wlan1: Trigger new scan to find an IBSS to join [ 554.878418][ T8378] usb 9-1: Invalid ep0 maxpacket: 16 [ 554.883026][ T8378] usb usb9-port1: unable to enumerate USB device [ 554.937521][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.189677][T14130] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 555.197243][T14130] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 555.202718][T14130] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 555.217642][T14130] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 555.220665][T14130] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 555.224143][T14130] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 555.226743][T14130] usb usb2: Product: EHCI Host Controller [ 555.229572][T14130] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 555.231694][T14130] usb usb2: SerialNumber: 0000:00:1d.7 [ 555.245470][T14130] hub 2-0:1.0: USB hub found [ 555.247309][T14130] hub 2-0:1.0: 6 ports detected [ 555.290508][T14130] hub 1-0:1.0: USB hub found [ 555.292556][T14130] hub 1-0:1.0: 2 ports detected [ 555.330682][T14130] hub 3-0:1.0: USB hub found [ 555.332820][T14130] hub 3-0:1.0: 2 ports detected [ 555.371564][T14130] hub 4-0:1.0: USB hub found [ 555.373673][T14130] hub 4-0:1.0: 2 ports detected [ 555.517577][ T5833] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 555.688370][ T5833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 555.712405][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 555.715532][ T5833] usb 2-1: Product: QEMU USB Tablet [ 555.719236][ T5833] usb 2-1: Manufacturer: QEMU [ 555.721217][ T5833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 555.752953][ T5833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0071/input/input124 [ 555.821362][ T5833] hid-generic 0003:0627:0001.0071: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 555.977579][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.017548][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.057735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.097591][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.657704][ T48] wlan1: Trigger new scan to find an IBSS to join [ 559.918445][ T5833] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 559.983936][T14161] program syz.3.2064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.077793][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 560.085525][ T5833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 560.092291][ T5833] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 560.103694][ T5833] usb 6-1: string descriptor 0 read error: -22 [ 560.108082][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 560.131860][ T5833] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 560.138041][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.140434][ T5833] dw2102: su3000_power_ctrl: 1, initialized 0 [ 560.143401][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 560.148576][ T8378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 560.156890][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.172392][ T5833] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 560.183118][ T5833] usb 6-1: media controller created [ 560.187968][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.201411][ T5833] dw2102: i2c transfer failed. [ 560.209912][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.213871][ T5833] dw2102: i2c transfer failed. [ 560.217731][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.221519][ T5833] dw2102: i2c transfer failed. [ 560.224989][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.229732][ T5833] dw2102: i2c transfer failed. [ 560.239507][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.243265][ T5833] dw2102: i2c transfer failed. [ 560.246572][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 560.250857][ T5833] dw2102: i2c transfer failed. [ 560.254029][ T5833] dvb-usb: MAC address: 02:02:02:02:02:02 [ 560.306201][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.353915][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 560.357278][ T5833] dw2102: command 0x0e transfer failed. [ 560.361055][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 560.367480][ T5833] dw2102: command 0x0e transfer failed. [ 560.648035][ T1154] wlan1: Creating new IBSS network, BSSID 0e:49:88:c1:8a:aa [ 560.677596][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 560.693524][ T5833] dw2102: command 0x0e transfer failed. [ 560.712272][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 560.725139][ T5833] dw2102: command 0x0e transfer failed. [ 560.739375][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 560.750366][ T5833] dw2102: command 0x51 transfer failed. [ 561.177530][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.515117][ T5833] DVB: Unable to find symbol ds3000_attach() [ 561.517229][ T5833] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 561.577810][ T5833] rc_core: IR keymap rc-su3000 not found [ 561.579672][ T5833] Registered IR keymap rc-empty [ 561.589115][ T5833] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 561.599183][ T5833] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input125 [ 561.681295][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 561.689826][ T5833] dw2102: su3000_power_ctrl: 0, initialized 1 [ 561.694505][ T5833] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 561.896902][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 561.919545][T14198] fuse: Unknown parameter 'fd0x0000000000000004' [ 561.930652][ T5833] dw2102: i2c transfer failed. [ 562.217520][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.265810][T14155] wg2 speed is unknown, defaulting to 1000 [ 562.308436][T14177] dvb-usb: bulk message failed: -22 (5/0) [ 562.313149][T14177] dw2102: i2c transfer failed. [ 562.337763][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 562.340055][ T34] dw2102: i2c transfer failed. [ 562.512057][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 562.513971][ T34] dw2102: i2c transfer failed. [ 562.677580][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 562.689896][ T5889] usb 6-1: USB disconnect, device number 24 [ 562.699452][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.700292][ T34] dw2102: i2c transfer failed. [ 562.866711][T14210] serial 00:04: in use; can't configure [ 562.869797][T14210] ehci-pci 0000:00:1d.7: remove, state 1 [ 562.871681][T14210] usb usb2: USB disconnect, device number 1 [ 562.874171][T14210] usb 2-1: USB disconnect, device number 2 [ 563.054281][T14210] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 563.259344][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.402209][ T5841] usb 1-1: new full-speed USB device number 55 using uhci_hcd [ 563.624551][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 563.635947][ T5889] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 563.648632][ T5841] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 563.688692][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 563.691544][ T5841] usb 1-1: Product: QEMU USB Tablet [ 563.693217][ T5841] usb 1-1: Manufacturer: QEMU [ 563.696651][ T5841] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 563.732897][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0072/input/input126 [ 563.822564][ T5841] hid-generic 0003:0627:0001.0072: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 563.882280][T14211] usb 1-1: USB disconnect, device number 55 [ 563.975262][T14222] fido_id[14222]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 564.236733][T14211] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 564.242384][T14211] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 564.249878][T14211] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 564.277641][T14211] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 564.280454][T14211] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 564.284259][T14211] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 564.286873][T14211] usb usb2: Product: EHCI Host Controller [ 564.288808][T14211] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 564.290979][T14211] usb usb2: SerialNumber: 0000:00:1d.7 [ 564.299622][T14211] hub 2-0:1.0: USB hub found [ 564.301558][T14211] hub 2-0:1.0: 6 ports detected [ 564.307617][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.349183][T14211] hub 1-0:1.0: USB hub found [ 564.352326][T14211] hub 1-0:1.0: 2 ports detected [ 564.390214][T14211] hub 3-0:1.0: USB hub found [ 564.392635][T14211] hub 3-0:1.0: 2 ports detected [ 564.431186][T14211] hub 4-0:1.0: USB hub found [ 564.433619][T14211] hub 4-0:1.0: 2 ports detected [ 564.587808][ T34] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 564.768261][ T34] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 564.788095][ T34] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 564.790681][ T34] usb 2-1: Product: QEMU USB Tablet [ 564.792325][ T34] usb 2-1: Manufacturer: QEMU [ 564.793932][ T34] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 564.811681][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0073/input/input127 [ 564.869888][ T34] hid-generic 0003:0627:0001.0073: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 565.337649][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.377583][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.417600][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.457632][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.934317][T14247] program syz.4.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.091675][T14255] program syz.1.2074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.497547][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.529602][T14274] serial 00:04: in use; can't configure [ 570.536697][T14274] ehci-pci 0000:00:1d.7: remove, state 1 [ 570.537556][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.539299][T14274] usb usb2: USB disconnect, device number 1 [ 570.543707][T14274] usb 2-1: USB disconnect, device number 2 [ 570.787558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 570.985408][T14274] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 571.337608][ T5841] usb 1-1: new full-speed USB device number 56 using uhci_hcd [ 571.503168][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 571.508482][ T5841] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 571.531942][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 571.536757][ T5841] usb 1-1: Product: QEMU USB Tablet [ 571.540893][ T5841] usb 1-1: Manufacturer: QEMU [ 571.544291][ T5841] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 571.586660][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0074/input/input128 [ 571.587602][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.638032][ T8378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 571.674340][ T5841] hid-generic 0003:0627:0001.0074: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 571.693069][T14275] usb 1-1: USB disconnect, device number 56 [ 572.100839][T14302] program syz.2.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.627530][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.844954][T14314] fido_id[14314]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 572.886198][T14275] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 572.895992][T14275] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 572.901895][T14275] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 572.927631][T14275] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 572.930911][T14275] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 572.934792][T14275] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 572.939781][T14275] usb usb2: Product: EHCI Host Controller [ 572.941655][T14275] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 572.943749][T14275] usb usb2: SerialNumber: 0000:00:1d.7 [ 572.956261][T14275] hub 2-0:1.0: USB hub found [ 572.959927][T14275] hub 2-0:1.0: 6 ports detected [ 573.002942][T14275] hub 1-0:1.0: USB hub found [ 573.004979][T14275] hub 1-0:1.0: 2 ports detected [ 573.043853][T14275] hub 3-0:1.0: USB hub found [ 573.046734][T14275] hub 3-0:1.0: 2 ports detected [ 573.092169][T14275] hub 4-0:1.0: USB hub found [ 573.095137][T14275] hub 4-0:1.0: 2 ports detected [ 573.247592][ T8378] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 573.428397][ T8378] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 573.443918][ T8378] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 573.446698][ T8378] usb 2-1: Product: QEMU USB Tablet [ 573.451122][ T8378] usb 2-1: Manufacturer: QEMU [ 573.454013][ T8378] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 573.490986][ T8378] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0075/input/input129 [ 573.565425][ T8378] hid-generic 0003:0627:0001.0075: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 573.667547][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.396277][T14335] wg2 speed is unknown, defaulting to 1000 [ 574.697515][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.737760][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.137753][ T8378] page_pool_release_retry() stalled pool shutdown: id 99, 48 inflight 121 sec [ 576.777590][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.817603][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.292254][T14369] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 578.749595][T14369] bond5: entered promiscuous mode [ 578.752321][T14369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.867515][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.998699][T14373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.002493][T14373] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 579.010905][T14373] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 579.025390][T14373] bond5: (slave gre1): making interface the new active one [ 579.034079][T14373] gre1: entered promiscuous mode [ 579.042739][T14373] bond5: (slave gre1): Enslaving as an active interface with an up link [ 579.235765][T14366] wg2 speed is unknown, defaulting to 1000 [ 579.897581][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.937565][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.204347][T14404] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 581.798124][ T8378] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 581.977639][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.472018][T14432] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 582.472018][T14432] [ 582.478326][T14432] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 582.486623][T14432] CIFS: Attempting to mount //127.0.0.1/share [ 582.540928][T14432] CIFS: VFS: cifs_mount failed w/return code = -112 [ 583.017541][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.067511][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.500506][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2111'. [ 584.591593][T14463] binder: 14459:14463 unknown command 0 [ 584.594106][T14463] binder: 14459:14463 ioctl c0306201 80000080 returned -22 [ 585.097546][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.692460][T14485] serial 00:04: in use; can't configure [ 585.695805][T14485] ehci-pci 0000:00:1d.7: remove, state 1 [ 585.698274][T14485] usb usb2: USB disconnect, device number 1 [ 585.700837][T14485] usb 2-1: USB disconnect, device number 2 [ 586.147504][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 586.669703][T14485] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 587.177564][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.347623][ T5889] usb 1-1: new full-speed USB device number 57 using uhci_hcd [ 587.413717][T14508] binder: BINDER_SET_CONTEXT_MGR already set [ 587.416735][T14508] binder: 14505:14508 ioctl 4018620d 80000100 returned -16 [ 587.502857][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 587.514245][ T5889] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 587.545292][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 587.548195][ T5889] usb 1-1: Product: QEMU USB Tablet [ 587.549867][ T5889] usb 1-1: Manufacturer: QEMU [ 587.554509][ T5889] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 587.578614][ T5889] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0076/input/input130 [ 587.648493][T14514] wg2 speed is unknown, defaulting to 1000 [ 587.655450][ T5889] hid-generic 0003:0627:0001.0076: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 587.674735][T14486] usb 1-1: USB disconnect, device number 57 [ 587.975178][T14525] binder: BINDER_SET_CONTEXT_MGR already set [ 587.984132][T14525] binder: 14524:14525 ioctl 4018620d 80000100 returned -16 [ 588.026497][T14486] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 588.034362][T14486] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 588.048967][T14525] binder: BINDER_SET_CONTEXT_MGR already set [ 588.052467][T14525] binder: 14524:14525 ioctl 4018620d 80004a80 returned -16 [ 588.053732][T14486] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 588.087850][T14486] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 588.100857][T14486] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 588.217499][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.249602][T14486] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 588.256627][T14486] usb usb2: Product: EHCI Host Controller [ 588.260487][T14486] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 588.262828][T14486] usb usb2: SerialNumber: 0000:00:1d.7 [ 588.269693][T14486] hub 2-0:1.0: USB hub found [ 588.273116][T14486] hub 2-0:1.0: 6 ports detected [ 588.871230][T14523] fido_id[14523]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 589.256937][T14486] hub 1-0:1.0: USB hub found [ 589.257508][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.259032][T14486] hub 1-0:1.0: 2 ports detected [ 589.302343][T14486] hub 3-0:1.0: USB hub found [ 589.304367][T14486] hub 3-0:1.0: 2 ports detected [ 589.497741][ T5841] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 590.192810][ T5841] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 590.209473][ T42] audit: type=1326 audit(1787241120.968:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.224583][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 590.225988][ T42] audit: type=1326 audit(1787241120.968:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.239815][T14486] hub 4-0:1.0: USB hub found [ 590.242116][ T5841] usb 2-1: Product: QEMU USB Tablet [ 590.244212][ T5841] usb 2-1: Manufacturer: QEMU [ 590.244345][ T42] audit: type=1326 audit(1787241120.988:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.246668][T14486] hub 4-0:1.0: 2 ports detected [ 590.257161][ T42] audit: type=1326 audit(1787241120.988:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.259001][ T5841] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 590.265305][ T42] audit: type=1326 audit(1787241120.988:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.276446][ T42] audit: type=1326 audit(1787241120.998:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.286124][ T42] audit: type=1326 audit(1787241120.998:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.297508][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.303411][ T42] audit: type=1326 audit(1787241120.998:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.320518][ T42] audit: type=1326 audit(1787241121.008:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.335193][ T42] audit: type=1326 audit(1787241121.008:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 590.357958][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0077/input/input131 [ 590.429328][ T5841] hid-generic 0003:0627:0001.0077: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 590.648757][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.947551][ T34] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 591.337509][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.149953][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.377528][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.879900][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.417664][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.573852][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.804352][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.808535][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.814353][ T34] usb 7-1: config 0 descriptor?? [ 593.818931][ T34] usb 7-1: can't set config #0, error -71 [ 593.837557][ T34] usb 7-1: USB disconnect, device number 31 [ 593.956379][T14576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 594.056291][T14581] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 594.056291][T14581] [ 594.060944][T14581] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 594.064877][T14581] CIFS: Attempting to mount //127.0.0.1/share [ 594.072191][T14581] CIFS: VFS: Error connecting to socket. Aborting operation. [ 594.074647][T14581] CIFS: VFS: cifs_mount failed w/return code = -101 [ 594.468269][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.245686][T14597] Attempt to restore checkpoint with obsolete wellknown handles [ 595.497572][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.765405][T14607] wg2 speed is unknown, defaulting to 1000 [ 596.549605][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.577522][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.627617][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.929325][T14640] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 599.141525][ T8378] Process accounting resumed [ 599.667500][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.707520][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.279319][T14672] loop5: detected capacity change from 0 to 7 [ 601.284542][T14672] Dev loop5: unable to read RDB block 7 [ 601.286549][T14672] loop5: unable to read partition table [ 601.289161][T14672] loop5: partition table beyond EOD, truncated [ 601.295509][T14672] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 601.445379][T14680] serial 00:04: in use; can't configure [ 601.452134][T14680] ehci-pci 0000:00:1d.7: remove, state 1 [ 601.454039][T14680] usb usb2: USB disconnect, device number 1 [ 601.456329][T14680] usb 2-1: USB disconnect, device number 2 [ 601.695511][T14680] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 601.737591][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.967787][ T5841] usb 1-1: new full-speed USB device number 58 using uhci_hcd [ 602.147768][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 602.155543][ T5841] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 602.193854][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 602.196637][ T5841] usb 1-1: Product: QEMU USB Tablet [ 602.199849][ T5841] usb 1-1: Manufacturer: QEMU [ 602.205176][ T5841] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 602.314813][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0078/input/input132 [ 602.787525][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 603.271733][ T5841] hid-generic 0003:0627:0001.0078: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 603.315757][T14681] usb 1-1: USB disconnect, device number 58 [ 603.817585][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.498211][T14713] Bluetooth: hci0: unsupported parameter 5135 [ 604.500238][T14713] Bluetooth: hci0: unsupported parameter 8192 [ 604.503997][T14713] Bluetooth: hci0: unsupported parameter 5135 [ 604.506350][T14713] Bluetooth: hci0: unsupported parameter 8192 [ 604.530284][T14711] fido_id[14711]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 604.544328][T14681] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 604.556347][T14681] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 604.622185][T14681] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 604.648269][T14681] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 604.652053][T14681] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 604.658410][T14681] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 604.661793][T14681] usb usb2: Product: EHCI Host Controller [ 604.664295][T14681] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 604.667075][T14681] usb usb2: SerialNumber: 0000:00:1d.7 [ 604.673774][T14681] hub 2-0:1.0: USB hub found [ 604.676130][T14681] hub 2-0:1.0: 6 ports detected [ 604.735450][T14681] hub 1-0:1.0: USB hub found [ 604.740780][T14681] hub 1-0:1.0: 2 ports detected [ 604.781965][T14681] hub 3-0:1.0: USB hub found [ 604.789583][T14681] hub 3-0:1.0: 2 ports detected [ 604.852182][T14681] hub 4-0:1.0: USB hub found [ 604.855253][T14681] hub 4-0:1.0: 2 ports detected [ 604.857580][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.978134][ T34] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 605.164065][ T34] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 605.239312][ T34] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 605.254262][ T34] usb 2-1: Product: QEMU USB Tablet [ 605.268287][ T34] usb 2-1: Manufacturer: QEMU [ 605.269941][ T34] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 605.664870][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0079/input/input133 [ 605.834968][ T34] hid-generic 0003:0627:0001.0079: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 605.899905][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.711106][T14744] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 606.837522][ T850] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 606.937648][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.008026][ T850] usb 9-1: Using ep0 maxpacket: 8 [ 607.016652][ T850] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.023884][ T850] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 607.030059][ T850] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.034214][ T850] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.037378][ T850] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.050488][ T850] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.068379][ T850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.309952][ T850] usb 9-1: usb_control_msg returned -32 [ 607.316108][ T850] usbtmc 9-1:16.0: can't read capabilities [ 607.700194][T14737] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 607.706158][T14763] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 607.709608][ T850] usb 9-1: USB disconnect, device number 17 [ 607.814835][T14768] Bluetooth: hci0: unsupported parameter 5135 [ 607.820672][T14768] Bluetooth: hci0: unsupported parameter 8192 [ 607.823409][T14768] Bluetooth: hci0: unsupported parameter 5135 [ 607.826037][T14768] Bluetooth: hci0: unsupported parameter 8192 [ 607.856074][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 607.877219][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 607.977563][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.017527][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.048489][T14792] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 609.093651][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 609.148569][T14795] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42554 - 0 [ 610.057749][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.272692][T14795] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42554 - 0 [ 610.430536][T14795] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42554 - 0 [ 610.533661][T14795] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42554 - 0 [ 610.619351][ T8378] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 610.687827][T13567] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 42554 - 0 [ 610.690993][T13567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 42554 - 0 [ 610.697702][T13567] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 42554 - 0 [ 610.703447][T13567] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 42554 - 0 [ 610.777927][ T8378] usb 6-1: Using ep0 maxpacket: 16 [ 610.789618][ T8378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 610.799749][ T8378] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 610.812797][ T8378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.828468][ T8378] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.842710][ T8378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.851689][ T8378] usb 6-1: Product: syz [ 610.853085][ T8378] usb 6-1: Manufacturer: syz [ 610.864657][ T8378] usb 6-1: SerialNumber: syz [ 611.007525][ T34] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 611.107690][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.170237][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 611.174584][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.207554][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 611.210265][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.218572][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.223851][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.227092][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.235283][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.313659][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.318245][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.457490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 611.487479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 611.517565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 611.788073][ T34] usb 7-1: usb_control_msg returned -32 [ 611.789989][ T34] usbtmc 7-1:16.0: can't read capabilities [ 612.137510][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.417457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 612.497469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 612.647474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 613.177549][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.214256][T14847] serial 00:04: in use; can't configure [ 613.224976][T14847] ehci-pci 0000:00:1d.7: remove, state 1 [ 613.227563][T14847] usb usb2: USB disconnect, device number 1 [ 613.233056][T14847] usb 2-1: USB disconnect, device number 2 [ 613.485014][ T8378] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 613.504944][ T8378] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 613.946231][T14847] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 613.980001][ T850] usb 7-1: USB disconnect, device number 32 [ 614.099897][ T8378] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 614.106389][ T8378] usb 6-1: USB disconnect, device number 25 [ 614.112476][T14315] udevd[14315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 614.207857][ T5841] usb 1-1: new full-speed USB device number 59 using uhci_hcd [ 614.217589][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.253540][T14859] serial 00:04: in use; can't configure [ 614.364056][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 614.367095][ T5841] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 614.390913][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 614.394317][ T5841] usb 1-1: Product: QEMU USB Tablet [ 614.396767][ T5841] usb 1-1: Manufacturer: QEMU [ 614.398950][ T5841] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 614.523618][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.007A/input/input134 [ 614.619651][ T5841] hid-generic 0003:0627:0001.007A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 614.649246][T14848] usb 1-1: USB disconnect, device number 59 [ 615.267508][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.374038][T14868] fido_id[14868]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 615.423281][T14848] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 615.428981][T14848] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 615.436397][T14848] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 615.457777][T14848] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 615.464367][T14848] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 615.478062][T14848] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 615.481749][T14848] usb usb2: Product: EHCI Host Controller [ 615.484312][T14848] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 615.487060][T14848] usb usb2: SerialNumber: 0000:00:1d.7 [ 615.499724][T14848] hub 2-0:1.0: USB hub found [ 615.502287][T14848] hub 2-0:1.0: 6 ports detected [ 615.570274][T14848] hub 1-0:1.0: USB hub found [ 615.574213][T14848] hub 1-0:1.0: 2 ports detected [ 615.609933][T14848] hub 3-0:1.0: USB hub found [ 615.615355][T14848] hub 3-0:1.0: 2 ports detected [ 615.661181][T14848] hub 4-0:1.0: USB hub found [ 615.663845][T14848] hub 4-0:1.0: 2 ports detected [ 615.676641][T14859] ehci-pci 0000:00:1d.7: remove, state 1 [ 615.711065][T14859] usb usb2: USB disconnect, device number 1 [ 615.782065][ T5841] usb usb2-port1: attempt power cycle [ 615.857009][T14873] serial 00:04: in use; can't configure [ 615.885641][T14859] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 616.118518][T14876] e1000e 0000:00:02.0 eth1: removed PHC [ 616.142270][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 616.158991][ T5841] usb 1-1: new full-speed USB device number 60 using uhci_hcd [ 616.307523][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.312693][T14876] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 616.324701][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 616.331246][ T5841] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 616.379376][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 616.388157][ T5841] usb 1-1: Product: QEMU USB Tablet [ 616.390455][ T5841] usb 1-1: Manufacturer: QEMU [ 616.392513][ T5841] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 616.443765][ T5841] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.007B/input/input135 [ 616.465829][ T5841] hid-generic 0003:0627:0001.007B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 616.496732][T14860] usb 1-1: USB disconnect, device number 60 [ 616.614738][T14887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2209'. [ 616.663803][T14889] fido_id[14889]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 616.692637][T14860] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 616.706318][T14860] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 616.719020][T14860] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 616.738631][T14860] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 616.743964][T14860] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 616.760526][T14860] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 616.765446][T14860] usb usb2: Product: EHCI Host Controller [ 616.767250][T14860] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 616.777566][T14860] usb usb2: SerialNumber: 0000:00:1d.7 [ 616.868210][T14860] hub 2-0:1.0: USB hub found [ 616.872443][T14860] hub 2-0:1.0: 6 ports detected [ 616.893091][T14877] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 616.908457][T14877] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 616.923373][T14860] hub 1-0:1.0: USB hub found [ 616.925157][T14860] hub 1-0:1.0: 2 ports detected [ 616.971857][T14860] hub 3-0:1.0: USB hub found [ 616.974639][T14860] hub 3-0:1.0: 2 ports detected [ 617.119269][T14860] hub 4-0:1.0: USB hub found [ 617.123220][T14860] hub 4-0:1.0: 2 ports detected [ 617.135470][T14873] ehci-pci 0000:00:1d.7: remove, state 1 [ 617.139080][T14873] usb usb2: USB disconnect, device number 1 [ 617.147722][ T5889] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 617.154839][ T5889] usb usb2-port1: attempt power cycle [ 617.179286][T14908] FAULT_INJECTION: forcing a failure. [ 617.179286][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 617.194306][T14908] CPU: 0 UID: 0 PID: 14908 Comm: syz.1.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.194326][T14908] Tainted: [L]=SOFTLOCKUP [ 617.194331][T14908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 617.194338][T14908] Call Trace: [ 617.194342][T14908] [ 617.194348][T14908] dump_stack_lvl+0x100/0x190 [ 617.194367][T14908] should_fail_ex.cold+0x5/0xa [ 617.194382][T14908] should_failslab+0xc2/0x120 [ 617.194394][T14908] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 617.194412][T14908] ? __d_alloc+0x35/0xa50 [ 617.194431][T14908] __d_alloc+0x35/0xa50 [ 617.194448][T14908] d_alloc_parallel+0x105/0x14c0 [ 617.194466][T14908] ? __pfx_d_alloc_parallel+0x10/0x10 [ 617.194478][T14908] ? __pfx___might_resched+0x10/0x10 [ 617.194490][T14908] ? find_held_lock+0x2b/0x80 [ 617.194508][T14908] ? down_read+0x13b/0x4c0 [ 617.194519][T14908] ? __pfx_down_read+0x10/0x10 [ 617.194531][T14908] __lookup_slow+0x98/0x320 [ 617.194544][T14908] lookup_slow+0x50/0x70 [ 617.194554][T14908] link_path_walk+0x1377/0x1cc0 [ 617.194572][T14908] path_openat+0x1ac/0x2440 [ 617.194602][T14908] ? __pfx_path_openat+0x10/0x10 [ 617.194625][T14908] do_file_open+0x20e/0x430 [ 617.194641][T14908] ? __pfx_do_file_open+0x10/0x10 [ 617.194665][T14908] ? _raw_spin_unlock+0x28/0x50 [ 617.194679][T14908] ? alloc_fd+0x471/0x7a0 [ 617.194698][T14908] do_sys_openat2+0x10f/0x1e0 [ 617.194716][T14908] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.194740][T14908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.194761][T14908] __ia32_compat_sys_openat+0x12d/0x210 [ 617.194773][T14908] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 617.194784][T14908] ? fput+0x7c/0x100 [ 617.194799][T14908] ? ksys_write+0x1ac/0x250 [ 617.194812][T14908] ? __pfx_ksys_write+0x10/0x10 [ 617.194828][T14908] __do_fast_syscall_32+0x13a/0x8b0 [ 617.194839][T14908] ? lockdep_hardirqs_on+0x7d/0x110 [ 617.194856][T14908] do_fast_syscall_32+0x32/0x70 [ 617.194866][T14908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.194881][T14908] RIP: 0023:0xf70cefec [ 617.194896][T14908] Code: Unable to access opcode bytes at 0xf70cefc2. [ 617.194901][T14908] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 617.194912][T14908] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000900 [ 617.194920][T14908] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.194926][T14908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.194932][T14908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 617.194938][T14908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.194952][T14908] [ 617.346087][T14873] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 617.347585][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.387653][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.727588][ T5889] usb 1-1: new full-speed USB device number 61 using uhci_hcd [ 618.886174][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 618.896638][ T5889] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 618.920527][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 618.929008][ T5889] usb 1-1: Product: QEMU USB Tablet [ 618.930829][ T5889] usb 1-1: Manufacturer: QEMU [ 618.940092][ T5889] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 619.193939][ T5889] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.007C/input/input136 [ 619.260045][ T5889] hid-generic 0003:0627:0001.007C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 619.417577][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.450382][T14874] usb 1-1: USB disconnect, device number 61 [ 619.677383][T14874] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 619.707775][T14874] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 619.737116][T14874] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 619.762018][T14956] fido_id[14956]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 619.777648][T14874] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 619.780591][T14874] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 619.796282][T14874] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 619.806577][T14874] usb usb2: Product: EHCI Host Controller [ 619.813811][T14874] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 619.822230][T14874] usb usb2: SerialNumber: 0000:00:1d.7 [ 619.854451][T14874] hub 2-0:1.0: USB hub found [ 619.862373][T14874] hub 2-0:1.0: 6 ports detected [ 619.976593][T14874] hub 1-0:1.0: USB hub found [ 620.013167][T14874] hub 1-0:1.0: 2 ports detected [ 620.115509][T14874] hub 3-0:1.0: USB hub found [ 620.126332][T14874] hub 3-0:1.0: 2 ports detected [ 620.187594][ T8378] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 620.219365][T14874] hub 4-0:1.0: USB hub found [ 620.232503][T14874] hub 4-0:1.0: 2 ports detected [ 620.358489][ T8378] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 620.382539][ T8378] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 620.394436][ T8378] usb 2-1: Product: QEMU USB Tablet [ 620.396704][ T8378] usb 2-1: Manufacturer: QEMU [ 620.405550][ T8378] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 620.457609][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.460002][ T8378] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007D/input/input137 [ 620.497861][ T8378] hid-generic 0003:0627:0001.007D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 621.443822][T14978] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2221'. [ 621.497691][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.675802][ T1157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.537682][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 623.577544][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.119546][T15011] serial 00:04: in use; can't configure [ 624.122579][T15011] ehci-pci 0000:00:1d.7: remove, state 1 [ 624.124536][T15011] usb usb2: USB disconnect, device number 1 [ 624.127035][T15011] usb 2-1: USB disconnect, device number 2 [ 624.151459][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.617555][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.242983][T15011] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 625.366265][T15023] FAULT_INJECTION: forcing a failure. [ 625.366265][T15023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.374149][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.4.2233 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.374168][T15023] Tainted: [L]=SOFTLOCKUP [ 625.374173][T15023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.374180][T15023] Call Trace: [ 625.374184][T15023] [ 625.374190][T15023] dump_stack_lvl+0x100/0x190 [ 625.374208][T15023] should_fail_ex.cold+0x5/0xa [ 625.374223][T15023] _copy_to_user+0x32/0xd0 [ 625.374241][T15023] simple_read_from_buffer+0xcb/0x170 [ 625.374272][T15023] proc_fail_nth_read+0x1af/0x230 [ 625.374288][T15023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.374302][T15023] ? rw_verify_area+0xce/0x6d0 [ 625.374314][T15023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.374327][T15023] vfs_read+0x1e4/0xb40 [ 625.374342][T15023] ? __pfx_vfs_read+0x10/0x10 [ 625.374354][T15023] ? find_held_lock+0x2b/0x80 [ 625.374370][T15023] ? __fget_files+0x215/0x3d0 [ 625.374387][T15023] ? __fget_files+0x21f/0x3d0 [ 625.374405][T15023] ksys_read+0x12a/0x250 [ 625.374418][T15023] ? __pfx_ksys_read+0x10/0x10 [ 625.374435][T15023] do_int80_emulation+0x166/0x650 [ 625.374449][T15023] asm_int80_emulation+0x1a/0x20 [ 625.374461][T15023] RIP: 0023:0xf71874eb [ 625.374471][T15023] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 625.374483][T15023] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 625.374494][T15023] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d5d0 [ 625.374501][T15023] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 625.374508][T15023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.374514][T15023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 625.374520][T15023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.374534][T15023] [ 625.507984][ T850] usb 1-1: new full-speed USB device number 62 using uhci_hcd [ 625.657554][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.663048][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 625.740313][T15035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2236'. [ 626.332096][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 626.696888][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 626.699660][ T850] usb 1-1: Product: QEMU USB Tablet [ 626.701316][ T850] usb 1-1: Manufacturer: QEMU [ 626.702850][ T850] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 626.707775][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.719856][ T850] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.007E/input/input138 [ 626.799437][ T850] hid-generic 0003:0627:0001.007E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 626.867606][T15015] usb 1-1: USB disconnect, device number 62 [ 626.915767][T15047] serial 00:04: in use; can't configure [ 627.116085][T15049] fido_id[15049]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 627.204663][T15015] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 627.223405][T15015] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 627.242362][T15015] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 627.269976][T15015] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 627.274802][T15015] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 627.281681][T15015] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 627.284421][T15015] usb usb2: Product: EHCI Host Controller [ 627.288146][T15015] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 627.294000][T15015] usb usb2: SerialNumber: 0000:00:1d.7 [ 627.332495][T15015] hub 2-0:1.0: USB hub found [ 627.342650][T15015] hub 2-0:1.0: 6 ports detected [ 627.412080][T15015] hub 1-0:1.0: USB hub found [ 627.418176][T15015] hub 1-0:1.0: 2 ports detected [ 627.461493][T15015] hub 3-0:1.0: USB hub found [ 627.472677][T15015] hub 3-0:1.0: 2 ports detected [ 627.521008][T15015] hub 4-0:1.0: USB hub found [ 627.529923][T15015] hub 4-0:1.0: 2 ports detected [ 627.571146][T15047] ehci-pci 0000:00:1d.7: remove, state 1 [ 627.573681][T15047] usb usb2: USB disconnect, device number 1 [ 627.587749][ T5819] usb usb2-port1: attempt power cycle [ 627.737515][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.773211][T15047] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 628.077504][ T850] usb 1-1: new full-speed USB device number 63 using uhci_hcd [ 628.138106][T15081] ================================================================== [ 628.140719][T15081] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.143259][T15081] Free of addr ffff888013c82267 by task syz.2.2240/15081 [ 628.145706][T15081] [ 628.147620][T15081] CPU: 3 UID: 0 PID: 15081 Comm: syz.2.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.147642][T15081] Tainted: [L]=SOFTLOCKUP [ 628.147647][T15081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.147656][T15081] Call Trace: [ 628.147662][T15081] [ 628.147668][T15081] dump_stack_lvl+0x100/0x190 [ 628.147688][T15081] print_report+0x13d/0x4b0 [ 628.147707][T15081] ? __virt_addr_valid+0x239/0x430 [ 628.147723][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.147743][T15081] kasan_report_invalid_free+0xb8/0x190 [ 628.147756][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.147775][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.147793][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.147809][T15081] check_slab_allocation+0xe1/0xf0 [ 628.147826][T15081] ? f_uac2_opts_p_srate_store+0x110/0x260 [ 628.147843][T15081] kfree+0x1b6/0x6c0 [ 628.147856][T15081] ? __asan_memcpy+0x3c/0x60 [ 628.147871][T15081] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.147889][T15081] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 628.147907][T15081] ? configfs_write_iter+0x388/0x4e0 [ 628.147939][T15081] configfs_write_iter+0x302/0x4e0 [ 628.147957][T15081] vfs_write+0x6af/0x1050 [ 628.147972][T15081] ? __pfx_configfs_write_iter+0x10/0x10 [ 628.147990][T15081] ? __pfx_vfs_write+0x10/0x10 [ 628.148003][T15081] ? find_held_lock+0x2b/0x80 [ 628.148023][T15081] ksys_write+0x12a/0x250 [ 628.148035][T15081] ? __pfx_ksys_write+0x10/0x10 [ 628.148050][T15081] __do_fast_syscall_32+0x13a/0x8b0 [ 628.148062][T15081] ? lockdep_hardirqs_on+0x7d/0x110 [ 628.148078][T15081] do_fast_syscall_32+0x32/0x70 [ 628.148088][T15081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.148103][T15081] RIP: 0023:0xf6fdefec [ 628.148119][T15081] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 628.148124][T15081] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 628.148135][T15081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 628.148143][T15081] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.148149][T15081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.148156][T15081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 628.148163][T15081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.148173][T15081] [ 628.148177][T15081] [ 628.216304][T15081] Allocated by task 15081: [ 628.217793][T15081] kasan_save_stack+0x30/0x50 [ 628.219258][T15081] kasan_save_track+0x14/0x30 [ 628.220764][T15081] __kasan_kmalloc+0xaa/0xb0 [ 628.222208][T15081] __kmalloc_node_track_caller_noprof+0x333/0x830 [ 628.224121][T15081] kstrdup+0x51/0xe0 [ 628.225286][T15081] f_uac2_opts_p_srate_store+0x113/0x260 [ 628.226919][T15081] configfs_write_iter+0x302/0x4e0 [ 628.228474][T15081] vfs_write+0x6af/0x1050 [ 628.229739][T15081] ksys_write+0x12a/0x250 [ 628.231016][T15081] __do_fast_syscall_32+0x13a/0x8b0 [ 628.232541][T15081] do_fast_syscall_32+0x32/0x70 [ 628.233941][T15081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.235788][T15081] [ 628.236498][T15081] The buggy address belongs to the object at ffff888013c82260 [ 628.236498][T15081] which belongs to the cache kmalloc-16 of size 16 [ 628.240451][T15081] The buggy address is located 7 bytes inside of [ 628.240451][T15081] 9-byte region [ffff888013c82260, ffff888013c82269) [ 628.244118][T15081] [ 628.244828][T15081] The buggy address belongs to the physical page: [ 628.246736][T15081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13c82 [ 628.249287][T15081] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 628.251319][T15081] page_type: f5(slab) [ 628.252500][T15081] raw: 00fff00000000000 ffff88801c042640 dead000000000100 dead000000000122 [ 628.254983][T15081] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 628.257494][T15081] page dumped because: kasan: bad access detected [ 628.259333][T15081] page_owner tracks the page as allocated [ 628.260980][T15081] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5740, tgid 5740 (syz-executor), ts 237014664103, free_ts 198288894605 [ 628.266525][T15081] post_alloc_hook+0xfd/0x120 [ 628.267962][T15081] get_page_from_freelist+0xf46/0x3500 [ 628.269569][T15081] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 628.271364][T15081] new_slab+0xa2/0x660 [ 628.272691][T15081] ___slab_alloc+0x5d1/0x800 [ 628.274133][T15081] __kvmalloc_node_noprof+0x500/0x970 [ 628.274357][ T850] usb 1-1: not running at top speed; connect to a high speed hub [ 628.275815][T15081] do_replace_table+0x1c5/0x760 [ 628.275833][T15081] xt_replace_table+0x2e/0x130 [ 628.275845][T15081] __do_replace+0x1cf/0x990 [ 628.275862][T15081] compat_do_replace+0x31e/0x500 [ 628.275880][T15081] do_ip6t_set_ctl+0x2cb/0xbe0 [ 628.275896][T15081] nf_setsockopt+0x8d/0xf0 [ 628.275908][T15081] ipv6_setsockopt+0x135/0x170 [ 628.275924][T15081] tcp_setsockopt+0xa7/0x100 [ 628.275938][T15081] do_sock_setsockopt+0xf3/0x1d0 [ 628.275953][T15081] __sys_setsockopt+0x119/0x190 [ 628.275963][T15081] page last free pid 5148 tgid 5148 stack trace: [ 628.275970][T15081] __free_frozen_pages+0x79f/0x1090 [ 628.275982][T15081] qlist_free_all+0x47/0xf0 [ 628.275996][T15081] kasan_quarantine_reduce+0x1a0/0x1f0 [ 628.276012][T15081] __kasan_slab_alloc+0x69/0x90 [ 628.276028][T15081] __kmalloc_cache_noprof+0x267/0x6b0 [ 628.276041][T15081] kernfs_fop_open+0x23d/0xd50 [ 628.276052][T15081] do_dentry_open+0x6ab/0x14d0 [ 628.276066][T15081] vfs_open+0x82/0x3f0 [ 628.276081][T15081] path_openat+0x19fa/0x2440 [ 628.294753][ T850] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 628.294857][T15081] do_file_open+0x20e/0x430 [ 628.312143][T15081] do_sys_openat2+0x10f/0x1e0 [ 628.313590][T15081] __x64_sys_openat+0x12d/0x210 [ 628.315029][T15081] do_syscall_64+0x121/0x770 [ 628.316405][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.318208][T15081] [ 628.318911][T15081] Memory state around the buggy address: [ 628.320506][T15081] ffff888013c82100: 00 00 fc fc 00 01 fc fc fa fb fc fc 00 01 fc fc [ 628.322792][T15081] ffff888013c82180: 00 06 fc fc 00 03 fc fc 00 00 fc fc 00 00 fc fc [ 628.325125][T15081] >ffff888013c82200: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 01 fc fc [ 628.327478][T15081] ^ [ 628.329564][T15081] ffff888013c82280: 00 00 fc fc 00 01 fc fc 00 01 fc fc 00 06 fc fc [ 628.330047][ T850] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 628.331865][T15081] ffff888013c82300: 00 07 fc fc 00 00 fc fc 00 07 fc fc 00 00 fc fc [ 628.331874][T15081] ================================================================== [ 628.339172][T15081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 628.339187][T15081] CPU: 3 UID: 0 PID: 15081 Comm: syz.2.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.339204][T15081] Tainted: [L]=SOFTLOCKUP [ 628.339208][T15081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.339216][T15081] Call Trace: [ 628.339221][T15081] [ 628.339226][T15081] dump_stack_lvl+0x100/0x190 [ 628.339244][T15081] vpanic+0x553/0x970 [ 628.339256][T15081] ? __pfx_vpanic+0x10/0x10 [ 628.339268][T15081] panic+0xd1/0xe0 [ 628.339278][T15081] ? __pfx_panic+0x10/0x10 [ 628.339290][T15081] ? preempt_schedule_common+0x3c/0xb0 [ 628.339307][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339328][T15081] check_panic_on_warn.cold+0x19/0x34 [ 628.339340][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339357][T15081] end_report.part.0+0x3a/0x90 [ 628.339374][T15081] kasan_report_invalid_free.cold+0xd/0x12 [ 628.339392][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339410][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339428][T15081] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339445][T15081] check_slab_allocation+0xe1/0xf0 [ 628.339463][T15081] ? f_uac2_opts_p_srate_store+0x110/0x260 [ 628.339480][T15081] kfree+0x1b6/0x6c0 [ 628.339493][T15081] ? __asan_memcpy+0x3c/0x60 [ 628.339509][T15081] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 628.339528][T15081] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 628.339559][T15081] ? configfs_write_iter+0x388/0x4e0 [ 628.339578][T15081] configfs_write_iter+0x302/0x4e0 [ 628.339595][T15081] vfs_write+0x6af/0x1050 [ 628.339610][T15081] ? __pfx_configfs_write_iter+0x10/0x10 [ 628.339627][T15081] ? __pfx_vfs_write+0x10/0x10 [ 628.339640][T15081] ? find_held_lock+0x2b/0x80 [ 628.339661][T15081] ksys_write+0x12a/0x250 [ 628.339675][T15081] ? __pfx_ksys_write+0x10/0x10 [ 628.339690][T15081] __do_fast_syscall_32+0x13a/0x8b0 [ 628.339701][T15081] ? lockdep_hardirqs_on+0x7d/0x110 [ 628.339718][T15081] do_fast_syscall_32+0x32/0x70 [ 628.339729][T15081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.339747][T15081] RIP: 0023:0xf6fdefec [ 628.339761][T15081] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 628.339767][T15081] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 628.339779][T15081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 628.339786][T15081] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.339793][T15081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.339800][T15081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 628.339807][T15081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.339818][T15081] [ 628.419009][T15081] Kernel Offset: disabled [ 628.420267][T15081] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:48:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90002f07f48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c603600 RDI=0000000000000014 RBP=ffffc90002f07f38 RSP=ffffc90002f07f00 R8 =0000000000000001 R9 =fffffbfff228539a R10=ffffffff91429cd7 R11=0000000000000000 R12=ffff888040e9cb00 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b6da78 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880969cf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ad2a8 CR3=000000004233f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001bed305 RBX=ffff88801c75a580 RCX=ffffffff8bbda115 RDX=0000000000000001 RSI=ffffffff8e3b3f5f RDI=ffffffff8c603680 RBP=ffffed10038eb4b0 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bbd86bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096acf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f0a190 CR3=0000000060342000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000017da55b17c3 RBX=ffff88802b423d80 RCX=00000000000006e0 RDX=000000000000017d RSI=ffffffff81f9e245 RDI=ffff888029024b00 RBP=000000923a256525 RSP=ffffc900047fef18 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920008ffded R13=0000000000000001 R14=0000000000000001 R15=ffff88802b423dc0 RIP=ffffffff81f9e258 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bcf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d636b1b000 CR3=000000006d0be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a33c75 RDI=ffffffff9bbe79a0 RBP=ffffffff9bbe7960 RSP=ffffc900049c7598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9b8e71ef R15=ffffffff85a33c10 RIP=ffffffff85a33c9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ccf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fdf000 CR3=000000006ecfa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000