last executing test programs: 12.139998027s ago: executing program 1 (id=299): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_emit_ethernet(0x6a, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x38, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x16, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88474500031c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x38}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='limits\x00') close(r2) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r4 = fcntl$dupfd(r3, 0x0, r3) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) (async, rerun: 64) read(r4, 0x0, 0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2, 0x4000000, 0x2, 0x7}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) 11.190899296s ago: executing program 1 (id=311): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001"], 0x7ffffffd) socket(0x2d, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_DEL_STATION(r4, 0x0, 0x8000) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r6 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x9c99, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, 0x0, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r5], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRES16=r5], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) 10.00233895s ago: executing program 1 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x500, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) 9.940687291s ago: executing program 1 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x7, 0x0, 0xa0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="5f1bff65cb005c39825e17130463f61c895a08fed4388c8972fd8a9d8a2137e1d302294c2cee971eae9c50fef644e3d5d780993394302ee9a0b8cb02d95362d852b8ff7bab98eb34a72e8fcf23995d85b8c86aa090aeb5645a4168c2cb170f2a36f8b71cb57fb1b117a40b9f21ea502fc03d095f1b26d6c15770b31b70a61c46d22e533227089ec0024c7071eb2132fee714c45e46f8acd908608f549099dda61c26dcdfb904483e600be642072d3b635a11b4e87bb9c0f089c0ceb7688d9757a781d3b70844d82c3cc32cbf853c8664a3e1b2c1ac1107c3d311a88a6c055b60b30f91d9dddc9945314bc7f8c52fe2ba48a8fb94cfaaa3f947", 0xf9}, {&(0x7f0000000380)="7a46f462efe93573f5a158585e21a1100f8855fa473a28c610b0ea1700eafdc8ef53def1815f26ff46e77b3240ad42a09e49b87142a0ff52ff44426317c8e50d661ea8989eacafeda5", 0x49}, {&(0x7f0000000400)="9910116275b086acf029d1ca0ee6e865d1b3c03b3f1cbd690ac0ea4d7d83e197dd267e239f80091b08ada1f8b4590490be6e97e3f5e34c65a1f5cf104763f6e0f271e7d15c6687a2fec7c07707bb16491993b61fc09b7eda4bd745643d4c0ccdd7098863ed94c6", 0x67}], 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 9.940234432s ago: executing program 1 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) (fail_nth: 5) 9.821272798s ago: executing program 2 (id=325): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000007340)={0x0, 0x0, &(0x7f0000007300)={&(0x7f0000007240)={0x50, r2, 0xc9455e3fe225aaa7, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "732257ec740daed4f2cefd4cd5c4c837"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "49cd9eb1eafd9786024910b7511dbb33"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4010) (fail_nth: 5) 9.702171853s ago: executing program 2 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000000040000000']) 9.701705363s ago: executing program 2 (id=327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001280)={0xc, {"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", 0x1000}}, 0x1006) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@delqdisc={0x11c, 0x25, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0xcb9bdd7c316d69a6}, {0x3, 0xd}, {0x5, 0x3}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb817}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x37}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8004}, 0x30004080) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x4a}, 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f0000000440)=ANY=[@ANYBLOB='b *:33'], 0x9) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x0, 0x3f, 0x0}) 9.611994067s ago: executing program 1 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000f9ff00000000000000002300000a5c000000060a010400200000000000000a4000040900010073797a31000000000900020073797a3200000000300004802c000180c544c0ca6d6145daf906c9215c00028008000240000000020800c95fede373bf8d0aad0c03000000000008000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setresuid(0xee01, 0xee01, 0xee00) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x201}, 0x1c) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000000)="40011de228ad1c16526243609df982b68efaef9fc55fc439a9fe4bd7a5af059e6f30624821abec6385708457f286ea9608abe36180eed07f120d1747cda120f43bc7d5059f7577f493e27b0931bda3c6b9a4fc702e45cfa1d4bcc3317ef3419d620dec3ed8a1ef76b01d26fb90da45bace82d04b501984ceb8dd601dbb0bad6d3aaddae3b4d6f09b8a7fe2023f3ede5e3a140496a828020464b58359a86e916fe6ba5ce93f4197b9c8c67c1fa53f97ec5a055b0fc259d0857f7057035508850439", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r5, &(0x7f0000001940)=[{{&(0x7f0000000280)=@ethernet={0x1, @local}, 0x80, 0x0}}], 0x1, 0x400c010) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 9.49332265s ago: executing program 32 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000f9ff00000000000000002300000a5c000000060a010400200000000000000a4000040900010073797a31000000000900020073797a3200000000300004802c000180c544c0ca6d6145daf906c9215c00028008000240000000020800c95fede373bf8d0aad0c03000000000008000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setresuid(0xee01, 0xee01, 0xee00) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x201}, 0x1c) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000000)="40011de228ad1c16526243609df982b68efaef9fc55fc439a9fe4bd7a5af059e6f30624821abec6385708457f286ea9608abe36180eed07f120d1747cda120f43bc7d5059f7577f493e27b0931bda3c6b9a4fc702e45cfa1d4bcc3317ef3419d620dec3ed8a1ef76b01d26fb90da45bace82d04b501984ceb8dd601dbb0bad6d3aaddae3b4d6f09b8a7fe2023f3ede5e3a140496a828020464b58359a86e916fe6ba5ce93f4197b9c8c67c1fa53f97ec5a055b0fc259d0857f7057035508850439", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r5, &(0x7f0000001940)=[{{&(0x7f0000000280)=@ethernet={0x1, @local}, 0x80, 0x0}}], 0x1, 0x400c010) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 9.444062391s ago: executing program 2 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 9.290705065s ago: executing program 2 (id=332): pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x9a0000, 0x6, 0x6, r2, 0x0, &(0x7f00000000c0)={0x9c0909, 0x200, '\x00', @p_u8=&(0x7f0000000080)=0x8}}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000140)={0x1, 0x1}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) r3 = dup(r1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)={0x1, 0xd811, 0x1}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)={0x1, 0xd811, 0x1}) r4 = memfd_secret(0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000002300)={0x990000, 0x7, 0x2, r1, 0x0, &(0x7f00000022c0)={0x990a69, 0xa, '\x00', @p_u32=&(0x7f0000002280)=0x6}}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000002300)={0x990000, 0x7, 0x2, r1, 0x0, &(0x7f00000022c0)={0x990a69, 0xa, '\x00', @p_u32=&(0x7f0000002280)=0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002340)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002340)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008091}, 0x24000000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000002700)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000026c0)={&(0x7f0000002540)={0x164, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0xa9, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "079667130d46123cc30b40e71fdfa306", "81839f5143f32075a23b87d538ac1388b9fe5bad06551b73d9882debf0f66b59", "0e8318e1839bc8592745ca616623ecbad816c8ab976f00d49529a4010fe5bc04"}}, @perr={0x84, 0x4f, {0x0, 0x5, [{{0x0, 0x1}, @device_b, 0x40, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_b, 0xe, @value=@device_b, 0x16}, {{}, @broadcast, 0x0, @void, 0x3c}, {{}, @device_a, 0xac, @void, 0x3}, {{}, @device_b, 0x2767, @void, 0x25}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x55, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x1, 0x38, 0x3}}, @mesh_chsw={0x76, 0x6, {0x0, 0xfe, 0x1e, 0x95b7}}, @random_vendor={0xdd, 0x3f, "20c4b6a8be46d1466d6e58042e61c1a3c4dfb2adefc3866ec842bb3b031b2951efeb9c5c475cbbe7fbccac6c82f1e85416a4b36ea19c0cb5ad524b2e1705d0"}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc, 0x40}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40041}, 0x40004) r7 = syz_usb_connect$cdc_ecm(0x2, 0xd1, &(0x7f0000002740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x2, 0x40, 0x4, "", [{{0x9, 0x4, 0x0, 0xbe, 0x3, 0x2, 0x6, 0x0, 0xa, {{0xa, 0x24, 0x6, 0x0, 0x0, "df41385fe3"}, {0x5, 0x24, 0x0, 0xf27}, {0xd, 0x24, 0xf, 0x1, 0xaf6, 0x4, 0xeb, 0x9}, [@obex={0x5, 0x24, 0x15, 0x9}, @mdlm_detail={0x51, 0x24, 0x13, 0x4, "2573f7ad032c22a0d570c5e1d6cf4d34fe90bb3a680afab403ea05f59a29e07679e2832b9550591eba188754a40dd989647de05e8c6c842e7669d7898f5f6ee8ec53ada60e96a1d32b24a42c9e"}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0x3, 0x2, 0x6, 0x20, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x8f, 0xf8, 0xd, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x6, 0xd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9f, 0x6, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x80}}}}}]}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002840)={0xa, 0x6, 0x300, 0x99, 0x4, 0x5, 0x20}, 0xa7, &(0x7f0000002880)={0x5, 0xf, 0xa7, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xfa, 0x1, 0x1, 0x31}, @generic={0x8d, 0x10, 0xb, "c175e8c9d2a5ee557593173b0d691410689189721922b64fb5491ccbb94d889548789723143d492ef677d1d31f286ca4d1ae9db9bd5dbf6c7486a874498bad2050073cd871e49ad649481141c20673ef2217285f013fd6767c0dbe9387ee7611799123c98fc7b77907b82a8475e3831434a161f4b1bc0681382f83393d229ef25ea2b97943f7cb7a2fc6"}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xc, 0x1, 0x7ff}]}, 0x3, [{0x4, &(0x7f0000002940)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x44c}}]}) syz_usb_disconnect(r7) (async) syz_usb_disconnect(r7) getdents64(r0, &(0x7f0000002a40)=""/227, 0xe3) ioctl(r0, 0x0, &(0x7f0000002b40)="34caea7508db148a1c2669131905b4865773434a81191c49dbf5fdf414a1415c6b70d3128dbc1aae7c3a8b14648ce98e5cd275ca32d0a320c5a10a69a816b3364c63656f0cf9d04ad09b84261d0dbc455072fc42322f0bc0ddc9f041ce56d1829a85ab5c84a54d025e1b22e833c797f504e5175c35de5ac65f9edeab9c093f02e8fa34fa178709ade8c4c82468a108ee95586a7e108042565176480dedb972b544944ab3f6b09b666bfcde9493fcd9c2") r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xab}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a2bee48b3f31fcf12e2dedf1739f3f78"}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40044149, &(0x7f0000002d80)=0x9) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002dc0)) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002dc0)={0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r9, 0x40044104, &(0x7f0000002e40)=0x9) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r9, 0x40044104, &(0x7f0000002e40)=0x9) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000002e80)=""/97) (async) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000002e80)=""/97) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.951246188s ago: executing program 2 (id=334): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x72148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210128bd7000fcdbdf252b00000008000300", @ANYRES32=r4, @ANYBLOB="0a00020202f30002080000000000000040000000006ed0c99d23fa81eb89562d16ed35880db8423037f20bd8398a13a700cb7dce818e984cb9ecd42cd0241bc81bbd99db10fb657f607f01a2f9329cde7d10742703e055804ca19981a55ab35701225b7b25c773df62f0ac202da0c5c521e162eae5a8ddd22abc7b0927814f5d239cc1f053fb7a8a99222564d29a08c55f7fc9da08d5145dfd76e37e04a226"], 0x38}, 0x1, 0x0, 0x0, 0xf041}, 0x0) ioctl(r1, 0xfffff000, &(0x7f0000000000)) 8.880052827s ago: executing program 33 (id=334): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x72148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210128bd7000fcdbdf252b00000008000300", @ANYRES32=r4, @ANYBLOB="0a00020202f30002080000000000000040000000006ed0c99d23fa81eb89562d16ed35880db8423037f20bd8398a13a700cb7dce818e984cb9ecd42cd0241bc81bbd99db10fb657f607f01a2f9329cde7d10742703e055804ca19981a55ab35701225b7b25c773df62f0ac202da0c5c521e162eae5a8ddd22abc7b0927814f5d239cc1f053fb7a8a99222564d29a08c55f7fc9da08d5145dfd76e37e04a226"], 0x38}, 0x1, 0x0, 0x0, 0xf041}, 0x0) ioctl(r1, 0xfffff000, &(0x7f0000000000)) 2.755993199s ago: executing program 4 (id=375): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x40000000, 0x3f159224}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="5980a66713"], 0x24}}, 0x40) 2.681420811s ago: executing program 4 (id=376): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x8, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @random='\x00\x00\x00%\x00', @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xc, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x33}], {{0x0, 0x0, r2, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000700)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x107}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000000cc0)='n', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0xa, 0x4e20, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001f40)=':', 0x1}], 0x1}}], 0x2, 0x240408d1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mmap$fb(&(0x7f0000159000/0x3000)=nil, 0x3000, 0x8, 0x10010, 0xffffffffffffffff, 0x2a000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendfile(r5, r5, 0x0, 0x2000fb) 2.634627727s ago: executing program 4 (id=377): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40c80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc, 0x4f, 0x2, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0x4, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0xbc, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x7f}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x80000000, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x0, 0x0, 0x97, 0x10, 0x0, 0x2000000000000003, 0x4], 0xeeee8000, 0xc10}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1414aae000000100000000f40fab00ceed1c26b705c0aa8445e6d7cc693eceea6e4185a6c62490dec926df3c3238054871756b45b1c8062433f216740601ca474fbbda5d1177"], 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xffffffff}) ioctl(r5, 0x8b32, &(0x7f0000000040)) 1.982117093s ago: executing program 0 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) r0 = syz_clone(0x80040000, &(0x7f0000000180)="6828df512fd17d7c8cd8af855d424bf8397716d9e2821ad23bafc27e19f56c0b8542a060930bfb72e690beae57c372801147bf67e715f1b35a52d5890e11392bb0e085e5cebe34da2cd0c4ae46a55243ddf6aebe456d9b0f5140edce8afefb9efb1d4f011509b10b97c6a7eb", 0x6c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="5f9592f29ceaa962bd5d44ced3ef9029bdfc4d703db197ba9495b4349648f5adbb2bd3352eb27760aed83743f001af2c") ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000340)={&(0x7f00000002c0)=""/79, 0x4f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001300)=@nat={'nat\x00', 0x670, 0x5, 0x137c, 0x0, 0x1244, 0xffffffff, 0x0, 0x0, 0x12e8, 0x12e8, 0xffffffff, 0x12e8, 0x12e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x10c8, 0x10fc, 0x48, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x6, {0x6}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x6}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @remote, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010102, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x13d8) write(r1, &(0x7f00000000c0)="64040b937d6d6d795f7d64632e30", 0xffffffffffffff2b) 1.979990281s ago: executing program 0 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac880b06ee12f1450d5f88b3a586b3dc1825b86873498854b88e2e622e9460f6bc9d75855e25e1ac3ff20ecb9669f33b0f010000dca7de0e", 0x38}], 0x1}}], 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0xc00, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000840)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 1.886662516s ago: executing program 0 (id=392): ustat(0x801, &(0x7f0000000080)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x4f, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)=@newtfilter={0x30, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {0x0, 0x8001}, {0x3, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) write$ppp(r3, &(0x7f00000001c0)="ab29", 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f00000003c0)={&(0x7f00000002c0), 0x0, 0x20, 0xb, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000009b80)=@newtfilter={0x2c, 0x2c, 0x405, 0x10, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0xfff1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0xe2}}]}, 0x2c}}, 0x8000) sendmsg$nl_route_sched(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 1.052018547s ago: executing program 3 (id=393): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x2, 0x9f9d, 0x18, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x29f9, 0xfffffffe}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r1, 0x25, 0x17, @val=@kprobe_multi=@syms={0x0, 0x9, &(0x7f0000000340)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='-@\x00', &(0x7f0000000180)='-\x00', &(0x7f00000001c0)='!(}\'}^{\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='&\xd6\x94\x96$$,\x00', &(0x7f0000000280)=',],\x00', &(0x7f00000002c0)='*.\x00', &(0x7f0000000300)='%\xf3[)\x00'], 0x0, 0x200}}, 0x30) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000001ec0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x317}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000400)="e5c14e734ac90396b6e98575d3d66bff43ca9eb9541b66c46fb2661e68504954ce6a06fdfaf8844c91af89bed6b0f1533bc3365d8c8c5f05eb6d2e9a8ae2a6aafa4709fa846a10901a54424ce7980a8c3b295312bb19f20ab728e179aaef9a3bf4ec4ffc7768", 0x66}, {&(0x7f0000000480)="b2a22ab04ebed37d84c1e1d8e46e3b1de59966bf451a46193e0a2c033ac3e70a77e50ecba7f1e42a5237b538c9e0807fe5350d95687e4fdd444eecca115131d7d15f442567f7", 0x46}, {&(0x7f0000000500)="1cdfed888fa1312fcec35fe8626f8a0af7463976f7128034dcc6832162b36bea4860893772cb02260d7f8954e3efed5a55df6be094979ba1152ff9285dc86d0855afabcd1db8597c10c113bf5077fc9e57cdda9f965f48f3361aa1a08203359bdc6abd4fbcf9d58327319658e3c48c3c770edc95a87d465dcd9f901f591b57e1054e058ab7e7395b9d16634ca5f9ca6491b6750a8d99e0d39e7e75842e16e0c46075acfa5cb7f8449fceb4107f7a6be984c15007a92d196b6c79367d49d470dab628e55639a4ca5e32f261ac7c26feeae9fe3c357bb6724b5fea0c", 0xdb}, {&(0x7f0000000600)="3e4ecb9d4e0f3a810d8d81b02a90ee6dadffdd217a0e5c1d2fe9ee38b62cb1a8f78d8ce78220d07295ced82d0eaa34b05fcc32d2aaa99df9a06c92274541d245bf4fba402f24250577117785930e1150cface4dfb730f2324b49a1db4af9e6bab8dd30bc7f00b9", 0x67}, {&(0x7f0000000680)="8f01bd1b917f72f66c44aa", 0xb}, {&(0x7f00000006c0)="65bd6e70472ca73c6202e60ccc32a352ca5124b2e8ab8975e8b1cd840b3c4b3cc8193ed1399cbe0a526b3da87903d62981827350c21b8c4c680d46f194c0c37215201f495889d8ccea07bb110f77af6168a31fd1eb3feb13d72e38ab3eb09113a07db973a51f0fc3440aa2d8ddb7cb19e0808ad4c97fd1183f77d7b02069a3cb53531c08a35300b8ea3547768a9c3b6723a0e5e9cdb2c799ae47484f085e9f54d64fda6948", 0xa5}], 0x6, &(0x7f00000007c0)=[@rthdr_2292={{0x44, 0x29, 0x39, {0x3c, 0x6, 0x1, 0x5, 0x0, [@mcast2, @mcast1, @local]}}}, @tclass={{0x10, 0x29, 0x43, 0x1155}}], 0x54}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x0, @empty, 0x5}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="ff424640dc6729472376427f9a58cf2225555a64e84a44f7a74b1bf2d8ed2c0fa95934c37e682915efdcb4fa6a3f995385f66f033be96154c37dea48c5540e37cbcea642e5338de7803fb15adbf1a167c03d76ef281b388526596f8cbe6f18ac768e5268dbf9e46c586a64fb64d81bb6e50e8e14421e6b6814d38d247475396c29dac09c347cbf449f770204b29c38a3b1792d44b8d70c439d31437e4a547a9acc2a0b6d9d00a259e45a31de7f3622f06d614968ae8a01f02e69ee38691657f09817d2a69b79", 0xc6}, {&(0x7f0000001980)="3bb2df73da589d19d7ff0ef3ebc18ef33309ae200e7423dacbf130f125eea30fe14be0fb6e2ea90e385e9b49b41e17af7c1a59a1e1", 0x35}, {&(0x7f00000019c0)="d68d72d7eb74cd2526d8ff31f64e44d2f5afaa005e73ed94d372a434646ffc981be7acc39de69cea47af07cf83e689315f77280dd81a23638be27bcc487598497dc8943b3c128a94a391e3530f23fce93cdfc3dd0333098f0a08e708b23d8b04c745a96c187b24123a3cfb38443a67647fe63d1d61389976664326bbd915303e197a8e", 0x83}, {&(0x7f0000001a80)="577e2272ad78", 0x6}, {&(0x7f0000001ac0)="f2583cceb5543966bab7f8800f98d6de42d9b9ac61cf46c4798b836d2d1129316b51398788a5cc9d51f35693a5ca3e3ea228d7815038c06be99735e287b6f9dc02a00547a4b83f10715051efe900c261f626d9be7e6769cad1fbf02845d7accfbcae0391baa99766f017158fa0940ef8db75883162f17d4d53c099dce8070c034a8aca462f318723ba875a1ac371ceb320452d9538d227d36d504d093a447b4e925b6d7393a2b2e9acbbf54257ad1598dcd1b715986d50a10cb11a84212299499ca4c183374c7cf4e804cece55ffd5233f2f7dbb2a074a567fd18aa23fd8d562", 0xe0}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="0f23702d2c15e86454e3c0984264a6477627752b60ae66552c9a27ad1db577140dc9d5686a370187ab86ae989b2201423cbaa66b12d371b100961bb9c9e2c799546c1ee91741dd46bd9fbfbdb914816d122407b6efbb6cc180234d313c199fbca1d53e77bcaa58c02322b6c33d3ac463fcde887354048c21a373db236b92968aab07fc15793a7dc07279fac81ca0925d037cc121f595c6c3857c5924de36bc64e1acb742f802f23ff7a51b1c3165bfeb", 0xb0}, {&(0x7f0000001cc0)="6d67cdf41c0ee88a1f542181f9611a0777ff6e18ae68561a848b5f988246c1cbf89cf1b1855623d03a6c01c9b684001d270bbb6662301d202916986fab1aa21bc103ffc4a443a818eed97d199df4df2af275be07afd46d7ec90beeccda4d", 0x5e}, {&(0x7f0000001d40)="35fb98cfee854338c0503dc06bd9b258a72cf6dbed7618f04259f1899fa26d", 0x1f}], 0xa, &(0x7f0000001e00)=[@hoplimit_2292={{0x10}}, @hopopts={{0x2c, 0x29, 0x36, {0x2c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x16}}]}}}, @dstopts={{0x54, 0x29, 0x37, {0x0, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xa0}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1f, 0x5, [0x4, 0x4, 0x8]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x1ff}}, @dontfrag={{0x10, 0x29, 0x3e, 0xffff}}], 0xb0}}], 0x2, 0x11) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f40)=@generic={&(0x7f0000001f00)='./file0\x00', 0x0, 0x8}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f80)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@bloom_filter={0x1e, 0x4, 0x8, 0xffff2d60, 0x4008, r3, 0xeb, '\x00', 0x0, r4, 0x0, 0x5, 0x0, 0xc}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r6, &(0x7f0000002040)={0x1d, r1, 0x2, {0x2, 0xff}, 0xff}, 0x18) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) ppoll(&(0x7f0000002080)=[{r3, 0x7000}, {r5, 0x20}, {r3, 0x500}, {r3, 0xdad4181859b88710}], 0x4, &(0x7f0000002100)={r7, r8+10000000}, &(0x7f0000002140)={[0x42e, 0x7]}, 0x8) sendmsg$inet(r6, &(0x7f0000002380)={&(0x7f0000002180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000022c0)=[{&(0x7f00000021c0)="020b5ed3225ce0284f59e14a45eb10520e4300977c40dc0ed2bd835c28381ade842161b4e873702b5a287af6735d34f2c14790311d05b83e78ed21bea7a20caba959ce764e000b3cd75677902833d4f3bc1ab9b9f633bb188297d850303106b32d429143d1e47f7be2834266050bb15b78d92fe5135e6bd918eb534ad522d84090f252", 0x83}, {&(0x7f0000002280)="00d13805c4fc1710428e809e9689442b80ae45", 0x13}], 0x2, &(0x7f0000002300)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xf}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xf9}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x60}, 0x20008804) r9 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000023c0)={0x0, @in6={{0xa, 0x4e20, 0xac92, @local, 0xb}}, 0x9, 0x9, 0x101, 0x145, 0x14, 0x6, 0xb9}, &(0x7f0000002480)=0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000024c0)={r10, 0xba}, &(0x7f0000002500)=0x8) r11 = openat$comedi(0xffffff9c, &(0x7f0000002540)='/dev/comedi5\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000002580)={'pcmad\x00', [0x3, 0x80000001, 0x8, 0x1, 0x7, 0x8, 0x100, 0xc2, 0x3, 0x5, 0x0, 0x6, 0x5, 0x1, 0x40, 0x6, 0x7fffffff, 0x7, 0x400, 0x8, 0x4, 0x1, 0x7, 0x0, 0x1, 0x9, 0x7fff, 0x81, 0x495f, 0x0, 0xaf64, 0x4]}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000002640)={@mcast2, 0x22, r1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x2010, r0, 0x7797c000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xc4, r12, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000002880)={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, {0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00', 0x2}, 0xffffffffffffffff, {[0x101, 0x4, 0x0, 0xf, 0x0, 0xe8, 0x8, 0x5]}}, 0x5c) syz_open_dev$media(&(0x7f0000002900), 0x3, 0x80d0df78d5596267) r13 = accept4$llc(0xffffffffffffffff, &(0x7f0000002940)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002980)=0x10, 0x800) flock(r13, 0xd) syz_open_dev$ndb(&(0x7f00000029c0), 0x0, 0x1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfff00000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002a00)={0xaa, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000002a80)=':\x00', &(0x7f0000002ac0)='\x04}](*}\x00', 0x0) 961.302603ms ago: executing program 0 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) (fail_nth: 5) 960.724448ms ago: executing program 0 (id=395): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) unshare(0x6a040000) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x34325852, 0x2, 0x5, 0xfffffffc, 0x3}}) unshare(0x68000400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799bfbbebfa6dc371290d380869004000", "336819df", "87000000f2e659e1"}, 0x38) r4 = syz_io_uring_setup(0x19e5, &(0x7f0000000140)={0x0, 0x10dc, 0x80, 0x0, 0x3c6}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000640)={0x1, 0x1, 0x1000000, &(0x7f00000005c0)=[{0x0}], 0x0}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 562.33451ms ago: executing program 4 (id=396): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_to_hsr\x00', {0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$inet_mreqn(r0, 0xa4, 0x4, 0x0, 0x0) 560.903968ms ago: executing program 5 (id=397): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c9, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x1000, 0x2d, &(0x7f0000000080)="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", &(0x7f0000001080)=""/45, 0xffff7fff, 0x0, 0x0, 0x7a, &(0x7f00000010c0), &(0x7f0000001100)="1e7644861998d6b5bed9b1b3994171109583dc64f66f191e06b6a17aa6df1ad39f67d202c0af89b49062183f1893ac28186ae494dc0c1a58cfbd6895d2ecf60c9e912420725782c690c1dfe07f2cd91e92a0b525468766853b19fbfacd638ca8413287045ab709e7844835ec81ed7472f57a04ffbd1319af1491", 0x0, 0x0, 0x80}, 0x4c) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$nvram(0xffffff9c, &(0x7f00000012c0), 0x800, 0x0) sendmsg$nl_route(r2, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=@setlink={0xb0, 0x13, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69044}, [@IFLA_GROUP={0x8, 0x1b, 0xa}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}, @IFLA_GTP_LOCAL6={0x14, 0x8, @loopback}, @IFLA_GTP_LOCAL6={0x14, 0x8, @loopback}, @IFLA_GTP_LOCAL={0x8, 0x7, @remote}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000050) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000001440)={0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'dh\x00', 0x20, 0x2, 0x2f}, 0x2c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001480)={0x0, 0x6a, "345b339d71356dcd143558204ccafe11959f69ff87d3cf3af73693396deed0161afd918118edf89fe1edeae40659fa94c0d6d5f16f961571e0cd94fcc042903d5845c1159f961f43cfc224f243d9fcc32f03cfbdc0888ab8aa7eb52cdf859c882dd5319e64a2e1578e1e"}, &(0x7f0000001500)=0x72) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000015c0)={r5, 0x48, &(0x7f0000001540)=[@in6={0xa, 0x4e23, 0x3, @empty, 0x4}, @in6={0xa, 0x4e23, 0x3ff, @mcast1, 0x1000}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000001600)=0xc) io_setup(0x4, &(0x7f0000001640)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000016c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001700)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x9, 0x56, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x2f, 0x8, 0x1}}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x8c, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffffb, '\x00', r7, r4, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xd, 0x21, &(0x7f0000001980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9f6ee7eac49b7819}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ac0)='GPL\x00', 0xc5, 0xcb, &(0x7f0000001b00)=""/203, 0x41000, 0x40, '\x00', r7, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001c40)={0x4, 0x1, 0x9, 0x400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000001d00)=[r2, r10, r2, r4, r4], &(0x7f0000001d40)=[{0x4, 0x4, 0xf}, {0x5, 0x2, 0x3, 0x5}, {0x0, 0x5, 0x2, 0x6}, {0x5, 0x5, 0x8, 0x6}, {0x2, 0x5, 0xf, 0x9}], 0x10, 0x2}, 0x94) pipe2$watch_queue(&(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{r12}, &(0x7f0000001ec0), &(0x7f0000001f00)='%ps \x00'}, 0x1c) openat$ipvs(0xffffff9c, &(0x7f0000001f80)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r12, 0x9360, 0x3b8f59f4) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001fc0), 0x4) fchdir(r13) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7c) getsockopt$inet_mreqsrc(r9, 0x0, 0x26, &(0x7f0000002000)={@remote, @dev, @private}, &(0x7f0000002040)=0xc) ioctl$XFS_IOC_GOINGDOWN(r11, 0x8004587d, &(0x7f0000002080)=0x200) ioctl$KVM_CAP_PTP_KVM(r9, 0x4068aea3, &(0x7f00000020c0)) 560.610792ms ago: executing program 4 (id=398): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="01", 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000000a010400000000000000000200000a40000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000040000000060a010400000000000000000200000a0900010073797a31000000000900020073797a30000000001400044c06000000000000006c6f670004000280140000001100010000000000000000000200000a"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) r8 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f00000001c0)=""/38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000000100)=0x20) pread64(r7, &(0x7f0000002200)=""/87, 0x57, 0xfffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 361.432361ms ago: executing program 5 (id=399): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x0, 0x0, {0x2, 0xffffff95}, 0x400, 0xf2}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0xa, 0x3) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private1, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0xfffffffffffffe42}}, 0x4044) 329.76975ms ago: executing program 4 (id=400): openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socket(0x2, 0x3, 0xff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) syz_usbip_server_init(0x6) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r1], 0x22) 262.361786ms ago: executing program 5 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800570900000000080001400000000014000000000a0000000000000000000000000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) 261.962225ms ago: executing program 5 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'syzkaller1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x13, 0xb, 0x7}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c060000850875090000000008", 0x13}, {&(0x7f0000000400)='\x00', 0x1}], 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x108, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x244}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x580}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000040) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000000)=0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000402, r7, &(0x7f0000000040)) 169.971074ms ago: executing program 3 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}}, 0x23}}, 0x448c0) 169.124055ms ago: executing program 5 (id=404): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x6, 0x20400) ioctl$MEMISLOCKED(r0, 0x80084d17, &(0x7f0000000040)={0x200, 0x8}) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r1, r0, 0x2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') setns(r4, 0x0) close_range(r2, r2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_io_uring_setup(0x46ae, &(0x7f00000001c0)={0x0, 0xdee6, 0x10, 0x0, 0x2df, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) sendmsg$rds(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/217, 0xd9}], 0x3, &(0x7f0000000680)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x40}, &(0x7f0000000580)=0x6, &(0x7f00000005c0)=0x9, 0xff, 0xb6, 0x905d, 0xffffffffffffffff, 0xb, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x8}, &(0x7f0000000600)=0x3, &(0x7f0000000640)=0x4f067676, 0x55e, 0xffff, 0xfffffffffffffffa, 0x8000000000000000, 0x0, 0x4}}], 0xb0, 0x20000000}, 0x4000000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000780)={0x7, "17ae476edfbcc3442b8101b508788f140353fd0d6c444d73f9b6251ed32d7943", 0x2}) syz_io_uring_modify_offsets$generic(r5, r6, 0x38, 0x8c17) r7 = syz_clone3(&(0x7f0000001b00)={0x100008000, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0), {0x7}, &(0x7f0000000a00)=""/4096, 0x1000, &(0x7f0000001a00)=""/180, &(0x7f0000001ac0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r3}}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000001b80)={0x80000000, 0x9, {0x0}, {0xffffffffffffffff}, 0x3, 0x4}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000001bc0)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000001f00)={0x100, &(0x7f0000001c40)=0xffffffffffffffff, &(0x7f0000001c80), &(0x7f0000001cc0)=0x0, {0x5}, &(0x7f0000001d00)=""/165, 0xa5, &(0x7f0000001dc0)=""/231, &(0x7f0000001ec0)=[0x0, 0xffffffffffffffff], 0x2, {r3}}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f80)={0x0}, &(0x7f0000001fc0)=0xc) r13 = getpgid(0x0) syz_clone3(&(0x7f0000002040)={0x1010000, &(0x7f00000007c0)=0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840), {0x9}, &(0x7f0000000880)=""/75, 0x4b, &(0x7f0000000900)=""/33, &(0x7f0000002000)=[0x0, 0x0, 0xffffffffffffffff, r7, r8, r9, r11, r12, r13], 0x9, {r3}}, 0x58) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r10) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r15, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x24000841) ioctl$F2FS_IOC_DECOMPRESS_FILE(r14, 0xf517, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000002200)=@profile={'changeprofile ', '[%}%\x00'}, 0x13) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000002240)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc04c5609, &(0x7f0000002280)={0xe, 0x7, 0x4, 0x1000, 0xfffffffb, {}, {0x1, 0xc, 0xd, 0x4, 0x80, 0x3, "afc9a88e"}, 0x7, 0x4, {}, 0x0, 0x0, r16}) close_range(r16, r2, 0x0) sendmsg$key(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x2, 0x7, 0x4, 0x8, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x20000810) ioctl$VIDIOC_S_FBUF(r1, 0x402c560b, &(0x7f0000002440)={0x50, 0x0, &(0x7f00000023c0)="d85b5ad9f31474cd7b2b0626bb4db620dfbf9d79798c3182fb8f21bbf8277bd31ff18a02e6f2a9a71753a894d6412a2dc701a49374baedbef4a50a4328c71b1a025a3553698e", {0x6, 0x3, 0x35323645, 0x4, 0x9, 0x3, 0xa, 0x9}}) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000002500)={0xffffff97, 0x1, @ofdm={0x0, 0x7, 0x10, 0x7, 0x7, 0x9, 0x4}}) 135.283108ms ago: executing program 3 (id=405): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0xf000, 0x8, {0xb, 0xc97}, {0x45, 0x2}, @ramp={0xf27a, 0x7ff, {0x3, 0x3ffe, 0x9, 0x6}}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_to_hsr\x00', {0x2, 0x4e1f, @broadcast}}) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 90.784056ms ago: executing program 3 (id=406): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 5) 73.587152ms ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './security\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2002, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getrlimit(0x2, &(0x7f0000000900)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x10, 0x1) execveat(0xffffffffffffffff, &(0x7f00000009c0)='./file2\x00', 0x0, 0x0, 0x1000) r4 = openat$nvram(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000980)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000a00)='logon\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a55258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e470d2838ef11f4bac010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02ecc5ee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12419e738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871255204106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb62196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x544, r5) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8, 0x6f14, 0x6, 0x2, 0x11c3adec}) sendmsg$kcm(r4, &(0x7f0000002040)={&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e22, 0x6, @loopback, 0x3}}}, 0xfdd4, &(0x7f0000001fc0)=[{&(0x7f0000000b40)="92013d672bd6c0f6e266882811d008ffc04701dd7caeda187f9e046423c3c6c42ec4834f848397f25cd03ea6491ee654d1", 0x31}, {&(0x7f0000000b80)="89251352373a30072a60d550a0ada2b358359d25daf04f5c98920769d846d1293ddaf67fe3a1869ebdc4710cd40624a59a133e794360a0c4437c46f79e0ab7070a98df1b1cac5890ef91a5c724a91ecf0c7d942f", 0x54}, {&(0x7f0000000c00)="4532c21f36da124cfb2966dd50a990552320255128921e2eee0d08eda143210e50376dc8a11c0433d0a6a557bf6d0c9ef07c67e446d8222243642156d0a97c7e2b400c27fd01f42a48e0948b6b9947abe52f0aac2fd9b98af84703d225ddf3fd886bc2c4c18e72acda843312ea5d67bb4390b4bc61df5d8484", 0x79}, {&(0x7f0000000c80)="07106711182aa55b841fa8805c9ac71d190683696e6c476d60687359fda529", 0x1f}, {&(0x7f0000000cc0)="ff3f5d4bfc696f450ee27a2d323558b02aa1946c170a7dde7147760832a46101717da3b4e717d4b98a7ba525a9fd077709d00451bafd4c28f569f248bd2825d8d1dec9a82ab87d5ca8c26afe1515142c4d19c9376f9d5b073999db40c8c10f8e8709b278acfeeae4e5dd5dc1f53f96bf118648", 0x73}, {&(0x7f0000000d40)="6cff18efaead4067773fc37c3718244db6b431a36f1408d474004e6b238253f8343e895e87767bbdf9d0050383b3cf19bd17d759cf2e995ae8a8d53330abb2ea8251ab6af2650d8173d151ad83e9cb4a91b7165819ba5b923024e1e51de4533793fbde805a46ab03c79a1020ef20777414f7688f7b76b0a170168a49c31451b09f9152e21896bd60214e1458975f4e270d3502106a4d93092f68f20965157ce41c46b4cd5d0f7affafc25aa006bedebbde7011a8f53a1ae0a8e8069560d31819a9d5f6f2a67be6a0df6d0032e2d45ababe9429d2e5a022d5a7c3dd36028d6eefe742dff846ee950872e46bf363e71dc36e6a0b8d23", 0xf5}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="666d8cbf9a91470462018c67580f9905c4defc6a2f47e037f3879d11739d2282321caf1173914fd0cdbf3f0f1e352867a1ba57f58075575d36bb93a980efd565bdade861599fcfce52c198fac3fe8769fe4c21d97d818108a89100d785c503a3065fa27680a7893eb2e3537c9b8ca34069cd1084061c4bcb9891e9a550f2b1eba1d6fe31256bfab10c34e9d049ea5b3a172fbbde4751b926242271b40d729b043bbd", 0xa2}, {&(0x7f0000001f00)="dc090e5ef48fb8cae9eff0bc8187b07fb9fde916d56a0143affd32e7cffc5e758afb2bf92b805dff9ea52a54f3c1fcd5777086bcc79e116f85347442097976f0dde82773e2551ac05cd23d5a258105d17decf53cb2f7a8c5e313523f0f4a435e0f37af1671b85e27e2689deed176c053c8fb8b31bf1c0e5d39d4888e7278f2143cf39626a274cc5ba63d9e2d198c958d8283e5e7bae445ff56eb0637c43f797a77d733fbba", 0xa5}], 0x9}, 0x4000081) ioctl$BLKTRACESTART(r7, 0x1276, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r6}, &(0x7f00000007c0)=ANY=[@ANYBLOB="656e633d706b637331ed686173683d736861332d333400"/78], 0x0, 0x0) 73.289886ms ago: executing program 3 (id=408): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x40, 0x7fff0003}]}) ustat(0x90, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000380)="e24c80e0f3f0360dbbd46d2548758516506b3436e8256741875cf3d2ac378dc058a4e844d997b902828d71f2c115ac23985b4b6657fb92abb8ff9e5b1af995e6e3a6d5c8adb3abdfda4a5a05d31986a56e9f0037cb897aa1756bd01c23b78daacf5212251846e559d57eb0234c386f3e2f162ea022f90b0c644dca08d22b02b0d85f06b26a556bad5d1b7e11c0a630d28db027540db172e14fb68e79bc638211096bc987e9673aad255d7f5b9332795e5c06caaf383ef4b8cb5347a8a24e63da323b0d5bb1b631b3540d36e63ad872eb42", &(0x7f0000000100)=""/44, &(0x7f00000002c0)="6f4c51c18d51f804dd43ec5cf0b68b0de3b54e869e63392770fa788aa32f4987caf7076ece6e9b55ec2b3a58760c7fc4ec69311f20f3933f5041df33b69844387211404647d87d64b43018b7f90a30f239f72110711ef0de457ac1a62bae24698a0c37d2051c26fd8c76f593746ee92b8314a2f501ec121cc27c7eee6660b9ee84d2ee42c52ddd6bcae91cd76ecf2ab887ff6f1e4df1726f2435e47d4b312789164ff6f4819d0634ad5f5ce8cb8dc9cd80e92021e68c0fb9c96118fdca", &(0x7f0000000700)="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"/431, 0x7fffffff, 0x1}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x501040, 0x100) openat(r0, &(0x7f0000000200)='./file0\x00', 0x80800, 0x1e) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000140)=0x1) 71.9425ms ago: executing program 5 (id=409): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="01", 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000000a010400000000000000000200000a40000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000040000000060a010400000000000000000200000a0900010073797a31000000000900020073797a30000000001400044c06000000000000006c6f670004000280140000001100010000000000000000000200000a"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) r8 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f00000001c0)=""/38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000000100)=0x20) pread64(r7, &(0x7f0000002200)=""/87, 0x57, 0xfffd) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 3 (id=410): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r2, 0x40186f40, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c089}, 0x4) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r5, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000071c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007200)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f00000002c0)={0xa, 0x6, 0xff, 0x3, 'syz0\x00', 0x4}) write$UHID_INPUT(r8, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x100, 0x30, 0xffff, 0x70bd27, 0x25dfdbfc, {}, [{0xec, 0x1, [@m_police={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x1, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x3}}]]}, {0x35, 0x6, "3b91c4fd8dc3eb61f0d56d545ded672520044a84faf1cd64cefa9d13e697ec80422bda0c489fda65f48713da4e23da9806"}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0x20, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x2}}}}]}]}, 0x100}}, 0x0) kernel console output (not intermixed with test programs): un_chr_write_iter+0x10/0x10 [ 64.547042][ T6358] ? __pfx_vfs_write+0x10/0x10 [ 64.547051][ T6358] ? find_held_lock+0x2b/0x80 [ 64.547071][ T6358] ksys_write+0x12a/0x250 [ 64.547081][ T6358] ? __pfx_ksys_write+0x10/0x10 [ 64.547095][ T6358] do_int80_emulation+0x166/0x650 [ 64.547114][ T6358] asm_int80_emulation+0x1a/0x20 [ 64.547125][ T6358] RIP: 0023:0xf71175ab [ 64.547134][ T6358] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 64.547145][ T6358] RSP: 002b:00000000f53d644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 64.547156][ T6358] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 64.547163][ T6358] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.547169][ T6358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.547175][ T6358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.547181][ T6358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.547194][ T6358] [ 64.711550][ T6364] 9p: Bad value for 'rfdno' [ 65.257845][ T6377] netlink: 256 bytes leftover after parsing attributes in process `syz.2.145'. [ 65.258081][ T6377] unsupported nlmsg_type 40 [ 65.454170][ T6380] FAULT_INJECTION: forcing a failure. [ 65.454170][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 65.454227][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.1.143 Not tainted syzkaller #0 PREEMPT(full) [ 65.454254][ T6380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.454263][ T6380] Call Trace: [ 65.454267][ T6380] [ 65.454273][ T6380] dump_stack_lvl+0x100/0x190 [ 65.454293][ T6380] should_fail_ex.cold+0x5/0xa [ 65.454309][ T6380] should_failslab+0xc2/0x120 [ 65.454327][ T6380] __kmalloc_cache_node_noprof+0x94/0x720 [ 65.454341][ T6380] ? stack_trace_save+0x8e/0xc0 [ 65.454356][ T6380] ? __get_vm_area_node+0x124/0x350 [ 65.454395][ T6380] __get_vm_area_node+0x124/0x350 [ 65.454421][ T6380] __vmalloc_node_range_noprof+0x268/0x1420 [ 65.454449][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.454468][ T6380] ? check_prev_add+0x354/0xe60 [ 65.454493][ T6380] ? __lock_acquire+0xe15/0x1ec0 [ 65.454519][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.454542][ T6380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.454570][ T6380] ? lock_acquire+0x1d1/0x380 [ 65.454602][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.454620][ T6380] __vmalloc_node_noprof+0xad/0xf0 [ 65.454646][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.454665][ T6380] __vmalloc_noprof+0xa3/0x120 [ 65.454690][ T6380] ? __pfx___vmalloc_noprof+0x10/0x10 [ 65.454719][ T6380] ? __pfx___mutex_lock+0x10/0x10 [ 65.454751][ T6380] __vcalloc_noprof+0x4d/0x80 [ 65.454771][ T6380] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 65.454808][ T6380] kvm_set_memslot+0x139/0x1740 [ 65.454832][ T6380] ? kvm_set_memory_region+0xc43/0x15e0 [ 65.454866][ T6380] kvm_set_memory_region+0xe78/0x15e0 [ 65.454903][ T6380] kvm_vm_ioctl+0x1f21/0x42d0 [ 65.454928][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.454958][ T6380] ? stack_trace_save+0x8e/0xc0 [ 65.454982][ T6380] ? __pfx_stack_trace_save+0x10/0x10 [ 65.455007][ T6380] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 65.455024][ T6380] ? __lock_acquire+0x4c5/0x1ec0 [ 65.455059][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.455085][ T6380] ? kasan_save_stack+0x3f/0x50 [ 65.455107][ T6380] ? kasan_save_stack+0x30/0x50 [ 65.455128][ T6380] ? kasan_save_track+0x14/0x30 [ 65.455148][ T6380] ? kasan_save_free_info+0x3b/0x70 [ 65.455176][ T6380] ? __kasan_slab_free+0x5f/0x80 [ 65.455198][ T6380] ? kfree+0x22b/0x6d0 [ 65.455224][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.455249][ T6380] ? security_file_ioctl_compat+0xd3/0x230 [ 65.455275][ T6380] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 65.455304][ T6380] ? __do_fast_syscall_32+0x13a/0x8b0 [ 65.455330][ T6380] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 65.455361][ T6380] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 65.455417][ T6380] ? kasan_quarantine_put+0x104/0x240 [ 65.455438][ T6380] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.455464][ T6380] ? find_held_lock+0x2b/0x80 [ 65.455484][ T6380] ? tomoyo_path_number_perm+0x28f/0x580 [ 65.455523][ T6380] ? get_pid_task+0x106/0x250 [ 65.455551][ T6380] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.455581][ T6380] ? do_vfs_ioctl+0x226/0x13e0 [ 65.455612][ T6380] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.455644][ T6380] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 65.455665][ T6380] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 65.455684][ T6380] ? __fget_files+0x34/0x3d0 [ 65.455706][ T6380] ? find_held_lock+0x2b/0x80 [ 65.455726][ T6380] ? __fget_files+0x215/0x3d0 [ 65.455744][ T6380] ? hook_file_ioctl_common+0x140/0x440 [ 65.455777][ T6380] ? __fget_files+0x21f/0x3d0 [ 65.455803][ T6380] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 65.455823][ T6380] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 65.455857][ T6380] __do_fast_syscall_32+0x13a/0x8b0 [ 65.455883][ T6380] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.455910][ T6380] do_fast_syscall_32+0x32/0x70 [ 65.455937][ T6380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.455962][ T6380] RIP: 0023:0xf7f36fec [ 65.455986][ T6380] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 65.455995][ T6380] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 65.456015][ T6380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46 [ 65.456027][ T6380] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.456044][ T6380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.456055][ T6380] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.456066][ T6380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.456093][ T6380] [ 65.458063][ T6380] syz.1.143: vmalloc error: size 4, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 65.458635][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.1.143 Not tainted syzkaller #0 PREEMPT(full) [ 65.458657][ T6380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.458668][ T6380] Call Trace: [ 65.458674][ T6380] [ 65.458681][ T6380] dump_stack_lvl+0x100/0x190 [ 65.458709][ T6380] warn_alloc.cold+0x9e/0xb2 [ 65.458731][ T6380] ? __pfx_warn_alloc+0x10/0x10 [ 65.458758][ T6380] ? __kasan_kmalloc+0x8a/0xb0 [ 65.458813][ T6380] ? __get_vm_area_node+0x22b/0x350 [ 65.458842][ T6380] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 65.458868][ T6380] ? check_prev_add+0x354/0xe60 [ 65.458896][ T6380] ? __lock_acquire+0xe15/0x1ec0 [ 65.458921][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.458942][ T6380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.458963][ T6380] ? lock_acquire+0x1d1/0x380 [ 65.458989][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.459004][ T6380] __vmalloc_node_noprof+0xad/0xf0 [ 65.459023][ T6380] ? __vcalloc_noprof+0x4d/0x80 [ 65.459046][ T6380] __vmalloc_noprof+0xa3/0x120 [ 65.459064][ T6380] ? __pfx___vmalloc_noprof+0x10/0x10 [ 65.459084][ T6380] ? __pfx___mutex_lock+0x10/0x10 [ 65.459109][ T6380] __vcalloc_noprof+0x4d/0x80 [ 65.459124][ T6380] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 65.459151][ T6380] kvm_set_memslot+0x139/0x1740 [ 65.459169][ T6380] ? kvm_set_memory_region+0xc43/0x15e0 [ 65.459192][ T6380] kvm_set_memory_region+0xe78/0x15e0 [ 65.459220][ T6380] kvm_vm_ioctl+0x1f21/0x42d0 [ 65.459238][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.459259][ T6380] ? stack_trace_save+0x8e/0xc0 [ 65.459277][ T6380] ? __pfx_stack_trace_save+0x10/0x10 [ 65.459296][ T6380] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 65.459309][ T6380] ? __lock_acquire+0x4c5/0x1ec0 [ 65.459335][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.459354][ T6380] ? kasan_save_stack+0x3f/0x50 [ 65.459371][ T6380] ? kasan_save_stack+0x30/0x50 [ 65.459387][ T6380] ? kasan_save_track+0x14/0x30 [ 65.459402][ T6380] ? kasan_save_free_info+0x3b/0x70 [ 65.459424][ T6380] ? __kasan_slab_free+0x5f/0x80 [ 65.459440][ T6380] ? kfree+0x22b/0x6d0 [ 65.459461][ T6380] ? tomoyo_path_number_perm+0x46d/0x580 [ 65.459480][ T6380] ? security_file_ioctl_compat+0xd3/0x230 [ 65.459500][ T6380] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 65.459523][ T6380] ? __do_fast_syscall_32+0x13a/0x8b0 [ 65.459545][ T6380] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 65.459572][ T6380] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 65.459619][ T6380] ? kasan_quarantine_put+0x104/0x240 [ 65.459635][ T6380] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.459655][ T6380] ? find_held_lock+0x2b/0x80 [ 65.459670][ T6380] ? tomoyo_path_number_perm+0x28f/0x580 [ 65.459699][ T6380] ? get_pid_task+0x106/0x250 [ 65.459722][ T6380] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.459743][ T6380] ? do_vfs_ioctl+0x226/0x13e0 [ 65.459766][ T6380] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.459791][ T6380] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 65.459808][ T6380] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 65.459822][ T6380] ? __fget_files+0x34/0x3d0 [ 65.459838][ T6380] ? find_held_lock+0x2b/0x80 [ 65.459853][ T6380] ? __fget_files+0x215/0x3d0 [ 65.459867][ T6380] ? hook_file_ioctl_common+0x140/0x440 [ 65.459894][ T6380] ? __fget_files+0x21f/0x3d0 [ 65.459914][ T6380] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 65.459930][ T6380] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 65.459955][ T6380] __do_fast_syscall_32+0x13a/0x8b0 [ 65.459978][ T6380] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.460004][ T6380] do_fast_syscall_32+0x32/0x70 [ 65.460030][ T6380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.460062][ T6380] RIP: 0023:0xf7f36fec [ 65.460082][ T6380] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 65.460090][ T6380] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 65.460108][ T6380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46 [ 65.460120][ T6380] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.460130][ T6380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.460140][ T6380] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.460151][ T6380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.460174][ T6380] [ 65.465906][ T6380] Mem-Info: [ 65.465917][ T6380] active_anon:6921 inactive_anon:284 isolated_anon:0 [ 65.465917][ T6380] active_file:464 inactive_file:45081 isolated_file:0 [ 65.465917][ T6380] unevictable:1000 dirty:172 writeback:0 [ 65.465917][ T6380] slab_reclaimable:6363 slab_unreclaimable:51186 [ 65.465917][ T6380] mapped:23336 shmem:1521 pagetables:1152 [ 65.465917][ T6380] sec_pagetables:297 bounce:0 [ 65.465917][ T6380] kernel_misc_reclaimable:0 [ 65.465917][ T6380] free:54007 free_pcp:3519 free_cma:0 [ 65.465960][ T6380] Node 0 active_anon:2244kB inactive_anon:176kB active_file:48kB inactive_file:1748kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:644kB dirty:20kB writeback:0kB shmem:2024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9216kB pagetables:1532kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 65.466037][ T6380] Node 1 active_anon:25440kB inactive_anon:960kB active_file:1808kB inactive_file:178576kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:92700kB dirty:668kB writeback:0kB shmem:4060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4192kB pagetables:3076kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 65.466082][ T6380] Node 0 DMA free:2028kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:656kB local_pcp:212kB free_cma:0kB [ 65.466130][ T6380] lowmem_reserve[]: 0 278 278 278 278 [ 65.466162][ T6380] Node 0 DMA32 free:13680kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2244kB inactive_anon:176kB active_file:48kB inactive_file:1692kB unevictable:2000kB writepending:16kB zspages:0kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:8256kB local_pcp:2692kB free_cma:0kB [ 65.466212][ T6380] lowmem_reserve[]: 0 0 0 0 0 [ 65.466247][ T6380] Node 1 DMA32 free:200320kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25440kB inactive_anon:960kB active_file:1808kB inactive_file:178576kB unevictable:2000kB writepending:668kB zspages:1740kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:5164kB local_pcp:1612kB free_cma:0kB [ 65.466295][ T6380] lowmem_reserve[]: 0 0 0 0 0 [ 65.466324][ T6380] Node 0 DMA: 21*4kB (M) 7*8kB (UM) 6*16kB (UME) 16*32kB (UME) 8*64kB (UME) 4*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2028kB [ 65.466463][ T6380] Node 0 DMA32: 24*4kB (ME) 62*8kB (UME) 54*16kB (UME) 46*32kB (ME) 13*64kB (UME) 23*128kB (UME) 13*256kB (UM) 5*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 13616kB [ 65.466575][ T6380] Node 1 DMA32: 354*4kB (ME) 271*8kB (UME) 208*16kB (ME) 225*32kB (UME) 155*64kB (UME) 87*128kB (UME) 53*256kB (UME) 42*512kB (UME) 25*1024kB (UM) 17*2048kB (UM) 17*4096kB (M) = 200288kB [ 65.466691][ T6380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.466702][ T6380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.466712][ T6380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.466724][ T6380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.466734][ T6380] 47303 total pagecache pages [ 65.466740][ T6380] 241 pages in swap cache [ 65.466745][ T6380] Free swap = 122480kB [ 65.466750][ T6380] Total swap = 124996kB [ 65.466756][ T6380] 524155 pages RAM [ 65.466761][ T6380] 0 pages HighMem/MovableOnly [ 65.466766][ T6380] 212095 pages reserved [ 65.466771][ T6380] 0 pages cma reserved [ 65.554514][ T1589] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 65.725259][ T1589] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 65.726920][ T1589] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.726939][ T1589] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 65.726976][ T1589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.729197][ T1589] usb 7-1: config 0 descriptor?? [ 65.740425][ T1589] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 65.740672][ T1589] dvb-usb: bulk message failed: -22 (3/0) [ 65.765594][ T1589] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 65.780422][ T1589] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 65.780467][ T1589] usb 7-1: media controller created [ 65.787957][ T1589] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 65.816697][ T1589] dvb-usb: bulk message failed: -22 (6/0) [ 65.816798][ T1589] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 65.829268][ T1589] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 65.837884][ T1589] dvb-usb: schedule remote query interval to 150 msecs. [ 65.837903][ T1589] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 65.942198][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.942591][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.949234][ T1589] usb 7-1: USB disconnect, device number 9 [ 66.018745][ T1589] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 66.061951][ T6385] netlink: 256 bytes leftover after parsing attributes in process `syz.3.148'. [ 66.063087][ T6385] FAULT_INJECTION: forcing a failure. [ 66.063087][ T6385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.063113][ T6385] CPU: 2 UID: 0 PID: 6385 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) [ 66.063132][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.063144][ T6385] Call Trace: [ 66.063150][ T6385] [ 66.063157][ T6385] dump_stack_lvl+0x100/0x190 [ 66.063185][ T6385] should_fail_ex.cold+0x5/0xa [ 66.063209][ T6385] _copy_to_user+0x32/0xd0 [ 66.063231][ T6385] simple_read_from_buffer+0xcb/0x170 [ 66.063253][ T6385] proc_fail_nth_read+0x1af/0x230 [ 66.063282][ T6385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.063311][ T6385] ? rw_verify_area+0xce/0x6d0 [ 66.063336][ T6385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.063363][ T6385] vfs_read+0x1e4/0xb40 [ 66.063381][ T6385] ? lock_acquire+0x1d1/0x380 [ 66.063403][ T6385] ? __fget_files+0x34/0x3d0 [ 66.063421][ T6385] ? __pfx_vfs_read+0x10/0x10 [ 66.063436][ T6385] ? find_held_lock+0x2b/0x80 [ 66.063455][ T6385] ? __fget_files+0x215/0x3d0 [ 66.063477][ T6385] ? __fget_files+0x21f/0x3d0 [ 66.063502][ T6385] ksys_read+0x12a/0x250 [ 66.063518][ T6385] ? __pfx_ksys_read+0x10/0x10 [ 66.063542][ T6385] do_int80_emulation+0x166/0x650 [ 66.063569][ T6385] asm_int80_emulation+0x1a/0x20 [ 66.063587][ T6385] RIP: 0023:0xf71175ab [ 66.063601][ T6385] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 66.063617][ T6385] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 66.063635][ T6385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d65d0 [ 66.063647][ T6385] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 66.063657][ T6385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.063668][ T6385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.063693][ T6385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.063716][ T6385] [ 66.245257][ T6396] Console: switching to colour dummy device 80x25 [ 66.350642][ T6397] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 66.357656][ T6397] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 66.357773][ T6397] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 66.357973][ T6397] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 66.358727][ T6397] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 66.388057][ T6397] pci 0000:00:01.0: Adding to iommu group 1 [ 66.393564][ T6397] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 66.393590][ T6397] pci 0000:00:01.0: vgaarb: bridge control possible [ 66.393598][ T6397] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 66.415279][ T6397] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 66.421159][ T6397] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 66.443069][ T6397] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 66.463081][ T6397] [drm] Found bochs VGA, ID 0xb0c5. [ 66.463143][ T6397] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 66.518217][ T6397] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 66.789182][ T6397] Console: switching to colour frame buffer device 160x50 [ 66.821281][ T6397] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 67.043514][ T43] kauditd_printk_skb: 49 callbacks suppressed [ 67.043598][ T43] audit: type=1326 audit(1788372776.632:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.2.156" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87fec code=0x0 [ 67.046995][ T6408] FAULT_INJECTION: forcing a failure. [ 67.046995][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 67.047032][ T6408] CPU: 3 UID: 0 PID: 6408 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT(full) [ 67.047045][ T6408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.047053][ T6408] Call Trace: [ 67.047057][ T6408] [ 67.047062][ T6408] dump_stack_lvl+0x100/0x190 [ 67.047158][ T6408] should_fail_ex.cold+0x5/0xa [ 67.047175][ T6408] should_failslab+0xc2/0x120 [ 67.047211][ T6408] __kmalloc_noprof+0xfc/0x840 [ 67.047226][ T6408] ? rcu_is_watching+0x13/0xc0 [ 67.047241][ T6408] ? tomoyo_realpath_from_path+0xb6/0x690 [ 67.047263][ T6408] tomoyo_realpath_from_path+0xb6/0x690 [ 67.047284][ T6408] tomoyo_path_number_perm+0x23c/0x580 [ 67.047298][ T6408] ? tomoyo_path_number_perm+0x22e/0x580 [ 67.047315][ T6408] ? peak_open+0x11/0x50 [ 67.047332][ T6408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.047347][ T6408] ? lock_acquire+0x1d1/0x380 [ 67.047374][ T6408] ? current_check_access_path+0x262/0x420 [ 67.047393][ T6408] ? __pfx_current_check_access_path+0x10/0x10 [ 67.047410][ T6408] ? configfs_lookup+0x6e/0x7d0 [ 67.047426][ T6408] ? d_alloc+0x17b/0x1e0 [ 67.047441][ T6408] ? lookup_one_qstr_excl+0xaf/0x250 [ 67.047460][ T6408] tomoyo_path_mkdir+0x9b/0xe0 [ 67.047473][ T6408] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 67.047485][ T6408] ? lock_acquire+0x1d1/0x380 [ 67.047504][ T6408] security_path_mkdir+0x154/0x2e0 [ 67.047528][ T6408] filename_mkdirat+0x168/0x5e0 [ 67.047562][ T6408] ? __pfx_filename_mkdirat+0x10/0x10 [ 67.047575][ T6408] ? strncpy_from_user+0x19d/0x2d0 [ 67.047590][ T6408] ? do_getname+0x191/0x390 [ 67.047607][ T6408] __ia32_sys_mkdirat+0x88/0xc0 [ 67.047621][ T6408] __do_fast_syscall_32+0x13a/0x8b0 [ 67.047658][ T6408] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.047674][ T6408] do_fast_syscall_32+0x32/0x70 [ 67.047690][ T6408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.047705][ T6408] RIP: 0023:0xf7f36fec [ 67.047722][ T6408] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 67.047727][ T6408] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 67.047738][ T6408] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000440 [ 67.047745][ T6408] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 67.047752][ T6408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.047758][ T6408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.047764][ T6408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.047778][ T6408] [ 67.049380][ T6408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.090128][ T6410] FAULT_INJECTION: forcing a failure. [ 67.090128][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 67.090157][ T6410] CPU: 3 UID: 0 PID: 6410 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(full) [ 67.090175][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.090185][ T6410] Call Trace: [ 67.090192][ T6410] [ 67.090199][ T6410] dump_stack_lvl+0x100/0x190 [ 67.090228][ T6410] should_fail_ex.cold+0x5/0xa [ 67.090251][ T6410] should_failslab+0xc2/0x120 [ 67.090274][ T6410] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 67.090292][ T6410] ? __lock_acquire+0x4c5/0x1ec0 [ 67.090316][ T6410] ? __d_alloc+0x35/0xa50 [ 67.090339][ T6410] __d_alloc+0x35/0xa50 [ 67.090358][ T6410] ? __lock_acquire+0x4c5/0x1ec0 [ 67.090381][ T6410] d_alloc_parallel+0x105/0x14c0 [ 67.090407][ T6410] ? lock_acquire+0x1d1/0x380 [ 67.090431][ T6410] ? lock_acquire+0x1d1/0x380 [ 67.090452][ T6410] ? lookup_slow+0x42/0x70 [ 67.090474][ T6410] ? __pfx_d_alloc_parallel+0x10/0x10 [ 67.090498][ T6410] ? __pfx___might_resched+0x10/0x10 [ 67.090520][ T6410] ? find_held_lock+0x2b/0x80 [ 67.090539][ T6410] ? down_read+0x13b/0x4c0 [ 67.090583][ T6410] ? __pfx_down_read+0x10/0x10 [ 67.090609][ T6410] __lookup_slow+0x98/0x320 [ 67.090639][ T6410] lookup_slow+0x50/0x70 [ 67.090662][ T6410] link_path_walk+0x1712/0x1cc0 [ 67.090696][ T6410] __filename_parentat+0x213/0x740 [ 67.090719][ T6410] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.090743][ T6410] ? __pfx___filename_parentat+0x10/0x10 [ 67.090789][ T6410] ? __lock_acquire+0x4c5/0x1ec0 [ 67.090815][ T6410] filename_create+0xbe/0x400 [ 67.090841][ T6410] ? __pfx_filename_create+0x10/0x10 [ 67.090867][ T6410] ? lock_acquire+0x1d1/0x380 [ 67.090890][ T6410] ? find_held_lock+0x2b/0x80 [ 67.090911][ T6410] filename_mkdirat+0xb9/0x5e0 [ 67.090933][ T6410] ? __pfx_filename_mkdirat+0x10/0x10 [ 67.090952][ T6410] ? strncpy_from_user+0x19d/0x2d0 [ 67.090975][ T6410] ? do_getname+0x191/0x390 [ 67.090999][ T6410] __ia32_sys_mkdir+0x6a/0x90 [ 67.091019][ T6410] __do_fast_syscall_32+0x13a/0x8b0 [ 67.091042][ T6410] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.091064][ T6410] do_fast_syscall_32+0x32/0x70 [ 67.091086][ T6410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.091107][ T6410] RIP: 0023:0xf7f36fec [ 67.091126][ T6410] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 67.091134][ T6410] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 67.091152][ T6410] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004 [ 67.091163][ T6410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.091174][ T6410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.091184][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.091194][ T6410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.091217][ T6410] [ 67.344760][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.364601][ T6415] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 67.373700][ T6415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.385892][ T5835] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 67.495292][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 67.498751][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.502688][ T10] usb 7-1: Product: syz [ 67.502708][ T10] usb 7-1: Manufacturer: syz [ 67.502721][ T10] usb 7-1: SerialNumber: syz [ 67.544546][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 67.545295][ T5835] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 67.546181][ T5835] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 67.546198][ T5835] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 67.546212][ T5835] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 67.546228][ T5835] usb 6-1: config 250 has no interface number 0 [ 67.546254][ T5835] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 67.546273][ T5835] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 67.546289][ T5835] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.546305][ T5835] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.546322][ T5835] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 67.546341][ T5835] usb 6-1: config 250 interface 228 has no altsetting 0 [ 67.547671][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 67.547688][ T5835] usb 6-1: Product: syz [ 67.547699][ T5835] usb 6-1: SerialNumber: syz [ 67.557403][ T5835] hub 6-1:250.228: bad descriptor, ignoring hub [ 67.557422][ T5835] hub 6-1:250.228: probe with driver hub failed with error -5 [ 67.764515][ T5835] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 68.074723][ T855] usb 6-1: USB disconnect, device number 7 [ 68.077170][ T855] usblp0: removed [ 68.404597][ T855] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 68.554555][ T855] usb 6-1: Using ep0 maxpacket: 8 [ 68.555328][ T855] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 68.556581][ T855] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 68.556598][ T855] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 68.556610][ T855] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 68.556621][ T855] usb 6-1: config 250 has no interface number 0 [ 68.556641][ T855] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 68.556656][ T855] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 68.556669][ T855] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.556681][ T855] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 68.556693][ T855] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 68.556708][ T855] usb 6-1: config 250 interface 228 has no altsetting 0 [ 68.558133][ T855] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 68.558147][ T855] usb 6-1: Product: syz [ 68.558156][ T855] usb 6-1: SerialNumber: syz [ 68.563397][ T855] hub 6-1:250.228: bad descriptor, ignoring hub [ 68.563414][ T855] hub 6-1:250.228: probe with driver hub failed with error -5 [ 68.775446][ T855] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 68.795257][ T855] usb 6-1: USB disconnect, device number 8 [ 68.802440][ T855] usblp0: removed [ 68.808374][ T6432] syzkaller0: entered promiscuous mode [ 68.808430][ T6432] syzkaller0: entered allmulticast mode [ 68.823335][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 68.823511][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 69.098425][ T6435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.389026][ T6439] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 69.588955][ T6449] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 69.621029][ T6451] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 69.631650][ T6453] FAULT_INJECTION: forcing a failure. [ 69.631650][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 69.631740][ T6453] CPU: 3 UID: 0 PID: 6453 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 69.631774][ T6453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.631790][ T6453] Call Trace: [ 69.631795][ T6453] [ 69.631804][ T6453] dump_stack_lvl+0x100/0x190 [ 69.631834][ T6453] should_fail_ex.cold+0x5/0xa [ 69.631858][ T6453] should_failslab+0xc2/0x120 [ 69.631881][ T6453] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.631904][ T6453] ? __alloc_skb+0x140/0x710 [ 69.631966][ T6453] __alloc_skb+0x140/0x710 [ 69.631983][ T6453] ? __alloc_skb+0x5b7/0x710 [ 69.632002][ T6453] ? __pfx___alloc_skb+0x10/0x10 [ 69.632021][ T6453] ? trace_contention_end+0x126/0x160 [ 69.632046][ T6453] ? __mutex_lock+0x26c/0x1bd0 [ 69.632072][ T6453] netlink_dump+0x194/0xd00 [ 69.632102][ T6453] ? __pfx_netlink_dump+0x10/0x10 [ 69.632127][ T6453] ? __netlink_lookup+0x65c/0x900 [ 69.632167][ T6453] __netlink_dump_start+0x6d6/0x990 [ 69.632199][ T6453] ? __pfx_rtnl_dump_all+0x10/0x10 [ 69.632217][ T6453] rtnetlink_rcv_msg+0xb3e/0xe90 [ 69.632239][ T6453] ? __pfx_rtnl_dump_all+0x10/0x10 [ 69.632258][ T6453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.632279][ T6453] ? __pfx_rtnl_dumpit+0x10/0x10 [ 69.632305][ T6453] ? __pfx_rtnl_dump_all+0x10/0x10 [ 69.632327][ T6453] ? ref_tracker_free+0x37e/0x6c0 [ 69.632354][ T6453] netlink_rcv_skb+0x159/0x420 [ 69.632372][ T6453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.632399][ T6453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.632426][ T6453] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.632457][ T6453] netlink_unicast+0x585/0x850 [ 69.632479][ T6453] ? __pfx_netlink_unicast+0x10/0x10 [ 69.632504][ T6453] netlink_sendmsg+0x8b0/0xda0 [ 69.632533][ T6453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.632555][ T6453] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.632580][ T6453] sock_write_iter+0x53a/0x5b0 [ 69.632605][ T6453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.632624][ T6453] ? __pfx_sock_write_iter+0x10/0x10 [ 69.632654][ T6453] ? bpf_lsm_file_permission+0x9/0x10 [ 69.632677][ T6453] ? security_file_permission+0x76/0x210 [ 69.632702][ T6453] ? rw_verify_area+0xce/0x6d0 [ 69.632731][ T6453] vfs_write+0x6af/0x1050 [ 69.632748][ T6453] ? __pfx_sock_write_iter+0x10/0x10 [ 69.632775][ T6453] ? __pfx_vfs_write+0x10/0x10 [ 69.632791][ T6453] ? find_held_lock+0x2b/0x80 [ 69.632824][ T6453] ksys_write+0x1f8/0x250 [ 69.632841][ T6453] ? __pfx_ksys_write+0x10/0x10 [ 69.632857][ T6453] ? ksys_write+0x1ac/0x250 [ 69.632872][ T6453] ? __pfx_ksys_write+0x10/0x10 [ 69.632895][ T6453] __do_fast_syscall_32+0x13a/0x8b0 [ 69.632918][ T6453] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.632941][ T6453] do_fast_syscall_32+0x32/0x70 [ 69.632965][ T6453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.632986][ T6453] RIP: 0023:0xf7f17fec [ 69.633007][ T6453] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 69.633015][ T6453] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 69.633034][ T6453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 69.633044][ T6453] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 69.633054][ T6453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.633066][ T6453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.633075][ T6453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.633098][ T6453] [ 69.703044][ T6458] FAULT_INJECTION: forcing a failure. [ 69.703044][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 69.703073][ T6458] CPU: 3 UID: 0 PID: 6458 Comm: syz.3.175 Not tainted syzkaller #0 PREEMPT(full) [ 69.703093][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.703103][ T6458] Call Trace: [ 69.703109][ T6458] [ 69.703115][ T6458] dump_stack_lvl+0x100/0x190 [ 69.703145][ T6458] should_fail_ex.cold+0x5/0xa [ 69.703167][ T6458] should_failslab+0xc2/0x120 [ 69.703190][ T6458] __kmalloc_noprof+0xfc/0x840 [ 69.703211][ T6458] ? fib6_info_alloc+0x40/0x160 [ 69.703241][ T6458] fib6_info_alloc+0x40/0x160 [ 69.703268][ T6458] ip6_route_info_create+0x14c/0xad0 [ 69.703297][ T6458] ip6_route_add+0x4b/0x1d0 [ 69.703320][ T6458] inet6_rtm_newroute+0x157/0x160 [ 69.703342][ T6458] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 69.703365][ T6458] ? __lock_acquire+0x4c5/0x1ec0 [ 69.703415][ T6458] ? find_held_lock+0x2b/0x80 [ 69.703432][ T6458] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.703455][ T6458] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 69.703479][ T6458] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 69.703502][ T6458] rtnetlink_rcv_msg+0x95e/0xe90 [ 69.703531][ T6458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.703560][ T6458] ? ref_tracker_free+0x37e/0x6c0 [ 69.703585][ T6458] netlink_rcv_skb+0x159/0x420 [ 69.703605][ T6458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.703630][ T6458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.703656][ T6458] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.703687][ T6458] netlink_unicast+0x585/0x850 [ 69.703709][ T6458] ? __pfx_netlink_unicast+0x10/0x10 [ 69.703734][ T6458] netlink_sendmsg+0x8b0/0xda0 [ 69.703756][ T6458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.703777][ T6458] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.703802][ T6458] sock_write_iter+0x53a/0x5b0 [ 69.703827][ T6458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.703845][ T6458] ? __pfx_sock_write_iter+0x10/0x10 [ 69.703875][ T6458] ? bpf_lsm_file_permission+0x9/0x10 [ 69.703897][ T6458] ? security_file_permission+0x76/0x210 [ 69.703921][ T6458] ? rw_verify_area+0xce/0x6d0 [ 69.703949][ T6458] vfs_write+0x6af/0x1050 [ 69.703967][ T6458] ? __pfx_sock_write_iter+0x10/0x10 [ 69.703993][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 69.704008][ T6458] ? find_held_lock+0x2b/0x80 [ 69.704039][ T6458] ksys_write+0x1f8/0x250 [ 69.704056][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 69.704071][ T6458] ? ksys_write+0x1ac/0x250 [ 69.704088][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 69.704108][ T6458] __do_fast_syscall_32+0x13a/0x8b0 [ 69.704132][ T6458] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.704156][ T6458] do_fast_syscall_32+0x32/0x70 [ 69.704179][ T6458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.704202][ T6458] RIP: 0023:0xf7f17fec [ 69.704221][ T6458] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 69.704230][ T6458] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 69.704248][ T6458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 69.704260][ T6458] RDX: 000000000000007c RSI: 0000000000000000 RDI: 0000000000000000 [ 69.704269][ T6458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.704279][ T6458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.704290][ T6458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.704313][ T6458] [ 69.751420][ T6460] openvswitch: netlink: Duplicate or invalid key (type 0). [ 69.796482][ T6462] overlay: ./file0 is not a directory [ 70.068332][ T5835] usb 7-1: USB disconnect, device number 10 [ 70.434489][ T5835] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 70.609506][ T5835] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 70.611325][ T5835] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.611353][ T5835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 70.611392][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.616696][ T5835] usb 7-1: config 0 descriptor?? [ 70.620994][ T5835] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 70.625739][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 70.643849][ T5835] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 70.646122][ T5835] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 70.646165][ T5835] usb 7-1: media controller created [ 70.649909][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.660959][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 70.661084][ T5835] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 70.663513][ T5835] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input10 [ 70.673921][ T5835] dvb-usb: schedule remote query interval to 150 msecs. [ 70.674036][ T5835] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 70.713487][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 70.720599][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.721326][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.792895][ T6481] FAULT_INJECTION: forcing a failure. [ 70.792895][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 70.792956][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 70.792980][ T6481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.792988][ T6481] Call Trace: [ 70.792993][ T6481] [ 70.792998][ T6481] dump_stack_lvl+0x100/0x190 [ 70.793017][ T6481] should_fail_ex.cold+0x5/0xa [ 70.793032][ T6481] should_failslab+0xc2/0x120 [ 70.793047][ T6481] __kmalloc_noprof+0xfc/0x840 [ 70.793059][ T6481] ? tomoyo_encode2+0xfb/0x3c0 [ 70.793079][ T6481] tomoyo_encode2+0xfb/0x3c0 [ 70.793097][ T6481] tomoyo_encode+0x29/0x50 [ 70.793113][ T6481] tomoyo_realpath_from_path+0x18c/0x690 [ 70.793133][ T6481] tomoyo_path_number_perm+0x23c/0x580 [ 70.793147][ T6481] ? tomoyo_path_number_perm+0x22e/0x580 [ 70.793163][ T6481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.793178][ T6481] ? get_pid_task+0x106/0x250 [ 70.793193][ T6481] ? __lock_acquire+0x4c5/0x1ec0 [ 70.793228][ T6481] ? __fget_files+0x34/0x3d0 [ 70.793240][ T6481] ? find_held_lock+0x2b/0x80 [ 70.793250][ T6481] ? __fget_files+0x215/0x3d0 [ 70.793261][ T6481] ? hook_file_ioctl_common+0x140/0x440 [ 70.793275][ T6481] ? __fget_files+0x215/0x3d0 [ 70.793289][ T6481] ? __fget_files+0x21f/0x3d0 [ 70.793302][ T6481] security_file_ioctl_compat+0xd3/0x230 [ 70.793319][ T6481] __ia32_compat_sys_ioctl+0xc2/0x360 [ 70.793338][ T6481] __do_fast_syscall_32+0x13a/0x8b0 [ 70.793353][ T6481] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.793368][ T6481] do_fast_syscall_32+0x32/0x70 [ 70.793383][ T6481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.793398][ T6481] RIP: 0023:0xf7f17fec [ 70.793411][ T6481] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 70.793416][ T6481] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.793427][ T6481] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c044565d [ 70.793434][ T6481] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.793441][ T6481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.793447][ T6481] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.793453][ T6481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.793467][ T6481] [ 70.793649][ T6481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.826565][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 70.826623][ T5835] dvb-usb: error while querying for an remote control event. [ 70.836841][ T6477] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.182'. [ 70.840518][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.840866][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.930225][ T855] usb 7-1: USB disconnect, device number 11 [ 70.971142][ T855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.030412][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.030538][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.164668][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.316823][ T10] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 71.320634][ T10] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 71.320681][ T10] usb 8-1: config 1 has no interface number 0 [ 71.327823][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.331064][ T10] usb 8-1: Product: syz [ 71.332505][ T10] usb 8-1: Manufacturer: syz [ 71.334151][ T10] usb 8-1: SerialNumber: syz [ 71.372520][ T10] usb 8-1: cannot find UAC_HEADER [ 71.429464][ T10] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 71.433914][ T6499] FAULT_INJECTION: forcing a failure. [ 71.433914][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 71.434015][ T6499] CPU: 3 UID: 0 PID: 6499 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) [ 71.434041][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.434050][ T6499] Call Trace: [ 71.434054][ T6499] [ 71.434059][ T6499] dump_stack_lvl+0x100/0x190 [ 71.434081][ T6499] should_fail_ex.cold+0x5/0xa [ 71.434097][ T6499] should_failslab+0xc2/0x120 [ 71.434112][ T6499] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.434133][ T6499] ? fscontext_alloc_log+0x4a/0x1b0 [ 71.434154][ T6499] fscontext_alloc_log+0x4a/0x1b0 [ 71.434184][ T6499] __ia32_sys_fsopen+0x15b/0x230 [ 71.434201][ T6499] __do_fast_syscall_32+0x13a/0x8b0 [ 71.434218][ T6499] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.434233][ T6499] do_fast_syscall_32+0x32/0x70 [ 71.434248][ T6499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.434268][ T6499] RIP: 0023:0xf7f36fec [ 71.434285][ T6499] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 71.434291][ T6499] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 71.434307][ T6499] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 71.434319][ T6499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.434328][ T6499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.434337][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.434346][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.434365][ T6499] [ 71.454550][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.560735][ T6505] FAULT_INJECTION: forcing a failure. [ 71.560735][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 71.560790][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(full) [ 71.560821][ T6505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.560833][ T6505] Call Trace: [ 71.560840][ T6505] [ 71.560846][ T6505] dump_stack_lvl+0x100/0x190 [ 71.560875][ T6505] should_fail_ex.cold+0x5/0xa [ 71.560894][ T6505] ? __netlink_lookup+0x652/0x900 [ 71.560923][ T6505] should_failslab+0xc2/0x120 [ 71.560946][ T6505] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.560967][ T6505] ? skb_clone+0x190/0x400 [ 71.560990][ T6505] skb_clone+0x190/0x400 [ 71.561012][ T6505] netlink_deliver_tap+0xaed/0xcc0 [ 71.561043][ T6505] netlink_unicast+0x62b/0x850 [ 71.561064][ T6505] ? __pfx_netlink_unicast+0x10/0x10 [ 71.561088][ T6505] netlink_sendmsg+0x8b0/0xda0 [ 71.561110][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.561130][ T6505] ? apparmor_socket_sendmsg+0x165/0x280 [ 71.561155][ T6505] ____sys_sendmsg+0xa4d/0xbe0 [ 71.561185][ T6505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.561205][ T6505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.561239][ T6505] ___sys_sendmsg+0x190/0x1e0 [ 71.561266][ T6505] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.561302][ T6505] ? find_held_lock+0x2b/0x80 [ 71.561336][ T6505] __sys_sendmsg+0x160/0x210 [ 71.561357][ T6505] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.561399][ T6505] ? __pfx_ksys_write+0x10/0x10 [ 71.561422][ T6505] __do_fast_syscall_32+0x13a/0x8b0 [ 71.561446][ T6505] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.561469][ T6505] do_fast_syscall_32+0x32/0x70 [ 71.561492][ T6505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.561514][ T6505] RIP: 0023:0xf7f87fec [ 71.561534][ T6505] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 71.561542][ T6505] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.561559][ T6505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 71.561571][ T6505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.561581][ T6505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.561590][ T6505] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.561601][ T6505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.561622][ T6505] [ 71.565775][ T855] usb 8-1: USB disconnect, device number 5 [ 71.607129][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 71.731638][ T43] audit: type=1804 audit(1788372781.322:660): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.195" name="/newroot/40/tracefs/dynamic_events" dev="tracefs" ino=3088 res=1 errno=0 [ 71.740080][ T43] audit: type=1804 audit(1788372781.332:661): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.195" name="/newroot/40/tracefs/dynamic_events" dev="tracefs" ino=3088 res=1 errno=0 [ 71.747838][ T43] audit: type=1804 audit(1788372781.332:662): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.195" name="/newroot/40/tracefs/dynamic_events" dev="tracefs" ino=3088 res=1 errno=0 [ 71.799933][ T6519] FAULT_INJECTION: forcing a failure. [ 71.799933][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.799989][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 71.800012][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.800021][ T6519] Call Trace: [ 71.800025][ T6519] [ 71.800029][ T6519] dump_stack_lvl+0x100/0x190 [ 71.800048][ T6519] should_fail_ex.cold+0x5/0xa [ 71.800062][ T6519] _copy_from_user+0x2e/0xd0 [ 71.800076][ T6519] ctl_ioctl+0x289/0xcc0 [ 71.800094][ T6519] ? __pfx_table_load+0x10/0x10 [ 71.800105][ T6519] ? __pfx_ctl_ioctl+0x10/0x10 [ 71.800134][ T6519] ? __fget_files+0x21f/0x3d0 [ 71.800149][ T6519] dm_compat_ctl_ioctl+0x23/0x30 [ 71.800167][ T6519] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 71.800185][ T6519] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 71.800204][ T6519] __do_fast_syscall_32+0x13a/0x8b0 [ 71.800219][ T6519] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.800234][ T6519] do_fast_syscall_32+0x32/0x70 [ 71.800249][ T6519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.800263][ T6519] RIP: 0023:0xf7f87fec [ 71.800276][ T6519] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 71.800281][ T6519] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 71.800292][ T6519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 71.800299][ T6519] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.800305][ T6519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.800311][ T6519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.800317][ T6519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.800330][ T6519] [ 71.834575][ T6523] IPv6: Can't replace route, no match found [ 71.841054][ T6523] hub 8-0:1.0: USB hub found [ 71.841183][ T6523] hub 8-0:1.0: 1 port detected [ 71.871401][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 72.003544][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 72.010930][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 72.035158][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.186014][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.190115][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.190158][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.190183][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.190217][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.191908][ T6547] netlink: 2 bytes leftover after parsing attributes in process `syz.3.208'. [ 72.207572][ T10] usb 6-1: config 0 descriptor?? [ 72.223114][ T6549] FAULT_INJECTION: forcing a failure. [ 72.223114][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.223177][ T6549] CPU: 3 UID: 0 PID: 6549 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 72.223201][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.223210][ T6549] Call Trace: [ 72.223214][ T6549] [ 72.223219][ T6549] dump_stack_lvl+0x100/0x190 [ 72.223238][ T6549] should_fail_ex.cold+0x5/0xa [ 72.223254][ T6549] _copy_to_user+0x32/0xd0 [ 72.223269][ T6549] simple_read_from_buffer+0xcb/0x170 [ 72.223283][ T6549] proc_fail_nth_read+0x1af/0x230 [ 72.223302][ T6549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.223321][ T6549] ? rw_verify_area+0xce/0x6d0 [ 72.223337][ T6549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.223355][ T6549] vfs_read+0x1e4/0xb40 [ 72.223366][ T6549] ? lock_acquire+0x1d1/0x380 [ 72.223381][ T6549] ? __fget_files+0x34/0x3d0 [ 72.223392][ T6549] ? __pfx_vfs_read+0x10/0x10 [ 72.223401][ T6549] ? find_held_lock+0x2b/0x80 [ 72.223413][ T6549] ? __fget_files+0x215/0x3d0 [ 72.223426][ T6549] ? __fget_files+0x21f/0x3d0 [ 72.223441][ T6549] ksys_read+0x12a/0x250 [ 72.223451][ T6549] ? __pfx_ksys_read+0x10/0x10 [ 72.223465][ T6549] do_int80_emulation+0x166/0x650 [ 72.223482][ T6549] asm_int80_emulation+0x1a/0x20 [ 72.223511][ T6549] RIP: 0023:0xf71175ab [ 72.223521][ T6549] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.223533][ T6549] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.223544][ T6549] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 72.223561][ T6549] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 72.223570][ T6549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.223579][ T6549] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.223589][ T6549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.223609][ T6549] [ 72.466227][ T6552] 9p: Bad value for 'rfdno' [ 72.514662][ T855] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 72.658913][ T6563] 9p: Bad value for 'version' [ 72.686103][ T855] usb 8-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 72.687114][ T855] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.687132][ T855] usb 8-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 72.687186][ T855] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 72.693776][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.693799][ T855] usb 8-1: Product: syz [ 72.693812][ T855] usb 8-1: Manufacturer: syz [ 72.693823][ T855] usb 8-1: SerialNumber: syz [ 72.896313][ T6570] process 'syz.0.216' launched './file1' with NULL argv: empty string added [ 72.923868][ T6551] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 72.924047][ T6551] qnx6: wrong signature (magic) in superblock #1. [ 72.924053][ T6551] qnx6: unable to read the first superblock [ 73.242180][ T855] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.242466][ T855] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 73.244042][ T855] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.244671][ T855] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 73.248726][ T855] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.274533][ T855] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 73.275916][ T855] usb 8-1: USB disconnect, device number 6 [ 73.289387][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.449481][ T6601] FAULT_INJECTION: forcing a failure. [ 73.449481][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 73.449564][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.2.224 Not tainted syzkaller #0 PREEMPT(full) [ 73.449586][ T6601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.449596][ T6601] Call Trace: [ 73.449603][ T6601] [ 73.449610][ T6601] dump_stack_lvl+0x100/0x190 [ 73.449640][ T6601] should_fail_ex.cold+0x5/0xa [ 73.449658][ T6601] ? __netlink_lookup+0x652/0x900 [ 73.449688][ T6601] should_failslab+0xc2/0x120 [ 73.449712][ T6601] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.449735][ T6601] ? skb_clone+0x190/0x400 [ 73.449757][ T6601] skb_clone+0x190/0x400 [ 73.449776][ T6601] netlink_deliver_tap+0xaed/0xcc0 [ 73.449808][ T6601] netlink_unicast+0x62b/0x850 [ 73.449830][ T6601] ? __pfx_netlink_unicast+0x10/0x10 [ 73.449854][ T6601] netlink_sendmsg+0x8b0/0xda0 [ 73.449875][ T6601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.449896][ T6601] ? apparmor_socket_sendmsg+0x165/0x280 [ 73.449938][ T6601] ____sys_sendmsg+0xa4d/0xbe0 [ 73.450002][ T6601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.450020][ T6601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.450056][ T6601] ___sys_sendmsg+0x190/0x1e0 [ 73.450084][ T6601] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.450120][ T6601] ? find_held_lock+0x2b/0x80 [ 73.450156][ T6601] __sys_sendmsg+0x160/0x210 [ 73.450178][ T6601] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.450205][ T6601] ? __pfx_ksys_write+0x10/0x10 [ 73.450227][ T6601] __do_fast_syscall_32+0x13a/0x8b0 [ 73.450252][ T6601] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.450276][ T6601] do_fast_syscall_32+0x32/0x70 [ 73.450300][ T6601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.450322][ T6601] RIP: 0023:0xf7f87fec [ 73.450342][ T6601] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 73.450349][ T6601] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 73.450367][ T6601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 73.450380][ T6601] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.450389][ T6601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.450399][ T6601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.450411][ T6601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.450432][ T6601] [ 73.903670][ T6621] FAULT_INJECTION: forcing a failure. [ 73.903670][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 73.903743][ T6621] CPU: 2 UID: 0 PID: 6621 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(full) [ 73.903787][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.903800][ T6621] Call Trace: [ 73.903808][ T6621] [ 73.903815][ T6621] dump_stack_lvl+0x100/0x190 [ 73.903848][ T6621] should_fail_ex.cold+0x5/0xa [ 73.903887][ T6621] should_failslab+0xc2/0x120 [ 73.903909][ T6621] __kmalloc_noprof+0xfc/0x840 [ 73.903927][ T6621] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 73.903954][ T6621] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 73.903978][ T6621] genl_family_rcv_msg_doit+0xc7/0x300 [ 73.903997][ T6621] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 73.904014][ T6621] ? genl_get_cmd+0x3e7/0x760 [ 73.904035][ T6621] ? bpf_lsm_capable+0x9/0x10 [ 73.904057][ T6621] ? security_capable+0x80/0x260 [ 73.904077][ T6621] ? ns_capable+0xd2/0xf0 [ 73.904105][ T6621] genl_rcv_msg+0x560/0x800 [ 73.904128][ T6621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.904145][ T6621] ? __lock_acquire+0x4c5/0x1ec0 [ 73.904172][ T6621] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 73.904200][ T6621] netlink_rcv_skb+0x159/0x420 [ 73.904217][ T6621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.904239][ T6621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.904265][ T6621] ? netlink_deliver_tap+0x1ae/0xcc0 [ 73.904297][ T6621] genl_rcv+0x28/0x40 [ 73.904315][ T6621] netlink_unicast+0x585/0x850 [ 73.904338][ T6621] ? __pfx_netlink_unicast+0x10/0x10 [ 73.904362][ T6621] netlink_sendmsg+0x8b0/0xda0 [ 73.904382][ T6621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.904401][ T6621] ? apparmor_socket_sendmsg+0x165/0x280 [ 73.904424][ T6621] ____sys_sendmsg+0xa4d/0xbe0 [ 73.904447][ T6621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.904468][ T6621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.904503][ T6621] ___sys_sendmsg+0x190/0x1e0 [ 73.904568][ T6621] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.904610][ T6621] ? find_held_lock+0x2b/0x80 [ 73.904646][ T6621] __sys_sendmsg+0x160/0x210 [ 73.904669][ T6621] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.904698][ T6621] ? __pfx_ksys_write+0x10/0x10 [ 73.904722][ T6621] __do_fast_syscall_32+0x13a/0x8b0 [ 73.904748][ T6621] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.904779][ T6621] do_fast_syscall_32+0x32/0x70 [ 73.904804][ T6621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.904829][ T6621] RIP: 0023:0xf7f17fec [ 73.904852][ T6621] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 73.904861][ T6621] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 73.904880][ T6621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 73.904892][ T6621] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.904903][ T6621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.904915][ T6621] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.904926][ T6621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.904951][ T6621] [ 74.713319][ T6649] dns_resolver: Unsupported server list version (0) [ 74.807754][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 74.807885][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.812924][ T10] usb 6-1: USB disconnect, device number 9 [ 74.962541][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 75.125615][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 75.524770][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.686558][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.690994][ T10] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 75.691062][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.701107][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.703945][ T10] usb 6-1: Product: syz [ 75.706084][ T10] usb 6-1: Manufacturer: syz [ 75.708946][ T10] usb 6-1: SerialNumber: syz [ 75.715329][ T10] usb 6-1: config 0 descriptor?? [ 75.727495][ T10] usb 6-1: selecting invalid altsetting 0 [ 75.829855][ T6716] tipc: Enabling of bearer rejected, failed to enable media [ 75.898795][ T6720] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 75.967262][ T10] usb 6-1: USB disconnect, device number 10 [ 76.094313][ T6730] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 76.094353][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.095453][ T6730] vhci_hcd vhci_hcd.0: Device attached [ 76.099418][ T6734] vhci_hcd: connection closed [ 76.103957][ T5812] vhci_hcd vhci_hcd.3: stop threads [ 76.104302][ T5812] vhci_hcd vhci_hcd.3: release socket [ 76.104325][ T5812] vhci_hcd vhci_hcd.3: disconnect device [ 76.152348][ T30] cfg80211: failed to load regulatory.db [ 76.944214][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944270][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944318][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944327][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944334][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944343][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944350][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944357][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944853][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944867][ T6766] tc action pedit offset must be on 32 bit boundaries [ 76.944882][ T6766] 0: reclassify loop, rule prio 0, protocol 800 [ 77.088229][ T6773] FAULT_INJECTION: forcing a failure. [ 77.088229][ T6773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.088286][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 77.088310][ T6773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.088319][ T6773] Call Trace: [ 77.088323][ T6773] [ 77.088328][ T6773] dump_stack_lvl+0x100/0x190 [ 77.088348][ T6773] should_fail_ex.cold+0x5/0xa [ 77.088363][ T6773] _copy_to_user+0x32/0xd0 [ 77.088377][ T6773] simple_read_from_buffer+0xcb/0x170 [ 77.088391][ T6773] proc_fail_nth_read+0x1af/0x230 [ 77.088411][ T6773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.088430][ T6773] ? rw_verify_area+0xce/0x6d0 [ 77.088451][ T6773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.088478][ T6773] vfs_read+0x1e4/0xb40 [ 77.088492][ T6773] ? lock_acquire+0x1d1/0x380 [ 77.088512][ T6773] ? __fget_files+0x34/0x3d0 [ 77.088528][ T6773] ? __pfx_vfs_read+0x10/0x10 [ 77.088543][ T6773] ? find_held_lock+0x2b/0x80 [ 77.088570][ T6773] ? __fget_files+0x215/0x3d0 [ 77.088591][ T6773] ? __fget_files+0x21f/0x3d0 [ 77.088616][ T6773] ksys_read+0x12a/0x250 [ 77.088632][ T6773] ? __pfx_ksys_read+0x10/0x10 [ 77.088655][ T6773] do_int80_emulation+0x166/0x650 [ 77.088683][ T6773] asm_int80_emulation+0x1a/0x20 [ 77.088700][ T6773] RIP: 0023:0xf71375ab [ 77.088714][ T6773] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 77.088730][ T6773] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 77.088748][ T6773] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 77.088759][ T6773] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 77.088769][ T6773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.088780][ T6773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.088790][ T6773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.088813][ T6773] [ 77.248613][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 77.257645][ T6778] FAULT_INJECTION: forcing a failure. [ 77.257645][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 77.257713][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT(full) [ 77.257737][ T6778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.257746][ T6778] Call Trace: [ 77.257757][ T6778] [ 77.257762][ T6778] dump_stack_lvl+0x100/0x190 [ 77.257785][ T6778] should_fail_ex.cold+0x5/0xa [ 77.257798][ T6778] ? __netlink_lookup+0x652/0x900 [ 77.257819][ T6778] should_failslab+0xc2/0x120 [ 77.257836][ T6778] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.257850][ T6778] ? skb_clone+0x190/0x400 [ 77.257866][ T6778] skb_clone+0x190/0x400 [ 77.257880][ T6778] netlink_deliver_tap+0xaed/0xcc0 [ 77.257900][ T6778] netlink_unicast+0x62b/0x850 [ 77.257913][ T6778] ? __pfx_netlink_unicast+0x10/0x10 [ 77.257924][ T6778] ? aa_sk_perm+0x389/0xab0 [ 77.257971][ T6778] netlink_sendmsg+0x8b0/0xda0 [ 77.257985][ T6778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.257998][ T6778] ? apparmor_socket_sendmsg+0x165/0x280 [ 77.258014][ T6778] ____sys_sendmsg+0xa4d/0xbe0 [ 77.258030][ T6778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.258042][ T6778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.258065][ T6778] ___sys_sendmsg+0x190/0x1e0 [ 77.258082][ T6778] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.258105][ T6778] ? find_held_lock+0x2b/0x80 [ 77.258127][ T6778] __sys_sendmsg+0x160/0x210 [ 77.258141][ T6778] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.258157][ T6778] ? __pfx_ksys_write+0x10/0x10 [ 77.258172][ T6778] __do_fast_syscall_32+0x13a/0x8b0 [ 77.258189][ T6778] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.258204][ T6778] do_fast_syscall_32+0x32/0x70 [ 77.258220][ T6778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.258235][ T6778] RIP: 0023:0xf7f87fec [ 77.258255][ T6778] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 77.258260][ T6778] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 77.258272][ T6778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 77.258279][ T6778] RDX: 0000000040008090 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.258286][ T6778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.258292][ T6778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.258299][ T6778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.258313][ T6778] [ 77.798281][ T6787] FAULT_INJECTION: forcing a failure. [ 77.798281][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 77.798337][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(full) [ 77.798361][ T6787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.798370][ T6787] Call Trace: [ 77.798374][ T6787] [ 77.798379][ T6787] dump_stack_lvl+0x100/0x190 [ 77.798399][ T6787] should_fail_ex.cold+0x5/0xa [ 77.798414][ T6787] should_failslab+0xc2/0x120 [ 77.798428][ T6787] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 77.798443][ T6787] ? __alloc_skb+0x140/0x710 [ 77.798457][ T6787] __alloc_skb+0x140/0x710 [ 77.798470][ T6787] ? __pfx___alloc_skb+0x10/0x10 [ 77.798485][ T6787] tcp_stream_alloc_skb+0x34/0x660 [ 77.798502][ T6787] tcp_sendmsg_locked+0x140f/0x44f0 [ 77.798528][ T6787] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 77.798545][ T6787] ? lock_acquire+0x1d1/0x380 [ 77.798560][ T6787] ? do_raw_spin_lock+0x128/0x260 [ 77.798578][ T6787] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.798598][ T6787] ? __local_bh_enable_ip+0xa5/0x120 [ 77.798626][ T6787] tcp_sendmsg+0x2e/0x50 [ 77.798642][ T6787] ? __pfx_tcp_sendmsg+0x10/0x10 [ 77.798658][ T6787] inet_sendmsg+0xb9/0x140 [ 77.798674][ T6787] __sys_sendto+0x453/0x4e0 [ 77.798685][ T6787] ? __pfx_inet_sendmsg+0x10/0x10 [ 77.798701][ T6787] ? __pfx___sys_sendto+0x10/0x10 [ 77.798723][ T6787] ? fput+0x7c/0x100 [ 77.798736][ T6787] ? ksys_write+0x1ac/0x250 [ 77.798748][ T6787] __ia32_sys_sendto+0xdd/0x1b0 [ 77.798760][ T6787] ? __do_fast_syscall_32+0xb3/0x8b0 [ 77.798776][ T6787] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.798790][ T6787] __do_fast_syscall_32+0x13a/0x8b0 [ 77.798805][ T6787] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.798819][ T6787] do_fast_syscall_32+0x32/0x70 [ 77.798834][ T6787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.798849][ T6787] RIP: 0023:0xf7f17fec [ 77.798863][ T6787] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 77.798868][ T6787] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 77.798879][ T6787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 77.798886][ T6787] RDX: 0000000000000381 RSI: 0000000000000805 RDI: 0000000000000000 [ 77.798892][ T6787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.798898][ T6787] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.798905][ T6787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.798918][ T6787] [ 78.175082][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 78.193457][ T6804] binder: 6800:6804 unknown command 0 [ 78.195909][ T6804] binder: 6800:6804 ioctl c0306201 800001c0 returned -22 [ 78.200845][ T6802] binder: 6800:6802 ioctl c0306201 80000080 returned -14 [ 78.223566][ T6807] FAULT_INJECTION: forcing a failure. [ 78.223566][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.223669][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.2.286 Not tainted syzkaller #0 PREEMPT(full) [ 78.223704][ T6807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.223716][ T6807] Call Trace: [ 78.223723][ T6807] [ 78.223730][ T6807] dump_stack_lvl+0x100/0x190 [ 78.223761][ T6807] should_fail_ex.cold+0x5/0xa [ 78.223786][ T6807] _copy_to_user+0x32/0xd0 [ 78.223810][ T6807] drm_ioctl+0x608/0xc60 [ 78.223838][ T6807] ? __pfx_drm_set_client_name+0x10/0x10 [ 78.223863][ T6807] ? __pfx_drm_ioctl+0x10/0x10 [ 78.223902][ T6807] drm_compat_ioctl+0x386/0x4c0 [ 78.223934][ T6807] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 78.223963][ T6807] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 78.223995][ T6807] __do_fast_syscall_32+0x13a/0x8b0 [ 78.224020][ T6807] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.224053][ T6807] do_fast_syscall_32+0x32/0x70 [ 78.224078][ T6807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.224102][ T6807] RIP: 0023:0xf7f87fec [ 78.224122][ T6807] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 78.224131][ T6807] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 78.224149][ T6807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064d1 [ 78.224161][ T6807] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.224171][ T6807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.224186][ T6807] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.224199][ T6807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.224222][ T6807] [ 78.288361][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 78.449900][ T5813] kernel read not supported for file /media5 (pid: 5813 comm: kworker/1:4) [ 78.538822][ T6831] netlink: 'syz.1.296': attribute type 11 has an invalid length. [ 78.584872][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.295'. [ 78.587503][ T6830] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 78.587854][ T6830] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 78.587868][ T6830] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 78.603999][ T6833] overlayfs: upper fs does not support file handles, falling back to index=off. [ 78.608167][ T6833] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 78.617518][ T6833] comedi comedi1: board detection failed [ 78.791261][ T6839] pimreg: tun_chr_ioctl cmd 1074025675 [ 78.791735][ T6839] pimreg: persist disabled [ 78.818130][ T6840] FAULT_INJECTION: forcing a failure. [ 78.818130][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 78.818198][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(full) [ 78.818222][ T6840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.818231][ T6840] Call Trace: [ 78.818236][ T6840] [ 78.818240][ T6840] dump_stack_lvl+0x100/0x190 [ 78.818259][ T6840] should_fail_ex.cold+0x5/0xa [ 78.818274][ T6840] should_failslab+0xc2/0x120 [ 78.818290][ T6840] __kmalloc_cache_noprof+0x91/0x6d0 [ 78.818307][ T6840] ? check_noncircular+0x97/0x160 [ 78.818321][ T6840] ? fuse_dentry_revalidate+0x363/0xc20 [ 78.818342][ T6840] fuse_dentry_revalidate+0x363/0xc20 [ 78.818361][ T6840] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 78.818379][ T6840] ? __lock_acquire+0xe15/0x1ec0 [ 78.818400][ T6840] ? lock_acquire+0x1d1/0x380 [ 78.818420][ T6840] ? __d_lookup+0x266/0x4a0 [ 78.818441][ T6840] lookup_open+0x664/0x1990 [ 78.818463][ T6840] path_openat+0xa2c/0x2440 [ 78.818478][ T6840] ? __pfx_path_openat+0x10/0x10 [ 78.818494][ T6840] do_file_open+0x20e/0x430 [ 78.818508][ T6840] ? __pfx_do_file_open+0x10/0x10 [ 78.818530][ T6840] ? _raw_spin_unlock+0x28/0x50 [ 78.818543][ T6840] ? alloc_fd+0x471/0x7a0 [ 78.818564][ T6840] do_sys_openat2+0x10f/0x1e0 [ 78.818579][ T6840] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.818595][ T6840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.818613][ T6840] __ia32_compat_sys_openat+0x12d/0x210 [ 78.818630][ T6840] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 78.818645][ T6840] ? fput+0x7c/0x100 [ 78.818658][ T6840] ? ksys_write+0x1ac/0x250 [ 78.818669][ T6840] ? __pfx_ksys_write+0x10/0x10 [ 78.818682][ T6840] __do_fast_syscall_32+0x13a/0x8b0 [ 78.818697][ T6840] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.818712][ T6840] do_fast_syscall_32+0x32/0x70 [ 78.818727][ T6840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.818742][ T6840] RIP: 0023:0xf7f87fec [ 78.818756][ T6840] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 78.818762][ T6840] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 78.818786][ T6840] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 78.818794][ T6840] RDX: 0000000000880cc2 RSI: 0000000000000020 RDI: 0000000000000000 [ 78.818800][ T6840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.818806][ T6840] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.818813][ T6840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.818827][ T6840] [ 79.757851][ T6868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 79.757896][ T6868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.760616][ T6868] vhci_hcd vhci_hcd.0: Device attached [ 79.810266][ T6868] erofs (device sr0): cannot find valid erofs superblock [ 80.024589][ T5526] usb 44-1: SetAddress Request (2) to port 0 [ 80.024671][ T5526] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 80.038911][ T6881] FAULT_INJECTION: forcing a failure. [ 80.038911][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.038974][ T6881] CPU: 2 UID: 0 PID: 6881 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 80.038999][ T6881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.039008][ T6881] Call Trace: [ 80.039013][ T6881] [ 80.039018][ T6881] dump_stack_lvl+0x100/0x190 [ 80.039039][ T6881] should_fail_ex.cold+0x5/0xa [ 80.039056][ T6881] _copy_from_user+0x2e/0xd0 [ 80.039070][ T6881] dma_heap_ioctl+0x17d/0x610 [ 80.039086][ T6881] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 80.039097][ T6881] ? find_held_lock+0x2b/0x80 [ 80.039117][ T6881] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 80.039129][ T6881] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.039149][ T6881] __do_fast_syscall_32+0x13a/0x8b0 [ 80.039165][ T6881] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.039180][ T6881] do_fast_syscall_32+0x32/0x70 [ 80.039195][ T6881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.039211][ T6881] RIP: 0023:0xf7f87fec [ 80.039226][ T6881] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 80.039231][ T6881] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.039243][ T6881] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000fffff000 [ 80.039250][ T6881] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.039256][ T6881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.039263][ T6881] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.039269][ T6881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.039282][ T6881] [ 80.285562][ T43] audit: type=1326 audit(1788372789.882:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.2.314" exe="/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf7f87fec code=0x0 [ 80.301744][ T6890] tipc: Started in network mode [ 80.301853][ T6890] tipc: Node identity 760466a2fbda, cluster identity 4711 [ 80.305158][ T6890] tipc: Enabled bearer , priority 0 [ 80.305382][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.305585][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.305773][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.305992][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.325274][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 80.325289][ T6893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.314'. [ 80.352466][ T6873] vhci_hcd: connection reset by peer [ 80.355981][ T13] vhci_hcd vhci_hcd.3: stop threads [ 80.360320][ T13] vhci_hcd vhci_hcd.3: release socket [ 80.364128][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.364554][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.364757][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.364936][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.365512][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.365753][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.365967][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.366155][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.366334][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.366511][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.366729][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.366903][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.367139][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.367318][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.367501][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.368169][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.368419][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.368728][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.369013][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.369213][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.370306][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.370525][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.370705][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.370878][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.371126][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.371312][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.371477][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.371641][ T6890] tipc: Enabling of bearer rejected, already enabled [ 80.379649][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 80.644025][ T6899] batman_adv: batadv0: Adding interface: dummy0 [ 80.644097][ T6899] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.646675][ T6899] batman_adv: batadv0: Interface activated: dummy0 [ 80.970816][ T6908] FAULT_INJECTION: forcing a failure. [ 80.970816][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 80.970886][ T6908] CPU: 3 UID: 0 PID: 6908 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(full) [ 80.970910][ T6908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.970920][ T6908] Call Trace: [ 80.970925][ T6908] [ 80.970930][ T6908] dump_stack_lvl+0x100/0x190 [ 80.970952][ T6908] should_fail_ex.cold+0x5/0xa [ 80.970969][ T6908] should_failslab+0xc2/0x120 [ 80.970985][ T6908] __kmalloc_noprof+0xfc/0x840 [ 80.970998][ T6908] ? __pfx___mutex_lock+0x10/0x10 [ 80.971013][ T6908] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 80.971032][ T6908] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 80.971050][ T6908] genl_start+0x18f/0x970 [ 80.971064][ T6908] __netlink_dump_start+0x60e/0x990 [ 80.971085][ T6908] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 80.971100][ T6908] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 80.971117][ T6908] ? rcu_is_watching+0x13/0xc0 [ 80.971135][ T6908] ? __pfx_genl_start+0x10/0x10 [ 80.971146][ T6908] ? __pfx_genl_dumpit+0x10/0x10 [ 80.971160][ T6908] ? __pfx_genl_done+0x10/0x10 [ 80.971175][ T6908] ? bpf_lsm_capable+0x9/0x10 [ 80.971198][ T6908] ? security_capable+0x80/0x260 [ 80.971215][ T6908] genl_rcv_msg+0x471/0x800 [ 80.971231][ T6908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.971245][ T6908] ? __lock_acquire+0x4c5/0x1ec0 [ 80.971261][ T6908] ? __pfx_nl802154_dump_llsec_seclevel+0x10/0x10 [ 80.971277][ T6908] ? __lock_acquire+0x4c5/0x1ec0 [ 80.971295][ T6908] netlink_rcv_skb+0x159/0x420 [ 80.971306][ T6908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.971320][ T6908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.971337][ T6908] ? netlink_deliver_tap+0x1ae/0xcc0 [ 80.971356][ T6908] genl_rcv+0x28/0x40 [ 80.971374][ T6908] netlink_unicast+0x585/0x850 [ 80.971387][ T6908] ? __pfx_netlink_unicast+0x10/0x10 [ 80.971402][ T6908] netlink_sendmsg+0x8b0/0xda0 [ 80.971416][ T6908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.971429][ T6908] ? apparmor_socket_sendmsg+0x165/0x280 [ 80.971445][ T6908] ____sys_sendmsg+0xa4d/0xbe0 [ 80.971462][ T6908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.971474][ T6908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.971496][ T6908] ___sys_sendmsg+0x190/0x1e0 [ 80.971514][ T6908] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.971538][ T6908] ? find_held_lock+0x2b/0x80 [ 80.971558][ T6908] __sys_sendmsg+0x160/0x210 [ 80.971572][ T6908] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.971589][ T6908] ? __pfx_ksys_write+0x10/0x10 [ 80.971604][ T6908] __do_fast_syscall_32+0x13a/0x8b0 [ 80.971634][ T6908] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.971651][ T6908] do_fast_syscall_32+0x32/0x70 [ 80.971666][ T6908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.971682][ T6908] RIP: 0023:0xf7f17fec [ 80.971698][ T6908] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 80.971704][ T6908] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 80.971716][ T6908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002780 [ 80.971723][ T6908] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.971735][ T6908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.971741][ T6908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.971748][ T6908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.971761][ T6908] [ 81.119889][ T6886] tipc: Resetting bearer [ 81.135513][ T6886] tipc: Disabling bearer [ 81.138172][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 81.327450][ T6912] cgroup: fork rejected by pids controller in /syz3 [ 81.398766][ T6952] FAULT_INJECTION: forcing a failure. [ 81.398766][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 81.398833][ T6952] CPU: 2 UID: 0 PID: 6952 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full) [ 81.398858][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.398866][ T6952] Call Trace: [ 81.398871][ T6952] [ 81.398876][ T6952] dump_stack_lvl+0x100/0x190 [ 81.398898][ T6952] should_fail_ex.cold+0x5/0xa [ 81.398914][ T6952] should_failslab+0xc2/0x120 [ 81.398930][ T6952] __kmalloc_noprof+0xfc/0x840 [ 81.398943][ T6952] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 81.398961][ T6952] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 81.398978][ T6952] genl_family_rcv_msg_doit+0xc7/0x300 [ 81.398993][ T6952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 81.399006][ T6952] ? genl_get_cmd+0x3e7/0x760 [ 81.399021][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 81.399038][ T6952] ? security_capable+0x80/0x260 [ 81.399051][ T6952] ? ns_capable+0xd2/0xf0 [ 81.399069][ T6952] genl_rcv_msg+0x560/0x800 [ 81.399083][ T6952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.399096][ T6952] ? __lock_acquire+0x4c5/0x1ec0 [ 81.399111][ T6952] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 81.399126][ T6952] ? __pfx_nl80211_set_pmksa+0x10/0x10 [ 81.399139][ T6952] ? __pfx_nl80211_post_doit+0x10/0x10 [ 81.399159][ T6952] netlink_rcv_skb+0x159/0x420 [ 81.399171][ T6952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.399184][ T6952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.399201][ T6952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 81.399221][ T6952] genl_rcv+0x28/0x40 [ 81.399231][ T6952] netlink_unicast+0x585/0x850 [ 81.399244][ T6952] ? __pfx_netlink_unicast+0x10/0x10 [ 81.399255][ T6952] ? aa_sk_perm+0x389/0xab0 [ 81.399274][ T6952] netlink_sendmsg+0x8b0/0xda0 [ 81.399287][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.399300][ T6952] ? apparmor_socket_sendmsg+0x165/0x280 [ 81.399316][ T6952] ____sys_sendmsg+0xa4d/0xbe0 [ 81.399332][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.399358][ T6952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.399381][ T6952] ___sys_sendmsg+0x190/0x1e0 [ 81.399398][ T6952] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.399421][ T6952] ? find_held_lock+0x2b/0x80 [ 81.399441][ T6952] __sys_sendmsg+0x160/0x210 [ 81.399454][ T6952] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.399471][ T6952] ? __pfx_ksys_write+0x10/0x10 [ 81.399485][ T6952] __do_fast_syscall_32+0x13a/0x8b0 [ 81.399501][ T6952] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.399516][ T6952] do_fast_syscall_32+0x32/0x70 [ 81.399531][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.399546][ T6952] RIP: 0023:0xf7f87fec [ 81.399562][ T6952] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 81.399567][ T6952] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 81.399578][ T6952] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080007340 [ 81.399585][ T6952] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.399591][ T6952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.399598][ T6952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.399604][ T6952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.399617][ T6952] [ 81.467837][ T6957] max out of range [ 81.650500][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.731881][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.739270][ T6973] gadgetfs: bound to dummy_udc driver [ 81.787854][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.790306][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.792763][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.797502][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.798200][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.824260][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.827348][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.828707][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.831386][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.837069][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.838714][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.927863][ T6975] gadgetfs: suspended from state 2 [ 81.974594][ T5835] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 81.974762][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.087705][ T13] bridge_slave_1: left allmulticast mode [ 82.087766][ T13] bridge_slave_1: left promiscuous mode [ 82.088779][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.093594][ T13] bridge_slave_0: left allmulticast mode [ 82.093613][ T13] bridge_slave_0: left promiscuous mode [ 82.096171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.214710][ T5828] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 82.264989][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.270364][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.276361][ T13] bond0 (unregistering): Released all slaves [ 82.354705][ T5828] usb 8-1: device descriptor read/64, error -71 [ 82.395842][ T6997] 9pnet_virtio: no channels available for device syz [ 82.396827][ T6997] overlayfs: failed to clone upperpath [ 82.407744][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.415060][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.416052][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.417074][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.417424][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.481470][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 82.517341][ T7014] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 82.605455][ T5828] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 82.632392][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.632541][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.635646][ T6977] bridge_slave_0: entered allmulticast mode [ 82.637766][ T6977] bridge_slave_0: entered promiscuous mode [ 82.649729][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.649851][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.650008][ T6977] bridge_slave_1: entered allmulticast mode [ 82.650939][ T6977] bridge_slave_1: entered promiscuous mode [ 82.672169][ T13] hsr_slave_0: left promiscuous mode [ 82.674621][ T13] hsr_slave_1: left promiscuous mode [ 82.675212][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.675285][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.679526][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.679544][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.685262][ T43] audit: type=1326 audit(1788372792.282:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.0.345" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 82.692177][ T13] veth1_macvtap: left promiscuous mode [ 82.692252][ T13] veth0_macvtap: left promiscuous mode [ 82.692317][ T13] veth1_vlan: left promiscuous mode [ 82.692341][ T13] veth0_vlan: left promiscuous mode [ 82.734671][ T5828] usb 8-1: device descriptor read/64, error -71 [ 82.858161][ T5828] usb usb8-port1: attempt power cycle [ 82.871994][ T13] team0 (unregistering): Port device team_slave_1 removed [ 82.877675][ T13] team0 (unregistering): Port device team_slave_0 removed [ 82.961390][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 82.965724][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.969382][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.000552][ T6977] team0: Port device team_slave_0 added [ 83.002864][ T6977] team0: Port device team_slave_1 added [ 83.021359][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.021460][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.021491][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.022408][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.022417][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.022430][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.075597][ T6977] hsr_slave_0: entered promiscuous mode [ 83.078384][ T6977] hsr_slave_1: entered promiscuous mode [ 83.078778][ T6977] debugfs: 'hsr0' already exists in 'hsr' [ 83.078807][ T6977] Cannot create hsr debugfs directory [ 83.203184][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 83.205291][ T5828] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 83.225108][ T5828] usb 8-1: device descriptor read/8, error -71 [ 83.265681][ T6977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.271185][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.272048][ T6977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.279133][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.279542][ T6977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.283866][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.286860][ T6977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.292170][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.362121][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.362275][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.362400][ T7002] bridge_slave_0: entered allmulticast mode [ 83.363212][ T7002] bridge_slave_0: entered promiscuous mode [ 83.365514][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.365559][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.365744][ T7002] bridge_slave_1: entered allmulticast mode [ 83.366846][ T7002] bridge_slave_1: entered promiscuous mode [ 83.389029][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 83.390343][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.394330][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.417080][ T7002] team0: Port device team_slave_0 added [ 83.419476][ T7002] team0: Port device team_slave_1 added [ 83.443082][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.443161][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.443223][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.464886][ T5828] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 83.483058][ T5548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.488356][ T5828] usb 8-1: device descriptor read/8, error -71 [ 83.490111][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.490124][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.490139][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.529442][ T7002] hsr_slave_0: entered promiscuous mode [ 83.530068][ T7002] hsr_slave_1: entered promiscuous mode [ 83.530371][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 83.530383][ T7002] Cannot create hsr debugfs directory [ 83.540439][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.573603][ T5548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.611424][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.619894][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.619995][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.626758][ T5828] usb usb8-port1: unable to enumerate USB device [ 83.646649][ T5548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.652960][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.653074][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.726557][ T5548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.736532][ T7002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.740832][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.741611][ T7002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.745867][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.746644][ T7002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.749814][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.750401][ T7002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.757215][ T7002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.826024][ T5548] bridge_slave_1: left allmulticast mode [ 83.828002][ T5548] bridge_slave_1: left promiscuous mode [ 83.828258][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.833094][ T5548] bridge_slave_0: left allmulticast mode [ 83.834754][ T5548] bridge_slave_0: left promiscuous mode [ 83.834864][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.915541][ T5742] Bluetooth: hci0: command tx timeout [ 83.923273][ T5548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.929883][ T5548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.935805][ T5548] bond0 (unregistering): Released all slaves [ 83.974921][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.989559][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.997348][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.998382][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.008265][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.008405][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.087079][ T5548] tipc: Left network mode [ 84.111363][ T5548] rxrpc: Leaked peer e2 {1} 127.0.0.1:7 [ 84.130726][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.147009][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 84.268972][ T5548] hsr_slave_0: left promiscuous mode [ 84.271080][ T5548] hsr_slave_1: left promiscuous mode [ 84.271540][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.271552][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.273363][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.273374][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.280729][ T5548] veth1_macvtap: left promiscuous mode [ 84.280766][ T5548] veth0_macvtap: left promiscuous mode [ 84.280837][ T5548] veth1_vlan: left promiscuous mode [ 84.280899][ T5548] veth0_vlan: left promiscuous mode [ 84.416832][ T5548] team0 (unregistering): Port device team_slave_1 removed [ 84.422135][ T5548] team0 (unregistering): Port device team_slave_0 removed [ 84.474507][ T5742] Bluetooth: hci3: command tx timeout [ 84.485291][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.488986][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 84.508637][ T6977] veth0_vlan: entered promiscuous mode [ 84.512144][ T6977] veth1_vlan: entered promiscuous mode [ 84.527595][ T6977] veth0_macvtap: entered promiscuous mode [ 84.530010][ T6977] veth1_macvtap: entered promiscuous mode [ 84.536696][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.538912][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.554143][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609023][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.609305][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.631480][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631545][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.656201][ T7002] veth0_vlan: entered promiscuous mode [ 84.657779][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657818][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657850][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663124][ T7002] veth1_vlan: entered promiscuous mode [ 84.688626][ T7002] veth0_macvtap: entered promiscuous mode [ 84.692673][ T7002] veth1_macvtap: entered promiscuous mode [ 84.701895][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.710514][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 84.715073][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.790010][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.790081][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.813628][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.813680][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.825829][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.844572][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.844640][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.844679][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.895583][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 85.104933][ T5526] usb 44-1: device descriptor read/8, error -110 [ 85.191743][ T7158] netlink: 132 bytes leftover after parsing attributes in process `syz.5.344'. [ 85.225815][ T7160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 85.234315][ T7164] capability: warning: `syz.5.349' uses 32-bit capabilities (legacy support in use) [ 85.303644][ T7169] FAULT_INJECTION: forcing a failure. [ 85.303644][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 85.303700][ T7169] CPU: 3 UID: 0 PID: 7169 Comm: syz.4.350 Not tainted syzkaller #0 PREEMPT(full) [ 85.303725][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.303733][ T7169] Call Trace: [ 85.303738][ T7169] [ 85.303742][ T7169] dump_stack_lvl+0x100/0x190 [ 85.303761][ T7169] should_fail_ex.cold+0x5/0xa [ 85.303777][ T7169] should_failslab+0xc2/0x120 [ 85.303792][ T7169] __kvmalloc_node_noprof+0x113/0x9b0 [ 85.303806][ T7169] ? seq_read_iter+0x819/0x1270 [ 85.303819][ T7169] seq_read_iter+0x819/0x1270 [ 85.303829][ T7169] ? __lock_acquire+0x4c5/0x1ec0 [ 85.303846][ T7169] ? __pfx_aa_file_perm+0x10/0x10 [ 85.303867][ T7169] seq_read+0x344/0x4d0 [ 85.303877][ T7169] ? __pfx_seq_read+0x10/0x10 [ 85.303888][ T7169] ? lock_acquire+0x1d1/0x380 [ 85.303904][ T7169] ? common_file_perm+0x266/0x500 [ 85.303923][ T7169] ? rw_verify_area+0xce/0x6d0 [ 85.303939][ T7169] ? __pfx_seq_read+0x10/0x10 [ 85.303949][ T7169] vfs_read+0x1e4/0xb40 [ 85.303960][ T7169] ? lock_acquire+0x1d1/0x380 [ 85.303974][ T7169] ? __fget_files+0x34/0x3d0 [ 85.303985][ T7169] ? __pfx_vfs_read+0x10/0x10 [ 85.303994][ T7169] ? find_held_lock+0x2b/0x80 [ 85.304006][ T7169] ? __fget_files+0x215/0x3d0 [ 85.304019][ T7169] ? __fget_files+0x21f/0x3d0 [ 85.304034][ T7169] ksys_read+0x12a/0x250 [ 85.304044][ T7169] ? __pfx_ksys_read+0x10/0x10 [ 85.304054][ T7169] ? ksys_write+0x1ac/0x250 [ 85.304066][ T7169] ? __pfx_ksys_write+0x10/0x10 [ 85.304080][ T7169] __do_fast_syscall_32+0x13a/0x8b0 [ 85.304095][ T7169] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.304110][ T7169] do_fast_syscall_32+0x32/0x70 [ 85.304126][ T7169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.304141][ T7169] RIP: 0023:0xf7f48fec [ 85.304153][ T7169] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 85.304158][ T7169] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 85.304169][ T7169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 85.304176][ T7169] RDX: 0000000000000096 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.304183][ T7169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.304189][ T7169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.304195][ T7169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.304209][ T7169] [ 85.398921][ T7173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 85.515584][ T5526] usb usb44-port1: attempt power cycle [ 85.554452][ T5828] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 85.729381][ T5828] usb 8-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 85.734126][ T5828] usb 8-1: config 4 has an invalid interface number: 201 but max is 0 [ 85.734902][ T5828] usb 8-1: config 4 has no interface number 0 [ 85.735039][ T5828] usb 8-1: config 4 interface 201 has no altsetting 0 [ 85.746061][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.748951][ T5828] usb 8-1: Product: syz [ 85.750527][ T5828] usb 8-1: Manufacturer: syz [ 85.752340][ T5828] usb 8-1: SerialNumber: syz [ 85.984849][ T5742] Bluetooth: hci0: command tx timeout [ 86.075569][ T5526] usb usb44-port1: unable to enumerate USB device [ 86.334490][ T5526] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 86.487255][ T5526] usb 10-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 86.488285][ T5526] usb 10-1: config 4 has an invalid interface number: 201 but max is 0 [ 86.488301][ T5526] usb 10-1: config 4 has no interface number 0 [ 86.488315][ T5526] usb 10-1: config 4 interface 201 has no altsetting 0 [ 86.489840][ T5526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.489851][ T5526] usb 10-1: Product: syz [ 86.489859][ T5526] usb 10-1: Manufacturer: syz [ 86.489866][ T5526] usb 10-1: SerialNumber: syz [ 86.552215][ T5742] Bluetooth: hci3: command tx timeout [ 86.565046][ T5828] usb-storage 8-1:4.201: USB Mass Storage device detected [ 86.579365][ T5828] usb-storage 8-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 86.691083][ T5828] usb 8-1: USB disconnect, device number 11 [ 86.734946][ T7189] FAULT_INJECTION: forcing a failure. [ 86.734946][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.735039][ T7189] CPU: 2 UID: 0 PID: 7189 Comm: syz.5.355 Not tainted syzkaller #0 PREEMPT(full) [ 86.735074][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.735087][ T7189] Call Trace: [ 86.735094][ T7189] [ 86.735102][ T7189] dump_stack_lvl+0x100/0x190 [ 86.735133][ T7189] should_fail_ex.cold+0x5/0xa [ 86.735157][ T7189] _copy_to_user+0x32/0xd0 [ 86.735180][ T7189] snd_pcm_oss_read2+0x294/0x400 [ 86.735211][ T7189] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 86.735238][ T7189] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 86.735259][ T7189] ? snd_pcm_oss_prepare+0x11e/0x240 [ 86.735287][ T7189] snd_pcm_oss_read+0x5aa/0x730 [ 86.735317][ T7189] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 86.735346][ T7189] vfs_read+0x1e4/0xb40 [ 86.735365][ T7189] ? lock_acquire+0x1d1/0x380 [ 86.735390][ T7189] ? __fget_files+0x34/0x3d0 [ 86.735410][ T7189] ? __pfx_vfs_read+0x10/0x10 [ 86.735425][ T7189] ? find_held_lock+0x2b/0x80 [ 86.735444][ T7189] ? __fget_files+0x215/0x3d0 [ 86.735463][ T7189] ? __fget_files+0x215/0x3d0 [ 86.735487][ T7189] ? __fget_files+0x21f/0x3d0 [ 86.735514][ T7189] ksys_read+0x12a/0x250 [ 86.735532][ T7189] ? __pfx_ksys_read+0x10/0x10 [ 86.735558][ T7189] ? ksys_write+0x1ac/0x250 [ 86.735576][ T7189] ? __pfx_ksys_write+0x10/0x10 [ 86.735601][ T7189] __do_fast_syscall_32+0x13a/0x8b0 [ 86.735627][ T7189] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.735653][ T7189] do_fast_syscall_32+0x32/0x70 [ 86.735679][ T7189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.735703][ T7189] RIP: 0023:0xf6ffefec [ 86.735724][ T7189] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 86.735733][ T7189] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 86.735752][ T7189] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800063c0 [ 86.735764][ T7189] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.735775][ T7189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.735787][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.735798][ T7189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.735823][ T7189] [ 86.757083][ T5526] usb-storage 10-1:4.201: USB Mass Storage device detected [ 86.766604][ T5526] usb-storage 10-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 86.825168][ T5526] usb 10-1: USB disconnect, device number 2 [ 87.214853][ T7208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 87.292074][ T7213] FAULT_INJECTION: forcing a failure. [ 87.292074][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 87.292141][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT(full) [ 87.292164][ T7213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.292172][ T7213] Call Trace: [ 87.292176][ T7213] [ 87.292181][ T7213] dump_stack_lvl+0x100/0x190 [ 87.292200][ T7213] should_fail_ex.cold+0x5/0xa [ 87.292214][ T7213] should_failslab+0xc2/0x120 [ 87.292228][ T7213] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.292241][ T7213] ? do_getname+0x35/0x390 [ 87.292269][ T7213] do_getname+0x35/0x390 [ 87.292288][ T7213] __ia32_sys_symlinkat+0x7b/0xe0 [ 87.292303][ T7213] __do_fast_syscall_32+0x13a/0x8b0 [ 87.292318][ T7213] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.292333][ T7213] do_fast_syscall_32+0x32/0x70 [ 87.292348][ T7213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.292362][ T7213] RIP: 0023:0xf7f17fec [ 87.292374][ T7213] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 87.292379][ T7213] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 87.292390][ T7213] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 00000000ffffff9c [ 87.292397][ T7213] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.292404][ T7213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.292410][ T7213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.292416][ T7213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.292430][ T7213] [ 87.375255][ T7217] xt_IDLETIMER: timeout value is zero [ 87.417452][ T7219] netlink: 7 bytes leftover after parsing attributes in process `syz.3.362'. [ 87.421406][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 87.427264][ T7221] FAULT_INJECTION: forcing a failure. [ 87.427264][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 87.427309][ T7221] CPU: 2 UID: 0 PID: 7221 Comm: syz.5.363 Not tainted syzkaller #0 PREEMPT(full) [ 87.427334][ T7221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.427342][ T7221] Call Trace: [ 87.427347][ T7221] [ 87.427352][ T7221] dump_stack_lvl+0x100/0x190 [ 87.427381][ T7221] should_fail_ex.cold+0x5/0xa [ 87.427397][ T7221] should_failslab+0xc2/0x120 [ 87.427416][ T7221] __kmalloc_noprof+0xfc/0x840 [ 87.427430][ T7221] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 87.427454][ T7221] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 87.427473][ T7221] genl_family_rcv_msg_doit+0xc7/0x300 [ 87.427489][ T7221] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.427503][ T7221] ? genl_get_cmd+0x3e7/0x760 [ 87.427519][ T7221] ? bpf_lsm_capable+0x9/0x10 [ 87.427539][ T7221] ? security_capable+0x80/0x260 [ 87.427554][ T7221] ? ns_capable+0xd2/0xf0 [ 87.427573][ T7221] genl_rcv_msg+0x560/0x800 [ 87.427589][ T7221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.427603][ T7221] ? __lock_acquire+0x4c5/0x1ec0 [ 87.427619][ T7221] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.427636][ T7221] ? __pfx_nl80211_set_bss+0x10/0x10 [ 87.427649][ T7221] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.427671][ T7221] netlink_rcv_skb+0x159/0x420 [ 87.427683][ T7221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.427698][ T7221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.427716][ T7221] ? netlink_deliver_tap+0x1ae/0xcc0 [ 87.427737][ T7221] genl_rcv+0x28/0x40 [ 87.427750][ T7221] netlink_unicast+0x585/0x850 [ 87.427764][ T7221] ? __pfx_netlink_unicast+0x10/0x10 [ 87.427781][ T7221] netlink_sendmsg+0x8b0/0xda0 [ 87.427795][ T7221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.427809][ T7221] ? apparmor_socket_sendmsg+0x165/0x280 [ 87.427828][ T7221] ____sys_sendmsg+0xa4d/0xbe0 [ 87.427845][ T7221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.427858][ T7221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.427883][ T7221] ___sys_sendmsg+0x190/0x1e0 [ 87.427902][ T7221] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.427928][ T7221] ? find_held_lock+0x2b/0x80 [ 87.427950][ T7221] __sys_sendmsg+0x160/0x210 [ 87.427965][ T7221] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.427984][ T7221] ? __pfx_ksys_write+0x10/0x10 [ 87.427999][ T7221] __do_fast_syscall_32+0x13a/0x8b0 [ 87.428020][ T7221] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.428041][ T7221] do_fast_syscall_32+0x32/0x70 [ 87.428058][ T7221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.428074][ T7221] RIP: 0023:0xf6ffefec [ 87.428089][ T7221] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 87.428095][ T7221] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 87.428107][ T7221] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 87.428115][ T7221] RDX: 000000000004905c RSI: 0000000000000000 RDI: 0000000000000000 [ 87.428122][ T7221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.428129][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.428136][ T7221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.428151][ T7221] [ 87.575185][ T43] audit: type=1326 audit(1788372797.172:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.365" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48fec code=0x0 [ 87.654535][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 87.694356][ T7231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 87.814658][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 87.817318][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.823053][ T30] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 87.826223][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 87.826241][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.826252][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 87.826265][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 87.826280][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.826301][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.051821][ T30] usb 8-1: usb_control_msg returned -32 [ 88.053878][ T30] usbtmc 8-1:16.0: can't read capabilities [ 88.058204][ T7238] warning: `syz.0.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.064510][ T5742] Bluetooth: hci0: command tx timeout [ 88.067362][ T30] usb 8-1: USB disconnect, device number 12 [ 88.469296][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 88.497120][ T7256] Bluetooth: MGMT ver 1.23 [ 88.624559][ T5742] Bluetooth: hci3: command tx timeout [ 88.698305][ T7264] netlink: 'syz.3.379': attribute type 8 has an invalid length. [ 88.822262][ T43] audit: type=1326 audit(1788372798.412:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7265 comm="syz.3.380" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x0 [ 88.829356][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.997123][ T30] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 88.999039][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.999054][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.999072][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.004192][ T30] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 89.033422][ T30] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 89.179045][ T7274] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 89.222025][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 89.222078][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 89.235016][ T7277] overlayfs: failed to clone upperpath [ 89.244681][ T5812] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.244742][ T5812] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.244775][ T5812] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.244794][ T5812] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.668472][ T7294] FAULT_INJECTION: forcing a failure. [ 89.668472][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 89.668530][ T7294] CPU: 3 UID: 0 PID: 7294 Comm: syz.5.385 Not tainted syzkaller #0 PREEMPT(full) [ 89.668545][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.668553][ T7294] Call Trace: [ 89.668557][ T7294] [ 89.668562][ T7294] dump_stack_lvl+0x100/0x190 [ 89.668582][ T7294] should_fail_ex.cold+0x5/0xa [ 89.668597][ T7294] ? __netlink_lookup+0x652/0x900 [ 89.668618][ T7294] should_failslab+0xc2/0x120 [ 89.668639][ T7294] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.668654][ T7294] ? skb_clone+0x190/0x400 [ 89.668671][ T7294] skb_clone+0x190/0x400 [ 89.668685][ T7294] netlink_deliver_tap+0xaed/0xcc0 [ 89.668707][ T7294] netlink_unicast+0x62b/0x850 [ 89.668721][ T7294] ? __pfx_netlink_unicast+0x10/0x10 [ 89.668738][ T7294] netlink_sendmsg+0x8b0/0xda0 [ 89.668752][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.668766][ T7294] ? apparmor_socket_sendmsg+0x165/0x280 [ 89.668784][ T7294] ____sys_sendmsg+0xa4d/0xbe0 [ 89.668800][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.668813][ T7294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.668837][ T7294] ___sys_sendmsg+0x190/0x1e0 [ 89.668856][ T7294] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.668881][ T7294] ? find_held_lock+0x2b/0x80 [ 89.668904][ T7294] __sys_sendmsg+0x160/0x210 [ 89.668918][ T7294] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.668936][ T7294] ? __pfx_ksys_write+0x10/0x10 [ 89.668951][ T7294] __do_fast_syscall_32+0x13a/0x8b0 [ 89.668968][ T7294] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.668984][ T7294] do_fast_syscall_32+0x32/0x70 [ 89.669001][ T7294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.669017][ T7294] RIP: 0023:0xf6ffefec [ 89.669031][ T7294] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 89.669036][ T7294] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.669048][ T7294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 89.669056][ T7294] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.669063][ T7294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.669070][ T7294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.669077][ T7294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.669091][ T7294] [ 89.742705][ T7295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.758413][ T7288] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110) [ 89.763398][ T7288] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 89.991312][ T7258] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 90.013214][ T7306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.048643][ T5820] usb 9-1: USB disconnect, device number 2 [ 90.060038][ T5820] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 90.060859][ T5820] spcp8x5 9-1:1.0: device disconnected [ 90.147059][ T5742] Bluetooth: hci0: command tx timeout [ 90.426041][ T43] audit: type=1326 audit(1788372800.022:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.0.395" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 90.704675][ T5742] Bluetooth: hci3: command tx timeout [ 90.852708][ T7339] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 90.852744][ T7339] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.852916][ T7339] vhci_hcd vhci_hcd.0: Device attached [ 90.856765][ T7340] vhci_hcd: connection closed [ 90.862067][ T5812] vhci_hcd vhci_hcd.4: stop threads [ 90.862131][ T5812] vhci_hcd vhci_hcd.4: release socket [ 90.862168][ T5812] vhci_hcd vhci_hcd.4: disconnect device [ 90.927501][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 91.047053][ T7352] Illegal XDP return value 4294967294 on prog (id 92) dev N/A, expect packet loss! [ 91. ** replaying previous printk message ** [ 91.277605][ T7364] ================================================================== [ 91.277635][ T7364] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 91.277655][ T7364] Write of size 8 at addr ffffc90003675000 by task syz.3.410/7364 [ 91.277665][ T7364] [ 91.277672][ T7364] CPU: 3 UID: 0 PID: 7364 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 91.277686][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.277693][ T7364] Call Trace: [ 91.277698][ T7364] [ 91.277703][ T7364] dump_stack_lvl+0x100/0x190 [ 91.277720][ T7364] print_report+0x13d/0x4b0 [ 91.277736][ T7364] ? _raw_spin_lock_irqsave+0x52/0x60 [ 91.277756][ T7364] ? sys_fillrect+0x174a/0x1910 [ 91.277772][ T7364] kasan_report+0xdf/0x1c0 [ 91.277793][ T7364] ? sys_fillrect+0x174a/0x1910 [ 91.277811][ T7364] sys_fillrect+0x174a/0x1910 [ 91.277825][ T7364] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 91.277839][ T7364] bit_clear+0x17d/0x220 [ 91.277856][ T7364] ? __pfx_bit_clear+0x10/0x10 [ 91.277892][ T7364] ? fb_get_color_depth+0x120/0x250 [ 91.277909][ T7364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.277928][ T7364] __fbcon_clear+0x633/0x760 [ 91.277944][ T7364] ? __pfx_bit_clear+0x10/0x10 [ 91.277962][ T7364] fbcon_scroll+0x48b/0x650 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.277979][ T7364] con_scroll+0x464/0x690 [ 91.277993][ T7364] csi_ECMA.constprop.0+0x1238/0x3b60 [ 91.278007][ T7364] ? find_held_lock+0x2b/0x80 [ 91.278019][ T7364] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 91.278038][ T7364] do_con_write+0x35dc/0x4980 [ 91.278055][ T7364] ? __pfx_do_con_write+0x10/0x10 [ 91.278068][ T7364] ? add_softcursor+0x150/0x290 [ 91.278080][ T7364] ? con_write+0x96/0xb0 [ 91.278093][ T7364] con_write+0x23/0xb0 [ 91.278106][ T7364] n_tty_write+0x431/0x1160 [ 91.278126][ T7364] ? __pfx_n_tty_write+0x10/0x10 [ 91.278141][ T7364] ? __kasan_kmalloc+0xaa/0xb0 [ 91.278153][ T7364] ? __pfx_woken_wake_function+0x10/0x10 [ 91.278170][ T7364] ? rcu_is_watching+0x13/0xc0 [ 91.278181][ T7364] ? file_tty_write.isra.0+0x694/0x890 [ 91.278193][ T7364] ? kfree+0x1e5/0x6d0 [ 91.278209][ T7364] ? __pfx_n_tty_write+0x10/0x10 [ 91.278225][ T7364] file_tty_write.isra.0+0x4d2/0x890 [ 91.278239][ T7364] vfs_write+0x6af/0x1050 [ 91.278249][ T7364] ? __pfx_tty_write+0x10/0x10 [ 91.278262][ T7364] ? __pfx_vfs_write+0x10/0x10 [ 91.278271][ T7364] ? find_held_lock+0x2b/0x80 [ 91.278285][ T7364] ksys_write+0x12a/0x250 [ 91.278295][ T7364] ? __pfx_ksys_write+0x10/0x10 [ 91.278307][ T7364] __do_fast_syscall_32+0x13a/0x8b0 [ 91.278322][ T7364] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.278336][ T7364] do_fast_syscall_32+0x32/0x70 [ 91.278351][ T7364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.278365][ T7364] RIP: 0023:0xf7f17fec [ 91.278375][ T7364] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 91.278404][ T7364] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 91.278417][ T7364] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000e00 [ 91.278425][ T7364] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.278432][ T7364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.278439][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.278446][ T7364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.278457][ T7364] [ 91.278462][ T7364] [ 91.278465][ T7364] The buggy address belongs to a vmalloc virtual mapping [ 91.278474][ T7364] Memory state around the buggy address: [ 91.278480][ T7364] ffffc90003674f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 91.278487][ T7364] ffffc90003674f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 91.278494][ T7364] >ffffc90003675000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 91.278500][ T7364] ^ [ 91.278505][ T7364] ffffc90003675080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 91.278512][ T7364] ffffc90003675100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 91.278518][ T7364] ================================================================== [ 91.278879][ T7364] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.423835][ T7364] CPU: 3 UID: 0 PID: 7364 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 91.426813][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.430344][ T7364] Call Trace: [ 91.431507][ T7364] [ 91.432542][ T7364] dump_stack_lvl+0x100/0x190 [ 91.434245][ T7364] vpanic+0x553/0x970 [ 91.435620][ T7364] ? __pfx_vpanic+0x10/0x10 [ 91.437172][ T7364] ? mark_held_locks+0x40/0x70 [ 91.438850][ T7364] ? sys_fillrect+0x174a/0x1910 [ 91.440680][ T7364] panic+0xd1/0xe0 [ 91.441972][ T7364] ? __pfx_panic+0x10/0x10 [ 91.443490][ T7364] ? sys_fillrect+0x174a/0x1910 [ 91.445041][ T7364] ? preempt_schedule_common+0x3c/0xb0 [ 91.446798][ T7364] check_panic_on_warn.cold+0x19/0x34 [ 91.448755][ T7364] end_report.part.0+0x3a/0x90 [ 91.450570][ T7364] kasan_report.cold+0xe/0x18 [ 91.452180][ T7364] ? sys_fillrect+0x174a/0x1910 [ 91.453914][ T7364] sys_fillrect+0x174a/0x1910 [ 91.455448][ T7364] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 91.457344][ T7364] bit_clear+0x17d/0x220 [ 91.458904][ T7364] ? __pfx_bit_clear+0x10/0x10 [ 91.460555][ T7364] ? fb_get_color_depth+0x120/0x250 [ 91.462329][ T7364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.464353][ T7364] __fbcon_clear+0x633/0x760 [ 91.465896][ T7364] ? __pfx_bit_clear+0x10/0x10 [ 91.467474][ T7364] fbcon_scroll+0x48b/0x650 [ 91.469172][ T7364] con_scroll+0x464/0x690 [ 91.470798][ T7364] csi_ECMA.constprop.0+0x1238/0x3b60 [ 91.472783][ T7364] ? find_held_lock+0x2b/0x80 [ 91.474527][ T7364] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 91.476462][ T7364] do_con_write+0x35dc/0x4980 [ 91.478041][ T7364] ? __pfx_do_con_write+0x10/0x10 [ 91.479655][ T7364] ? add_softcursor+0x150/0x290 [ 91.481282][ T7364] ? con_write+0x96/0xb0 [ 91.482712][ T7364] con_write+0x23/0xb0 [ 91.484040][ T7364] n_tty_write+0x431/0x1160 [ 91.485514][ T7364] ? __pfx_n_tty_write+0x10/0x10 [ 91.487190][ T7364] ? __kasan_kmalloc+0xaa/0xb0 [ 91.488916][ T7364] ? __pfx_woken_wake_function+0x10/0x10 [ 91.491096][ T7364] ? rcu_is_watching+0x13/0xc0 [ 91.492928][ T7364] ? file_tty_write.isra.0+0x694/0x890 [ 91.494939][ T7364] ? kfree+0x1e5/0x6d0 [ 91.496299][ T7364] ? __pfx_n_tty_write+0x10/0x10 [ 91.498028][ T7364] file_tty_write.isra.0+0x4d2/0x890 [ 91.499789][ T7364] vfs_write+0x6af/0x1050 [ 91.501217][ T7364] ? __pfx_tty_write+0x10/0x10 [ 91.502940][ T7364] ? __pfx_vfs_write+0x10/0x10 [ 91.504523][ T7364] ? find_held_lock+0x2b/0x80 [ 91.506308][ T7364] ksys_write+0x12a/0x250 [ 91.507868][ T7364] ? __pfx_ksys_write+0x10/0x10 [ 91.509657][ T7364] __do_fast_syscall_32+0x13a/0x8b0 [ 91.511609][ T7364] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.513519][ T7364] do_fast_syscall_32+0x32/0x70 [ 91.515228][ T7364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.517353][ T7364] RIP: 0023:0xf7f17fec [ 91.518767][ T7364] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 91.525807][ T7364] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 91.528635][ T7364] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000e00 [ 91.531454][ T7364] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.534437][ T7364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.536972][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.539502][ T7364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.542082][ T7364] [ 91.543771][ T7364] Kernel Offset: disabled [ 91.545136][ T7364] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:13:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90005957f48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c622300 RDI=0000000000000014 RBP=ffffc90005957f38 RSP=ffffc90005957f00 R8 =0000000000000001 R9 =fffffbfff228a58b R10=ffffffff91452c5f R11=0000000000000000 R12=ffff88802597a580 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b7bb88 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096967000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffec7e13e0 CR3=000000006b360000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564b010680d0 0000564b010680d0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00333a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564b010680b0 0000564b010680b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0401bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0401bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0401b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000010291b RBX=ffff88801cf04b00 RCX=ffffffff8bcd5115 RDX=0000000000000001 RSI=ffffffff8e3efa73 RDI=ffffffff8c622380 RBP=ffffed10039e0960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bcd36bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c4a023f CR3=000000006b360000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801cb40000 RSI=ffffffff81e98c97 RDI=ffff88801cb40000 RBP=ffffc9000042fda8 RSP=ffffc9000042fa40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=0000000000000000 R13=1ffff92000085f53 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820b3c9b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000324faff8 CR3=000000006b360000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85ae2590 RDI=ffffffff9bc501e0 RBP=ffffffff9bc501a0 RSP=ffffc90006a7ece0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378a091 R15=dffffc0000000000 RIP=ffffffff85ae25b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c67000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcddccbf708 CR3=000000006b360000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005569e79d0c50 00005569e79d0c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2ee21c70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2063656665333037 6678303d70692031 3d7461706d6f6320 3034323d6c6c6163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379732033303030 303030343d686372 612031333d676973 2022726f74756365 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78652d7a79732f22 3d65786520223539 332e302e7a797322 3d6d6d6f63203831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33373d6469702064 656e69666e6f636e 753d6a6275732035 3932373639343932 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000