last executing test programs: 2m2.448402907s ago: executing program 2 (id=459): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="650f2247659c66baf80cb8c88a2885ef66bafc0cedc74424004b000000c744240200a0a14fc7442406000000000f011c240f20e035004000000f22e0c4c1632a9e030000000f01c4440f20c03505000000440f22c026f20f2b6001670f32", 0x5e}], 0x1, 0xf888f16c328d7a8b, 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2m2.398580088s ago: executing program 2 (id=461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) fcntl$lock(r0, 0x5, &(0x7f00000002c0)={0x1, 0x4, 0x39, 0x72}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x132) close(r4) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x400, 0x3, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=@llc={0x1a, 0x2, 0x81, 0x80, 0x6, 0x9, @random}, 0x80, 0x0}, 0x0, 0x405c}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="3f7761646e6f3de0a987a1c8a11b98992aa8d68078a90e92fdbc78d063b9e00010000098a8b24afa0700000000d45031f55e3b0df9aef7f18800a1f52a30285c97284bc8963af06c5d865769", @ANYRESDEC=r2, @ANYRESDEC=0x0]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xd8, "4b2d9069518d901d111656d15dbd03ff9fd582e73d78df07bf109544b47e2f4c6a18305831c7d24bcaf2ec8f04a4eb8ba88bee91bc9a8934c60af69088f8c014045fdd5ea8995d91f188ec822636a184214c3ad72b1103eb5d715b0efff8cb17d916a01f9af144bc9ae1716949491d4cedfb870c9bf359a47459bf31906f744c89ad35f2b3338837e901d816530716807ce52205cceb682230252b147ceba67c42f2dc1805ce6be14bfb57abd7772fab8c189fd03710353989cace4b139b7026fc97a45cefe7c4bca2329a5953c105b68a624f13e6ddab27"}, &(0x7f0000000240)=0xe0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000400)={r8, 0xfff4}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x1c, r10, 0x21, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f00000026c0)="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", 0x150}, {&(0x7f0000002840)="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", 0xdeb}], 0x2) pipe(&(0x7f0000000000)) 2m2.318739002s ago: executing program 2 (id=462): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r1, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 2m2.31824102s ago: executing program 2 (id=463): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x6, 0x1fe, 0x80000089, 0xd, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff]}) ioctl$COMEDI_SETRSUBD(r4, 0x6410) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) 2m0.58993216s ago: executing program 2 (id=491): unshare(0x20000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000240)=[&(0x7f00008ce000/0x4000)=nil, &(0x7f0000af0000/0x4000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x7fffffff, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) futex(&(0x7f00000003c0), 0x6, 0x1, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) r5 = dup2(r4, r4) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x68, '\x00', 0x0, r5, 0x2, 0x2, 0x3}, 0x50) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5731, 0x20, 0x1010006, 0x2d9}, &(0x7f0000000240), &(0x7f0000000140)) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) 2m0.356051967s ago: executing program 2 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006e40), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000007240)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, '\x00\x00\b\x00 \x00', "808c000000001000", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) 2m0.294474036s ago: executing program 32 (id=493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006e40), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000007240)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, '\x00\x00\b\x00 \x00', "808c000000001000", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) 5.796855612s ago: executing program 4 (id=1329): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010102}, 0x2, 0x1}}, 0x2e) getsockopt(r4, 0x111, 0xbf, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x60040050) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x406001, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0xffffffffffffff9a, 0x0, 0x0}, 0x4c) ioctl$TIOCSETD(r5, 0x5423, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x20000002}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$RTC_PIE_OFF(r6, 0x7006) 4.846735732s ago: executing program 4 (id=1335): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010102}, 0x2, 0x1}}, 0x2e) getsockopt(r4, 0x111, 0xbf, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x60040050) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x406001, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0xffffffffffffff9a, 0x0, 0x0}, 0x4c) ioctl$TIOCSETD(r5, 0x5423, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x20000002}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$RTC_PIE_OFF(r6, 0x7006) 4.846339692s ago: executing program 3 (id=1336): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000300)=""/66, 0x42}], 0x3}, 0x2000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000900)={'hsr0\x00', &(0x7f00000008c0)=@ethtool_stats}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2040080, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6fdffedbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="0600fd000700000004003400140055005652"], 0x48}, 0x1, 0x0, 0x0, 0x40101}, 0xc0) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) getpeername$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000240)=0x6e) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0x2f, [0xedd, 0x2, 0x800, 0x1, 0xffffffff, 0x10000], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000540)=""/47}, &(0x7f0000000600)=0x50) 4.021352179s ago: executing program 3 (id=1339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (fail_nth: 4) 3.651522769s ago: executing program 0 (id=1341): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) (fail_nth: 4) 3.593130119s ago: executing program 4 (id=1343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000240)=0x80, 0x80000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x78, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x4, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'E'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) sched_setattr(r11, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3.583898894s ago: executing program 0 (id=1344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x40, 0x8, 0x7c, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0xfffffff8, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x7, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x7, 0x50, 0x9, 0x1, 0xffffffff, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0x10003, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xfffffffd, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, 0x0, 0x99e, 0x14c) sendmmsg$unix(r1, &(0x7f0000001f00)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000006c0)="30a5edeb03575253c3f6263f16b7f5ac14c015717a3791e6e251dddf5e7eea85072d515759f8e3325b934d499c74c1360b11bd9f371c76c8fb50b44b1b824f8095218542e84b6fe39021cd4f951d4b486b681f7c792e99b9a486e66f6cd59f279fd192222cc7e3eed448c7355f12f33dc44a2c46cddc9fc7345da1d4b572b1fed8f3afc09ae38c9e9828703d3fddeeed60744684a1442a26a6d69840f78af8bedd0c580b7cab6e7c9855bda7f4edfa9679e6da747ea98d21cf1990f17b80e49a", 0xc0}, {&(0x7f00000007c0)="279e4b26a9b58a7b5b5d7c190d5264000000d4fab029693409290927e4aea573f39a6e6bb15141b97021f87b7b260fac9167afcaa08a989fefe3cb9f06db1397e4", 0x41}, {&(0x7f0000000440)="43928db79ab2e9037365a8333d8ff7626e6017554d6948c88005469ea85d198a909aa793e6c5664755a281a93fadb4f93b", 0x31}], 0x3, &(0x7f0000001cc0)=[@cred={{0x18}}], 0x18, 0x20000000}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="178845a10e8740261dcf075e99d87e9012fe9158588b3ad99da4fbcdb67aadf1def6e04ef3eb9c395bb9e6e4cd94a567edc16ce727dbe6a47745ccace2ffdd630970585ec959d9cdde8b85801a73fc475634dafd5d2fb2906d0bcd76b3528d8f849dec3c0d7620ac9cc5e651fec1b45451852014d29d9749c55e", 0x7a}, {&(0x7f0000001b00)="1fba7d1a9e4ba397e6d46fabb8b17014fa892f4cc6a49b78e3ac596f1cc83a3b762701528e290f053d634d7660ece89dfda40802db44e0993375", 0x3a}, {&(0x7f0000001b40)="5e5eff76a21c2c46ce2ca05aece5ecb8bfe944c5f0c8001e018f6243c784addb313f4a4ff80018131d6539651acc760d5b665a4f74ef4a4c9af6c91bbd4d6f2e2901e9dcac93091db3befcbaf4256acbed4a4e251c542b71839fd293c125b21055426eaf9fc8fb28933b6bc1d5f69581e05af35036aaa0f6fea67943a4df54d87809d495", 0x84}, {&(0x7f0000000940)="ee44f8ecce4bf916a7d852a5a242e43e1d3c8371268f4440e20a7fd38868873c988f0d0757b28fd3e09a78c71c4c87dc0782ec211a3f47770fa366d5937958da2e83bce36c851c7c5680b7b758875b4920cccffd0bb2bf05dde93481587730", 0x5f}], 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000b8d5efd2b70b25f63cc29599a0570a577cd662007ed77f3da63bd328cc4025aae2c4cdd94fd95e04c021d964e25536cfe19604709002a3a444dc3a6dc2b35f2e4bf984d9056959aca8149d0104c7677718c2f1c3b56ddad726d2d70c986a32ed349db52b813e1d87db2ab14ed8c778ad4855467c632c82ce053c955e9bc82d0909c080eab9ca575460faeea074a4201f218eb8d65b68757443ab53abe2b68e8134008fca8851aa114e19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x34, 0x408d4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001d40)="96365efbc7f5b20af438da0fa377ca1f7b1c09963e40ce3d6d836914094dd94dcaa73551be593450dc6fb175c3aae9b8c60ba0e724cfe519fa8f099874f9dec4f01d95068a6eb8ba8c6b73c632a21c0e92072737d6dd362d04b8029b5321c9592303b23516fdc0e32343531d13d92f0e4881578ba99265a1cb1ee772057b1d5a6c84bf4b0bb14cad134740a35751187a86cef1e799", 0x95}, {&(0x7f0000001f80)="50603fcb228f34b2c95ac37595b1a7aa684a7024309a1fc883fb0c4bd8a92db6931f033286b3ea1aca88c89603ffe29481da49f1eddbfb7ac96497000feb0be17c35be000b79e1293b22f09767f39f043b600a059917b1f34aec83ef1076a356cabd51b9745994bbfc90e544e6d9502bb81e72fb45fa1520f09522f03c0dc230ca1eb46c2e0de8a13684d33c63fddb550bae9e79c7bffeb52bc369ccf7ec4ed10b7bc5904cfa17d6ff7e19e1ca5ea00b12842f18d88fda9bb52ddc6e8751072a00d821dad81261f69fddbf71a93754b07806a10b16f3d5fe30541e7f8d83948446b3e11c7a9cef23deb7cf7b8bb00e7afb512ade82983e853d539e1a05db47b22845f6b0f7049f567e22b48e58c9c2f59269432242c8956a33ec4ef16c8e93dcda09be5c0fece3d05540163c691b82e20ff76d42697fee6376fb2f2513c4e00841d2ffc37223f1ba64f3a1e7f14dd4ef83445fdb2d90083a0e9df9497f41b2c1f364a9cc09089e33e697c1269a2d5bccd70631201e671749c630dce4e081b88ec08d96c36a6f46288b3c58f41a8254030386ac4c3683db17b9b1116737b22093c5b6f56a2ed77084d08787d6a2f394974c9d91f89b74b643e4dd33f8d0de8a2c152fd0689cf97c34e750bb35c4970982562c6e92243a951b9821055dbdcfe0b4316ee0c05e42e2960cc50aa9fbe9e1119d540569577614c31e8ee139b095d917a2e0ffd0527633acf1efa4dfd475fc3f2ea36b065d896b4e201ead4d2e47ad8d95984457ba26925235c1bd87d083349e64f6866443c347834b4beaf629a51a2f76b32e5ea7e208eb3be18ac12593e1e5647170b0366c0e14a21a160de4d8012550c30f826a6142d195d1138ffa27ec1a0c6388da6728d0212ff2e39acfc8e4efebdb38b7d30881e1d18ec6dfe4c3153a690a7e839e66ea108c233d68df2564d038c186b7c518ac1639a949795ad7b75bf3cfbb8f81e0cbba705476984d464a5e559e5605522f30b3d4ca211ad22109434a882b1662b11a6cca0940f84286c8d3a00a989da00ddbcba06c5e685b9824ec63d0e7a8805cf70d597691019549baed8c63e552636f4d14413870ab9750a1ec9cd2f8d7602c11e8d9ce5d2c31dca0fd174f7e4419be7f0b2ce08f568582f8269437a35b4a9025c2a753404b0a65077b514512000032e7263b1ac675a737201680a191b0f6e567463edafc909d6d450a2b5b2268b4d5c28c3657a96ed6a6ce938e93e5514a00cc76bee3c37f1d8e03c724cac097c64af92662462e4cb552aaf3e6591da237c26cf8dc00b3daa3c4cb560c68cef1a78f204e032e0b2fb6b415e715989db347cd53bbb333f2c9bb0c98aabf9d9cc4981f13b152327a11c5a912226586be756c6978f6e4b1af019c8aafcad1e04b9585a8d9a6a923fe5b7b978acb594d56ce207b24947db2d3961b7b2beaa2593a1680f0e0c895e14d34f529e0068a1d5c80c61ab332f17531408a227cb61b6d3a95d1dc61f939950321c43a5ef62986e2a27eaeda182d313e4d2566372a9474f8019d2c263187b1fc3b34ec76a5cf57ae6a7714f605b51c53770b814fc3f68071e4272a925835e3bad1059aac74ad976280f12023e3aae3a5d7b68334632cd3eba078dc5201387c6b9402512c67beab2e035b0ecd44714c3c58f2d08121a614b7c48440ada7da67c2d96e85aa2fc87d19045db5a4c369193bef07b8da65aa241a07158a9fe88dc7c2edf0a827a50e477704ed694143a435cc4adaa998fefd9d3e927eee4a4a84ab9093c5b1c418d55064e9fb6fb966cae78bdd81df68c28de0041ce6cd915e3ec72c2d6dd2d71fba5ee8bcf64cab511d0c799a7a3f8835a5e123aeaff6cd87fc139003619465c73e46839d46ec482b027a8d46a88c0eff01c12382b0597a7b848b9a9ae54a529afa7b1d785e953a80a819b29185eed90308b4a912d9c528383d25c8ebc8ac6dec95ef58d21039126c26920febada697c4c32cdb7b3f702c50c33a392a59afa9c89bcf2e35319e9ffa5478c776fa0acd7dadd0ab2f364234085f37c2e49013e702c238c5aeaaeb86ec81d6f75f46b48fd58bebe5cdda1f42db1a12881296d54c68f890766507e1015ecc5046df7bf46f4b70cedf3e4ee68fa389d382829c849c7e581b3f7554eae7274b388634579008d181a3410c791cbebc95d516429296c67d5b2a934cea398945923190e739067c96bc572381dc0afefe83981e3e438d62edbc63578f1727ecb238ac152c8e115f37a88adc08461f93f24e00d509de3257684c588f44fdd5eef82e5721b5151134f5f334929d693e5ecf61f54ea8bb66f564216534702d8cf71aad6f66520d45638959cf842aae72324c012ab4d3260c9dc04ba5ce592a1a88598102875f9191d93e3d94d1cc6257cf26ab51b4fb6271af9cd45c3b23442c48e925b3afcd65e0d6dd82341cecd83d43bbcf3ba8fdf9f3283d6ded6cd6eefd03ecbebfe93f96cb39783ce330ee415ae339da37e54931a85c2ef69fd23a4c1c2a00f0c62b74521ea643930fe0c3b60291c18e0d11f4ba02c0d14e9aa89ec11ddf27d6d0c51dfb6cfb70a17532a8d78a21160c541f819061ab8bde345b10ea1d4da23350e2f8e8db8b608bfaf5d57e6272715dc93fdade532a34870c73d778ff865dd9dade56e846f5e548517476128f332dbf5a848f87ed30ee53dcf189e915907bdcda8fc8e8449c9a464413e366fb14f42d3e72c8e6730ca2d0dc6ccb16f79d34c68f705c5f340c9e826f277fb3a5960ce51c9c6daae42bd4ba5a0d2f629dd777405ee339ea3c74b8517e6e15e86d64850fed9e777ad3cc6bcddb062d25eba96a4ede2755a391b8eb694869ab471a4ec727f8ea43ee4093d5486b19618ce05438b2a1addf53ff2509ffa2ce097c81248a38b3aabc873920687c58be8aaf3cee1398856d58a849d74bbc346882be03f8f9395ee35bf347d5f40018db398ad8e8ed6753349a7500ac1c5abe73a9f67ac1d775b5d37f7d855ae47bca6f4abf6589bda9e3fd976ae624abd8c819ecf436bb1b33ef1c71edaec3500fdb9d5fb09bd5c55e5042be950484ed46775ecd93e8131414fa19d3564a3258fe9dd42b0b53ad4da0426a01d945aab52cace4b2eaaaeaec359b984f8fb79d58f612b32554a29ec46407d1b27eded91f094cf8766ec06d396d8e069e9fe0a1961d86ee9ba2e08712f57640acbcdd5d253b5105b59f5737ab9402b24d624051039138a293c5d074d0c9af587bd4c87ed06919377bb95c070089669d0f50029cfa653ac61336c56b4a3de781109c5e17a39d994597c7f3f8bd4f4082674bd0874538280b5780c1f0b7b9239d79262dc011d731071d946d12c2254c9c6642d12ea3bb2cf8bfc5217ab29da12a259d23c9eef45b8e254d512717cabbd7b8992ab773468167da0ad35d91ecf80d18dde81f65c6418475e9d1b1e21a7ed1d21f418f6222a18748ebe18a4664f7f202afe2aabd52f472538d7dc50a16df1d4854047a32c29f845db27108c3c614f28095859ce5aa6b88c6b587cf5e1fe996599faecd2dfcfad5e28cfe3c4913fc57efe33c7be8da306a5596b6d4b550673e2720c97f2d01a71c1bad3d8cfd3b055f12826eded373b9b756395bdd59ec651c025f009c382b7649991991d4485e6ca0884cc5baed79d34faf809b4b7b37db5ffbe368c9e47ea4c76a82715d469c769625f804bcf08ea1d45372ce8918b0a3668cb9ba02097cf19394fee9a5c464d22cf06568da2d468a367541eaabb365485db25fbe8c4547b2e63d623b64bf9c38138002717674a8ae0426de03cd97f0cf540160b2dc1f7ea17b0f4ed1bf19354e1847d2cc5de920954a7ec2adb800fc37766f8709c62687c23f32b8173b6eed1476882f78af53fadb8c78936d8c3bb3e385df2f59d6acc148ca38618a4d2eae61a72c5d239b13a45ac869ca9f1250432dcfad3915947985af5c76a8430374f7bb68186ccb7facd9e65a07c69729c199d354efc91fc7d5e626df0bf8d7204160bd179ae1381fa68424edb75a86ca41d6650b4068ed5bd873676ff18f07ae40f178881bd8408d0436835967c2ba1cf2484ec4f8664a084d2930359a23e69e52c7091e3b55378b6c22b46d4cf005e92f2b01e27df2016340670d9d6c3aac34e99ae758f910776129df8c4aae305af9b4ff1f9f5f5089b6ae9cb30584e8cfbb86ba8d487b2e20c4b45085be107c6093e566d2b45b1801701916195510a03d6056a1275d149251f8ba8215e78c83df2e062ac5cc10b2e6ecf6d462b6974cf1ff7834c1fb62c84ebf9cee46bdb30a136d67ac8034c76ded86bdb52ca2b44a55e67747352f7e8fe4d2e66ef802eaf36e4e1a541504bc1ce7fd414b5e430d78ce5af0d68c54ea74660471416eed9493c8353f2af717b749af661ba05a0679b696cfde3e2d54ee7ce4d63609debc06a863bcfea7309fa8e5586e8fac539f06a44eb857f8a8604667441e7b06e0876ef600408bb8e30b7d3bf26fb6e36b4e86ddc54d489bcb8a2e42adeedc13b7bc1d0785276cc4f9e23c61d95ce0cea6f7cd208da0952a954497630d7a44507006785371e76c29211a0136312940a5e419bcf92225f8b792c21ac4f32eb7a34c8e96fa4cf0c69effd9bdd21f963f6d68534ac7e79fcb3e3e45ce81285a94a4d888959b1988ef4789c25b15a46e3d3e6a550b85ca2da2b6c5c70794cbd6a75300aa65620355e3aebea5b788550a5aa8ad2abb012edd3b2eca9d3335cc3af71cd8d7d67b05090ed35b6b84444a13c5ba0ca74e1fe1f6e4a1d22374dae5c30a7569c3d119c8e7120c0eda8e04105e5ce66554654aabd7b4ba10490c7364044875075a659ece10512b4d972a652f1a04a2e5ec7f451642a048cf7eedb65b98f4dad123a80ca80724aea70cf21c9e86624383a84c24b6c519e44c15bb7cefde9264270db9873c80e9e4ee8eaae26b5aa375850a2a5ef2c3af75475d6f39c19e4cf513300ac2e25151f99a0fb51b273395c440b9c9422f358badf6f8e934344875cbb71783a4c19c9eeadd9d965737d7f748aa5c7064569f437d9004f17cd959bfc2fd7ad26c19af93756b21e00804e4edc0a8104ba3c259f70a0cd23808800f8c70903aae9b30350701fbdb501922c20e5ad27023c87a7e3ecfcfbe34d203e7020b77bfb2628c48a364d69a906161a27837181d0e2600402e483c8d6973d6f7cc54e84f48d398c62cc9becd66f370a650a6b814d334f8bee7dd80370b9169a15c728f7a80477b556d975f86c79d1c76394fe14ad93fdb874552029688d7f2d58f40008950afe1b46d4a84f5fb13eb7e8be5032eb2083f9478914535f6ef00e76184fcf3002b9e7d7b9281c59961a97781b843990ecf102aed1c84c852630a04474c815dc14f6a9cf9848f335ac39114161cc28437114556c6342f7501a3d27c27684f23b0e24cc2c96497923b22a61affa3dcba73f4921167253885e6d336bb883a4f3e0b979489f8f6e3caa5579fc07cf5c3db02963afb734546c95c7974b667e7e2680b3c506ac6c7912bd3d94041256c6183457c8f2fff692bdd2e5c3808f678e27e80127ce3efededf315bf7e309f7a7fa45176b0d4f4f666f103332e68c2297d8f8fd93e06924249047b56a42f5b681ade99613e5ff73fbbd461ac6027eca213b364a226ee93542c919a99354ebbf49466d4fc87956f7e9390685f1833f3934069cd801991bfc5286f9a250a048947707b39176d3fc64b106e7bf4f99e5252dceca6b7d735d9942976e5f1e96c47cbf5cd8277148480469a4ab049a22379", 0x1000}, {&(0x7f0000001c00)="0c74912e3ab5c3da576dfe75f1ac737981a2a6fb3711c206cbfcc1f31012d3e67d5646e30b0135eea00d07cc80c8f319813bcc1f36efefcdffd9a0158b340d477fc332d9e650e3dc2194506bff124453cc61dc93e756cc83a7ad32000423e633f05e2c22a46a8a0be6324126c99e892d21426b73edfbbf25fc96cf0b", 0x7c}], 0x3, &(0x7f0000001e80), 0x0, 0x40040}}], 0x3, 0x0) read(r1, &(0x7f0000000500)=""/142, 0x8e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 3.519969343s ago: executing program 3 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20843, 0x63) 3.511793049s ago: executing program 3 (id=1346): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x2040) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x4, {0xffffffff, 0xbde, 0xf, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0x9, 0x7, 0x8, 0x0, [{0x10, 0x5, 0x3, '\x00', 0xf}, {0xe, 0x4, 0x6, '\x00', 0x2}, {0xd, 0x6, 0x1, '\x00', 0x6}, {0x7, 0x36, 0x0, '\x00', 0xd}, {0xb, 0x6, 0x4, '\x00', 0x4}, {0x84, 0xf1, 0x6}, {0x7, 0x8, 0x7f, '\x00', 0x5}, {0x7, 0x7, 0x4e, '\x00', 0x9}, {0x0, 0x2, 0x7, '\x00', 0x7}, {0xd, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xd, '\x00', 0x4}, {0x9, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x5, 0x9, '\x00', 0x4}, {0x7, 0x8, 0xfb, '\x00', 0x1}, {0x3, 0x71, 0x1, '\x00', 0x1}, {0x8a, 0x0, 0x1, '\x00', 0x7f}, {0x6, 0x1, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x8, '\x00', 0x3}, {0xc, 0xe, 0xfc, '\x00', 0xc0}, {0x2, 0x7, 0x4, '\x00', 0xd}, {0x7, 0x5, 0x3, '\x00', 0x7}, {0x2a, 0xf9, 0x1, '\x00', 0xc8}, {0x8, 0x25, 0x4, '\x00', 0x6}, {0xf, 0x8, 0x1, '\x00', 0xfd}]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r8, @ANYBLOB='-wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0xaa42, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000000001901feffffff00000000017c0000040042801400018010001a800c0047800400468004007e8004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.357825801s ago: executing program 3 (id=1347): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000300)=""/66, 0x42}], 0x3}, 0x2000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000900)={'hsr0\x00', &(0x7f00000008c0)=@ethtool_stats}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2040080, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6fdffedbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="0600fd000700000004003400140055005652"], 0x48}, 0x1, 0x0, 0x0, 0x40101}, 0xc0) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) getpeername$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000240)=0x6e) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0x2f, [0xedd, 0x2, 0x800, 0x1, 0xffffffff, 0x10000], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000540)=""/47}, &(0x7f0000000600)=0x50) 2.587996536s ago: executing program 0 (id=1348): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x80ffd000) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb866dbe024edcb7c}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0xd8, 0x11, 0x148, 0x0, 0x0, 0x31c, 0x2a8, 0x2a8, 0x31c, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x24}, {{0x0, 0x5, 0x7}}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1e4, 0x244, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0xa, 0x2, 0xffffd5ee, 0x5, 0x1ff, 0xb, 0x18, 0x40}, {0x8}}}, @inet=@rpfilter={{0x24}, {0x1b}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x0, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x40c) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x8000000) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast1, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0xfffffffe, 0x4}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x1000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) memfd_secret(0x80000) 2.457875563s ago: executing program 3 (id=1349): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xa, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcf, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xf, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x7f, 0x0, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x7, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x0, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x8, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x3, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2.148600025s ago: executing program 0 (id=1350): r0 = openat$vsock(0xffffff9c, &(0x7f0000000400), 0x210102, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000900)={0x8c, 0x1d, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@generic="8bc0599fe536e5cf427baac8c479331a420e41be99786b3cef021615d43515f4b7b96f629ce5c33ee8ad6770c5b872f4c8abaf45095f996076b6f1f08b8f0fda5c31379fe64efc01b3bd241e42545d1bff1c2ba36f493ce5d11ddf2201025e37f83437780e5ddf492b7db8b63cfdec0f", @generic, @typed={0xa, 0x11e, 0x0, 0x0, @binary="0070f8f95812"}]}, 0x8c}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="2c0005000000000000000000da751243a3b015c76ee3062a66e0bb3df4b78f67f292d4679b4d2717154ce2d5689fd0ef6871a894de3bacd771fac7b7c7294b9368bbe314b16446ac437d8e34600dd3d5efe94acbf18b8809c06ef7e995f511afa94e5033cc150f4b52ab93e76102e253415f468afa9ea4eb154078d531c626880548bf4287ca461fd02350982acd7b886cdba0312d522e3ff23975f14a00"/172, @ANYBLOB="a48b475735373b0b3dc4e9617f781546f418483179eba8cafd9a2a13c2de0f6b7f561d9103f8023039af1ad238590c715193fbd98b7b9a03d10802", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c0000000100000001000000"], 0x38, 0x44080}, 0x20048084) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x10048800) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000440)={0x2d, 0x2, 0xfffffffe}, 0xc) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{0x0}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r6, 0xc1b94000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.477425498s ago: executing program 4 (id=1352): r0 = getpid() syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000208205140100000102030109021200010100500309040000000103200b"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getpid() setns(0xffffffffffffffff, 0x24020000) pidfd_send_signal(0xffffffffffffffff, 0x31, &(0x7f00000004c0)={0x13, 0x9, 0x2}, 0x0) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x20100) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffffffff43}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r11 = syz_pidfd_open(r0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r12, &(0x7f0000000000), &(0x7f0000000280)=ANY=[], 0xfce7, 0x2) fremovexattr(r11, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00') 1.22209261s ago: executing program 1 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r3 = dup(r2) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r3}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) socket(0x27, 0x6, 0xffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = dup3(0xffffffffffffffff, r0, 0x0) r5 = syz_io_uring_complete(0x0) splice(r0, &(0x7f0000000280)=0x8, r5, &(0x7f00000001c0)=0x6, 0xfffffff7, 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000240)={0x0, 0xea60}, 0x8) r8 = dup(r7) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000040)={0x3}) write$P9_RSTATFS(r8, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x1000, 0x0, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1fc}}, 0x43) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) dup3(0xffffffffffffffff, r7, 0x80000) read(r7, &(0x7f00000002c0)=""/228, 0xe4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) 778.023583ms ago: executing program 1 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x3, 0x4) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x200, 0x7f7, r7}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000580)={0x9, 0x0, [{0x871, 0x0, 0x20298ce9}, {0x25d, 0x0, 0xa}, {0xa74, 0x0, 0x3ff}, {0xb5a, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x100}, {0xa72, 0x0, 0x21b}, {0x2be, 0x0, 0xfffffffffffffffe}, {0x97b, 0x0, 0x5}]}) ioctl$PPPIOCGL2TPSTATS(r5, 0x8004745a, &(0x7f0000005280)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000020001a800c000a800500080001f9ffff0f0002800c00018007001a00f9ffffff"], 0x48}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2080) pread64(r2, &(0x7f0000000300)=""/12, 0xc, 0x5) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) read(r11, &(0x7f0000000100)=""/45, 0x2d) 505.995037ms ago: executing program 0 (id=1356): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x4c041, 0x0, 0x0) 428.094324ms ago: executing program 0 (id=1357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@delqdisc={0x278, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0xfff2, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}, @qdisc_kind_options=@q_red={{0x8}, {0x230, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x2}, @TCA_RED_STAB={0x104, 0x2, "cc9a05370542e007f7e1b1c96fdf9521ccf2015def8ae6c4bfc32240974bc809ce40b8159772957feb764aaa5c35f26476274a9be8359f97e951719c0fbeaccdcc544c334c5b9e3fb4a356edb8a00509771241995611669930d57671cdf68c3b4942689d90c765aa1a11d6d8fb07503c0a7d7745ced28220f7b360e7a6d3a4fc524eee3168450085727cdf3fbe4d76e7a6fd31ab401b6c292c34427814e519d8e25f3380de0f8850ae7b0f8758a7f57be9bbb49ae0c9acb59181ed6501066332a6a6a0a54917e8762813adf5e8d4f9215c45a4eebb1a50a49f7992432df87cda9786ef81cc5f7d39bf73f774cc7ba36556a03e56e50c7d11225ccb155468b403"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x4}, @TCA_RED_PARMS={0x14, 0x1, {0x97, 0xe1, 0x7, 0x20, 0x7, 0x20, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158805000300b3a60bce46461707f48f000038000000050010000400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0xb, 0x1, 0xb57, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'}) 406.558278ms ago: executing program 1 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x3918, 0x2c, 0xd3f, 0x430bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38e4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x378, 0x2, [@m_skbmod={0xb4, 0x19, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="90b66a4ab4a6"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x9, 0x0, 0xffffffffffffffff, 0x8f, 0x9}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="c9429b066872"}]}, {0x17, 0x6, "07630b93227a8721c69573bf865076883c8bfb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x100, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x6989, 0x10000000, 0x4, 0xd4e5b00}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf001}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffe, 0x60fd, 0x10000000, 0x3, 0xc}}]}, {0x82, 0x6, "aa16fc2342d596ba716f326ea6876af688af83c1a8e268632f79f8fe82fb67c78bc735e898c9bf233a0a7045f357e69fffd0e0db9b56655d6a5b80c8e8fb2f8fd66ef6a0e2d47419b49b57e333037ad5d819282fc8b7d8e77688f683eb2d28ba089f1e3ec97827ebc7066f1ecd2e94ca0b4f97a78347be5b7d28c60aceaf"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xe0, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6db}]}, {0xa9, 0x6, "e0f59b8cf32eddbaac29102e9e6031ff0046636cee119af6409f5c3d32cf58d64e94a3b67d3e1a8694a634e77e156a7539f1a25a2f2e7230c620f95040dd0c881c92638a0eee0d71dd8ff992c0bc7425ab63f3b902345001b2d439f29ff8073ae80691ab54c5ba955259b2ee4b11be43145478f29059435d8c1ac13d566eca9ce41e3eb629a78d70457886672461ea967b674c6075ceec282d714e246163d7f06e9c783c74"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xe0, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10, 0x0, 0x2}, @remote, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xbf, 0x0, 0x24000, 0x7aab}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffffff}}]}, {0x65, 0x6, "df53016f8d0079aafcb659a75a072942b1d4473e1f45db4877e2b4a1a9b5b971b8ab8e9b5e357fdb801f0b1d0d108cd2af6dad93d71e756cfb6686503a7b03eac23dc29368f7248ebaccaeeeef8f828a66368051edd77ece1b56571eb620d2e60a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x3348, 0x2, [@m_police={0xcfc, 0x10, 0x0, 0x0, {{0xb}, {0xc7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x401, 0x1, 0xffffe23b, 0x1, 0x4, 0x10000, 0x1000, 0xfffffffd, 0x1, 0xffffffff, 0x200, 0x10000, 0x81, 0xbf3, 0x5, 0x7, 0x5, 0x1, 0x0, 0x4d, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x9, 0x3, 0x3ea4, 0x1, 0x41fb, 0x2, 0x6, 0x7ff, 0x81, 0x7fffffff, 0x40, 0x300, 0x6, 0x4, 0xfffffffd, 0x2, 0x0, 0x4107, 0x1, 0x4, 0x5, 0x8, 0x6, 0x61ea2424, 0x2, 0x6, 0x826, 0x0, 0x3, 0x0, 0x8000, 0x3, 0x4, 0x3, 0x0, 0x6, 0x75, 0x7f, 0xb, 0x1, 0x0, 0x6, 0x665a88bd, 0x6, 0xc, 0x0, 0x7, 0xe, 0x7, 0x5, 0xeff, 0x6, 0x7, 0x9, 0x1, 0x4, 0x2, 0x8001, 0x10001, 0x0, 0x80000000, 0x5, 0x5890, 0x3, 0x9, 0x44, 0x9, 0x2, 0xfffffffb, 0xd, 0x101, 0x7, 0x3ff, 0x1, 0x10001, 0x2120, 0x7fffffff, 0x3, 0x5a6, 0x0, 0x3, 0x32, 0x2, 0x0, 0x4, 0x3, 0x1ff, 0x0, 0x8, 0x4, 0x5, 0x1, 0x8, 0x9, 0x7fffffff, 0xfff, 0x2, 0xff, 0x3, 0xfff, 0x3, 0x6, 0x4a8, 0x0, 0x4, 0x1000, 0x3, 0x7, 0x1ff, 0x7, 0xa, 0x3, 0xd, 0x3, 0x0, 0x9, 0x7f, 0x62f, 0x4, 0x3, 0xffff2822, 0x5, 0x1, 0x5, 0x3, 0x6, 0x42, 0x4a, 0xf572, 0xfffffffb, 0xffff978c, 0xd3, 0x6, 0x6, 0x5, 0x8, 0x5, 0x0, 0x6, 0xd65, 0x1, 0x7, 0x5, 0x7, 0x0, 0x9, 0x8, 0x6b7f, 0xbd, 0x4, 0xfffffffd, 0x9ce, 0x80e0, 0x4, 0x1, 0x6, 0x9, 0x0, 0x8, 0x1, 0x2e, 0x6, 0x4, 0x7, 0x0, 0x9, 0xc, 0xd, 0x5a2, 0x5, 0x6, 0xff, 0xab, 0x80000000, 0x1, 0xe54f, 0x38, 0x7, 0x6, 0x3, 0x2, 0x9, 0x3, 0x305, 0x10000, 0x4, 0x6, 0x6, 0xffffffa2, 0x1, 0x101, 0x7, 0x7, 0x40, 0x2, 0x4, 0x6, 0x5, 0xcd46, 0x400, 0xd, 0xfffffffe, 0x8, 0x6, 0x0, 0x9, 0xf, 0x6, 0x5, 0xe8, 0x7ff, 0x5, 0x6, 0x3, 0x81, 0x7fff, 0x70d1, 0x9, 0xf6, 0x6, 0xe, 0x0, 0x1, 0x10001, 0x80000000, 0x7fffffff, 0xfffffb91]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x400, 0x4, 0x0, 0x2, 0x10001, 0x4, 0x4, 0x6, 0xa, 0x2, 0xb680, 0xffff, 0x4, 0xb43, 0x8, 0x3b, 0x1, 0x401, 0x1, 0x8, 0x65c, 0x10, 0x9, 0x8, 0x3, 0x3, 0x8001, 0xa, 0x5, 0x40, 0x4, 0x2, 0x7fffffff, 0x8, 0x5, 0x1, 0xb0a, 0x28, 0x4, 0x6, 0x5, 0x6, 0x8000, 0x2, 0x5, 0x5, 0x9, 0xc3da, 0x28000, 0x0, 0x1099, 0x2, 0x4, 0x7fffffff, 0x800, 0x5, 0x2, 0x48a1, 0x9, 0x7, 0x0, 0x7fff, 0x1, 0x9, 0xb, 0x1, 0x15, 0x4, 0x5, 0x1, 0xf, 0xfffffffa, 0xffffffff, 0x1, 0x7fffffff, 0x5, 0x3, 0x101, 0x9, 0x6, 0x6, 0x100, 0x4, 0xfffffffc, 0x6, 0x9, 0x80, 0x5, 0x6, 0x0, 0x6, 0x3, 0x1, 0x8000, 0x80000000, 0x7, 0x1, 0x101, 0x3, 0x400, 0x8, 0x3ff, 0x6, 0x6, 0xfffffffa, 0x8000, 0x80000001, 0xfffffff4, 0x32, 0xa1a, 0x7, 0xb3, 0x10001, 0x81, 0x6, 0x9, 0x3ff8, 0x2, 0x7, 0x6e0, 0x0, 0x0, 0x42, 0x2, 0x0, 0x3, 0x1, 0x0, 0x3, 0x7f, 0x0, 0x0, 0xfffffffa, 0xb1d, 0x2, 0x8, 0x399, 0x8, 0x8, 0x9, 0x3ff, 0x800, 0x9, 0x2, 0x8, 0x7, 0x289, 0x6, 0x30000000, 0x4f, 0x3, 0x2c, 0x3, 0x4, 0x0, 0x2, 0x4, 0x8001, 0x2, 0x0, 0x8000, 0x0, 0x80, 0x8, 0xffff, 0x81, 0x2, 0xb, 0x7, 0x80000000, 0xbb72, 0xff, 0x2, 0x1d3, 0x9, 0x7, 0x1, 0x1, 0x7fff, 0x81, 0x6, 0x1, 0x6, 0x5, 0x3, 0x8, 0x300, 0xdb, 0x21, 0x10000, 0x112, 0xffffff3e, 0x2, 0x3, 0xc, 0x9d, 0x8001, 0x6, 0xbca, 0x3, 0x2, 0x4, 0x9, 0x400, 0x6, 0x8, 0x3, 0x10000, 0x1, 0x3, 0x5, 0x68, 0x8000, 0x7fffffff, 0x10000, 0xfffffffc, 0x3, 0x9, 0x9, 0x6, 0x7, 0x6, 0x7fffffff, 0x8, 0x1, 0x4, 0x929a, 0x200, 0x8, 0xd8, 0x8, 0x0, 0x80000001, 0x8, 0xe5, 0x1, 0x8, 0x7, 0x7, 0x4, 0xbaa, 0x6, 0xfffffffa, 0x7, 0x7, 0x6cd9eb3e, 0x2, 0x1ff, 0x7, 0x0, 0x8001, 0x71d, 0x2, 0xf54]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x7116, 0xfffffffa, 0x0, 0x93, 0x7fffffff, 0x7, 0x6, 0x8, 0x0, 0xdeb, 0x1, 0x8, 0x58, 0x8, 0x9, 0xa05c, 0x8, 0x9, 0x1000, 0x8, 0x81, 0x3489, 0x8, 0x9, 0xff51, 0x8, 0x3ff, 0x7, 0x400, 0x0, 0x9668, 0x567b, 0x0, 0x4, 0x2, 0x100, 0xc, 0x2, 0x1, 0x1000, 0xfffffffb, 0x8, 0x7fff, 0x9, 0x9, 0x1, 0x170, 0x7, 0x81, 0x5, 0x6, 0x9, 0x5, 0x560, 0x80000000, 0x225, 0x0, 0x9, 0x6, 0x5, 0x200000, 0xffff, 0xcdf, 0x3, 0x36f7ce27, 0x4, 0x6, 0x1000, 0x0, 0x7, 0x4, 0x0, 0x400, 0x8, 0x10001, 0x3, 0x8, 0x3, 0x7fffffff, 0x9, 0x9, 0x9, 0xfa2, 0x4, 0x1000, 0x1fc00, 0x8226, 0x40, 0xff, 0x5, 0x0, 0xe, 0x7, 0x7, 0x0, 0x8001, 0x100, 0xffffffff, 0x7, 0x8, 0x1, 0x3, 0x1, 0x9, 0x2, 0x7, 0x0, 0x8000, 0x3ff, 0x2, 0x5, 0xfffffff0, 0x3, 0x3, 0x40, 0x6, 0x2, 0x6, 0x0, 0x9, 0xffffff6d, 0x5, 0x527aa95f, 0x4, 0x2, 0x1000, 0x1, 0x9, 0xc47, 0xfffffa0e, 0xe000000, 0x2ccf5511, 0x55, 0x4, 0x9, 0x2, 0x400, 0x3, 0x9, 0x8, 0x4, 0x9, 0x10, 0x6, 0x8001, 0xbb5495de, 0x80, 0x3, 0x1, 0x1, 0x8, 0x4e5e, 0x2, 0x3, 0xe4b3, 0x0, 0x9, 0x7, 0x4, 0x9, 0x9, 0x1, 0x200, 0x6, 0x401, 0x0, 0xd, 0x9, 0x5, 0x9, 0x81, 0x9, 0xf95a, 0x73, 0x3, 0xff, 0x1ff, 0x8, 0x100000, 0x3, 0x3, 0x80, 0x8, 0x0, 0xe, 0x125f, 0x3ff, 0x8001, 0x6, 0xe, 0x7, 0xe56b, 0x7, 0x200, 0x7f, 0x6, 0x4, 0x5, 0x1, 0x8, 0x4, 0xfffff800, 0x3, 0x2, 0x80, 0x3, 0x7, 0x800, 0x5, 0x4, 0x2, 0x2800, 0x6, 0x7ff, 0x9, 0x3, 0x10001, 0x800, 0x3, 0x100, 0x5, 0x10000, 0x0, 0x3, 0x8, 0x5, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0xfffffe00, 0x1, 0x3, 0x4, 0x8, 0x2, 0x2, 0x6, 0x9, 0x7, 0x2, 0x5, 0x3ff, 0x270, 0xffff0000, 0x3, 0x0, 0x80000001, 0x4, 0x28b4, 0x2, 0xd, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x16a5, 0x1, 0x1, 0x10, 0x6, {0x4, 0x1, 0x929, 0x3ff, 0x3, 0x5}, {0x60, 0x0, 0x8, 0xc3, 0x1f, 0x6}, 0x80000001, 0x800, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}]]}, {0x56, 0x6, "08a46983145e057689b8b5c6e2a6ee7619230280cd13439ed33adda0c5fc96d6c0f67deacaaff94c04d1fff5f6efbf74b14e2522292aabc993167555d918268ebce0104aea4a8db6f83c12a5622148696c27"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x1080, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x27, 0x4, 0x6, 0x7, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6d45, 0x5, 0x6, 0x1, 0xffff8001}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x116c, 0x19, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x6, 0x1, 0x8, 0x1}, @remote, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8a, 0x20000000, 0x7ff}, @local, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xb3, 0x4, 0xfffffff9, 0xc5b4}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xc8, 0x2, 0x9, 0xfff}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3ff, 0x4, 0x5}, @local, @private=0xa010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200f, 0x3, 0x20000000, 0x9, 0xffff0001}, @empty, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1ff, 0x7, 0xa112, 0x2}, @multicast2, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x24, 0x2, 0xa6, 0x7}, @dev={0xac, 0x14, 0x14, 0x34}, @remote, 0xffffffff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x12c, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000001, 0x2, 0x5, 0xde63, 0x41}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0xd7, 0x6, "d1078dfd1eee83dd576092fe8bd22579583c446d57af6c6df2d337c374528af5263692fbf69f961ce6b37c5c4f8e6ab964d8ba21a0116234a2bab588047ec15c0c965573ac54c4ec1d3cbe3ff3dc7cd0c651355ae9118e3048d4128ee4270806f019b4e8048a30f800edb67ef60f08ef4377740b367dd2a62d63562f9560e13a3480c6749ca2acd2e33e70ca24fb101d13ae02fc0bdbe02667bbf68f45f7f9571b2162b3e01bbc20cd60d91c187521cfba558b18652aa43b5370be6dfd3c4e4c1a2f627117d44e2d882470fdc0644496bc57f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x128, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x7ff, 0x10000006, 0xbf1, 0xfffffff9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x13f, 0xa1, 0x8, 0x9, 0x7}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x7bc4, 0x10000000, 0x1, 0xd47}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xfffffffc, 0x1, 0x1, 0x401}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa210, 0x3, 0x4, 0x1, 0x7}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x0, 0x2, 0x101, 0x3}, 0x3, r3}}]}, {0x3a, 0x6, "5df8a4295580047ca69b963555c4a74d1d96bcc63297fbb7dacf743617b9893ecc22cfc9c63950dc4440640a0f15e2888fee571b7770"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x208, 0x13, 0x0, 0x0, {{0xa}, {0x1a8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x13c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x35, 0x6, "dd23e6cea9d7e859d767f000c029f80abafa885c8f8146e00c2cb7f08bfd711faa95166d27daa2f2111c7b91e71c68b873"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x1e8, 0x2, [@m_xt={0xb8, 0x1, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffff801}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x98ee}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x38, 0x6, {0x7, 'security\x00', 0x0, 0xf, "c7a9e810c812acabb5d26390fa4d"}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x12c, 0x0, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xf0cb, 0xffffffffffffffff, 0xce4f, 0x5}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x4c80, 0x0, 0x1, 0x2}, {0x1f39, 0x0, 0xb9, 0x1}, {0x80, 0x4, 0x2, 0x8}, {0x6, 0xa4, 0x0, 0x1000}, {0x9, 0x80, 0x8}, {0xd, 0xdd, 0x9, 0xcf8f}]}]}, {0xaf, 0x6, "35341c66c6ab505d6e029fdf9b3745c87cea5fc3f94df80a345cf665425f37c2d98a632377fa513e7513b919bc7f52364a04cd0de46b20ae69c54534812922eb6c2e36c7aa390555791acaa49f278daa13eadbe95ec595fafbc4e5845efc005ddc251dd52018b29cd416ec7ae626ad9cc8d5655fed2f1c2fe58fcec9f9c9decb2c1eb110af9fb444d1280d3e47ca39b2af5b588fa63e839fdd8e46dd726d2dda6b22c0d07f57a69a2944f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3918}, 0x1, 0x0, 0x0, 0x10}, 0x0) 276.595309ms ago: executing program 1 (id=1359): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) r3 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x0, r2}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000)=0x800000, 0xa6020000) r4 = syz_open_procfs(0x0, &(0x7f0000001100)='comm\x00') preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x400) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f00000010c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2}, 0x97}, [{}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xee}, {0x0, 0x20000000}, {}, {0x0, 0x0, 0x1, 0x1, 0x7fc}, {0x0, 0x0, 0x40000}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xfffffffe, 0x100}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}], [{0x3272acbcf996957}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x6, 0x6, 0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000100100000040000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000ffffff00000200"/28], 0x50) sendmsg$xdp(r4, &(0x7f0000001400)={&(0x7f0000001140)={0x2c, 0x2, r6, 0x9}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001240)="5e24eedfece6f5cca471f3cd7c7041b4114c3214d162bd0ecc4aef989a7c4d7f9d2c40ce63402aca9de60b00d3f031d2686120ffbafcf2a7b22f13dbfb8fcc2b7308777e701851ffe46b29a673c434ac400f082661cd2ac993ce2de2e1bd9778b3689b556f520d8c9dd83f49d37a7ded345c54165c50847f10f86011e3055fe12d2b51d9af1128b0f05b80ede064a61d78c9e974caa40b55e82898e59171511cf90e70af68ed639c59c09853", 0xac}, {&(0x7f0000001300)="4880d0ba7ce1c0e0c93ad42aee84df8c52684430cf79bf67389e7efcb39810a6ac1022976c72b653551869ceea7366e48bc438c9ce7fad349a54ba27b5ba8a12350e9cfb9da9e37d3d5b351bf75ab2580a570dd4c09b1a4d05bab1da7d363ed611c38fd63cd0f8f9f9f2258789792e1c570741c646c7290614c40005ad915573c082443f56a3bf4c9bc3d1545e5e33a07aa66b412c7b8ad633abbdd2dc6d9c726d0842333d0f6315cd6a703b83986f711f19d91baff50d6c3e667510afc071f555689362e3ddce154fdd25374a849dcdf4f1eaea6331be8be0decd9f8d430989c092425d034fcfdefad12d39189fb610314066229505f49ddbe793cdf02a", 0xfe}, {&(0x7f0000001180)="3e5bb2a4b813cd83088b6a92506841dcf85aa5b6802afbf22cfdee158df404d8f7747356311acd11", 0x28}], 0x3, 0x0, 0x0, 0x40000}, 0x8000) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r0, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000300)={r11, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000140)={r12, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000200)={r13, 0x80000}) 227.638475ms ago: executing program 4 (id=1360): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000740)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB="6384bcff27acfd1a0a529fc16f22146ee349409f432a4346d7ac8a32ac10f50500141eed99ec463d6130ff0a6d873a8cc9cd24477335"], 0x44}}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x170}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x4f, 0x6, "211bd4ceae8305f5f0a3d33c7114b17bbd659b80f7a2cedc4afe579d00cb47c9f1087372061d29614e26c47d4a0dbc9b66c47bc0649e572cd39384c94e0d4d9f9f301e96d40516a88a4be9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x20c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000002c0)) 186.163328ms ago: executing program 1 (id=1361): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xb, 0x8) (async) ioctl$I2C_PEC(r0, 0x708, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x3, 0x806, 0x40) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x44, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}, @TCA_HHF_RESET_TIMEOUT={0xfffffea6, 0x4, 0x6120}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x200}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xe}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x45}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x762}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8801}, 0x20040850) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000200)={@local, 0x26, r5}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newtfilter={0x84, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x1}, {0x0, 0xffff}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x81}, @TCA_U32_MARK={0x10, 0xa, {0x46e, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02060c000400000028bd7000fddbdf2502001000000004d2000004d500000000350800a48e7dfa7fbc2b686232d4cc2ca16b2f25ba4c11f381985d1b67a349484c9715f441995470f4099e85f0c9e9eca26103e82cc04053bb0aa5f0c76a3666d30ad2bdee8026c2aafc65070af5a1c79524eb3a0430791615fa0914cc5de5d3a0c9e4c2c94785ae1479bcc5722960511ad6cb832eb1c89314d57d0000"], 0x20}}, 0x48000) (async) socket$inet_sctp(0x2, 0x800000000000001, 0x84) (async) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, 0xee01, 0x0) (async) keyctl$setperm(0x5, r10, 0x30925) (async) r11 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r11, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x66, 0x2, 0x81, 0xbc, 0xd, 0x3, 0x3, 0x1, 0x274, 0x34, 0xb3, 0x0, 0xfff9, 0x20, 0x3, 0x2, 0x0, 0x1000}, [{0x2, 0x3, 0x2, 0x6, 0x100, 0x6, 0x4}, {0x5, 0x1, 0x8001, 0xb7, 0x800, 0x4, 0x6}, {0x6, 0x8001, 0x9, 0x400, 0x3, 0x6, 0xa, 0x968b}], "4b482a2d7f5c3332c007f65e3f57df93a044067cad", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) keyctl$chown(0x4, r10, r12, 0xffffffffffffffff) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000340)=0x4, 0x12) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) 9.550242ms ago: executing program 1 (id=1362): removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="736563757269fbffffff6465762f636f6d6564693300"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x15, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x90, 0x24, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x1, 0xf}, {0x7, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x6, 0xff780000, 0x1, 0x3ff, 0x3000000, 0x40}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "f87b"}, @TCA_NETEM_CORR={0x10, 0x1, {0x1, 0xb, 0x988}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_CORR={0x10, 0x1, {0xff, 0x3, 0xfffffffa}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat$snapshot(0xffffff9c, 0x0, 0x20900, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0xa, 0x4e20, 0x1, @local, 0x10}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="eab26e4cd8c0f149", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYRES16=r1], 0x80}, 0x48844) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000280)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01020000000000000000010000000900010073797a3000000000080002400000000020000000030a010200000000000000000100000009003dc9258d18e77330000038000000030a01040000000000000000010000befd0cc05f13caf983a8407a0d090900010073797a30000000000c00024000000000000000010900030073797a3000000000140000001100010000000000000000000000000a"], 0xa8}, 0x1, 0x20, 0x0, 0x8040}, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001800dd8d200000006302000000000000000a000500010000180016801400030000000000000000000000ffffe00000020600150007000000898842f940dc486858498f9475dc9f6cd0b08e0c1bbb9c49ad10ee1b16f0a1d8bc91b97f9937e00ac310e4"], 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7986c215cf622ba247261e000000e9000000008000"/30, @ANYRES32, @ANYBLOB="8900"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000020000d5f07813000400000001000000000000000000000000fbff00"], 0x50) socket$inet6(0xa, 0x1, 0x9e0) 0s ago: executing program 4 (id=1363): r0 = openat$vsock(0xffffff9c, &(0x7f0000000400), 0x210102, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000900)={0x8c, 0x1d, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@generic="8bc0599fe536e5cf427baac8c479331a420e41be99786b3cef021615d43515f4b7b96f629ce5c33ee8ad6770c5b872f4c8abaf45095f996076b6f1f08b8f0fda5c31379fe64efc01b3bd241e42545d1bff1c2ba36f493ce5d11ddf2201025e37f83437780e5ddf492b7db8b63cfdec0f", @generic, @typed={0xa, 0x11e, 0x0, 0x0, @binary="0070f8f95812"}]}, 0x8c}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="2c0005000000000000000000da751243a3b015c76ee3062a66e0bb3df4b78f67f292d4679b4d2717154ce2d5689fd0ef6871a894de3bacd771fac7b7c7294b9368bbe314b16446ac437d8e34600dd3d5efe94acbf18b8809c06ef7e995f511afa94e5033cc150f4b52ab93e76102e253415f468afa9ea4eb154078d531c626880548bf4287ca461fd02350982acd7b886cdba0312d522e3ff23975f14a00"/172, @ANYBLOB="a48b475735373b0b3dc4e9617f781546f418483179eba8cafd9a2a13c2de0f6b7f561d9103f8023039af1ad238590c715193fbd98b7b9a03d10802", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c0000000100000001000000"], 0x38, 0x44080}, 0x20048084) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x10048800) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000440)={0x2d, 0x2, 0xfffffffe}, 0xc) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{0x0}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r6, 0xc1b94000) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): .00: status: { DRDY } [ 203.284346][ T1113] ata1.00: error: { ABRT } [ 203.286775][ T1113] ata1.00: configured for UDMA/100 [ 203.290619][ T1113] ata1: EH complete [ 203.497361][ T9491] __nla_validate_parse: 148 callbacks suppressed [ 203.497380][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.503688][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.506821][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.509719][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.512589][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.515433][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.518373][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.521241][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.524191][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.527603][ T9491] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1034'. [ 203.956530][ T9497] netlink: 'syz.4.1037': attribute type 2 has an invalid length. [ 204.027278][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 204.027367][ T40] audit: type=1326 audit(1774129633.573:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.028040][ T9464] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 204.037508][ T40] audit: type=1326 audit(1774129633.583:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.046190][ T40] audit: type=1326 audit(1774129633.583:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.048398][ T6027] usb 6-1: USB disconnect, device number 11 [ 204.086827][ T40] audit: type=1326 audit(1774129633.583:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.111752][ T40] audit: type=1326 audit(1774129633.583:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.148810][ T40] audit: type=1326 audit(1774129633.603:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.171768][ T40] audit: type=1326 audit(1774129633.603:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.188306][ T9499] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.204223][ T40] audit: type=1326 audit(1774129633.613:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.212297][ T40] audit: type=1326 audit(1774129633.613:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.219999][ T40] audit: type=1326 audit(1774129633.613:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 204.230023][ T9503] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 205.216093][ T9493] comedi comedi2: reset error (fatal) [ 205.647544][ T9528] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 205.707447][ T9530] loop6: detected capacity change from 0 to 524287999 [ 205.711263][ T9296] buffer_io_error: 26 callbacks suppressed [ 205.711272][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.715704][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.719047][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.721954][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.724443][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.727239][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.729705][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.732179][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.734625][ T9296] ldm_validate_partition_table(): Disk read failed. [ 205.738568][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.741002][ T9296] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.743483][ T9296] Dev loop6: unable to read RDB block 0 [ 205.745333][ T9296] loop6: unable to read partition table [ 205.775503][ T9530] ldm_validate_partition_table(): Disk read failed. [ 205.826829][ T9531] FAULT_INJECTION: forcing a failure. [ 205.826829][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 205.831765][ T9531] CPU: 3 UID: 0 PID: 9531 Comm: syz.1.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.831788][ T9531] Tainted: [L]=SOFTLOCKUP [ 205.831793][ T9531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.831799][ T9531] Call Trace: [ 205.831804][ T9531] [ 205.831809][ T9531] dump_stack_lvl+0x100/0x190 [ 205.831828][ T9531] should_fail_ex.cold+0x5/0xa [ 205.831841][ T9531] ? tomoyo_encode2+0xfb/0x3c0 [ 205.831854][ T9531] should_failslab+0xc2/0x120 [ 205.831865][ T9531] __kmalloc_noprof+0xe0/0x850 [ 205.831880][ T9531] ? d_absolute_path+0x136/0x1b0 [ 205.831897][ T9531] tomoyo_encode2+0xfb/0x3c0 [ 205.831913][ T9531] tomoyo_encode+0x29/0x50 [ 205.831926][ T9531] tomoyo_realpath_from_path+0x18c/0x690 [ 205.831944][ T9531] tomoyo_path_perm+0x276/0x460 [ 205.831954][ T9531] ? tomoyo_path_perm+0x262/0x460 [ 205.831966][ T9531] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 205.831992][ T9531] ? __lock_acquire+0x4a5/0x2630 [ 205.832010][ T9531] security_inode_getattr+0x116/0x280 [ 205.832022][ T9531] vfs_getattr+0x25/0x60 [ 205.832035][ T9531] loop_query_min_dio_size.isra.0+0x117/0x250 [ 205.832051][ T9531] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 205.832078][ T9531] lo_ioctl+0x13aa/0x1bc0 [ 205.832095][ T9531] ? __pfx_lo_ioctl+0x10/0x10 [ 205.832113][ T9531] ? tomoyo_path_number_perm+0x46d/0x580 [ 205.832125][ T9531] ? kasan_quarantine_put+0x104/0x240 [ 205.832140][ T9531] ? blk_get_meta_cap+0xd4/0x6c0 [ 205.832155][ T9531] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 205.832169][ T9531] ? find_held_lock+0x2b/0x80 [ 205.832178][ T9531] ? tomoyo_path_number_perm+0x28f/0x580 [ 205.832193][ T9531] ? blkdev_common_ioctl+0x515/0x2ba0 [ 205.832209][ T9531] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 205.832228][ T9531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.832269][ T9531] ? do_vfs_ioctl+0x226/0x13e0 [ 205.832291][ T9531] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.832311][ T9531] lo_compat_ioctl+0xf3/0x160 [ 205.832327][ T9531] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 205.832341][ T9531] compat_blkdev_ioctl+0x682/0x7b0 [ 205.832357][ T9531] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 205.832375][ T9531] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 205.832391][ T9531] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 205.832408][ T9531] __do_fast_syscall_32+0xe3/0x8c0 [ 205.832427][ T9531] do_fast_syscall_32+0x32/0x70 [ 205.832443][ T9531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.832457][ T9531] RIP: 0023:0xf706ef6c [ 205.832466][ T9531] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.832477][ T9531] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 205.832487][ T9531] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c06 [ 205.832494][ T9531] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.832500][ T9531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.832506][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.832512][ T9531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.832525][ T9531] [ 205.832550][ T9531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.935402][ T9530] Dev loop6: unable to read RDB block 0 [ 205.937589][ T9530] loop6: unable to read partition table [ 205.939469][ T9530] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 205.942470][ T9296] ldm_validate_partition_table(): Disk read failed. [ 205.944607][ T9296] Dev loop6: unable to read RDB block 0 [ 205.946905][ T9296] loop6: unable to read partition table [ 206.005615][ T9531] loop6: unable to read partition table [ 206.008760][ T9531] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 206.430231][ T9558] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 206.545755][ T9561] FAULT_INJECTION: forcing a failure. [ 206.545755][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 206.550648][ T9561] CPU: 3 UID: 0 PID: 9561 Comm: syz.1.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.550666][ T9561] Tainted: [L]=SOFTLOCKUP [ 206.550669][ T9561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.550676][ T9561] Call Trace: [ 206.550679][ T9561] [ 206.550683][ T9561] dump_stack_lvl+0x100/0x190 [ 206.550702][ T9561] should_fail_ex.cold+0x5/0xa [ 206.550715][ T9561] should_failslab+0xc2/0x120 [ 206.550726][ T9561] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 206.550743][ T9561] ? __alloc_skb+0x140/0x710 [ 206.550759][ T9561] __alloc_skb+0x140/0x710 [ 206.550773][ T9561] ? __alloc_skb+0x5b7/0x710 [ 206.550786][ T9561] ? __pfx___alloc_skb+0x10/0x10 [ 206.550799][ T9561] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 206.550814][ T9561] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 206.550831][ T9561] mr6_netlink_event+0xd9/0x1b0 [ 206.550845][ T9561] ip6mr_mfc_add+0x1fda/0x3550 [ 206.550861][ T9561] ? ip6_mroute_setsockopt+0xe71/0x36d0 [ 206.550876][ T9561] ? __pfx_ip6mr_mfc_add+0x10/0x10 [ 206.550892][ T9561] ? find_held_lock+0x2b/0x80 [ 206.550907][ T9561] ? ip6_mroute_setsockopt+0x20f9/0x36d0 [ 206.550920][ T9561] ip6_mroute_setsockopt+0x20f9/0x36d0 [ 206.550937][ T9561] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 206.550953][ T9561] ? __lock_acquire+0x4a5/0x2630 [ 206.550966][ T9561] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.550978][ T9561] ? is_bpf_text_address+0x94/0x1a0 [ 206.550994][ T9561] ? kernel_text_address+0x8d/0x100 [ 206.551014][ T9561] ? __might_fault+0xc5/0x140 [ 206.551033][ T9561] ? do_ipv6_setsockopt+0x551/0x4400 [ 206.551043][ T9561] do_ipv6_setsockopt+0x551/0x4400 [ 206.551067][ T9561] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 206.551079][ T9561] ? aa_label_sk_perm+0x194/0x5f0 [ 206.551095][ T9561] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 206.551112][ T9561] ? find_held_lock+0x2b/0x80 [ 206.551121][ T9561] ? get_pid_task+0xfc/0x250 [ 206.551134][ T9561] ? get_pid_task+0xfc/0x250 [ 206.551150][ T9561] ? __pfx___might_resched+0x10/0x10 [ 206.551166][ T9561] ? __lock_acquire+0x4a5/0x2630 [ 206.551180][ T9561] ? aa_sk_perm+0x309/0xaa0 [ 206.551193][ T9561] ? ipv6_setsockopt+0xcb/0x170 [ 206.551202][ T9561] ipv6_setsockopt+0xcb/0x170 [ 206.551213][ T9561] rawv6_setsockopt+0xee/0x5a0 [ 206.551229][ T9561] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 206.551245][ T9561] ? aa_sock_opt_perm+0xfe/0x1b0 [ 206.551261][ T9561] ? sock_common_setsockopt+0x2e/0xf0 [ 206.551271][ T9561] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.551282][ T9561] do_sock_setsockopt+0xf3/0x1d0 [ 206.551294][ T9561] __sys_setsockopt+0x119/0x190 [ 206.551312][ T9561] __ia32_sys_setsockopt+0xbc/0x160 [ 206.551326][ T9561] ? __do_fast_syscall_32+0x94/0x8c0 [ 206.551342][ T9561] ? lockdep_hardirqs_on+0x78/0x100 [ 206.551357][ T9561] __do_fast_syscall_32+0xe3/0x8c0 [ 206.551375][ T9561] do_fast_syscall_32+0x32/0x70 [ 206.551391][ T9561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.551405][ T9561] RIP: 0023:0xf706ef6c [ 206.551415][ T9561] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 206.551425][ T9561] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 206.551435][ T9561] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 206.551442][ T9561] RDX: 00000000000000cc RSI: 0000000080000000 RDI: 000000000000005c [ 206.551448][ T9561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.551454][ T9561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 206.551460][ T9561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.551473][ T9561] [ 207.008209][ T9575] [U]  [ 207.009524][ T9575] [U] K{‘ [ 207.011039][ T9575] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 207.015230][ T9575] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 207.021777][ T9575] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 207.026540][ T9575] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 207.042499][ T9575] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 207.052177][ T9575] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 207.072300][ T9575] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 207.080261][ T9575] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 207.117340][ T9575] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 207.122205][ T9575] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 207.147563][ T9577] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0177777777777777777777700000000000000000000' [ 207.162545][ T9575] [U] 22½“Æ©ÐÛ©X?0;3U± [ 207.167860][ T9575] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 207.177182][ T9575] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 207.180739][ T9575] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 207.183700][ T9575] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 207.186206][ T9575] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 207.191183][ T9575] [U] ¹ EC [ 207.199678][ T9575] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 207.455239][ T9583] block device autoloading is deprecated and will be removed. [ 207.810156][ T9573] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 207.876916][ T9599] FAULT_INJECTION: forcing a failure. [ 207.876916][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 207.880924][ T9599] CPU: 0 UID: 0 PID: 9599 Comm: syz.4.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.880940][ T9599] Tainted: [L]=SOFTLOCKUP [ 207.880944][ T9599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.880950][ T9599] Call Trace: [ 207.880954][ T9599] [ 207.880957][ T9599] dump_stack_lvl+0x100/0x190 [ 207.880976][ T9599] should_fail_ex.cold+0x5/0xa [ 207.880989][ T9599] ? tomoyo_realpath_from_path+0xb6/0x690 [ 207.881003][ T9599] should_failslab+0xc2/0x120 [ 207.881014][ T9599] __kmalloc_noprof+0xe0/0x850 [ 207.881033][ T9599] tomoyo_realpath_from_path+0xb6/0x690 [ 207.881050][ T9599] tomoyo_path_number_perm+0x23c/0x580 [ 207.881061][ T9599] ? tomoyo_path_number_perm+0x22e/0x580 [ 207.881074][ T9599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.881098][ T9599] ? find_held_lock+0x2b/0x80 [ 207.881108][ T9599] ? hook_file_ioctl_common+0x146/0x410 [ 207.881120][ T9599] ? __fget_files+0x215/0x3d0 [ 207.881132][ T9599] ? __fget_files+0x21f/0x3d0 [ 207.881144][ T9599] security_file_ioctl_compat+0xd3/0x230 [ 207.881157][ T9599] __ia32_compat_sys_ioctl+0xc2/0x360 [ 207.881175][ T9599] __do_fast_syscall_32+0xe3/0x8c0 [ 207.881193][ T9599] do_fast_syscall_32+0x32/0x70 [ 207.881209][ T9599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.881223][ T9599] RIP: 0023:0xf709ef6c [ 207.881231][ T9599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 207.881241][ T9599] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 207.881251][ T9599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006407 [ 207.881258][ T9599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.881264][ T9599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.881269][ T9599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.881275][ T9599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.881288][ T9599] [ 207.881292][ T9599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.057438][ T9618] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.087330][ T9623] FAULT_INJECTION: forcing a failure. [ 208.087330][ T9623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.091397][ T9623] CPU: 3 UID: 0 PID: 9623 Comm: syz.4.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.091413][ T9623] Tainted: [L]=SOFTLOCKUP [ 208.091417][ T9623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.091423][ T9623] Call Trace: [ 208.091427][ T9623] [ 208.091431][ T9623] dump_stack_lvl+0x100/0x190 [ 208.091450][ T9623] should_fail_ex.cold+0x5/0xa [ 208.091463][ T9623] _copy_from_user+0x2e/0xd0 [ 208.091476][ T9623] get_compat_msghdr+0xb3/0x4b0 [ 208.091492][ T9623] ? __pfx_get_compat_msghdr+0x10/0x10 [ 208.091506][ T9623] ? _kstrtoull+0x13c/0x1f0 [ 208.091521][ T9623] ? __lock_acquire+0x4a5/0x2630 [ 208.091538][ T9623] ___sys_recvmsg+0x193/0x1a0 [ 208.091550][ T9623] ? __pfx____sys_recvmsg+0x10/0x10 [ 208.091563][ T9623] ? find_held_lock+0x2b/0x80 [ 208.091581][ T9623] do_recvmmsg+0x563/0x760 [ 208.091594][ T9623] ? __pfx_do_recvmmsg+0x10/0x10 [ 208.091608][ T9623] ? ksys_write+0x190/0x250 [ 208.091618][ T9623] ? ksys_write+0x190/0x250 [ 208.091631][ T9623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.091651][ T9623] __sys_recvmmsg+0x21f/0x270 [ 208.091667][ T9623] ? __pfx___sys_recvmmsg+0x10/0x10 [ 208.091684][ T9623] ? ksys_write+0x1ac/0x250 [ 208.091695][ T9623] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 208.091711][ T9623] ? __do_fast_syscall_32+0x94/0x8c0 [ 208.091731][ T9623] ? lockdep_hardirqs_on+0x78/0x100 [ 208.091746][ T9623] __do_fast_syscall_32+0xe3/0x8c0 [ 208.091764][ T9623] do_fast_syscall_32+0x32/0x70 [ 208.091792][ T9623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.091807][ T9623] RIP: 0023:0xf709ef6c [ 208.091815][ T9623] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 208.091826][ T9623] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 208.091836][ T9623] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800048c0 [ 208.091843][ T9623] RDX: 0000000000000001 RSI: 0000000000010002 RDI: 0000000000000000 [ 208.091849][ T9623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.091855][ T9623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.091861][ T9623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.091874][ T9623] [ 208.601743][ T9638] __nla_validate_parse: 770 callbacks suppressed [ 208.601816][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 208.844837][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 209.288762][ T9661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.342927][ T9667] FAULT_INJECTION: forcing a failure. [ 209.342927][ T9667] name failslab, interval 1, probability 0, space 0, times 0 [ 209.348978][ T9667] CPU: 1 UID: 0 PID: 9667 Comm: syz.1.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.349007][ T9667] Tainted: [L]=SOFTLOCKUP [ 209.349014][ T9667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.349023][ T9667] Call Trace: [ 209.349030][ T9667] [ 209.349036][ T9667] dump_stack_lvl+0x100/0x190 [ 209.349069][ T9667] should_fail_ex.cold+0x5/0xa [ 209.349090][ T9667] ? tomoyo_encode2+0xfb/0x3c0 [ 209.349113][ T9667] should_failslab+0xc2/0x120 [ 209.349133][ T9667] __kmalloc_noprof+0xe0/0x850 [ 209.349159][ T9667] ? d_absolute_path+0x136/0x1b0 [ 209.349188][ T9667] tomoyo_encode2+0xfb/0x3c0 [ 209.349216][ T9667] tomoyo_encode+0x29/0x50 [ 209.349238][ T9667] tomoyo_realpath_from_path+0x18c/0x690 [ 209.349269][ T9667] tomoyo_path_perm+0x276/0x460 [ 209.349286][ T9667] ? tomoyo_path_perm+0x262/0x460 [ 209.349308][ T9667] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 209.349327][ T9667] ? mntput+0x70/0xa0 [ 209.349376][ T9667] ? __d_lookup+0x25c/0x4a0 [ 209.349410][ T9667] tomoyo_path_unlink+0x91/0xe0 [ 209.349436][ T9667] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 209.349470][ T9667] ? lookup_dcache+0x66/0x170 [ 209.349493][ T9667] security_path_unlink+0x145/0x2b0 [ 209.349517][ T9667] filename_unlinkat+0x316/0x730 [ 209.349540][ T9667] ? __pfx_filename_unlinkat+0x10/0x10 [ 209.349570][ T9667] ? do_getname+0x191/0x390 [ 209.349595][ T9667] __ia32_sys_unlink+0x45/0x60 [ 209.349616][ T9667] __do_fast_syscall_32+0xe3/0x8c0 [ 209.349647][ T9667] do_fast_syscall_32+0x32/0x70 [ 209.349675][ T9667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.349698][ T9667] RIP: 0023:0xf706ef6c [ 209.349713][ T9667] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 209.349731][ T9667] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000000a [ 209.349749][ T9667] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 209.349761][ T9667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.349772][ T9667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.349783][ T9667] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.349794][ T9667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.349820][ T9667] [ 209.349840][ T9667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.570636][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 209.620505][ T9683] FAULT_INJECTION: forcing a failure. [ 209.620505][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.624620][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.3.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.624637][ T9683] Tainted: [L]=SOFTLOCKUP [ 209.624640][ T9683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.624647][ T9683] Call Trace: [ 209.624651][ T9683] [ 209.624655][ T9683] dump_stack_lvl+0x100/0x190 [ 209.624674][ T9683] should_fail_ex.cold+0x5/0xa [ 209.624686][ T9683] _copy_to_user+0x32/0xd0 [ 209.624701][ T9683] simple_read_from_buffer+0xcb/0x170 [ 209.624719][ T9683] proc_fail_nth_read+0x1af/0x230 [ 209.624732][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.624746][ T9683] ? rw_verify_area+0xce/0x6d0 [ 209.624761][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.624773][ T9683] vfs_read+0x1e4/0xb30 [ 209.624792][ T9683] ? __pfx_vfs_read+0x10/0x10 [ 209.624807][ T9683] ? find_held_lock+0x2b/0x80 [ 209.624818][ T9683] ? __fget_files+0x215/0x3d0 [ 209.624830][ T9683] ? __fget_files+0x21f/0x3d0 [ 209.624843][ T9683] ksys_read+0x12a/0x250 [ 209.624852][ T9683] ? __pfx_ksys_read+0x10/0x10 [ 209.624865][ T9683] do_int80_emulation+0x141/0x6b0 [ 209.624884][ T9683] asm_int80_emulation+0x1a/0x20 [ 209.624895][ T9683] RIP: 0023:0xf71f5cab [ 209.624903][ T9683] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 209.624913][ T9683] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 209.624923][ T9683] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 209.624930][ T9683] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 209.624936][ T9683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.624942][ T9683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.624948][ T9683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.624961][ T9683] [ 209.709530][ T9688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.266203][ T6429] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 210.839487][ T9708] FAULT_INJECTION: forcing a failure. [ 210.839487][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.843594][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.0.1111 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.843611][ T9708] Tainted: [L]=SOFTLOCKUP [ 210.843615][ T9708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.843621][ T9708] Call Trace: [ 210.843625][ T9708] [ 210.843629][ T9708] dump_stack_lvl+0x100/0x190 [ 210.843648][ T9708] should_fail_ex.cold+0x5/0xa [ 210.843661][ T9708] _copy_from_user+0x2e/0xd0 [ 210.843675][ T9708] binder_thread_write+0x9a6/0x4dd0 [ 210.843688][ T9708] ? kasan_save_free_info+0x3b/0x70 [ 210.843704][ T9708] ? __lock_acquire+0x4a5/0x2630 [ 210.843717][ T9708] ? __pfx_binder_thread_write+0x10/0x10 [ 210.843729][ T9708] ? binder_debug+0xe0/0x190 [ 210.843743][ T9708] ? __pfx_binder_debug+0x10/0x10 [ 210.843763][ T9708] ? __might_fault+0xc5/0x140 [ 210.843781][ T9708] ? __pfx_binder_ioctl+0x10/0x10 [ 210.843791][ T9708] binder_ioctl+0x2941/0x7610 [ 210.843803][ T9708] ? tomoyo_path_number_perm+0x28f/0x580 [ 210.843815][ T9708] ? tomoyo_path_number_perm+0x28f/0x580 [ 210.843829][ T9708] ? tomoyo_path_number_perm+0x188/0x580 [ 210.843841][ T9708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.843854][ T9708] ? __pfx_binder_ioctl+0x10/0x10 [ 210.843867][ T9708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.843885][ T9708] ? do_vfs_ioctl+0x226/0x13e0 [ 210.843901][ T9708] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.843919][ T9708] ? find_held_lock+0x2b/0x80 [ 210.843929][ T9708] ? hook_file_ioctl_common+0x146/0x410 [ 210.843944][ T9708] ? __fget_files+0x21f/0x3d0 [ 210.843955][ T9708] ? __pfx_binder_ioctl+0x10/0x10 [ 210.843965][ T9708] compat_ptr_ioctl+0x6e/0xa0 [ 210.843979][ T9708] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 210.843994][ T9708] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 210.844011][ T9708] __do_fast_syscall_32+0xe3/0x8c0 [ 210.844029][ T9708] do_fast_syscall_32+0x32/0x70 [ 210.844045][ T9708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.844058][ T9708] RIP: 0023:0xf7f72f6c [ 210.844067][ T9708] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 210.844077][ T9708] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 210.844087][ T9708] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 210.844094][ T9708] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.844100][ T9708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.844105][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.844112][ T9708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.844124][ T9708] [ 210.844129][ T9708] binder: 9707:9708 ioctl c0306201 80004a40 returned -14 [ 210.952376][ T9712] FAULT_INJECTION: forcing a failure. [ 210.952376][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 210.956385][ T9712] CPU: 0 UID: 0 PID: 9712 Comm: syz.0.1112 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.956401][ T9712] Tainted: [L]=SOFTLOCKUP [ 210.956404][ T9712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.956410][ T9712] Call Trace: [ 210.956414][ T9712] [ 210.956418][ T9712] dump_stack_lvl+0x100/0x190 [ 210.956437][ T9712] should_fail_ex.cold+0x5/0xa [ 210.956450][ T9712] should_failslab+0xc2/0x120 [ 210.956466][ T9712] __kmalloc_cache_noprof+0x7a/0x6f0 [ 210.956480][ T9712] ? nd_ioctl+0x8df/0x1c40 [ 210.956493][ T9712] nd_ioctl+0x8df/0x1c40 [ 210.956508][ T9712] ? __pfx_nd_ioctl+0x10/0x10 [ 210.956520][ T9712] ? find_held_lock+0x2b/0x80 [ 210.956530][ T9712] ? hook_file_ioctl_common+0x146/0x410 [ 210.956545][ T9712] ? __fget_files+0x21f/0x3d0 [ 210.956556][ T9712] ? __pfx_bus_ioctl+0x10/0x10 [ 210.956566][ T9712] compat_ptr_ioctl+0x6e/0xa0 [ 210.956581][ T9712] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 210.956595][ T9712] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 210.956612][ T9712] __do_fast_syscall_32+0xe3/0x8c0 [ 210.956631][ T9712] do_fast_syscall_32+0x32/0x70 [ 210.956647][ T9712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.956660][ T9712] RIP: 0023:0xf7f72f6c [ 210.956669][ T9712] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 210.956679][ T9712] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 210.956689][ T9712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008640a [ 210.956695][ T9712] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.956701][ T9712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.956707][ T9712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.956713][ T9712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.956725][ T9712] [ 210.963433][ T9713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.042301][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 211.047139][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 211.049941][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 211.107522][ T6429] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 211.110467][ T6429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.114532][ T6429] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 211.117761][ T6429] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 211.120465][ T6429] usb 6-1: Manufacturer: syz [ 211.167250][ T6429] usb 6-1: config 0 descriptor?? [ 211.953987][ T6027] libceph: connect (1)[c::]:6789 error -101 [ 211.955956][ T6027] libceph: mon0 (1)[c::]:6789 connect error [ 211.993129][ T9730] ceph: No mds server is up or the cluster is laggy [ 212.397503][ T6429] rc_core: IR keymap rc-hauppauge not found [ 212.399416][ T6429] Registered IR keymap rc-empty [ 212.406892][ T6429] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 212.416869][ T6429] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 212.427091][ T6429] usb 6-1: USB disconnect, device number 12 [ 212.437034][ T9739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.455449][ T1175] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.465565][ T1175] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.496298][ T1175] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.499373][ T1175] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 212.996180][ T6027] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 213.081894][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1121'. [ 213.101925][ T9747] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 213.104401][ T9747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1121'. [ 213.185902][ T6027] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 213.193976][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.203365][ T6027] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 213.206865][ T6027] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 213.213490][ T6027] usb 6-1: Manufacturer: syz [ 213.220176][ T6027] usb 6-1: config 0 descriptor?? [ 213.286258][ T6027] rc_core: IR keymap rc-hauppauge not found [ 213.288163][ T6027] Registered IR keymap rc-empty [ 213.290578][ T6027] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 213.294824][ T6027] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 213.409782][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 213.500114][ T9770] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1127'. [ 213.698078][ T9798] __nla_validate_parse: 3 callbacks suppressed [ 213.698090][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 213.771373][ T9806] FAULT_INJECTION: forcing a failure. [ 213.771373][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.775482][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.3.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.775499][ T9806] Tainted: [L]=SOFTLOCKUP [ 213.775503][ T9806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.775509][ T9806] Call Trace: [ 213.775513][ T9806] [ 213.775517][ T9806] dump_stack_lvl+0x100/0x190 [ 213.775543][ T9806] should_fail_ex.cold+0x5/0xa [ 213.775556][ T9806] _copy_from_iter+0x1f4/0x1690 [ 213.775575][ T9806] ? __asan_memset+0x23/0x50 [ 213.775590][ T9806] ? __pfx__copy_from_iter+0x10/0x10 [ 213.775602][ T9806] ? __pfx___alloc_skb+0x10/0x10 [ 213.775626][ T9806] netlink_sendmsg+0x808/0xda0 [ 213.775644][ T9806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.775663][ T9806] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 213.775682][ T9806] ____sys_sendmsg+0x9e1/0xb70 [ 213.775692][ T9806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.775709][ T9806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.775726][ T9806] ___sys_sendmsg+0x190/0x1e0 [ 213.775739][ T9806] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.775766][ T9806] __sys_sendmsg+0x170/0x220 [ 213.775781][ T9806] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.775801][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 213.775813][ T9806] __do_fast_syscall_32+0xe3/0x8c0 [ 213.775831][ T9806] do_fast_syscall_32+0x32/0x70 [ 213.775848][ T9806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.775862][ T9806] RIP: 0023:0xf70bef6c [ 213.775870][ T9806] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 213.775880][ T9806] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 213.775891][ T9806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 213.775897][ T9806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.775903][ T9806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.775909][ T9806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.775914][ T9806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.775927][ T9806] [ 215.552286][ T6429] usb 6-1: USB disconnect, device number 13 [ 215.696577][ T9847] bridge_slave_0 (unregistering): left allmulticast mode [ 215.699757][ T9847] bridge_slave_0 (unregistering): left promiscuous mode [ 215.702865][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.003509][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 217.021854][ T9860] KVM: debugfs: duplicate directory 9860-9 [ 217.310325][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 217.331600][ T9869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 217.333726][ T9869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.336620][ T9869] vhci_hcd vhci_hcd.0: Device attached [ 217.395775][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 217.476718][ T9869] wg2 speed is unknown, defaulting to 1000 [ 217.489678][ T9869] wg2 speed is unknown, defaulting to 1000 [ 217.501546][ T9869] wg2 speed is unknown, defaulting to 1000 [ 217.618325][ T6429] usb 40-1: SetAddress Request (2) to port 0 [ 217.632918][ T6429] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 217.681085][ T53] wg2 speed is unknown, defaulting to 1000 [ 217.683174][ T9869] infiniband syz2: set down [ 217.684824][ T9869] infiniband syz2: added wg2 [ 217.713723][ T9869] RDS/IB: syz2: added [ 217.715351][ T9869] smc: adding ib device syz2 with port count 1 [ 217.718749][ T9869] smc: ib device syz2 port 1 has no pnetid [ 217.722230][ T53] wg2 speed is unknown, defaulting to 1000 [ 217.727690][ T9869] wg2 speed is unknown, defaulting to 1000 [ 217.861681][ T9870] vhci_hcd: connection reset by peer [ 217.863683][ T59] vhci_hcd vhci_hcd.1: stop threads [ 217.865946][ T59] vhci_hcd vhci_hcd.1: release socket [ 217.868222][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 217.868231][ T40] audit: type=1326 audit(1774129647.423:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.868843][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 217.870838][ T40] audit: type=1326 audit(1774129647.423:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.905307][ T40] audit: type=1326 audit(1774129647.443:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.911292][ T9885] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.921092][ T40] audit: type=1326 audit(1774129647.443:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.928090][ T40] audit: type=1326 audit(1774129647.443:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.942220][ T9869] wg2 speed is unknown, defaulting to 1000 [ 217.942807][ T40] audit: type=1326 audit(1774129647.443:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.951087][ T40] audit: type=1326 audit(1774129647.443:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.958316][ T40] audit: type=1326 audit(1774129647.443:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.966944][ T40] audit: type=1326 audit(1774129647.443:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.973852][ T40] audit: type=1326 audit(1774129647.443:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.3.1157" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 217.986945][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 217.989696][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 217.992372][ T9888] netlink: 'syz.0.1158': attribute type 15 has an invalid length. [ 218.183539][ T9869] wg2 speed is unknown, defaulting to 1000 [ 218.210050][ T9895] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 218.218148][ T9895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.303213][ T9869] wg2 speed is unknown, defaulting to 1000 [ 218.382229][ T9899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 218.392302][ T9899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.413916][ T9869] wg2 speed is unknown, defaulting to 1000 [ 218.452070][ T9901] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.508058][ T9869] wg2 speed is unknown, defaulting to 1000 [ 218.764924][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 218.949225][ T9908] FAULT_INJECTION: forcing a failure. [ 218.949225][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 218.954707][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.4.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.954725][ T9908] Tainted: [L]=SOFTLOCKUP [ 218.954728][ T9908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.954734][ T9908] Call Trace: [ 218.954738][ T9908] [ 218.954742][ T9908] dump_stack_lvl+0x100/0x190 [ 218.954775][ T9908] should_fail_ex.cold+0x5/0xa [ 218.954788][ T9908] should_failslab+0xc2/0x120 [ 218.954800][ T9908] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 218.954815][ T9908] ? security_file_alloc+0x34/0x2c0 [ 218.954829][ T9908] ? trace_kmem_cache_alloc+0xf3/0x120 [ 218.954842][ T9908] security_file_alloc+0x34/0x2c0 [ 218.954855][ T9908] init_file+0x95/0x480 [ 218.954868][ T9908] alloc_empty_file+0x73/0x1c0 [ 218.954882][ T9908] path_openat+0xe8/0x31a0 [ 218.954892][ T9908] ? __kernel_text_address+0xd/0x30 [ 218.954907][ T9908] ? unwind_get_return_address+0x59/0xa0 [ 218.954918][ T9908] ? arch_stack_walk+0xa6/0xf0 [ 218.954931][ T9908] ? __pfx_path_openat+0x10/0x10 [ 218.954944][ T9908] ? stack_trace_save+0x8e/0xc0 [ 218.954954][ T9908] ? __pfx_stack_trace_save+0x10/0x10 [ 218.954965][ T9908] do_file_open+0x20e/0x430 [ 218.954977][ T9908] ? __pfx_do_file_open+0x10/0x10 [ 218.954987][ T9908] ? kasan_save_stack+0x30/0x50 [ 218.955002][ T9908] ? kasan_save_track+0x14/0x30 [ 218.955017][ T9908] ? __kasan_slab_alloc+0x89/0x90 [ 218.955041][ T9908] do_open_execat+0xd1/0x360 [ 218.955057][ T9908] ? __pfx_do_open_execat+0x10/0x10 [ 218.955073][ T9908] ? __might_fault+0xc5/0x140 [ 218.955087][ T9908] ? __might_fault+0xc5/0x140 [ 218.955104][ T9908] alloc_bprm+0x2d/0x710 [ 218.955121][ T9908] do_execveat_common.isra.0+0x19c/0x580 [ 218.955137][ T9908] ? do_getname+0x191/0x390 [ 218.955151][ T9908] __ia32_compat_sys_execveat+0xe4/0x130 [ 218.955169][ T9908] __do_fast_syscall_32+0xe3/0x8c0 [ 218.955187][ T9908] do_fast_syscall_32+0x32/0x70 [ 218.955204][ T9908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.955217][ T9908] RIP: 0023:0xf709ef6c [ 218.955226][ T9908] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 218.955236][ T9908] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 218.955246][ T9908] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 218.955252][ T9908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.955258][ T9908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.955264][ T9908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 218.955269][ T9908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.955282][ T9908] [ 219.100246][ T9913] futex_wake_op: syz.4.1163 tries to shift op by 32; fix this program [ 219.201471][ C3] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 219.204722][ C3] sr 2:0:0:0: [sr0] tag#12 CDB: opcode=0x7a (reserved) [ 219.206920][ C3] sr 2:0:0:0: [sr0] tag#12 CDB[00]: 7a 14 c5 45 2e 05 d7 90 9f 9f a9 db e8 6b f3 4a [ 219.209975][ C3] sr 2:0:0:0: [sr0] tag#12 CDB[10]: 3d [ 219.233720][ T9916] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 219.440344][ T9927] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.448775][ T9929] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 219.451327][ T9929] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1164'. [ 220.046411][ T8637] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 220.232506][ T8637] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.263381][ T8637] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.303933][ T8637] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.320074][ T9946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 220.327808][ T9946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.329719][ T8637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.708603][ T8637] usb 6-1: usb_control_msg returned -32 [ 220.718683][ T8637] usbtmc 6-1:16.0: can't read capabilities [ 220.808788][ T8637] usb 6-1: USB disconnect, device number 14 [ 220.942211][ T9951] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 221.403963][ T9970] FAULT_INJECTION: forcing a failure. [ 221.403963][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.408532][ T9970] CPU: 2 UID: 0 PID: 9970 Comm: syz.1.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.408549][ T9970] Tainted: [L]=SOFTLOCKUP [ 221.408553][ T9970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.408559][ T9970] Call Trace: [ 221.408563][ T9970] [ 221.408567][ T9970] dump_stack_lvl+0x100/0x190 [ 221.408586][ T9970] should_fail_ex.cold+0x5/0xa [ 221.408598][ T9970] _copy_to_user+0x32/0xd0 [ 221.408612][ T9970] simple_read_from_buffer+0xcb/0x170 [ 221.408635][ T9970] proc_fail_nth_read+0x1af/0x230 [ 221.408649][ T9970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.408662][ T9970] ? rw_verify_area+0xce/0x6d0 [ 221.408677][ T9970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.408690][ T9970] vfs_read+0x1e4/0xb30 [ 221.408708][ T9970] ? __pfx_vfs_read+0x10/0x10 [ 221.408723][ T9970] ? find_held_lock+0x2b/0x80 [ 221.408734][ T9970] ? __fget_files+0x215/0x3d0 [ 221.408746][ T9970] ? __fget_files+0x21f/0x3d0 [ 221.408759][ T9970] ksys_read+0x12a/0x250 [ 221.408768][ T9970] ? __pfx_ksys_read+0x10/0x10 [ 221.408781][ T9970] do_int80_emulation+0x141/0x6b0 [ 221.408799][ T9970] asm_int80_emulation+0x1a/0x20 [ 221.408810][ T9970] RIP: 0023:0xf71a5cab [ 221.408819][ T9970] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 221.408829][ T9970] RSP: 002b:00000000f543c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 221.408839][ T9970] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f543c5d0 [ 221.408846][ T9970] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 221.408852][ T9970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.408857][ T9970] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.408863][ T9970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.408876][ T9970] [ 221.518150][ T9973] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 222.155689][ T9977] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 222.310650][ T9975] netdevsim netdevsim1: Direct firmware load for ./cgroup failed with error -2 [ 222.311588][ T9982] FAULT_INJECTION: forcing a failure. [ 222.311588][ T9982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.314136][ T9975] netdevsim netdevsim1: Falling back to sysfs fallback for: ./cgroup [ 222.318272][ T9982] CPU: 0 UID: 0 PID: 9982 Comm: syz.3.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.318289][ T9982] Tainted: [L]=SOFTLOCKUP [ 222.318293][ T9982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.318299][ T9982] Call Trace: [ 222.318304][ T9982] [ 222.318308][ T9982] dump_stack_lvl+0x100/0x190 [ 222.318327][ T9982] should_fail_ex.cold+0x5/0xa [ 222.318340][ T9982] __kvm_read_guest_page+0x186/0x250 [ 222.318355][ T9982] kvm_fetch_guest_virt+0x128/0x1a0 [ 222.318371][ T9982] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 222.318383][ T9982] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 222.318398][ T9982] x86_decode_insn+0x3ca/0x6d80 [ 222.318422][ T9982] ? __pfx_x86_decode_insn+0x10/0x10 [ 222.318436][ T9982] ? vmx_cache_reg+0x54f/0x7b0 [ 222.318450][ T9982] ? init_decode_cache+0xd/0x2a0 [ 222.318463][ T9982] ? init_emulate_ctxt+0x415/0x6d0 [ 222.318476][ T9982] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 222.318491][ T9982] ? kvm_multiple_exception+0x5fb/0x760 [ 222.318506][ T9982] x86_emulate_instruction+0x1dcc/0x1f80 [ 222.318522][ T9982] handle_ud+0x103/0x5a0 [ 222.318532][ T9982] ? __pfx_handle_ud+0x10/0x10 [ 222.318543][ T9982] ? vmx_vcpu_enter_exit+0x136/0x1e0 [ 222.318560][ T9982] ? rcu_is_watching+0x12/0xc0 [ 222.318576][ T9982] ? __vmx_complete_interrupts+0x129/0x570 [ 222.318587][ T9982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.318607][ T9982] handle_exception_nmi+0xd0c/0x1bb0 [ 222.318619][ T9982] ? __pfx_handle_exception_nmi+0x10/0x10 [ 222.318629][ T9982] vmx_handle_exit+0x84d/0x1f40 [ 222.318642][ T9982] vcpu_run+0x34cf/0x5ca0 [ 222.318654][ T9982] ? vmx_set_rflags+0x1e6/0x4c0 [ 222.318671][ T9982] ? x86_emulate_instruction+0x27e/0x1f80 [ 222.318681][ T9982] ? __pfx_vcpu_run+0x10/0x10 [ 222.318695][ T9982] ? complete_emulated_mmio+0x39d/0x7f0 [ 222.318708][ T9982] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 222.318718][ T9982] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 222.318733][ T9982] kvm_vcpu_ioctl+0x730/0x1730 [ 222.318754][ T9982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.318776][ T9982] ? tomoyo_path_number_perm+0x188/0x580 [ 222.318795][ T9982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.318818][ T9982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.318845][ T9982] ? do_vfs_ioctl+0x226/0x13e0 [ 222.318870][ T9982] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.318905][ T9982] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 222.318930][ T9982] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 222.318953][ T9982] ? __fget_files+0x21f/0x3d0 [ 222.318975][ T9982] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 222.318998][ T9982] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 222.319019][ T9982] __do_fast_syscall_32+0xe3/0x8c0 [ 222.319037][ T9982] do_fast_syscall_32+0x32/0x70 [ 222.319056][ T9982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.319076][ T9982] RIP: 0023:0xf70bef6c [ 222.319090][ T9982] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 222.319107][ T9982] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 222.319126][ T9982] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 222.319137][ T9982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.319146][ T9982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.319155][ T9982] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.319164][ T9982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.319186][ T9982] [ 222.459278][ T9988] binder: 9984:9988 ioctl c00c6211 ffffffff returned -14 [ 222.555591][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 222.594432][ T9996] FAULT_INJECTION: forcing a failure. [ 222.594432][ T9996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.600358][ T9996] CPU: 0 UID: 0 PID: 9996 Comm: syz.0.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.600384][ T9996] Tainted: [L]=SOFTLOCKUP [ 222.600390][ T9996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.600400][ T9996] Call Trace: [ 222.600406][ T9996] [ 222.600413][ T9996] dump_stack_lvl+0x100/0x190 [ 222.600443][ T9996] should_fail_ex.cold+0x5/0xa [ 222.600463][ T9996] strncpy_from_user+0x3b/0x2d0 [ 222.600487][ T9996] do_getname+0x78/0x390 [ 222.600512][ T9996] do_sys_openat2+0xc5/0x1e0 [ 222.600535][ T9996] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.600556][ T9996] ? __fget_files+0x215/0x3d0 [ 222.600577][ T9996] ? __fget_files+0x21f/0x3d0 [ 222.600597][ T9996] __ia32_compat_sys_openat+0x12d/0x210 [ 222.600622][ T9996] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 222.600656][ T9996] ? __pfx_ksys_write+0x10/0x10 [ 222.600678][ T9996] __do_fast_syscall_32+0xe3/0x8c0 [ 222.600709][ T9996] do_fast_syscall_32+0x32/0x70 [ 222.600736][ T9996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.600758][ T9996] RIP: 0023:0xf7f72f6c [ 222.600772][ T9996] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 222.600789][ T9996] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 222.600806][ T9996] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 222.600817][ T9996] RDX: 0000000000101001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.600827][ T9996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.600837][ T9996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.600847][ T9996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.600870][ T9996] [ 222.736902][ T6429] usb 40-1: device descriptor read/8, error -110 [ 222.773195][T10012] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 222.784547][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1191'. [ 222.874159][ T8637] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 222.913862][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 222.913878][ T40] audit: type=1326 audit(1774129652.463:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 222.925141][ T40] audit: type=1326 audit(1774129652.473:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 223.026201][ T8637] usb 8-1: Using ep0 maxpacket: 32 [ 223.038162][ T8637] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.041651][ T8637] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.045273][ T8637] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.054471][T10017] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 223.056662][T10017] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.059627][T10017] vhci_hcd vhci_hcd.0: Device attached [ 223.061660][ T8637] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.064581][ T8637] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.076133][ T8637] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.083124][ T8637] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.091040][ T8637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.096163][ T8637] usb 8-1: config 0 descriptor?? [ 223.127699][ T6429] usb usb40-port1: attempt power cycle [ 223.142461][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 223.211180][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'. [ 223.326653][ T8637] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 223.346197][ T6027] usb 38-1: SetAddress Request (14) to port 0 [ 223.348344][ T6027] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 223.484730][T10036] FAULT_INJECTION: forcing a failure. [ 223.484730][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.488844][T10036] CPU: 3 UID: 0 PID: 10036 Comm: syz.1.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.488861][T10036] Tainted: [L]=SOFTLOCKUP [ 223.488864][T10036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.488871][T10036] Call Trace: [ 223.488875][T10036] [ 223.488879][T10036] dump_stack_lvl+0x100/0x190 [ 223.488898][T10036] should_fail_ex.cold+0x5/0xa [ 223.488911][T10036] _copy_to_user+0x32/0xd0 [ 223.488925][T10036] simple_read_from_buffer+0xcb/0x170 [ 223.488943][T10036] proc_fail_nth_read+0x1af/0x230 [ 223.488956][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.488970][T10036] ? rw_verify_area+0xce/0x6d0 [ 223.488985][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.488997][T10036] vfs_read+0x1e4/0xb30 [ 223.489016][T10036] ? __pfx_vfs_read+0x10/0x10 [ 223.489031][T10036] ? find_held_lock+0x2b/0x80 [ 223.489041][T10036] ? __fget_files+0x215/0x3d0 [ 223.489053][T10036] ? __fget_files+0x21f/0x3d0 [ 223.489069][T10036] ksys_read+0x12a/0x250 [ 223.489078][T10036] ? __pfx_ksys_read+0x10/0x10 [ 223.489091][T10036] do_int80_emulation+0x141/0x6b0 [ 223.489110][T10036] asm_int80_emulation+0x1a/0x20 [ 223.489121][T10036] RIP: 0023:0xf71a5cab [ 223.489129][T10036] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 223.489139][T10036] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 223.489150][T10036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 223.489156][T10036] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 223.489162][T10036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.489168][T10036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.489173][T10036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.489186][T10036] [ 223.607669][T10041] FAULT_INJECTION: forcing a failure. [ 223.607669][T10041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.613032][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.1.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.613049][T10041] Tainted: [L]=SOFTLOCKUP [ 223.613053][T10041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.613059][T10041] Call Trace: [ 223.613063][T10041] [ 223.613068][T10041] dump_stack_lvl+0x100/0x190 [ 223.613086][T10041] should_fail_ex.cold+0x5/0xa [ 223.613099][T10041] _copy_to_user+0x32/0xd0 [ 223.613113][T10041] simple_read_from_buffer+0xcb/0x170 [ 223.613131][T10041] proc_fail_nth_read+0x1af/0x230 [ 223.613145][T10041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.613159][T10041] ? rw_verify_area+0xce/0x6d0 [ 223.613175][T10041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.613187][T10041] vfs_read+0x1e4/0xb30 [ 223.613206][T10041] ? __pfx_vfs_read+0x10/0x10 [ 223.613221][T10041] ? find_held_lock+0x2b/0x80 [ 223.613232][T10041] ? __fget_files+0x215/0x3d0 [ 223.613244][T10041] ? __fget_files+0x21f/0x3d0 [ 223.613257][T10041] ksys_read+0x12a/0x250 [ 223.613266][T10041] ? __pfx_ksys_read+0x10/0x10 [ 223.613279][T10041] do_int80_emulation+0x141/0x6b0 [ 223.613297][T10041] asm_int80_emulation+0x1a/0x20 [ 223.613307][T10041] RIP: 0023:0xf71a5cab [ 223.613317][T10041] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 223.613326][T10041] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 223.613337][T10041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 223.613344][T10041] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 223.613350][T10041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.613355][T10041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.613361][T10041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.613374][T10041] [ 223.698224][ T6429] usb usb40-port1: unable to enumerate USB device [ 223.754503][T10018] vhci_hcd: connection reset by peer [ 223.755402][ T39] usb 8-1: USB disconnect, device number 8 [ 223.757565][ T59] vhci_hcd vhci_hcd.0: stop threads [ 223.761499][ T59] vhci_hcd vhci_hcd.0: release socket [ 223.764390][ T59] vhci_hcd vhci_hcd.0: disconnect device [ 223.768134][ T39] usblp0: removed [ 223.992112][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 224.244341][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1204'. [ 224.247977][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 224.626222][ T40] audit: type=1326 audit(1774129654.133:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.1.1203" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x0 [ 225.153395][T10060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 225.748372][T10069] FAULT_INJECTION: forcing a failure. [ 225.748372][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.753757][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.0.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.753784][T10069] Tainted: [L]=SOFTLOCKUP [ 225.753790][T10069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.753800][T10069] Call Trace: [ 225.753807][T10069] [ 225.753814][T10069] dump_stack_lvl+0x100/0x190 [ 225.753846][T10069] should_fail_ex.cold+0x5/0xa [ 225.753868][T10069] _copy_from_iter+0x1f4/0x1690 [ 225.753892][T10069] ? __asan_memset+0x23/0x50 [ 225.753917][T10069] ? __pfx__copy_from_iter+0x10/0x10 [ 225.753938][T10069] ? __pfx___alloc_skb+0x10/0x10 [ 225.753973][T10069] netlink_sendmsg+0x808/0xda0 [ 225.754005][T10069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.754036][T10069] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 225.754069][T10069] ____sys_sendmsg+0x9e1/0xb70 [ 225.754086][T10069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.754116][T10069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.754146][T10069] ___sys_sendmsg+0x190/0x1e0 [ 225.754168][T10069] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.754220][T10069] __sys_sendmsg+0x170/0x220 [ 225.754246][T10069] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.754280][T10069] ? __pfx_ksys_write+0x10/0x10 [ 225.754303][T10069] __do_fast_syscall_32+0xe3/0x8c0 [ 225.754334][T10069] do_fast_syscall_32+0x32/0x70 [ 225.754361][T10069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.754383][T10069] RIP: 0023:0xf7f72f6c [ 225.754398][T10069] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.754415][T10069] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 225.754433][T10069] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 225.754443][T10069] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.754453][T10069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.754463][T10069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.754473][T10069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.754497][T10069] [ 225.895343][T10075] FAULT_INJECTION: forcing a failure. [ 225.895343][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.899482][T10075] CPU: 2 UID: 0 PID: 10075 Comm: syz.1.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.899499][T10075] Tainted: [L]=SOFTLOCKUP [ 225.899503][T10075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.899509][T10075] Call Trace: [ 225.899513][T10075] [ 225.899518][T10075] dump_stack_lvl+0x100/0x190 [ 225.899537][T10075] should_fail_ex.cold+0x5/0xa [ 225.899550][T10075] _copy_from_user+0x2e/0xd0 [ 225.899563][T10075] hidp_sock_compat_ioctl+0x2f5/0x4e0 [ 225.899578][T10075] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 225.899592][T10075] ? tomoyo_path_number_perm+0x46d/0x580 [ 225.899605][T10075] ? kasan_quarantine_put+0x104/0x240 [ 225.899631][T10075] ? tomoyo_path_number_perm+0x188/0x580 [ 225.899650][T10075] ? do_vfs_ioctl+0x226/0x13e0 [ 225.899665][T10075] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 225.899681][T10075] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 225.899695][T10075] compat_sock_ioctl+0x179/0x760 [ 225.899710][T10075] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 225.899725][T10075] ? __fget_files+0x21f/0x3d0 [ 225.899737][T10075] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 225.899750][T10075] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 225.899767][T10075] __do_fast_syscall_32+0xe3/0x8c0 [ 225.899785][T10075] do_fast_syscall_32+0x32/0x70 [ 225.899802][T10075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.899816][T10075] RIP: 0023:0xf706ef6c [ 225.899824][T10075] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 225.899835][T10075] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 225.899845][T10075] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400448c8 [ 225.899851][T10075] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.899858][T10075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.899864][T10075] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.899869][T10075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.899882][T10075] [ 226.088616][T10077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 226.090692][T10077] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.094643][T10077] vhci_hcd vhci_hcd.0: Device attached [ 226.135656][T10077] rdma_rxe: rxe_newlink: failed to add wg2 [ 226.719574][T10078] vhci_hcd: connection closed [ 226.719798][ T74] vhci_hcd vhci_hcd.0: stop threads [ 226.724198][ T74] vhci_hcd vhci_hcd.0: release socket [ 226.730375][ T74] vhci_hcd vhci_hcd.0: disconnect device [ 226.773692][T10088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 226.796801][T10088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.820016][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 226.825903][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 226.932030][T10096] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.061986][T10099] netlink: 'syz.1.1217': attribute type 21 has an invalid length. [ 227.064537][T10099] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1217'. [ 227.067761][T10099] netlink: 'syz.1.1217': attribute type 5 has an invalid length. [ 227.070226][T10099] netlink: 'syz.1.1217': attribute type 6 has an invalid length. [ 227.072738][T10099] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1217'. [ 227.077383][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'. [ 227.381635][T10106] KVM: debugfs: duplicate directory 10106-9 [ 227.559853][T10113] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1220'. [ 227.657132][T10114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 227.659245][T10114] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.662045][T10114] vhci_hcd vhci_hcd.0: Device attached [ 227.884868][T10115] vhci_hcd: connection closed [ 227.885834][ T59] vhci_hcd vhci_hcd.1: stop threads [ 227.890852][ T59] vhci_hcd vhci_hcd.1: release socket [ 227.895129][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 227.916805][T10122] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1222'. [ 227.936544][ T8637] usb 40-1: enqueue for inactive port 0 [ 228.174251][T10128] FAULT_INJECTION: forcing a failure. [ 228.174251][T10128] name failslab, interval 1, probability 0, space 0, times 0 [ 228.179205][T10128] CPU: 2 UID: 0 PID: 10128 Comm: syz.4.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.179223][T10128] Tainted: [L]=SOFTLOCKUP [ 228.179226][T10128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.179232][T10128] Call Trace: [ 228.179236][T10128] [ 228.179240][T10128] dump_stack_lvl+0x100/0x190 [ 228.179260][T10128] should_fail_ex.cold+0x5/0xa [ 228.179272][T10128] should_failslab+0xc2/0x120 [ 228.179284][T10128] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 228.179300][T10128] ? security_file_alloc+0x34/0x2c0 [ 228.179312][T10128] ? trace_kmem_cache_alloc+0xf3/0x120 [ 228.179326][T10128] security_file_alloc+0x34/0x2c0 [ 228.179339][T10128] init_file+0x95/0x480 [ 228.179351][T10128] alloc_empty_file+0x73/0x1c0 [ 228.179370][T10128] path_openat+0xe8/0x31a0 [ 228.179380][T10128] ? kasan_save_stack+0x3f/0x50 [ 228.179396][T10128] ? kasan_save_stack+0x30/0x50 [ 228.179411][T10128] ? kasan_save_track+0x14/0x30 [ 228.179426][T10128] ? __kasan_slab_alloc+0x89/0x90 [ 228.179436][T10128] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 228.179450][T10128] ? do_getname+0x35/0x390 [ 228.179462][T10128] ? do_sys_openat2+0xc5/0x1e0 [ 228.179476][T10128] ? do_fast_syscall_32+0x32/0x70 [ 228.179492][T10128] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.179507][T10128] ? __pfx_path_openat+0x10/0x10 [ 228.179522][T10128] do_file_open+0x20e/0x430 [ 228.179534][T10128] ? __pfx_do_file_open+0x10/0x10 [ 228.179553][T10128] ? alloc_fd+0x476/0x790 [ 228.179565][T10128] ? do_getname+0x191/0x390 [ 228.179580][T10128] do_sys_openat2+0x10d/0x1e0 [ 228.179593][T10128] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.179606][T10128] ? __fget_files+0x215/0x3d0 [ 228.179617][T10128] ? __fget_files+0x21f/0x3d0 [ 228.179628][T10128] __ia32_compat_sys_openat+0x12d/0x210 [ 228.179643][T10128] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 228.179659][T10128] ? __pfx_ksys_write+0x10/0x10 [ 228.179672][T10128] __do_fast_syscall_32+0xe3/0x8c0 [ 228.179690][T10128] do_fast_syscall_32+0x32/0x70 [ 228.179706][T10128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.179720][T10128] RIP: 0023:0xf709ef6c [ 228.179728][T10128] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 228.179739][T10128] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 228.179749][T10128] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 000000008000c380 [ 228.179756][T10128] RDX: 0000000000020842 RSI: 0000000000000063 RDI: 0000000000000000 [ 228.179762][T10128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.179767][T10128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.179773][T10128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.179786][T10128] [ 228.295939][T10132] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 228.303820][T10132] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 228.419368][ T6027] usb 38-1: device descriptor read/8, error -110 [ 228.427129][ T8637] usb usb40-port1: attempt power cycle [ 228.674208][T10146] evm: overlay not supported [ 228.811023][ T6027] usb usb38-port1: attempt power cycle [ 228.826605][T10146] syz_tun: entered allmulticast mode [ 228.831624][T10146] syz_tun: left allmulticast mode [ 229.137486][T10156] __nla_validate_parse: 317 callbacks suppressed [ 229.137503][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.143660][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.151283][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.154450][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.158849][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.162779][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.167189][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.171015][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.174932][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.179010][T10156] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1234'. [ 229.387110][ T6027] usb usb38-port1: unable to enumerate USB device [ 229.624655][ T1175] bridge_slave_1: left allmulticast mode [ 229.627983][ T1175] bridge_slave_1: left promiscuous mode [ 229.631683][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.637904][ T1175] bridge_slave_0: left allmulticast mode [ 229.640328][ T1175] bridge_slave_0: left promiscuous mode [ 229.642850][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.836274][ T8637] usb usb40-port1: unable to enumerate USB device [ 230.009209][T10172] FAULT_INJECTION: forcing a failure. [ 230.009209][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 230.016248][T10172] CPU: 2 UID: 0 PID: 10172 Comm: syz.3.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.016266][T10172] Tainted: [L]=SOFTLOCKUP [ 230.016269][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.016276][T10172] Call Trace: [ 230.016279][T10172] [ 230.016283][T10172] dump_stack_lvl+0x100/0x190 [ 230.016303][T10172] should_fail_ex.cold+0x5/0xa [ 230.016315][T10172] should_failslab+0xc2/0x120 [ 230.016327][T10172] __kmalloc_cache_noprof+0x7a/0x6f0 [ 230.016342][T10172] ? io_uring_setup.cold+0x6c/0x1d79 [ 230.016360][T10172] io_uring_setup.cold+0x6c/0x1d79 [ 230.016375][T10172] ? find_held_lock+0x2b/0x80 [ 230.016385][T10172] ? ksys_write+0x190/0x250 [ 230.016401][T10172] ? ksys_write+0x190/0x250 [ 230.016410][T10172] ? __pfx_io_uring_setup+0x10/0x10 [ 230.016426][T10172] ? __mutex_unlock_slowpath+0x15c/0x790 [ 230.016444][T10172] ? __fget_files+0x215/0x3d0 [ 230.016460][T10172] ? fput+0x79/0x100 [ 230.016471][T10172] ? ksys_write+0x1ac/0x250 [ 230.016481][T10172] ? __pfx_ksys_write+0x10/0x10 [ 230.016492][T10172] __ia32_sys_io_uring_setup+0xc2/0x170 [ 230.016507][T10172] __do_fast_syscall_32+0xe3/0x8c0 [ 230.016525][T10172] do_fast_syscall_32+0x32/0x70 [ 230.016542][T10172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.016556][T10172] RIP: 0023:0xf70bef6c [ 230.016565][T10172] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 230.016575][T10172] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000001a9 [ 230.016586][T10172] RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 0000000080000040 [ 230.016592][T10172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.016598][T10172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.016604][T10172] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.016610][T10172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.016635][T10172] [ 230.180832][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.185145][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.189585][ T1175] bond0 (unregistering): Released all slaves [ 230.195619][ T1175] bond1 (unregistering): Released all slaves [ 230.267334][T10179] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 230.269762][T10179] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.273503][T10179] vhci_hcd vhci_hcd.0: Device attached [ 230.457172][ T6429] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 230.576196][ T8637] usb 38-1: SetAddress Request (18) to port 0 [ 230.578121][ T8637] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 230.634982][ T6429] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.640084][ T6429] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.644768][ T6429] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.648540][ T6429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.829568][T10180] vhci_hcd: connection reset by peer [ 230.833850][ T1162] vhci_hcd vhci_hcd.0: stop threads [ 230.843720][ T1162] vhci_hcd vhci_hcd.0: release socket [ 230.845830][ T1162] vhci_hcd vhci_hcd.0: disconnect device [ 230.983368][T10191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 230.986085][T10191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.990830][T10191] vhci_hcd vhci_hcd.0: Device attached [ 231.007836][ T6429] usb 8-1: usb_control_msg returned -32 [ 231.013372][ T6429] usbtmc 8-1:16.0: can't read capabilities [ 231.082207][T10191] syz2: rxe_newlink: already configured on wg2 [ 231.086034][ T1175] hsr_slave_0: left promiscuous mode [ 231.088542][ T1175] hsr_slave_1: left promiscuous mode [ 231.090946][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.095891][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.222442][ T6429] usb 8-1: USB disconnect, device number 9 [ 231.253146][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 231.273735][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 231.325832][ T34] usb 40-1: SetAddress Request (10) to port 0 [ 231.342833][ T34] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 231.413252][ T40] audit: type=1326 audit(1774129660.963:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.436569][ T40] audit: type=1326 audit(1774129660.963:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.456300][ T40] audit: type=1326 audit(1774129660.973:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.462999][ T40] audit: type=1326 audit(1774129660.973:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.469948][ T40] audit: type=1326 audit(1774129660.973:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.476731][ T40] audit: type=1326 audit(1774129660.983:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.483471][ T40] audit: type=1326 audit(1774129660.983:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.490229][ T40] audit: type=1326 audit(1774129660.983:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.497057][ T40] audit: type=1326 audit(1774129660.983:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.503744][ T40] audit: type=1326 audit(1774129660.983:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 231.506175][T10197] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 231.606466][T10192] vhci_hcd: connection reset by peer [ 231.608908][ T74] vhci_hcd vhci_hcd.1: stop threads [ 231.611180][ T74] vhci_hcd vhci_hcd.1: release socket [ 231.613259][ T74] vhci_hcd vhci_hcd.1: disconnect device [ 231.831033][ T1175] IPVS: stop unused estimator thread 0... [ 232.526312][ T6429] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 232.676164][ T6429] usb 9-1: Using ep0 maxpacket: 32 [ 232.679176][ T6429] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 232.682028][ T6429] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 232.684783][ T6429] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.687975][ T6429] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.691077][ T6429] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.694135][ T6429] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.705995][ T6429] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.709098][ T6429] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.712823][ T6429] usb 9-1: config 0 descriptor?? [ 232.733223][T10227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.923870][ T6429] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 232.954538][T10232] FAULT_INJECTION: forcing a failure. [ 232.954538][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 232.959972][T10232] CPU: 2 UID: 0 PID: 10232 Comm: syz.3.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.960000][T10232] Tainted: [L]=SOFTLOCKUP [ 232.960006][T10232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.960016][T10232] Call Trace: [ 232.960022][T10232] [ 232.960029][T10232] dump_stack_lvl+0x100/0x190 [ 232.960059][T10232] should_fail_ex.cold+0x5/0xa [ 232.960102][T10232] ? tomoyo_realpath_from_path+0xb6/0x690 [ 232.960128][T10232] should_failslab+0xc2/0x120 [ 232.960147][T10232] __kmalloc_noprof+0xe0/0x850 [ 232.960178][T10232] tomoyo_realpath_from_path+0xb6/0x690 [ 232.960205][T10232] tomoyo_path_number_perm+0x23c/0x580 [ 232.960223][T10232] ? tomoyo_path_number_perm+0x22e/0x580 [ 232.960244][T10232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.960286][T10232] ? find_held_lock+0x2b/0x80 [ 232.960303][T10232] ? hook_file_ioctl_common+0x146/0x410 [ 232.960322][T10232] ? __fget_files+0x215/0x3d0 [ 232.960343][T10232] ? __fget_files+0x21f/0x3d0 [ 232.960364][T10232] security_file_ioctl_compat+0xd3/0x230 [ 232.960386][T10232] __ia32_compat_sys_ioctl+0xc2/0x360 [ 232.960414][T10232] __do_fast_syscall_32+0xe3/0x8c0 [ 232.960443][T10232] do_fast_syscall_32+0x32/0x70 [ 232.960469][T10232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.960492][T10232] RIP: 0023:0xf70bef6c [ 232.960506][T10232] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 232.960523][T10232] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 232.960546][T10232] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000001276 [ 232.960557][T10232] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.960567][T10232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.960577][T10232] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.960587][T10232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.960610][T10232] [ 232.960617][T10232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.251478][T10240] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 233.268337][T10240] CIFS mount error: No usable UNC path provided in device string! [ 233.268337][T10240] [ 233.272708][T10240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.309911][T10237] KVM: debugfs: duplicate directory 10237-9 [ 233.400203][T10243] syz_tun: entered allmulticast mode [ 233.406016][T10243] netfs: Couldn't get user pages (rc=-14) [ 233.473331][T10239] syz_tun: left allmulticast mode [ 233.496267][ T6027] usb 9-1: USB disconnect, device number 4 [ 233.499770][ T6027] usblp0: removed [ 233.532466][T10245] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 233.703913][T10252] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.778446][T10258] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 233.781266][T10258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 234.193322][T10271] Bluetooth: MGMT ver 1.23 [ 234.464388][T10273] wg2 speed is unknown, defaulting to 1000 [ 234.564501][T10277] KVM: debugfs: duplicate directory 10277-9 [ 235.211292][T10283] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 235.213680][T10283] __nla_validate_parse: 145 callbacks suppressed [ 235.213689][T10283] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1274'. [ 235.516193][ T6027] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 235.604391][T10289] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 235.614553][T10289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.616190][ T8637] usb 38-1: device descriptor read/8, error -110 [ 235.687101][ T6027] usb 6-1: Using ep0 maxpacket: 32 [ 235.690558][ T6027] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.693354][ T6027] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 235.696021][ T6027] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 235.698964][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.702068][ T6027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.705113][ T6027] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.710315][ T6027] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 235.713218][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.719097][ T6027] usb 6-1: config 0 descriptor?? [ 235.862028][T10301] fuse: Unknown parameter 'group_i00000000000000000000' [ 235.925961][T10303] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.935710][ T6027] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.996146][ T842] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 236.007053][ T8637] usb usb38-port1: attempt power cycle [ 236.146126][ T842] usb 9-1: Using ep0 maxpacket: 32 [ 236.149381][ T842] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 236.154668][ T842] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 236.157783][ T842] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 236.160339][ T842] usb 9-1: Product: syz [ 236.161705][ T842] usb 9-1: Manufacturer: syz [ 236.163338][ T842] usb 9-1: SerialNumber: syz [ 236.166683][ T842] usb 9-1: config 0 descriptor?? [ 236.169702][T10297] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.202408][ T842] usb 6-1: USB disconnect, device number 15 [ 236.210176][ T842] usblp0: removed [ 236.397011][ T39] usb 9-1: USB disconnect, device number 5 [ 236.416258][ T34] usb 40-1: device descriptor read/8, error -110 [ 236.493351][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 236.497975][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1284'. [ 236.539074][T10315] syzkaller0: entered promiscuous mode [ 236.540820][T10315] syzkaller0: entered allmulticast mode [ 236.577444][ T8637] usb usb38-port1: unable to enumerate USB device [ 236.690476][T10318] futex_wake_op: syz.3.1286 tries to shift op by 32; fix this program [ 236.778337][T10321] KVM: debugfs: duplicate directory 10321-9 [ 236.827525][ T34] usb usb40-port1: attempt power cycle [ 236.917724][T10327] fuse: Unknown parameter 'group_i00000000000000000000' [ 236.954705][T10330] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.007101][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 237.017715][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1293'. [ 237.124640][T10340] futex_wake_op: syz.3.1296 tries to shift op by 32; fix this program [ 237.268283][T10349] fuse: Unknown parameter 'group_i00000000000000000000' [ 237.406892][ T34] usb usb40-port1: unable to enumerate USB device [ 237.456271][ T39] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 237.608041][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.611378][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.617100][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.620838][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.830548][ T39] usb 6-1: usb_control_msg returned -32 [ 237.832440][ T39] usbtmc 6-1:16.0: can't read capabilities [ 237.844086][ T34] usb 6-1: USB disconnect, device number 16 [ 238.343861][T10357] FAULT_INJECTION: forcing a failure. [ 238.343861][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 238.348232][T10357] CPU: 2 UID: 0 PID: 10357 Comm: syz.4.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.348250][T10357] Tainted: [L]=SOFTLOCKUP [ 238.348254][T10357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.348261][T10357] Call Trace: [ 238.348265][T10357] [ 238.348270][T10357] dump_stack_lvl+0x100/0x190 [ 238.348289][T10357] should_fail_ex.cold+0x5/0xa [ 238.348302][T10357] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 238.348314][T10357] should_failslab+0xc2/0x120 [ 238.348326][T10357] __kmalloc_noprof+0xe0/0x850 [ 238.348341][T10357] ? bpf_ksym_find+0x124/0x1c0 [ 238.348353][T10357] ? __kernel_text_address+0xd/0x30 [ 238.348371][T10357] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 238.348385][T10357] genl_family_rcv_msg_doit+0xc7/0x300 [ 238.348398][T10357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.348409][T10357] ? genl_get_cmd+0x3ef/0x720 [ 238.348422][T10357] ? bpf_lsm_capable+0x9/0x10 [ 238.348433][T10357] ? security_capable+0x80/0x260 [ 238.348450][T10357] ? ns_capable+0xd2/0xf0 [ 238.348461][T10357] genl_rcv_msg+0x560/0x800 [ 238.348473][T10357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.348484][T10357] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 238.348497][T10357] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 238.348512][T10357] ? __pfx_nl80211_post_doit+0x10/0x10 [ 238.348526][T10357] ? __lock_acquire+0x4a5/0x2630 [ 238.348542][T10357] netlink_rcv_skb+0x159/0x420 [ 238.348558][T10357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.348569][T10357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.348591][T10357] ? netlink_deliver_tap+0x1ae/0xcc0 [ 238.348614][T10357] genl_rcv+0x28/0x40 [ 238.348623][T10357] netlink_unicast+0x5aa/0x870 [ 238.348642][T10357] ? __pfx_netlink_unicast+0x10/0x10 [ 238.348663][T10357] netlink_sendmsg+0x8b0/0xda0 [ 238.348682][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.348700][T10357] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 238.348719][T10357] ____sys_sendmsg+0x9e1/0xb70 [ 238.348730][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.348748][T10357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.348764][T10357] ___sys_sendmsg+0x190/0x1e0 [ 238.348777][T10357] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.348804][T10357] __sys_sendmsg+0x170/0x220 [ 238.348820][T10357] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.348840][T10357] ? __pfx_ksys_write+0x10/0x10 [ 238.348852][T10357] __do_fast_syscall_32+0xe3/0x8c0 [ 238.348871][T10357] do_fast_syscall_32+0x32/0x70 [ 238.348887][T10357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.348901][T10357] RIP: 0023:0xf709ef6c [ 238.348910][T10357] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 238.348920][T10357] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 238.348931][T10357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 238.348938][T10357] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.348944][T10357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.348950][T10357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 238.348956][T10357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.348969][T10357] [ 238.498463][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 238.551041][T10362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'. [ 239.756289][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 239.906136][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 239.910039][ T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.913120][ T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.918696][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.922203][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.925736][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.929666][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.934864][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.939183][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.953102][ T39] usb 6-1: config 0 descriptor?? [ 240.198493][ T39] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.243427][T10381] trusted_key: encrypted_key: key trusted:syz not found [ 240.282400][T10383] fuse: Unknown parameter 'group_id00000000000000000000' [ 240.295557][T10384] FAULT_INJECTION: forcing a failure. [ 240.295557][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.300807][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.4.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.300825][T10384] Tainted: [L]=SOFTLOCKUP [ 240.300829][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.300835][T10384] Call Trace: [ 240.300839][T10384] [ 240.300843][T10384] dump_stack_lvl+0x100/0x190 [ 240.300863][T10384] should_fail_ex.cold+0x5/0xa [ 240.300875][T10384] _copy_from_user+0x2e/0xd0 [ 240.300888][T10384] get_compat_msghdr+0xb3/0x4b0 [ 240.300904][T10384] ? __pfx_get_compat_msghdr+0x10/0x10 [ 240.300923][T10384] ___sys_sendmsg+0x1b6/0x1e0 [ 240.300936][T10384] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.300963][T10384] __sys_sendmsg+0x170/0x220 [ 240.300979][T10384] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.300998][T10384] ? __pfx_ksys_write+0x10/0x10 [ 240.301011][T10384] __do_fast_syscall_32+0xe3/0x8c0 [ 240.301030][T10384] do_fast_syscall_32+0x32/0x70 [ 240.301046][T10384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.301060][T10384] RIP: 0023:0xf709ef6c [ 240.301069][T10384] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 240.301079][T10384] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 240.301090][T10384] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000000 [ 240.301096][T10384] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.301103][T10384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.301109][T10384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.301115][T10384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.301127][T10384] [ 240.494903][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 240.596019][ T39] usb 6-1: USB disconnect, device number 17 [ 240.601307][ T39] usblp0: removed [ 240.622218][T10391] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.671135][ T1175] bridge_slave_1: left allmulticast mode [ 240.672952][ T1175] bridge_slave_1: left promiscuous mode [ 240.674800][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.686503][ T1175] bridge_slave_0: left allmulticast mode [ 240.689960][ T1175] bridge_slave_0: left promiscuous mode [ 240.691790][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.863716][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.869088][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.873342][ T1175] bond0 (unregistering): Released all slaves [ 240.880697][ T1175] bond1 (unregistering): Released all slaves [ 241.298133][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 241.298149][ T40] audit: type=1326 audit(1774129670.853:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.366856][ T40] audit: type=1326 audit(1774129670.853:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.373500][ T40] audit: type=1326 audit(1774129670.923:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.381855][ T40] audit: type=1326 audit(1774129670.923:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.388631][ T40] audit: type=1326 audit(1774129670.923:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.399310][ T40] audit: type=1326 audit(1774129670.953:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.405847][ T40] audit: type=1326 audit(1774129670.953:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.427487][T10419] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.430864][ T40] audit: type=1326 audit(1774129670.953:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.440828][ T1175] hsr_slave_0: left promiscuous mode [ 241.444803][ T1175] hsr_slave_1: left promiscuous mode [ 241.449372][ T40] audit: type=1326 audit(1774129670.963:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.456880][ T40] audit: type=1326 audit(1774129670.963:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.1.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 241.467054][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.471569][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.737011][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 241.745154][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 242.338492][T10435] fuse: Unknown parameter 'group_id00000000000000000000' [ 242.807570][T10441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 242.819627][T10441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.082204][T10454] 9p: Bad value for 'rfdno' [ 243.161452][T10458] FAULT_INJECTION: forcing a failure. [ 243.161452][T10458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.167786][T10458] CPU: 3 UID: 0 PID: 10458 Comm: syz.0.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.167815][T10458] Tainted: [L]=SOFTLOCKUP [ 243.167822][T10458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.167832][T10458] Call Trace: [ 243.167838][T10458] [ 243.167845][T10458] dump_stack_lvl+0x100/0x190 [ 243.167875][T10458] should_fail_ex.cold+0x5/0xa [ 243.167915][T10458] _copy_from_iter+0x1f4/0x1690 [ 243.167942][T10458] ? __asan_memset+0x23/0x50 [ 243.167968][T10458] ? __pfx__copy_from_iter+0x10/0x10 [ 243.167989][T10458] ? __pfx___alloc_skb+0x10/0x10 [ 243.168013][T10458] ? __pfx___might_resched+0x10/0x10 [ 243.168072][T10458] netlink_sendmsg+0x808/0xda0 [ 243.168106][T10458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.168136][T10458] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 243.168169][T10458] ____sys_sendmsg+0x9e1/0xb70 [ 243.168188][T10458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.168217][T10458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.168247][T10458] ___sys_sendmsg+0x190/0x1e0 [ 243.168276][T10458] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.168324][T10458] __sys_sendmsg+0x170/0x220 [ 243.168348][T10458] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.168369][T10458] ? __pfx_ksys_write+0x10/0x10 [ 243.168383][T10458] __do_fast_syscall_32+0xe3/0x8c0 [ 243.168401][T10458] do_fast_syscall_32+0x32/0x70 [ 243.168418][T10458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.168432][T10458] RIP: 0023:0xf7f72f6c [ 243.168441][T10458] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 243.168450][T10458] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 243.168461][T10458] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 243.168468][T10458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.168473][T10458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.168479][T10458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.168485][T10458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.168498][T10458] [ 243.168909][T10438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 243.246145][T10438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.249116][T10438] vhci_hcd vhci_hcd.0: Device attached [ 243.316002][T10438] rdma_rxe: rxe_newlink: failed to add wg2 [ 243.493698][T10459] vhci_hcd: connection closed [ 243.493904][ T551] vhci_hcd vhci_hcd.4: stop threads [ 243.503110][ T551] vhci_hcd vhci_hcd.4: release socket [ 243.506350][ T551] vhci_hcd vhci_hcd.4: disconnect device [ 243.517135][ T1175] IPVS: stop unused estimator thread 0... [ 243.536211][ T8642] usb 46-1: enqueue for inactive port 0 [ 243.592211][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 244.108303][ T8642] usb usb46-port1: attempt power cycle [ 244.114321][T10480] Cannot find set identified by id 0 to match [ 244.266340][ T551] wlan0: Trigger new scan to find an IBSS to join [ 244.555486][T10488] fuse: Unknown parameter 'group_id00000000000000000000' [ 244.825241][ T8642] usb usb46-port1: unable to enumerate USB device [ 245.096147][ T6027] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 245.247673][ T6027] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.250784][ T6027] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.254898][ T6027] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.258089][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.496427][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 245.518207][ T6027] usb 5-1: usb_control_msg returned -32 [ 245.532543][ T6027] usbtmc 5-1:16.0: can't read capabilities [ 245.585802][ T6027] usb 5-1: USB disconnect, device number 11 [ 246.377809][T10525] FAULT_INJECTION: forcing a failure. [ 246.377809][T10525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.381917][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.3.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.381935][T10525] Tainted: [L]=SOFTLOCKUP [ 246.381938][T10525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.381945][T10525] Call Trace: [ 246.381949][T10525] [ 246.381953][T10525] dump_stack_lvl+0x100/0x190 [ 246.381972][T10525] should_fail_ex.cold+0x5/0xa [ 246.381985][T10525] _copy_from_iter+0x1f4/0x1690 [ 246.381999][T10525] ? __asan_memset+0x23/0x50 [ 246.382014][T10525] ? __pfx__copy_from_iter+0x10/0x10 [ 246.382026][T10525] ? __pfx___alloc_skb+0x10/0x10 [ 246.382057][T10525] netlink_sendmsg+0x808/0xda0 [ 246.382081][T10525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.382106][T10525] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 246.382133][T10525] ____sys_sendmsg+0x9e1/0xb70 [ 246.382145][T10525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.382163][T10525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.382180][T10525] ___sys_sendmsg+0x190/0x1e0 [ 246.382193][T10525] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.382220][T10525] __sys_sendmsg+0x170/0x220 [ 246.382236][T10525] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.382256][T10525] ? __pfx_ksys_write+0x10/0x10 [ 246.382269][T10525] __do_fast_syscall_32+0xe3/0x8c0 [ 246.382288][T10525] do_fast_syscall_32+0x32/0x70 [ 246.382306][T10525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.382319][T10525] RIP: 0023:0xf70bef6c [ 246.382328][T10525] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 246.382339][T10525] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 246.382349][T10525] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080006040 [ 246.382355][T10525] RDX: 0000000020004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.382362][T10525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.382368][T10525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.382373][T10525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.382386][T10525] [ 246.481022][T10527] FAULT_INJECTION: forcing a failure. [ 246.481022][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 246.496224][T10527] CPU: 2 UID: 0 PID: 10527 Comm: syz.0.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.496266][T10527] Tainted: [L]=SOFTLOCKUP [ 246.496272][T10527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.496282][T10527] Call Trace: [ 246.496288][T10527] [ 246.496294][T10527] dump_stack_lvl+0x100/0x190 [ 246.496323][T10527] should_fail_ex.cold+0x5/0xa [ 246.496342][T10527] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 246.496362][T10527] should_failslab+0xc2/0x120 [ 246.496379][T10527] __kmalloc_noprof+0xe0/0x850 [ 246.496403][T10527] ? rcu_is_watching+0x12/0xc0 [ 246.496432][T10527] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 246.496456][T10527] genl_family_rcv_msg_doit+0xc7/0x300 [ 246.496475][T10527] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.496492][T10527] ? genl_get_cmd+0x3ef/0x720 [ 246.496514][T10527] ? kasan_save_track+0x14/0x30 [ 246.496539][T10527] ? __kasan_slab_alloc+0x89/0x90 [ 246.496558][T10527] ? __radix_tree_lookup+0x217/0x2b0 [ 246.496584][T10527] genl_rcv_msg+0x560/0x800 [ 246.496601][T10527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.496617][T10527] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 246.496636][T10527] ? __lock_acquire+0x4a5/0x2630 [ 246.496660][T10527] netlink_rcv_skb+0x159/0x420 [ 246.496683][T10527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.496700][T10527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.496734][T10527] ? netlink_deliver_tap+0x1ae/0xcc0 [ 246.496761][T10527] genl_rcv+0x28/0x40 [ 246.496776][T10527] netlink_unicast+0x5aa/0x870 [ 246.496803][T10527] ? __pfx_netlink_unicast+0x10/0x10 [ 246.496832][T10527] netlink_sendmsg+0x8b0/0xda0 [ 246.496858][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.496884][T10527] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 246.496914][T10527] ____sys_sendmsg+0x9e1/0xb70 [ 246.496929][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.496954][T10527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.496979][T10527] ___sys_sendmsg+0x190/0x1e0 [ 246.496998][T10527] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.497030][T10527] __sys_sendmsg+0x170/0x220 [ 246.497046][T10527] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.497070][T10527] __do_fast_syscall_32+0xe3/0x8c0 [ 246.497089][T10527] do_fast_syscall_32+0x32/0x70 [ 246.497105][T10527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.497119][T10527] RIP: 0023:0xf7f72f6c [ 246.497129][T10527] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 246.497139][T10527] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 246.497149][T10527] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 246.497156][T10527] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.497162][T10527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.497167][T10527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.497173][T10527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.497186][T10527] [ 246.706954][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 246.706968][ T40] audit: type=1804 audit(1774129676.263:2451): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1346" name="/newroot/259/file0" dev="tmpfs" ino=1387 res=1 errno=0 [ 246.716857][T10538] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: 1 [ 246.719863][T10538] ref_ctr increment failed for inode: 0x56b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888013a755c0 [ 246.723906][T10538] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -2360, delta: -1 [ 246.727417][T10538] ref_ctr decrement failed for inode: 0x56b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888013a755c0 [ 246.730894][T10538] uprobe: syz.3.1346:10538 failed to unregister, leaking uprobe [ 246.796945][ T8642] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 246.912399][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'. [ 246.956140][ T8642] usb 9-1: Using ep0 maxpacket: 32 [ 246.960601][ T8642] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 246.963691][ T8642] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 246.967235][ T8642] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 246.970790][ T8642] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.974586][ T8642] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.978110][ T8642] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.982891][ T8642] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.986547][ T8642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.993943][ T8642] usb 9-1: config 0 descriptor?? [ 247.205342][ T8642] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.296233][ T74] wlan0: Trigger new scan to find an IBSS to join [ 247.602990][ T40] audit: type=1326 audit(1774129677.153:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.616709][ T40] audit: type=1326 audit(1774129677.163:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.626947][T10551] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.631166][ T40] audit: type=1326 audit(1774129677.163:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.639629][ T40] audit: type=1326 audit(1774129677.163:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.646453][ T40] audit: type=1326 audit(1774129677.163:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.653246][ T40] audit: type=1326 audit(1774129677.163:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.660016][ T40] audit: type=1326 audit(1774129677.163:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.666780][ T40] audit: type=1326 audit(1774129677.163:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.676110][ T40] audit: type=1326 audit(1774129677.163:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f72f6c code=0x7ffc0000 [ 247.715668][ T8642] usb 9-1: USB disconnect, device number 6 [ 247.722040][ T8642] usblp0: removed [ 248.509884][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.527015][T10559] syzkaller0: entered promiscuous mode [ 248.529243][T10559] syzkaller0: entered allmulticast mode [ 248.560323][T10559] FAULT_INJECTION: forcing a failure. [ 248.560323][T10559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.564763][T10559] CPU: 2 UID: 0 PID: 10559 Comm: syz.1.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.564780][T10559] Tainted: [L]=SOFTLOCKUP [ 248.564783][T10559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.564789][T10559] Call Trace: [ 248.564793][T10559] [ 248.564797][T10559] dump_stack_lvl+0x100/0x190 [ 248.564817][T10559] should_fail_ex.cold+0x5/0xa [ 248.564830][T10559] _copy_from_iter+0x1f4/0x1690 [ 248.564845][T10559] ? __pfx__copy_from_iter+0x10/0x10 [ 248.564858][T10559] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 248.564874][T10559] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 248.564890][T10559] skb_copy_datagram_from_iter+0x11f/0x720 [ 248.564904][T10559] ? __asan_memcpy+0x3c/0x60 [ 248.564921][T10559] packet_sendmsg+0x2476/0x53c0 [ 248.564939][T10559] ? __pfx___might_resched+0x10/0x10 [ 248.564957][T10559] ? aa_sk_perm+0x309/0xaa0 [ 248.564970][T10559] ? __pfx_packet_sendmsg+0x10/0x10 [ 248.564982][T10559] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.564998][T10559] ? __might_fault+0xc5/0x140 [ 248.565027][T10559] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 248.565059][T10559] __sys_sendto+0x468/0x4b0 [ 248.565074][T10559] ? __pfx_packet_sendmsg+0x10/0x10 [ 248.565085][T10559] ? __pfx___sys_sendto+0x10/0x10 [ 248.565103][T10559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.565125][T10559] ? fput+0x79/0x100 [ 248.565137][T10559] ? ksys_write+0x1ac/0x250 [ 248.565148][T10559] __ia32_sys_sendto+0xdd/0x1b0 [ 248.565162][T10559] ? __do_fast_syscall_32+0x94/0x8c0 [ 248.565178][T10559] ? lockdep_hardirqs_on+0x78/0x100 [ 248.565199][T10559] __do_fast_syscall_32+0xe3/0x8c0 [ 248.565217][T10559] do_fast_syscall_32+0x32/0x70 [ 248.565234][T10559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.565254][T10559] RIP: 0023:0xf706ef6c [ 248.565268][T10559] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 248.565285][T10559] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 248.565302][T10559] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400 [ 248.565312][T10559] RDX: 000000000000001a RSI: 0000000000000080 RDI: 00000000800001c0 [ 248.565322][T10559] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 248.565330][T10559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.565336][T10559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.565350][T10559] [ 249.008015][ T34] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 249.426551][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 249.432932][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 249.435519][ T34] usb 9-1: can't read configurations, error -71 [ 249.441584][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.445327][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.448776][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.452106][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.455883][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.459893][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.462943][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.465871][T10578] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 249.746263][T10581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 249.749053][T10581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.753017][T10581] vhci_hcd vhci_hcd.0: Device attached [ 249.858875][T10587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 249.861661][T10587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.866297][T10587] vhci_hcd vhci_hcd.0: Device attached [ 249.909047][T10593] futex_wake_op: syz.1.1359 tries to shift op by 32; fix this program [ 249.928253][T10581] rdma_rxe: rxe_newlink: failed to add wg2 [ 250.046278][ T53] usb 44-1: SetAddress Request (6) to port 0 [ 250.048423][ T53] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 250.154671][ T829] usb 38-1: SetAddress Request (22) to port 0 [ 250.156966][ T829] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 250.162819][T10587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.167002][T10587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.179065][T10590] vhci_hcd: connection reset by peer [ 250.181653][ T46] vhci_hcd vhci_hcd.0: stop threads [ 250.183342][ T46] vhci_hcd vhci_hcd.0: release socket [ 250.185490][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 250.189422][T10583] vhci_hcd: connection reset by peer [ 250.191669][ T46] vhci_hcd vhci_hcd.3: stop threads [ 250.193921][ T46] vhci_hcd vhci_hcd.3: release socket [ 250.196853][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 250.492075][T10613] netfs: Couldn't get user pages (rc=-14) [ 251.449332][T10613] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 251.451900][T10613] #PF: supervisor instruction fetch in kernel mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.455224][T10613] #PF: error_code(0x0010) - not-present page [ 251.460038][T10613] PGD 763cf067 P4D 763cf067 PUD 710a1067 PMD 0 [ 251.462397][T10613] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 251.464593][T10613] CPU: 3 UID: 0 PID: 10613 Comm: syz.1.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.468369][T10613] Tainted: [L]=SOFTLOCKUP [ 251.470377][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.473580][T10613] RIP: 0010:0x0 [ 251.474735][T10613] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 251.477482][T10613] RSP: 0000:ffffc90004357b80 EFLAGS: 00010246 [ 251.479522][T10613] RAX: 0000000000000000 RBX: ffff88804d075af0 RCX: ffffc9000d781000 [ 251.482028][T10613] RDX: 0000000000080000 RSI: ffffffff82c2cc3c RDI: ffff88804d075a40 [ 251.484568][T10613] RBP: 000000000035ffc0 R08: 0000000000000001 R09: 0000000000000000 [ 251.487108][T10613] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804d075ad8 [ 251.489622][T10613] R13: dffffc0000000000 R14: ffff88804d075a40 R15: ffff88806eb812c0 [ 251.492127][T10613] FS: 0000000000000000(0000) GS:ffff888097449000(0063) knlGS:00000000f543cb40 [ 251.494939][T10613] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 251.497038][T10613] CR2: ffffffffffffffd6 CR3: 0000000071852000 CR4: 0000000000352ef0 [ 251.499514][T10613] Call Trace: [ 251.500604][T10613] [ 251.501557][T10613] netfs_unbuffered_write+0xae5/0x2080 [ 251.503318][T10613] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 251.505355][T10613] netfs_unbuffered_write_iter+0x40c/0x710 [ 251.507181][T10613] v9fs_file_write_iter+0xbf/0x100 [ 251.508821][T10613] vfs_write+0x6ac/0x1070 [ 251.510209][T10613] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 251.512024][T10613] ? __pfx_vfs_write+0x10/0x10 [ 251.513557][T10613] ksys_write+0x12a/0x250 [ 251.514949][T10613] ? __pfx_ksys_write+0x10/0x10 [ 251.516605][T10613] __do_fast_syscall_32+0xe3/0x8c0 [ 251.518263][T10613] do_fast_syscall_32+0x32/0x70 [ 251.519818][T10613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.521823][T10613] RIP: 0023:0xf706ef6c [ 251.523119][T10613] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 251.529185][T10613] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 251.531791][T10613] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 251.534297][T10613] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 251.536783][T10613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.539364][T10613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.541866][T10613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.544417][T10613] [ 251.545395][T10613] Modules linked in: [ 251.546635][T10613] CR2: 0000000000000000 [ 251.548008][T10613] ---[ end trace 0000000000000000 ]--- [ 251.549735][T10613] RIP: 0010:0x0 [ 251.550886][T10613] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 251.553217][T10613] RSP: 0000:ffffc90004357b80 EFLAGS: 00010246 [ 251.555159][T10613] RAX: 0000000000000000 RBX: ffff88804d075af0 RCX: ffffc9000d781000 [ 251.557715][T10613] RDX: 0000000000080000 RSI: ffffffff82c2cc3c RDI: ffff88804d075a40 [ 251.560236][T10613] RBP: 000000000035ffc0 R08: 0000000000000001 R09: 0000000000000000 [ 251.562716][T10613] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804d075ad8 [ 251.565280][T10613] R13: dffffc0000000000 R14: ffff88804d075a40 R15: ffff88806eb812c0 [ 251.567801][T10613] FS: 0000000000000000(0000) GS:ffff888097449000(0063) knlGS:00000000f543cb40 [ 251.570641][T10613] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 251.572759][T10613] CR2: ffffffffffffffd6 CR3: 0000000071852000 CR4: 0000000000352ef0 [ 251.575317][T10613] Kernel panic - not syncing: Fatal exception [ 251.578024][T10613] Kernel Offset: disabled [ 251.579408][T10613] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:48:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000007ffff RBX=0000000000000000 RCX=ffffc9000dff1000 RDX=0000000000080000 RSI=ffffffff89536f9a RDI=ffff88802577c980 RBP=0000000080000002 RSP=ffffc900062ffc60 R8 =0000000000000004 R9 =000000000004c5c2 R10=00000000080002c1 R11=0000000000000000 R12=000000000004c5c2 R13=0000000000000000 R14=0000000080000040 R15=00000000080002c1 RIP=ffffffff82081c34 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097149000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f735cc5c CR3=0000000075f3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000779a54 RBX=ffff88801c73a4c0 RCX=ffffffff8b8d9c75 RDX=0000000000000001 RSI=ffffffff8c1b0a20 RDI=ffffffff81ddfdd4 RBP=0000000000000000 RSP=ffffc9000046fdf0 R8 =0000000000000000 R9 =ffffed1005666795 R10=ffff88802b333cab R11=0000000000000000 R12=0000000000000001 R13=ffffed10038e7498 R14=0000000000000001 R15=ffffffff90d9cc10 RIP=ffffffff8b8d85df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097249000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c42e170 CR3=000000004dfeb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=ffff888049593c00 RCX=ffffffff8290dadd RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=0000000000000004 RSP=ffffc90003b278a8 R8 =0000000000000000 R9 =ffffed10092b2780 R10=ffff888049593c03 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffffc90003b279a0 R15=dffffc0000000000 RIP=ffffffff82081694 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f46fa76e300 ffffffff 00c00000 GS =0000 ffff888097349000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f96ec0 CR3=000000004cb1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=02427d3825914170 5cb19cb3c33f102b 02427d3825914170 5cb19cb3c33f102b 02427d3825914170 5cb19cb3c33f102b 02427d3825914170 5cb19cb3c33f102b ZMM18=cb73516f3c8af03a 20f9f70dc824830b cb73516f3c8af03a 20f9f70dc824830b cb73516f3c8af03a 20f9f70dc824830b cb73516f3c8af03a 20f9f70dc824830b ZMM19=bf10000000000000 0000000000000005 bf10000000000000 0000000000000004 bf10000000000000 0000000000000003 bf10000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 016af23808000680 0201000000080606 01048e12080006b0 0302020006ae0300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ffffffffffe50806 9403040200069203 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03fe020006900316 04880006880302b8 c804840006840314 0400068003740800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38030100000a0806 3003000300200000 002125dbdbff0006 bd2d000124080c03 ZMM25=fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 fc6f83f2fc6f83f2 ZMM26=16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a 16f48e1a16f48e1a ZMM27=681b332a681b332a 681b332a681b332a 681b332a681b332a 681b332a681b332a 681b332a681b332a 681b332a681b332a 681b332a681b332a 681b332a681b332a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=110a0000110a0000 110a0000110a0000 110a0000110a0000 110a0000110a0000 110a0000110a0000 110a0000110a0000 110a0000110a0000 110a0000110a0000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85779c15 RDI=ffffffff9b48f180 RBP=ffffffff9b48f140 RSP=ffffc90004357408 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff85779bb0 RIP=ffffffff85779c3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097449000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000071852000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000