last executing test programs: 12.973813365s ago: executing program 1 (id=786): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1e7a00000000cf8687a62f99d091a1bbba85993d002c3b846eefbe32b96a77e2573f2a20029a9fa8f57d72b7e7a555a8dd5b72f913d84a99af8d3439c68f935f5b933b44547dbe8c98ddbf0032ba02172ce20a433ae59abed8955271c948db271ad8fc407513337b5976b90cb5f0f34617395d4130dec383b351b547125a406312229017f124cf4910e071b237c686b59c5ed4bb77ff5aa845d28bbb7957311b1b0bd8b2ef1f673d49afa2d2b1d0ac4c61f0c260415625a466a7f0b1139f4cd1d662000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x9) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x5, 0xf, 0x4, 0xfffffffffffffff7}, 0xf500e78385d70e0}, 0x20, 0x0, 0x0) io_destroy(r8) r9 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x80800, 0x100) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0010000", @ANYBLOB="00002abd7000fcdbdf258100000014003300a4000900505050505050080211000000040067008601330088850400ffffffffffff080211000000ffffffffffff0900350d7410c700ffff4c35fffffffffffffffff400e99753ef5037402ed0ff7b62fddaf447ee41bc8d426be716a50af330dd8f3abbcb8b07bae9530e523a28741ac19e068bc7ff5117d9a8481e191a237d03050b211ec29d41e57bbf27d3b45d50649c5803bac0bf385c00c96f664b7d7c581abaea754101d3f8908ad24201adad25b98c363b4e87dcf81a4a7a2219fa33e0abc3ca907addc3f79832cadb0acca6217525cbd283a086fb7d659aba7be01f864cde88f16af48b4454ee7f66e3696461098ac0cefbf453c34da1eb11b12312edfa3e1d6a2b97401755f72f52206d6b839ca300d210cf61947be9de2c4e4d6d3a35637f33662679709f00000802110000010802110000005100c6cf7cb3e6861a4067f5eaae4e1e8a8c513f396f2a07ca7382769bae8428057e1d71b0496b6c4b9ddbc7c691d9ec31df63173f93be0a82439b573fcf30ac18e05032b4a6e9797caa297afd89b5103716d700000006006600fb88000004006700"/442], 0x1c0}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x9}, 0x10) connect$pptp(r4, &(0x7f0000000180)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0001e000000120010000009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68dd72b3bd460f4ebd662f8c7ea65e2bd963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7b4c5e69c1dd72"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltaction={0x174, 0x31, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x404}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf46}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, r10, 0x2d, 0x0, @void}, 0x10) 12.470649587s ago: executing program 1 (id=787): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x7d4, 0xb, 0x6, 0x15, "006093ff8e000000530000edffffffffffffff"}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a4, 0x17, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb395}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008001) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x400}, 0x14}}, 0x0) 12.272980463s ago: executing program 1 (id=788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000340), 0x1004) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x0, 0x40000002, 0x148}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, r1, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x2) prlimit64(r0, 0xb, 0x0, &(0x7f0000000280)) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.710415256s ago: executing program 0 (id=801): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x28, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0xe0, 0x3, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x80) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) epoll_create1(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) 7.105625236s ago: executing program 1 (id=803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, r1, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) prlimit64(r0, 0xb, 0x0, &(0x7f0000000280)) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x4002) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.864761294s ago: executing program 0 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200429bd70fa006a000000000000", @ANYRES32=0x0, @ANYBLOB="0020060000000000"], 0x20}}, 0x40048814) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) openat$cgroup_root(0xffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x6, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000001f40), 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e2", 0x1}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 6.756796444s ago: executing program 3 (id=807): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0xfffffffffffffce2) getsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000140)=""/50, &(0x7f0000000080)=0x32) syz_open_pts(r1, 0x8182) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f0000000280)="e5786a0d000000070000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) 5.513461695s ago: executing program 3 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000100)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, &(0x7f0000000140)) r3 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000100039040000000002000000000003e4", @ANYRES32=0x0, @ANYBLOB="0000000000006c54af0790af20de35084e43af4b580bab0c00000000ce9ad4bc4068457d237683db04d6a5e653b30087942a6f6a49dc1dd99ea68884abf6fa6982db7856b25f58fc61923ff3f3bc852688484686c00ad46fe96fb9c76b127e220389b92b6f20dd6cee58de0bf8dc242267b7db6cfca54191309290bbe68364017e3a2d0fc107c365e086092d1d034b62cd46d41949fe20c27935d006109ce4dc8e33580f0722a1641a583214eeb146f1569341b7eea08cfa1929e434fd16cbe0e5848a9a118ef3337778e1e74ea123d889510a71cb378323b3eec36132de714776d5825bd3542e5dae969369421733544b43b197d97fe07b950a"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000020000000000b1000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00e935a483000000000000090000000000000000000000090000000000000000000000090200000001"], 0x0, 0x96}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000001d0c0000000c00000004000000000c0000000000040000000000302e00"], 0x0, 0x28}, 0x28) r6 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x5b) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a0c0)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000680)="27dcca762d3e14f20e37c852be596c26a8f3227045acc3c6bcc86b6e4c0d0bae45de51a3da67f8b5e3e9cd3536084a5d873a4afabb4d3f272581cf4559e7e82ecf6c", 0x42}, {&(0x7f0000000700)="6ecb176f26f46aa202c0bc97f72e6a2c5ea4091d08e7405cf8a40cfe4b4547b33cd7baf7f8c8402c7c7ab9f73e959f938d4ba77d55eef9564c900da6f772ea409c93749fd4dec1460ce01b89cd326c51d5cbc3372d99d7be980f835d", 0x5c}, {&(0x7f0000000780)="dfa5a01c9108c573f0a70028951be53094916a0780d5db2d6dbbf00eb74fc7ff2e17c1042a184846ad2c64924c68d5e70cb900933c6847bae82b0a45845495fb4576cbee24e40bfe3ca09b9d0a1fdcf63d599023af3add0d45de7790897d3a42ffe6c55c218b38360cac27afa6285a05a33d001bb574184e5beb766f710bc068455ff6a8a24bfcc37d532fac135f3683b7c9183ea7397d0eec24a8d657a0642e2eb8640a070a065adf6b75db6146e4c1bcab0feef0f977ffdc6d3a44e04be5f2", 0xc0}, {&(0x7f0000000840)="165193dd699c2f4dd269ace1d9b0f5540b0f423c79d705fb5b358c49f0fcedc718a068cc861456a4560cc6b9ec1f11a2a3118709767ae968b90c112b", 0x3c}, {&(0x7f0000000880)="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", 0x1000}], 0x5, &(0x7f0000001e00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2, r2]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x10, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5, r5]}}, @cred={{0x18}}], 0xa4}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000018c0)="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", 0x119}, {&(0x7f0000001f80)="08589d4f2d5409b44c", 0x9}, {&(0x7f0000001fc0)="a9aa67c0adb397b57db3f8de67c84411025c7cf6871c1f617927868bbaabcb19bbf8f78870937b18a44f9377c0ec437ed101dc7cdc93020be21bd097d6b537fab863b94ff8b4c0fff2a068b4aabab8d453baa33ac30579cade62a579787ae893acd8786d384766d771f3469517935171386c1f245d730f8ad446421decf2509beb8d0613251e203ea9902948cb55e6526d235dd260c2a1a3a1ba19a54e8eb16c445a541565b1cfb7afebe3ca41f162a9bdacbb546c36c3d9b73f7fba28224627a8b5d879", 0xc4}, {&(0x7f0000006180)="d8390a55ad67e27b81b2216165d94f9ca4d43c318473354ddfe3921f4165f0a79814a1f7ebacdebee286da0deaf201ad87d35b490acc810d4e6746bdd7d0a28f0f3400be8d192ed11e6b78d57ac1fb6d5d52c8bb1df8be8a89dacdf2025580ee55a12d70f0a9de720ed996d112ba0f1b6b31a8733837171e20611bb9e8e0bb78a1f800576224fd023b8bfc27e845c1e3ff9515d0466d5a61332ff992abc03cd940", 0xa1}], 0x4, &(0x7f0000006440)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}], 0xc4, 0x24040814}}, {{&(0x7f0000006540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006700), 0x0, &(0x7f0000006940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xa8, 0x8004}}, {{&(0x7f0000006a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000006a80)="135f6978097236f2886372b936f7f4886debdbbf01ab0887499f00b6890aa55e50a455a037b51b8b8f60a93d5d70f16015b0b5c7655c58b349409379ba53ceb5a5720bdcf585b188b5e5605e268034f9dcecaef6c8ad6b214dd314fec315d77c955a4b001be7ecb09aca6b9ebb9858c458a0558958937bd304f573b04b32a343424ebb341bcf15f8fe4bde91e434c126fbe23125b1c387981a0df534f40c66881ab2535ac2d2bc75322a5eb37663f750c2668e1dd935fb7e395d95f8eb60b2f3181c19f0a69ce5edb7419337d76ef5856a4880b84af65cb17dc3813e1d793f8d909bdf1130958249eb9f4cd2d544e986991cd7236775958702550f9ccfc62afecd1a7fe67a91673ea5ad3731f9f51c2f568f4bfc8c826f4e8fa0af881000649e3810f4e4b44c1f52842651733b9a398011a238e3c0d4d8917d8d9b716648f124cb1d64b46e213f29701ce16a4a190e6ebb54946d3ba686dea991bcd375ef5ecf2ba5ace81d5541e993306234508d9c48a3c419d4de895837d26f9e76d41c9402dee7515eddd260430c654cf31c2b12e39d85658253af0836eb36fb1a64f350c4abb3078c2b6fa5dd788a197d580d71f04ac8181f797cf360aee4340c9a340672fbaef7681ad816d25a20f533792b9ae8427aa5611e91d4b60232fff5279dae1b11b84aa689a6ae0d572e0c5dd48441e30b4f3e13cf89be560c2ad3d2c7e29d159358f69d3f6a17f319e5e90d26e2a1ac8f43c4f99529c3d7affcbd8406cdc55cfde3169f65abdcfdb13714bccf42b1037297e69969a79bd3d48be1922514a36b064106528ddfeaf859d5471a6dc3239d311d49cfe7ff0bf2acbe4205f5594821ce24cc9ee071980e421b4bf3ca6977cbba0665ad9426dc8b8993e6ec3ef5ebededf865508afa14e8977bacfbe6c67daab393aeb7bb3685aa849fde0747ebe0b755a8615a080438be1b4b94219a99ed2cb15aa9cf3a9691f2b08d88dc923089064b95c83407662d8e2a1a83efa4f2f85e1251374ffb95ac1ac7ced140651c6edd37feaec130338ad201e1c3e42ae9c3aafe42defc6a103ec81b4d6300693a0d5b955ea900e68cfff0816add4935bf325f7c2276d0d33ae85051afddd46dd9d5b9c8a8346a967b167a18423495f3fc5230a47e9c6196c15c5ac0337531360fd0429e52a8162eebf18773215db7d70f9b3c88dd656dc72366ec4e687216e197c2f1b7b104c4614e3eb19fe4ef3cfb11899eb1192159204fc027aff1a45bf42e08b0dbaeeb19f9b47960b1db0721867875fc8f26db2525628b927633ec1344d8ea48c717481cd8fa5ff6c7650a282056599c0cea169c008ee3e14fd81f0910f96818d25d42c7257b80252312c1d96a2f792ccb6469a7bd609dfffdc890580c39f5d64564af14215cd9b97f14c1ee6c77000c629c800271386a7508fdfb28d77aae6f5d06ce096b0fedb75334cabc0ddb2a5723ad7e237ddaecaed5b676777d3c322d0d738b91a8e90d437147e2570008c118346e0a52fc6a3119ad17385b32a11864e9ef25250844cfb489cc9049b677f2db91dd6578a0ed42fdb146f4259975242f957f7ba5d7df1780d1377598f9824452347cab9aed2425eead5d69f609c16e8682c8b88604fd4c725fc4ad739da5327b48c14754c195884eec936e2d3629e47b3e957868050f5be467bd4e5ad767751c6611e72f1ce4ec0cb4096bff82687728c1d888f60e999d25fd9acbe97388c5231f370ad7ed01060ab909ff00ce551c662530b5f4a1d248357aa9c4771e8ae3a86af41b6a4aa7065d585d1c08d94d2f56b5c4f68906a9f786c19d1e96c1c4a65fc906d508a0fd029e44dc115dec97e175edece28689aa6817c858a51b6a759b447e45c386265503d511428748746fe5f816e3303a86873c32fa70fc6245f64b16a6c7eb8f36470ceb01eccdf983c4d2883a3bdd4c04a0ddc3678e902ae4cbd5a0510c4f4ee0c0306830af0ce371cf3b0cfb68e74216039f3e31e1f25cf25cf113051e2a4e4861570ca5d4f6e3826de7d0cdf1d8763fb21cfb704a4a453cd1666d59a303408b6cfca94ddad42ff199592dce6bd5487e5b958bf1a44566110b072941e332a946cfc04c17a2f6c0177c38a1d10a51048c6662b8e6c02b85794452ac8c0055db572c64be6967bd095009d3aac0b311f465aa9dcdc262863c5e33ea3b40cb60f717e98b475ee0a72f8f2add78bc0ccdfa84202226b106b57b8c65c4acda57939fe627a965e059b1b2545f4ce1a92e5ae4e3000e83ead330f4bf747c489497e5a173f1fc4530f599d3ddf365a91d74d1579f23ff601fcca9dbd5ae1cf636b95e5b26f04eb379de060e6717f9e314dc9df737ed04a1af12060deb33e7707b05bbe3ac471c4c56693d25fe0ac0da022a4332931816e0d9351eac5b754979ae3269796382afce42646fe3ba6100fcecd549db1fa3edcde1c273ceb236eb8da97a06c26da44943e95b9a4e27809289f2fa6a36a693412010c516946549f78062195e129914b44f4b54ee62af5ec0914205695aebb211cc7cb7c29470c52539bba8e32dd851b751d62e6208a5d65bab14c9c26f90b40f88e22ac91ab8544dfcb0c6e3bbfc8a2adb2fb00784d1a9cce9dd8f4b34722e5c240fa4d0cf3c3708b7d5c598a58ce95e67e006dc0a42efca310c8b20eb4a6a77bee24f8b5a9884522fb0f27d7154a2c1443c31299572b62409e3183fe7058e07160c1ff97084025b7728d763c44c3bc315e4375a7b7dd12bfd53ab3f416ae97a16bd52cc831b4a2166a1eeba797aa00417cda72fa1712efe83b58b7e6e194146165dd28f54af8f0252083b23299c500b1d7deea6e49dee43e6f690bc1cc60ce27a25dbb78caa189397a81c49b398fda0e7f406a998024d1ac4713b8f9ec4b60f259996992a3316cb1a354645f5c7e75c5ea651e7b42ecaf3f4a591f161886edda9f61b947413ad009c8e4672093e5101272ad8ebe196f1f51f0602ca6f225f43109c5b3580c8245559ea336ba261d7ecc58cccad21d810e2c96ae6b9fe5029b720ca66433b3d2c2a0bfd6d8338d5d6b1d69f897e1b8575fd0e3b7eed019177c8734af1adb6fb3763fe6077b8250eaff3e870bdd24ed0d0e305a583bc47c45bbeade9152b1aeff91abf94384cb333672eaa0c5626a97681f33eda72455a9d790023e3768204508d24343d13e7a45f67f4c0f563e0f66ba872162fa5335b16a0f1ba2f84fb9118855ebeecb1746963e35938e36301b6976af396c2eb4fdcccaede791d12b3040e4bc7c8f6dbb4f32173845189097a548b3412b7ef7e226598b4b53d211a1f9aea1a579d6eab545e05d1b1c604906abcf4a536f297f97d189c807111ec416c502b8e71583865146483d7ae8f648abde5de89b6985e538d565572a3697d4e611ee6fe4a9e714d14924f087b8d4f2c6fe81298d73fd4c0dd13ede55e930168a43770d271add51e39ea8cbc52f82352757f5fc820418eabab2a536bd4038c418c0f85d988b9ca3e28493022c29eb3c51f6e09ba2b264bb524971daa2511f998b1be2ec9b0a33157e49afc5fbd3c550d0cf5bb7496084d7cfbec33677e00e0efd464f8c7209bee93698096d9b6d6f28aff78634383b16a2cf3df52ddfa168bb0e61d00b8d094847d65c97cd0c6ab204cb424320ccf7c54754ace34678ae124185d2ae48d861bf313a7beb5a4d1322bc7ffbd882d014e2d2bc71a6be74cd6a2bc1c14d5883dde0fe0ac16153c68661896da6f9e4652e394c804d91a93fc4725feb4f1fbaaa3ebdea449553db1d14aba65028fe8daf3ef2f63af9c002db171a9e3a182951235668646c91c65ee0d896cec4a3b2866f178afa08e5c4acfccee5459d23ea3b5210b74f94e0d02403160d03a62651f67a2f39f833d7972e8438c05f6005c9a34c52994ceedfa6dcf80c49a78b336342bd7eb211f597511c4d2082e02c3082c1f72f67f05a10a9c274feebdb23da535dccdc61fabda2edb54869feb1ea5ef727d0318eab7df26478088066db1595c9ef3f6ab07cad703437cf4aa21a35104b257410c8f3b1aa93528288045040ec9d257a4b6c0266ebe5ea75f01b726591743e6ebedffa2942bfec4202f3aa372b47fc81e00ca5ebc78c4f3b68579cb9ae8ba650f49bf49bb264c9fe48651a0533f250e619269000ae209f2eef264daffeda94077619b83c1b46eb1f3b50214a09528cc05cc5f035e669cd700f9cad93d76c99abe2adec4041233f95e3178113eb1c7594d805f024fa480a5a9aeaf3159496469051441b3158c81ee7592b975df13f5727399e971e2dadfcc63822d3faf2308a5d8ad0a5b09e53163bdf55aa38122d04d6000a22a30f475702adc304ac2c37ebe95970548f40b509df33a650b8caea99da44ecd0e4efdd16d91819f1e6f87254e972703eb65d36301b949b72e980d78485f8e888b284d10b42908701a690791f3f392492aa60597157d518cb69fbc5ac6985619f382e609f8dbabdf20c0726c505da37d302839488b9fd6d22ef0cdf58ae264be0917ef8dd781099eaeca37cdac2954a611bfc086da251ab96398871aaa8fa58d629e2d9bba8896711f28751d66ab14ac0c1974a2043e1890a448dcbd1b7e53f2e29d1ea62f4184302d023a5c6a452c25a8578d5551f06413b1c1422357593578f05015ba32601f765af775252ad9f9e0b38d47c8ed56cf6e787ad889fa1e884d99b754b4fe52114f2de225d8f258d4faf0383335a6d0fa1792afe12a21b2351b42c167f3942af931666826e36ec6391dba08bccd52322cfa5254a3b3fd3ab9465c617698350ae74c7b36c52deb3fde942a95c47460a3e7bbadc09fe35eba123d235881591eb4686f31a6113a5ede820df91ac96791ff485c397d5f6662fb656e54346cb63d35c17a2332a324379672a0d9b34d18b657c70ead789d8e7162ea7b15cf1e67e5dcdc41127adb6e06988f47218e9cf2bceac33ae3d3a73e3c6676736985de685889b7e42a8d0241cd643e9cae08eabe8bb59225836d2849bdfdaf2d2f8b607f4443543e129f6a839ab8f4b83aa4bfc7ade8623316ef20422bf739fd3f1a2a1fc8e721a8abef44724824fc4c51acea4d1330cb228edfa97f2573b7d74a94b8d8df557f2c70db144b3036f3e930cf42556927e36e10795d995708b0aaff95e88830d4606ba9755d498baa4514504193da552b648bce9d06128eece109c51f0b359f3cd3317d703f5e79f5bf5a312fa91f4d591a73fbe04fafdfadac915bf6eb36f8139e67ccc1a3aefe8aff51d328976d7086ecef1231abeb84c51ffdc926c40142bec7e278b50a908104ac14211a6733e4366893e0cfd5a2065cb182ca089795ce67cae3fb563ff89bdfe3a79ca3ce69072f5ce5d5f7838d23312347b39e96c13f945441efbb3ad47312a4c0ecef123ba55ffdb8d79ab915123f46575667407a50445a825c8c0d86ed40a44517b3bc2e5de177c6f087ac5ff19b17dfea70521a8e9861f825c83b14c45298602ed7ea09c9436831edb3fe6ba465aee339468975b6889d3d66859f887251e96438475ed6dfff42d8e682ff576814f8decba4f6912d677a926df375f96b63e6d242f854b205995365e15e9b6110ae10021b98223d49468a80db22c3be7618ca679a17c43d69250df1bb7074a1e8b7d15bb24ac1cc7857d36725d85f962b635a49938e9b24a4297a75a21799684b9441d06ca37486e84da59939f20a33808869ab9d936f299516c404615abda2f3004d38db08590b9fc9a98018781cba2396d2fcfb00b74c1906a202b98c49ab375d8e", 0x1000}, {&(0x7f0000007a80)="57f71782a01033b208c0", 0xa}, {&(0x7f0000007ac0)="67e5f35afd64137e3e5504ca49ec64b30dcaf61c15b815c5a153f3c979c42f37c5e8d42eddd020bde4654e12f911737fc8eb8e572f4d1e827bd058369924981ee988f90e375e19bcb42d86c7ca7fab4e287e626627bd00a8eec82af4477c6561498ab6f20ac2f88a087117729b6c233a3067fad1330785c6c441f5a9cc97039841d25eee8b642c", 0x87}, {&(0x7f0000007b80)="39bb1ac727c3cafc83a0f411c990b76719ba004c2dcb229d452417f8dde3a1052cebed820c6c20689ec33a60785bf7e6e176125e0bee73ff15c3c1df02c1a17989a2eae02c19c5a288ca683c347d90c50408bb2df25221607276c9928cb8bcb1c364a08042939b23bf02f90be1e81ab7c31dcbafe471b0d3f73e3b2e7f1680e008540e1c5f23516f7c8828642ff7799594fc6629d00b50b1985f234515fa9a99d680edabe777eb637f966d712561ad9fa023850cb5336bb8fdcafc8e4ad659158a6d48d86aef7450c9735f7bb89b18413a0db50a23f166db3b91c40834c699767589e6e394444cbadcd080a323f0b0d1ad2b37ed0483680752", 0xf9}, {&(0x7f0000007c80)="70b6b37740604d3246e7d2885bd4a514026a1a2098c12e6bb08cfb115a597ff454a2763966712215440b96c794d7527e736f51947b25565069dfae19bc50c8d4b4de3c56824286c16f0d0a0c21530d086a839dc33d471803ab93b4dd66c6338d4a2539013aa6f172ff4e046b213fef2165f4de94105a", 0x76}, {&(0x7f0000007d00)="8c2629bee3a72386578a32512c685ff1b4de53477d2689d4185073eb3cd597860ac1e4dfa61d3e293359d35237f0677708e6590aa4ffedee951213b690a4837ee372ec1accb07414271b39e94b5ae29a6ec3760ff5e17f2e5a0a0c1d4a1be95fd1d467aac6d873f9f7f01d0b84fa1abe31bc5cf8514ad9cdd5198d40ef4e151b592d20e8baa0a1610856fee3a63cab6dcc6ef75f8150b8f8eb870badd985e6503070cb969333bed0b797a1e86341d9bad80a5d7881167f9d436aa02eaeee88768e964cb99f9a4a087be168071791798b9a46a9ebf0574e9a781f", 0xda}, {&(0x7f0000007e00)="da8a59b1df69fbacb839bd047cd77e570e40c67590377e5ad8fc1e018c53bb3af21e3d21ec4a903837cc0506f90b7ffedd9c70fbf4c5edf9431f7e7d3e6ca8648a744e65b3f417095d294b7692d915", 0x4f}, {&(0x7f0000007e80)="b14b", 0x2}], 0x8, 0x0, 0x0, 0x4}}, {{&(0x7f0000007f00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008200)=[{&(0x7f0000007f80)="0631ee14d8925d2edfde57b4fb3e544a42bab44b246195af3a", 0x19}, {&(0x7f0000007fc0)="667a0db04151f0d22b076b738c851972adca250ee254bc1b965fd4686ff00e2d9a358c06bdacb7562bc602", 0x2b}, {&(0x7f0000008000)="2168b2f2dfd8846cc15b109b8f52011278f6b1efd5c5803a3ef60eeb5ae9f8d1ae9d6e64cb20b446ee3d894a4636b9df2a149282ccc248731d3a42bd3bb84d8e933f0596fdf3a199ac8666c8054eef5f934e8121722b393b3ea0c1bba4d7251598adc3beccc187ea90fd4f2d9e953bf3c4de4f372ad4e88122e2b7aa3b569b7530d64f467c1f15b115b5cef8febbd4c0af2f25fa815871d4472411c7ace839cf212ed8c99665281210e3d52d77f6bb3204cd7f6331be038a98bef69b7f843f5731075aeb733e43c51496375ee9e860300bc014edf3329e8a38dad4f87ae522254f36c3ed85ce9520f70e11543ac447debc09d924d30c", 0xf6}, {&(0x7f0000008100)="bb0985f4e77b2581b2b11819fef3d87867ca3fed1e4791427c4b4c61a24e9461a2db3ef5995e1e5c94df11c1a92d2b00166908e34a060456a9b72c96877dac973816572060c4f9ce782aaddcfae3302dbedba3c591b73034d0ea72626beb011afd3f5fb38c599d391834d251e2f7d0cf715f91723b790d79da867e97d71fff6ca67dec7009356aa2b266c6c5c120a220bc2cc0261dbfa38cc250dae0c2c800a16d0468701deed40f8ab97fab61c26c81005ececc29bfb8272f6e9f3e279ca66de9e0f32f0449776df6ecbc851e0893c3d08bfba2798fbf550ea3cbe7680330be58b6b6db2754099496346252a626b5939503206e0cbf38fb6d", 0xf9}], 0x4, 0x0, 0x0, 0x40004}}, {{&(0x7f0000008240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000082c0)="ae303abdf37c929ac932202fe2ec50f9286ecdfc9f463ebb9f97a45d03df860470ee30acbf4ac30fedc203fa1dfe2b1ed47c6fcf20760373dd3b79dc39c82d98eac08f50d227", 0x46}, {&(0x7f0000008340)="b499a69b875984deb26d87d899e7c3c94ae7d8ac5d2b98ceb1b49ed293ea070998d21d36c6dd5db97b6b0d28abe73f529f4b1d0e3cf6f0c4232ae8607f343433890d343edc6379677873ab53e391584dce825b7587083509b6607d812291ac2babe59d000d42bb02a6f13f5865ebee3a61c5112ca4bc167e886bf80e55bd2e17916d9f2a757b7ac6523eeec096a5541febfd1919e68c50b471b0e80438ba90b6bbc47b6edaa55cb008a8dce066d436d0d9614429283d", 0xb6}, {&(0x7f0000008400)="c96626f16b841e51c0c7fef6b8cbc6337092eefad77e0d0776e6437824aee310cffd075f5a2baed2352e95ddb47f7e561156fcf60db094bc5724f22b0f805898c34d8c29502847e9a266d5f5d1b38cd13cb4d284d982c7b4a7721f03529971fcfafec955e534256c997b3a4f386a8e6810d3fb6673fbc9b3c5fe1d4d2fe64003817063d16313d5d91cf7b547534e1024e724b7d9a9e2112d6d3e62fcb7073ff92fa4e023cd03bbb9b9837673c667e99610fdb69a5764fe0ea2b56c716cd42e3e20feb832ec", 0xc5}, {&(0x7f0000008500)="81c57ed322a88688bed59ac0bc83f3d8b210", 0x12}, {&(0x7f0000008540)="3ba1e312e27b83e67f35e2b4feba86ebf5c0d25f84f88ff23a3c177d31fc6f387428d9c8600310d57475f77507b112083137db0e40d31ddd28093d59538bce81b46e3fc330e8fd9ea266760aa7a49c2fda8a0a64d8929e93bd7e55f9ebc22ae1d4ed8a164952692f81e8c6d59c8ccd8bde8e8bbae739ad16e3e5834fda29043b80e3c78f2f30651fa2b5e8e48a5e70fd7a073ff89944071085cbc9c99d5bc053a958", 0xa2}], 0x5, &(0x7f0000008680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @cred={{0x18}}], 0x2c, 0x20000804}}, {{&(0x7f00000086c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000087c0)=[{&(0x7f0000008740)="f5b977dd84c906494807ac2d83c68d51be8e638f238e31ece34b3af369104d2e497842d068c5688792dd9666f6af269fff5b4a0afec5cad563a357f1e1d8a4313534a54a4ed1e2d001b354", 0x4b}], 0x1, 0x0, 0x0, 0x800}}, {{&(0x7f0000008800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000009900)=[{&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000009880)="441422638a06034c2b55637ecdc68c027adcdd5f3f0ae83ca3151d66c02f928c245d4afbb42e3b09b512da9c2d6e7c98c70e4110e1c3c9943d8a40e9a11ed6a9a24e5b4e67697c11f4a08ce3c2272757c475c728a745055a4e4517", 0x5b}], 0x2, &(0x7f0000009a40)=[@rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x9c, 0x4004000}}, {{0x0, 0x0, &(0x7f0000009ec0)=[{&(0x7f0000009b00)="84d8a313068d01920fe736834a24ad05f2591ebafc68645d8ba7b50c1e5eecfa668e9c46f396babe536d5179359c9526d104498b4a4705ebc58bddb78e4353bbed23e1a78dab34720e9a2d94376db0ce083a220128849ea0b2430cb73f931b7e121aba6b1c9a470c27c7bcd2a06540783061094c16eb2880c30dc2a0382ce81a2b93876f7097ff7ae73b8619c27227293981139ef8959b3853670302c7d5afe58a3317325fc93e56bce49dfc267ce22da964dafdaa02a4f8cfcd5cb2d6e1b77dde1c2a299afe113dbf1a45f194d228691d24b6c33ca259df2b1fd18eb1", 0xdd}, {&(0x7f0000009c00)="fb78d23cb4fdde9a5480", 0xa}, {&(0x7f0000009c40)="e85cd8be53dad1587f2c4d1dc9702e50e4c61b477ff756378c1aa439fe46fc5848842572c162e4fca7abd73bb13692d1b28d2a16", 0x34}, {&(0x7f0000001ac0)="9dbe8f8bb44f1c7d34c5a3f254b4d3b49f47a72fb9a1b9f304e389f16e36fafda028291e8d4965000090dac16e617223c940e7fc5ed4ee035a9dfbd54c85c1f5d6e41e2710040baee5dca7e7412efeb06b11d4fd0b4a38118d7c4c062017b4e0a3202257c389dd388b399362841a5b44850891e33adcd5cc04185d363a06029250b479fe136ac421fc924fdc9476900130fd9e20cc1f95a3ca7774c0e05464353cd5ebba05a964bc484d74deb7e9c5fef28360f6166872a1acfb022ba96474ec70e636c6c2f7ec2247c180a2ad8eedcfbd7d846e59b777579dc5ba86ea5afc6a89eab9b7ffbf4f90204527e20260f17eb98844be36d332c8538cd627e470bb5611cbd240447ba32b2387ce58488e0aea6a1ae6c619e10126ece88e13b69d643840a4a465439a69e7b25a01d905e866fdcd193364a2d5524992998de88e65320d37bc1c245fc040520000000000000000", 0x150}, {&(0x7f0000009d40)="7c873bd6758ad40a2cc7cc8c567b8c28ff3cef84b3af16120b4548adf13a524e1e8aba8e01ea4a5e3c8a4da1ae086490f00496d4e3e67c0c50b926621b42917747a01e19f53e6b6882a6c96c98f2c3807b4ff4ed788794a7ff7c68d860dba7ef1c2ac3ab1096320423c6cf254654b708a692b15ad84c419df7ea8be42054d7ebd159a9c9ca60564891cc39316e5f99127479b1cbd2f6e49557392808a3ed2e6b3fbe5d3b41a9cec510290dd2d60d76de75f14625cf276b5dc46dad23a31d0a6aa2ff27a90ce8e2a1406c7cdff4808665c2e9f0b97b9f7d67700d3ab5", 0xdc}, {&(0x7f0000009e40)="5d082a17ee552c421f21f1ba469bafb0e9bae1bb879e76a3514930677175ce81d56cac8ef2f837cea3f59d6224ef17bb114bec1e3b515dc65b23ef3af3b690fca0c6f7d28abd06161a15d21bf7927c6d69807e53f8e5becfe85a630730ce586d3f8e9b073acdb2b3d8bf269bdddffa5fbb", 0x71}], 0x6, &(0x7f0000001a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r2, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2, r1]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0xa0, 0x480c1}}], 0x9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) getpriority(0x0, r7) sched_setattr(r7, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) syz_open_dev$video(0x0, 0xb, 0x1e1500) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000340)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @random="1acbf47afb69"}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="69b62116de8c"}, 0xfffffeb9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) 5.015702395s ago: executing program 2 (id=810): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x6281, 0xb, 0x4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0xfa, 0x8, 0x20, @dev={0xfe, 0x80, '\x00', 0xe}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x20}}) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xa, 0x4, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xa, 0x15e, 0x0, 0x0, @binary="beba7b1bfb83"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x3c, r4, 0x300, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}}, 0x4) 4.727309872s ago: executing program 3 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x9f) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x13201, 0x1, 0x1000}, 0x0, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000280)={0xe, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$key(0xf, 0x3, 0x2) r2 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r2, &(0x7f0000000100)='net/udplite6\x00') r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 4.110260764s ago: executing program 2 (id=812): r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x2000000) 3.427771455s ago: executing program 2 (id=813): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x28, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0xe0, 0x3, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x80) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) epoll_create1(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x111800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 3.261983071s ago: executing program 3 (id=814): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x28, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0xe0, 0x3, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x80) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) epoll_create1(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) 2.936291749s ago: executing program 2 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 2.79857564s ago: executing program 3 (id=816): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x3b) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000001840)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="6eb970d0b0942d4c6674abf2bdb83d9df1348ac7fdfc9145f4f9362c5b2bbac91eb12cac2eb87108bcfce15bfe5261d7e28503c06449f7c54e097622f14c0f453475594d683c7517875d", 0x4a}, {&(0x7f00000001c0)="e45f3343980ebd2404dcad0e9961fc5ec99f159d4411ab8d285258662f6d0937dc77df69fb86eec77ab48cd3fbe1d49b3ff8fe1a0fa877c6827bcaa379b32840fd53c9e02dca0f8e6c6a5628eb358615f76c1e8612ca80b0b07f06749f60811c32b182d74a010d31", 0x68}, {&(0x7f0000000240)="842f3290cde113f86c33422f8819252558e52d062668c893dbcf0b3cd9033d4070dfe957e6e5e1e66350e8c111993f86684bb049e7c4f1d5cf61cf31590276d08164d3b43709ee668d2e7fffc244cb1e0edde052a603ea3c1792eafa23e5c931ff4fd63aba939231fcc221993c6e1a4c707744948382520ec00cc16716e8c83475a8062db13faa0809c3a8346323918e49a9c5b300dc882b5dd2bb15", 0xfd33}, {&(0x7f00000003c0)="26ca0deee074c2563575ed8c2aed5d95327e6f4469fea7d7558996e45f98e630f90c3b4fcad2491acfdaddbb7ac6410515e3751c8f49a12c6497e509f6928140fe603e5ed2b0d0808704e4dad7376ce1eb9fe88b617d0b6f12ade5e60038f8eba8351853b7256c4ef33e620c153adb016c325cb3928fa83784ea0100d37cf110c503c5591af3af2ce2ba01d5cc827bb7652a9a66a5cd0e726dece0c5662b", 0x9e}, {&(0x7f0000000480)="c629ef262ffb1c417c62bbcd8a02740f03c4ea333ae04c0a829c3d8722463e12b58aa183bca24e1dd80e23e9c455f47b90deac9cce0d5942a461eb", 0x3b}, {&(0x7f00000004c0)="c73f681dd0a5f1f0e5f80350bbe778d63cb3cd163d1a72884092ac994524df507457b12e9d91605c26f7e4cda36ba9531f059a76ffac99b260476affb489277fa28a2bb59ba094b970f607b64312180aeeecf5ed964d1c3321fd55de9d20", 0x5e}], 0x6, &(0x7f0000000580)=[@assoc={0x10}], 0x10, 0x20004010}, {0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000050}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000600)="210d56bf9174288b5051d8a3218b939c4bb7eec551d490ee68d56813", 0x1c}, {&(0x7f0000000640)="87a651939279c656f8bcb33fb6ed9a1747780c1085106338ecd1e05160217c9d392cf980b7607616ab1dfcdb26aa0b58e07df38b7d6fec69859ff83e3654b7144dd8b83ec5cbc6a0486b97f8e391c8eb853629ece34bfded0195655a79359281aff3bc928c22fcb524e42f8b1967b869e2c6b459d38114e9efa7be18a1cb742360efcdc12c980869aa6f8235918043954a983e89cec8c65173851f5471b1ba402ce35c098c99f1f842cb13016f491f22e7c73003c91e59fbe13e6495fb1b488dc73b2bc0fd120043554c50fde40c98eb6584", 0xd2}, {&(0x7f0000000740)="065845d12e63d54af719890c4579b1ac3c905c71469860c96ae2910272aba33a1e295b59845c8d276df3d5ad6c2695aa3f181595044b4a85a279effeeb3e369c880b4896f61cf19d889d6a98ce7cf1ea5c48d019d871c8dcc29e880c4bdade66b7996e025452142eddcf78a7d3bb569892aac86bf2d155f1c9e35f4cd1c3ba3f9848b8b00e6f5c52fd85771768f02ac2afcd78a566c000c11f03a0f41de09c58f34e133d60ab587a3f96b38624421715a00c175efeaa8202d505556f6b716affb3bb4ea7bd240dd6143de6e368704cadb88c1b45ef15fd000d80c7996e87bef4a87e4fbf823431d1153a1008e0cb81beb0973037940c7bd2168dd1cd5ae8c40622f151b7adfe7e9a766df4125c6812d701b0ac64d6c9dad5f791cbea54b0796535640ffefc714dfb69ff9c01f97a61e74d37334946794a24758a26f6aac10433ca03d61ce923a5e2937ed2d75fc52f690ebb13e15e523396643fad6e5bee8e93e9385cea0a5d72acc6edbba919a2996fdbe024bf542df636b9706cc35fc281a86c229931405be5853f9b6b069d65553305ef4075644d254aec15ccf02478753b26e7ba4a85b721213ebc3ccdee9d97fdce09fa303a3bd1028698763179afbf87010a92b6573ce1d7b9e9522d28aa3636c65404ba3fb5079f9f00c21d0d555497aaa58eb1aa4a8f33928f30bb550014e1f15ea334ee0d4e988a7e1dd6bc399f03d39986d8f5acae464739eec09b1c145d0e8b9cc03ae28fffde0bb88d50e536db9d522331832a3a8c8f37bdae475d3c12562da6db12fde1971b8ce76332fd437f41481872aedb75656c025162216abe17330d59236ce608b27b7fe3571c935b36c2538c4145349c2bafee4cf2e70c9acb2345aaa3826a26dd8f57f02e54bdddb8993639a91ce155642a8e1ed8eaf46dc0c082b89d7c8be088ff2f9a5745d402de3f4e86379255ebaee756ad9b6c1563d284f60192bb4d94e3c0c6c888a7cc044e963c0c4e834f69afd1fe3f4aedd0475131ca758488ac2eaabb193524f0e3e9cf7e7f0412299b07052417172a0d38170365234af472aa0bae3632834d9bf2590730049b03e046878d2e3d044118d44e4010ebf8848278af834b9ca95a32051bc7185c3359e548b9a43cc5ef20fe9d93ee68b9971247812a480c56d02b360552e491a6ec281043cff7d12b94c72fb3bbf3167180ad7f29ad8cf33ed0ab4ae671e10984c50721ea807e1f709140bf2f6a5ce66eb8620b1f0993bd7ad9a0a36072d0303344a615d06690dd2b58eaa8b6a42aefcc807f236605caee5185c899ef2737c3969ea1c1226e7407d206f91d743d119a522fe589c6eb50ed94c4098afba94c0ae1e00cef2efa5ad17b70e22b413cdf2ebbfc607b798523203ec29e0c6e78b474cbfbb6df6d326d452620d38a4616efbfbff469604ee5f31af1073ca383743deb1f6dd0ac93cc496a730071ea32f028112a35d63fb2480e25a46f7ef1d75b504aa2a250c16450686c9ecad104693ce21b1c17730fece759a5fee2fd7652343e94f66a425cd6b5bdd73c12262c4be7434235dbda355edb5a75ef025101cfb78f8d9d4976592d6ff4c5e2fe6cc75e437f6ca54500eab1ea5f8ad7fee125f60b07ae0aa03c8d45ac98ca7a2920fedf72c9fdd60f56a4f768811dc48f8be7ec36e573073f2e5a99cc72cd3fb3a73358065b451dba0a88c9d4eaf3ea29238d78abff652694741926f29b3f3987ac1524c6cd92b5846376160c89b1c1aac59f08f9d51668641842d0deb0b23e17ad93792e39362d697842c0f5329de07e65a78c25553d45f687be4bfdcd4ac88d73510655f834edb2281d40778c1033fca73eee8187651d79b825a8611a0c64ee5c4f39298d1bc0272afcf00e0b81a2c3bab4ed39ba61202f400f17f20c70bc29ef358e569a61dfebdced6884ecf05b89ae1985531848de39bb21bdeb09987a301a264f0fc77a8622ccef08b0bb906e3c3072e3265bdca0ff2a48a35626247af8fc7eb9e573c1461ce7beb88db8ef9ba65f2651c30470eaff1f9a74ee39adb18cbf3fa3e04d57f4b5be580725bfb09eebfd8da43910e00b24dbf50848f45a842be853f7d4916e1d899f9423baaf1518da2a0c88f4f700d65c9934dca7e9b50aab527b4433e9a196e7887e489bcc013807b09cbbb1f2cfd4ce2a9bb034fc05a4da9bdae49dbfa86d2b804daa9cea620fd1176ffa5260d914f9a157189b4808811527e97aceb042617ef432abcc8159cf03fbcac8ed9e58177707982f5e5431a1764d01cbddf87a55898f8ff50b0dfd77f8cc73a9cc42b9ceaf9770b9b2ef60f0cd73e109ad64427db4786d69cb11ae07f921f281a0596a1dd6e4303f711d595a40409aaec54178f3140e172ffdfb2506786f4fb3f779692b8879be737565f401c1d2ab0d9406394cc5357e75ce6329af038d8ef6326deaa16a0febc7fceaa1af0bb35cd024a6b5260b0e8ddf68d3cc586651df5eff839b0f5a16e540bb84293f38d8097f51f2cd0f2d00919c5ec4ae4496933fb22aa6f1e1c542214aba690cb4df3b09a217f7108adf56f36f9a27e72ec7671385e403e53ce245a63f45db24eabbe63b36c7e5165e7770b863a14d0ab246b530e34fe418a779c0c5105b7ec0707c9775f90123cbc190b9c78e62fb34af071dda26211a3e70dd48da8cc255d58beb4ad2c9a200306cf7cdd8e746c3225d980c6262901282bb35da21cf84d8759d63495a1c0ebb1a9147d3d43f4af2bf1d15f52ed3692662a7332326093c6db84ef6adfda64e5959540875e2426065c17eafdb58fe25dce47208e6f36a7f66de59ca29dd9dbeadf30c6e59189b838c59dee07d97822c0047b55054b2e3068c4dc455e40ac4d1c0c9b8f718ce73f9aa20cf9f5e2acd83c2ddcd2fc7757fd60b763b03d5361fff829aa69f1d4a460a6b08f8b26de043b3f8023466d55f3c64f5ac12171b5ee81753206fdc776860ee5bf3fe14c86f302dc8bc72f8ac4d5f4c5657b605c2f963ccf17b002ff80861dd5cb6c821185327ebd1f89aeb2b6afb8b67a00e4be10278e6ca886af12af276762465a6a25a45252a7c14290e4ee574304f44388481863012d37301b06885ed51dda779982d1148bb67d29199df0232937c94366a17c10bcce37cec36c31831163ae4b01b6a57c9e8082709ec792f9532c0568ef290e40563685999ea7650bf7b2d6dd87bbdab7df728cac9f19f9889b8dde7991e7a2b5cc4a5f45bc46783afde2b93c534a498023d3bec5132b58c43d8eeace2a14a6cbed3bc0ea203ad3d43e3ffba79c891cb698ce92305b58ae54631ac1a13ab0f3d04e9681e0e43f3b4c70f304e1264f6795d6bb2627b85c1b823e5189a2cd71e47c023fbd8ea728948ab24fb9bed4944742409bdd241425142c3cbea1196032abb6a1efb5bd7f1df9b0523729667755e67e77bcb076aaf986a38529b0e218cde900d0b40db8c9ac6b287c13a018aeeb464d6152b7aedc17679e06c124d23110e26126b8728624b606e652ec72c9b53443de3260a545934114fda87ebc5d0fbee33faca18741fd6c5617558551dee9b54f37418e5238f730b45d497f1cbd021d6d9b93811ba129cc5dee37c78fafc8e4d4d9583274c287eea71c01c96798973324be65b9790f4c714f7eca99a6c5cbdfa48929bb82f1689f617bcaac15985a3a52e891780f6925ecd2668d38a8bfb9143916a05311e6e62f5d7ba545df5a3f76eba4b1d346b59935434b1ce06e7398a01ecca8200c807b1e7091eb69a369ec3806373a6a464725f8c974d2fd3e2c403e46e6e632030c1ad501cfffacf85ad83d3477e3a9c3be3e117f95893459a23e9fc0fbdd5c7b2d338e726ffde19f0074ce81831c8902baae5cad7563d23da6f3b643512e36421148db55bf9cdced6777d56bc23adae7545842788c6ffec91672a40135d76de42826ebc3991c49c8da26f228406478ce7d4f7f8f997b23f6b64fe321e95210aa353f29ff8725f10ae651350581978001383eb961b87fa014794f3cbfc33ee83a07c6ef6a929adff285feda1ffabfaf551198cd9b593ea179ad4424e2326b2e14ae732f756de45ba24a975bd9f560ffa8ce2d6e6a4b6e6e72329488f71f88609869d0e20980da07be88983f7c0c08791a3cbb4ef2bec1d7114ff308ee9f05dcaaa19fc44d3c9fa49e68ed341e957d7812f73b561182c2f48e1e9a4fc31b2309c17c0a4993bdf712d72724230bc32b8adb1245d81924bfa79063a4bc00c22ef9bd16efb288da2404fb9de99f7ce530e3f3c13f428bb7f6b63364bd6e43d38efb41824deee60da610e0d1e46ba4e1f9d516bdc482043faccc6277c57d4f99931c279a94a71d965a900637c7225458a1c4a6deeb4600526398bac02aa51337e24cc5a47953a71a273bfd1438226c5c64c62a37741cf6b027ecaeec4b3e11618911e85c525d2ad4d84b6e8bbaa1c085b376cf4e7ad10dad35740b7b2f7c352227d5c220bcc47a6c14c5f71975b9376cc8f16fe4db2060c42a70dd8a583cb895c78b6a82cc2ccabd5ae77f6b7a45f180071545c09e623ada653854577d165abee89f5f091698c1c6d8925ecd8585e474fe79cf6ab15d94b0ae55967fc742ffb3f3381b5630c669f49e63018c9baaf34b3c6530d30fb9375bc762313bdc2076532743f01e9641028b64ef110b91f1d6277d42a97fa3bd747f320fb32f61a557823e64f25a4c36f1f2113bccd74646f06c12a5d6d5e7322c71688836f9fe0a73829ee3e5ffaa40f59d2f510022a596675e02c9911de6f1d01718e0527fc8396843ca58ee511337a60309e0c6d5ee638e75ea478f27dbd1f69608def1ae7edc8b12966dac0e686a58339e406a5cb034fddca2390e00ea2e7cfa0c394f4646357c6645030936d435c30b941d06cc54783768351cad03405785f96ed484b3805c785cae2bb3b8e003d01f360772fba3471bbbbe915d7c7770d420255ad4f3468c957ce596d3905cbade6eb85cde2eaf434ef83d1d64d69523753bdbbfa2f4958a4a0917d706c0a75ce5c70065cb1e6feab5f3cb4a3b2b64b7c3c58fe2fdbb5b651d09314ebeb3c9376b6b821926e7427d78731d19874832556ba1a9b1af719357191f55dfccc688701c4086642620996affb46682b5153235f8fc5352b5bd90e969f659445beefcdcff8627f9c236db6d1b5228e106b2e3277752df6c689c433dfd219211e213cee97851360f06b8c0c3353cd73d3c974468bccbdc590084f1c36ce01967dd87549138a426095d7778b291e13c7f3a7d53caf5eaf8430941fa65e9c08a2d68ff607b3c6e44cd503f6540e23bd36d6a2e89fdb105933172a267d879338170b21a30f1ecf8f62c644aac7de96e7e557baec0cd7ef8df85d7366b67d90673979021036fe0c0134b1b2d4a870a411e5da79532d2275b0f54cd4824baa9ae931a4351b4268eac67dea083414fea0b72f0b970015df819b11888fe2a32317bbb286fb81eac5a0a04ab3e4b1c8692458486b2dc8fcfdbe3a2b79ff2411fbe16f856914b5644c15ddb746e57bf6710e73902c3ff9c715c3185eb1933ec32ff59c71b4b52f9d519988eac43aed3339a1fd778e7d955fb5ad0d97cf8f4c34445c410bd2ce6d849f5dc1cdc7ba61b69216fa9ba85b47934a84194788915b0e1065c3a2ac04db509de0fdbcf18e7a588ebd418094534d15711353d466bcf1bf06378997f7bd298e2215f45fd8e32d765a51b7c8f71ac38bdebf9324572aa7028e43e61778c5fe483c91315d6423bbea2c01e2320aae08889695f94980eab89c2e3b87cd21", 0x1000}], 0x3, &(0x7f0000001780)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x9389a8624a43df49}, @op={0x10}, @iv={0x28, 0x117, 0x2, 0x16, "93a6e89100f04eb83d825b9b7afc3c5569fba2c9b575"}, @assoc={0x10, 0x117, 0x4, 0xf}], 0x88, 0xc020}], 0x3, 0x4040000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86) read$FUSE(r7, &(0x7f0000002880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r8, 0xa, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) 2.721195195s ago: executing program 2 (id=817): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0xfffffffffffffce2) getsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000140)=""/50, &(0x7f0000000080)=0x32) syz_open_pts(r1, 0x18182) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a8500"], 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004040), r8) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f00000040c0)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r9, 0x142de9583646687c, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @val={0xc, 0x99, {0x1, 0x60}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4801) sendmmsg$inet6(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) 1.829359522s ago: executing program 1 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf250700", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aa"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) 1.745390618s ago: executing program 0 (id=819): r0 = memfd_secret(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x11) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x8}, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x2}, r5, 0xfffffe4d}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @empty, 0x4f322864}, {0xa, 0x4e24, 0x9, @remote, 0x5000803}, r5, 0xfffffff8}}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7854}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="c259c50000000000004bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) 1.708542736s ago: executing program 1 (id=820): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000680)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000625000/0x3000)=nil, &(0x7f0000919000/0x2000)=nil, 0xc3, &(0x7f0000000080)=[{0x35, 0x0, 0x10000}, {0xffff, 0x20000000000000, 0x2}], 0xaaaaaaaaaaaac82, 0x8, 0x0, 0x0, 0x8, 0x20}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.585825536s ago: executing program 3 (id=821): syz_emit_ethernet(0x56, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa25001c3a00fc010000000000000000000000000000fe8800000000000000000000090000009c0090780008f8452001000040000000000000"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x200000000000004a) r2 = syz_usbip_server_init(0x4) fcntl$setlease(r2, 0x400, 0xb6357908be8c12a0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000300)=""/42, 0x2a}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x32, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000040)) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x23}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000) 961.452827ms ago: executing program 2 (id=822): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(0x0, 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x78bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa2e19}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 343.249422ms ago: executing program 0 (id=823): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 113.117069ms ago: executing program 0 (id=824): r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) msgctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 0s ago: executing program 0 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): type=1326 audit(1780369540.999:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.842361][ T40] audit: type=1326 audit(1780369540.999:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.852234][ T40] audit: type=1326 audit(1780369541.008:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.865852][ T40] audit: type=1326 audit(1780369541.027:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.878996][ T40] audit: type=1326 audit(1780369541.027:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.888000][ T40] audit: type=1326 audit(1780369541.027:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.902078][ T40] audit: type=1326 audit(1780369541.027:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.921082][ T40] audit: type=1326 audit(1780369541.027:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.937135][ T40] audit: type=1326 audit(1780369541.036:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7156 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 150.986803][ T7161] 9pnet_virtio: no channels available for device syz [ 151.047979][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.291'. [ 151.937521][ T7185] can0: slcan on ttyS3. [ 152.102034][ T7180] can0 (unregistered): slcan off ttyS3. [ 153.383070][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 153.386711][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 154.231994][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 154.672367][ T7260] FAULT_INJECTION: forcing a failure. [ 154.672367][ T7260] name failslab, interval 1, probability 0, space 0, times 0 [ 154.672410][ T7260] CPU: 3 UID: 0 PID: 7260 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(full) [ 154.672430][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.672440][ T7260] Call Trace: [ 154.672446][ T7260] [ 154.672453][ T7260] dump_stack_lvl+0x100/0x190 [ 154.672476][ T7260] should_fail_ex.cold+0x5/0xa [ 154.672499][ T7260] should_failslab+0xc2/0x120 [ 154.672521][ T7260] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 154.672548][ T7260] ? __rds_conn_create+0x72c/0x25a0 [ 154.672581][ T7260] __rds_conn_create+0x72c/0x25a0 [ 154.672618][ T7260] ? __pfx___rds_conn_create+0x10/0x10 [ 154.672642][ T7260] ? rcu_is_watching+0x12/0xc0 [ 154.672663][ T7260] ? trace_kmalloc+0xe3/0x110 [ 154.672682][ T7260] ? lockdep_init_map_type+0x5c/0x250 [ 154.672714][ T7260] rds_conn_create_outgoing+0x44/0x60 [ 154.672744][ T7260] rds_sendmsg+0x10da/0x3480 [ 154.672775][ T7260] ? __pfx_rds_sendmsg+0x10/0x10 [ 154.672801][ T7260] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.672845][ T7260] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 154.672868][ T7260] ? ____sys_sendmsg+0x9e1/0xb70 [ 154.672890][ T7260] ____sys_sendmsg+0x9e1/0xb70 [ 154.672911][ T7260] ? __pfx_rds_sendmsg+0x10/0x10 [ 154.672933][ T7260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.672965][ T7260] ___sys_sendmsg+0x190/0x1e0 [ 154.672991][ T7260] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.673025][ T7260] ? find_held_lock+0x2b/0x80 [ 154.673062][ T7260] __sys_sendmsg+0x170/0x220 [ 154.673081][ T7260] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.673120][ T7260] ? __fget_files+0x21f/0x3d0 [ 154.673151][ T7260] ? ksys_write+0x1ac/0x250 [ 154.673174][ T7260] ? rcu_is_watching+0x12/0xc0 [ 154.673197][ T7260] __do_fast_syscall_32+0xe7/0x970 [ 154.673222][ T7260] ? lockdep_hardirqs_on+0x78/0x100 [ 154.673247][ T7260] do_fast_syscall_32+0x32/0x70 [ 154.673272][ T7260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.673294][ T7260] RIP: 0023:0xf7f07f7c [ 154.673309][ T7260] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 154.673331][ T7260] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 154.673349][ T7260] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001600 [ 154.673360][ T7260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.673370][ T7260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.673379][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.673389][ T7260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.673412][ T7260] [ 154.872352][ T5968] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.046042][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 155.051859][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.058004][ T5968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.062332][ T5968] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 155.065446][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.075038][ T5968] usb 5-1: config 0 descriptor?? [ 155.249761][ T7277] input: syz0 as /devices/virtual/input/input6 [ 155.289323][ T7277] warning: `syz.2.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.553508][ T5968] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:5543:0042.0002/input/input7 [ 155.625269][ T5968] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:5543:0042.0002/input/input8 [ 155.677691][ T5968] uclogic 0003:5543:0042.0002: input,hidraw1: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 155.877204][ T7261] binder: 7257:7261 ioctl c0306201 80000640 returned -22 [ 156.307615][ T7309] can0: slcan on ttyS3. [ 156.311124][ T7309] FAULT_INJECTION: forcing a failure. [ 156.311124][ T7309] name fail_futex, interval 1, probability 0, space 0, times 1 [ 156.316753][ T7309] CPU: 3 UID: 0 PID: 7309 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(full) [ 156.316770][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.316777][ T7309] Call Trace: [ 156.316781][ T7309] [ 156.316788][ T7309] dump_stack_lvl+0x100/0x190 [ 156.316811][ T7309] should_fail_ex.cold+0x5/0xa [ 156.316836][ T7309] should_fail_futex+0x4c/0x60 [ 156.316866][ T7309] futex_lock_pi_atomic+0xe7/0xaf0 [ 156.316886][ T7309] ? futex_hash+0x141/0x370 [ 156.316915][ T7309] futex_lock_pi+0x245/0x7a0 [ 156.316938][ T7309] ? __pfx_futex_lock_pi+0x10/0x10 [ 156.316959][ T7309] ? __lock_acquire+0x4a5/0x2630 [ 156.316991][ T7309] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 156.317011][ T7309] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.317026][ T7309] ? __might_fault+0xc5/0x140 [ 156.317043][ T7309] ? __might_fault+0xc5/0x140 [ 156.317087][ T7309] do_futex+0x18a/0x350 [ 156.317106][ T7309] ? __pfx_do_futex+0x10/0x10 [ 156.317122][ T7309] ? __fget_files+0x215/0x3d0 [ 156.317140][ T7309] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.317161][ T7309] __ia32_sys_futex_time32+0x2f4/0x470 [ 156.317176][ T7309] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 156.317189][ T7309] ? fput+0x79/0x100 [ 156.317204][ T7309] ? ksys_write+0x1ac/0x250 [ 156.317218][ T7309] ? rcu_is_watching+0x12/0xc0 [ 156.317232][ T7309] __do_fast_syscall_32+0xe7/0x970 [ 156.317249][ T7309] ? lockdep_hardirqs_on+0x78/0x100 [ 156.317265][ T7309] do_fast_syscall_32+0x32/0x70 [ 156.317282][ T7309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.317297][ T7309] RIP: 0023:0xf7f32f7c [ 156.317306][ T7309] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 156.317318][ T7309] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 156.317328][ T7309] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 000000000000000d [ 156.317335][ T7309] RDX: 0000000000000000 RSI: 0000000080000240 RDI: 0000000000000000 [ 156.317342][ T7309] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 156.317348][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.317354][ T7309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.317366][ T7309] [ 156.522544][ T7305] can0 (unregistered): slcan off ttyS3. [ 156.569268][ T7317] xt_limit: Overflow, try lower: 324384747/4200216962 [ 156.802796][ T34] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 157.032985][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 157.102744][ T7352] sctp: [Deprecated]: syz.2.340 (pid 7352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.102744][ T7352] Use struct sctp_sack_info instead [ 158.526125][ T7365] tipc: Started in network mode [ 158.527737][ T7365] tipc: Node identity ac14140f, cluster identity 4711 [ 158.533741][ T7365] tipc: Enabled bearer , priority 10 [ 158.663212][ T7371] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 158.674216][ T7371] netlink: 476 bytes leftover after parsing attributes in process `syz.2.349'. [ 158.685572][ T7371] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.349'. [ 158.832283][ T59] usb 5-1: USB disconnect, device number 10 [ 159.740809][ T3264] tipc: Node number set to 2886997007 [ 160.498584][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 160.502200][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 161.478538][ T7413] Bluetooth: MGMT ver 1.23 [ 161.548960][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 161.601262][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 161.649593][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 161.996069][ T7423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 161.998278][ T7423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.014517][ T7423] vhci_hcd vhci_hcd.0: Device attached [ 162.033856][ T7423] netlink: 'syz.1.361': attribute type 12 has an invalid length. [ 162.077565][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 162.396781][ T3264] usb 40-1: SetAddress Request (6) to port 0 [ 162.559056][ T3264] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 163.228311][ T59] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 163.402504][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 163.413985][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.423807][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.432542][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.445188][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.454639][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.463353][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.470655][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.476663][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.487669][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.495961][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.512160][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.518997][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.534965][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.542647][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.554640][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.568309][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.575052][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.581064][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.591034][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.599390][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.611527][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.618448][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.626154][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.638077][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 163.650454][ T59] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.656202][ T59] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.664294][ T59] usb 8-1: Product: syz [ 163.665751][ T59] usb 8-1: Manufacturer: syz [ 163.669730][ T59] usb 8-1: SerialNumber: syz [ 163.680030][ T59] usb 8-1: config 0 descriptor?? [ 163.705643][ T59] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 163.925589][ T59] usb 8-1: USB disconnect, device number 12 [ 163.946978][ T59] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 164.154091][ T7424] vhci_hcd: connection reset by peer [ 164.159063][ T103] vhci_hcd vhci_hcd.1: stop threads [ 164.162864][ T103] vhci_hcd vhci_hcd.1: release socket [ 164.167538][ T103] vhci_hcd vhci_hcd.1: disconnect device [ 164.239392][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 164.519328][ T59] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 164.706849][ T7465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 164.709250][ T7465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.717438][ T7465] vhci_hcd vhci_hcd.0: Device attached [ 164.726845][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 164.750568][ T7459] macvtap1: entered promiscuous mode [ 164.754446][ T7459] ip6gretap0: entered promiscuous mode [ 164.758786][ T7459] macvtap1: entered allmulticast mode [ 164.761773][ T7459] ip6gretap0: entered allmulticast mode [ 164.769161][ T7465] netlink: 'syz.0.373': attribute type 12 has an invalid length. [ 164.783520][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 164.800733][ T7468] ip6gretap0: left allmulticast mode [ 164.802568][ T7468] ip6gretap0: left promiscuous mode [ 165.200844][ T5829] usb 38-1: SetAddress Request (14) to port 0 [ 165.205888][ T5829] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 166.216128][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 166.224473][ T59] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 166.227919][ T59] usb 7-1: can't read configurations, error -71 [ 166.656800][ T7466] vhci_hcd: connection reset by peer [ 166.662030][ T216] vhci_hcd vhci_hcd.0: stop threads [ 166.665156][ T216] vhci_hcd vhci_hcd.0: release socket [ 166.667635][ T216] vhci_hcd vhci_hcd.0: disconnect device [ 166.923755][ T40] kauditd_printk_skb: 555 callbacks suppressed [ 166.923768][ T40] audit: type=1804 audit(1780369555.845:602): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.385" name="bus" dev="ramfs" ino=17761 res=1 errno=0 [ 167.747330][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 168.072867][ T7516] FAULT_INJECTION: forcing a failure. [ 168.072867][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 168.074912][ T7513] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 168.077117][ T7516] CPU: 2 UID: 0 PID: 7516 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(full) [ 168.077132][ T7516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.077139][ T7516] Call Trace: [ 168.077143][ T7516] [ 168.077148][ T7516] dump_stack_lvl+0x100/0x190 [ 168.077163][ T7516] should_fail_ex.cold+0x5/0xa [ 168.077178][ T7516] should_failslab+0xc2/0x120 [ 168.077192][ T7516] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 168.077210][ T7516] ? __d_alloc+0x34/0xa40 [ 168.077235][ T7516] __d_alloc+0x34/0xa40 [ 168.077259][ T7516] d_alloc+0x4a/0x1e0 [ 168.077301][ T7516] lookup_one_qstr_excl+0x171/0x250 [ 168.077327][ T7516] ? mnt_want_write+0x161/0x450 [ 168.077348][ T7516] filename_create+0x1cf/0x400 [ 168.077369][ T7516] ? __pfx_filename_create+0x10/0x10 [ 168.077389][ T7516] filename_mknodat+0x190/0x7f0 [ 168.077406][ T7516] ? __pfx_filename_mknodat+0x10/0x10 [ 168.077420][ T7516] ? strncpy_from_user+0x19d/0x2d0 [ 168.077438][ T7516] ? do_getname+0x191/0x390 [ 168.077456][ T7516] __ia32_sys_mknod+0x8e/0xc0 [ 168.077471][ T7516] __do_fast_syscall_32+0xe7/0x970 [ 168.077489][ T7516] ? lockdep_hardirqs_on+0x78/0x100 [ 168.077505][ T7516] do_fast_syscall_32+0x32/0x70 [ 168.077527][ T7516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.077543][ T7516] RIP: 0023:0xf708ef7c [ 168.077553][ T7516] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 168.077564][ T7516] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000000e [ 168.077575][ T7516] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000006002 [ 168.077582][ T7516] RDX: 0000000000000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.077589][ T7516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.077595][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.077601][ T7516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.077614][ T7516] [ 168.154624][ T7513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.157940][ T7513] vhci_hcd vhci_hcd.0: Device attached [ 168.181206][ T3264] usb 40-1: device descriptor read/8, error -110 [ 168.441315][ T1485] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 168.679792][ T1485] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 168.913219][ T7517] vhci_hcd: connection reset by peer [ 168.920160][ T229] vhci_hcd vhci_hcd.3: stop threads [ 168.922227][ T229] vhci_hcd vhci_hcd.3: release socket [ 168.924132][ T3264] usb usb40-port1: attempt power cycle [ 168.926260][ T229] vhci_hcd vhci_hcd.3: disconnect device [ 169.353391][ T7542] FAULT_INJECTION: forcing a failure. [ 169.353391][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.357456][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(full) [ 169.357470][ T7542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.357477][ T7542] Call Trace: [ 169.357481][ T7542] [ 169.357486][ T7542] dump_stack_lvl+0x100/0x190 [ 169.357500][ T7542] should_fail_ex.cold+0x5/0xa [ 169.357514][ T7542] _copy_to_user+0x32/0xd0 [ 169.357531][ T7542] vcs_read+0x7a2/0xc00 [ 169.357547][ T7542] ? __pfx_vcs_read+0x10/0x10 [ 169.357558][ T7542] ? bpf_lsm_file_permission+0x9/0x10 [ 169.357569][ T7542] ? security_file_permission+0x76/0x210 [ 169.357583][ T7542] ? iov_iter_advance+0xac/0x6d0 [ 169.357599][ T7542] ? rw_verify_area+0xce/0x6d0 [ 169.357610][ T7542] ? __pfx_vcs_read+0x10/0x10 [ 169.357620][ T7542] vfs_readv+0x5d8/0x8d0 [ 169.357635][ T7542] ? __pfx_vfs_readv+0x10/0x10 [ 169.357655][ T7542] ? __fget_files+0x21f/0x3d0 [ 169.357671][ T7542] ? do_readv+0x13e/0x340 [ 169.357681][ T7542] do_readv+0x13e/0x340 [ 169.357692][ T7542] ? __pfx_do_readv+0x10/0x10 [ 169.357702][ T7542] ? ksys_write+0x1ac/0x250 [ 169.357715][ T7542] ? rcu_is_watching+0x12/0xc0 [ 169.357730][ T7542] __do_fast_syscall_32+0xe7/0x970 [ 169.357746][ T7542] ? lockdep_hardirqs_on+0x78/0x100 [ 169.357762][ T7542] do_fast_syscall_32+0x32/0x70 [ 169.357779][ T7542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.357794][ T7542] RIP: 0023:0xf708ef7c [ 169.357803][ T7542] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 169.357814][ T7542] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 169.357825][ T7542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800021c0 [ 169.357831][ T7542] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.357837][ T7542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.357844][ T7542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.357850][ T7542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.357863][ T7542] [ 169.522058][ T7547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.398'. [ 169.525850][ T3264] usb usb40-port1: unable to enumerate USB device [ 169.800028][ T7552] netlink: 5 bytes leftover after parsing attributes in process `syz.3.399'. [ 169.885261][ T7555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 169.887626][ T7555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 169.892831][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 169.896488][ T7555] vhci_hcd vhci_hcd.0: Device attached [ 169.902013][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 169.917443][ T7555] netlink: 'syz.0.400': attribute type 12 has an invalid length. [ 170.186152][ T53] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 170.348683][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 170.352830][ T53] usb 8-1: config 0 has no interfaces? [ 170.355117][ T53] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 170.358794][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.365794][ T53] usb 8-1: config 0 descriptor?? [ 170.580545][ T7556] vhci_hcd: connection closed [ 170.581847][ T229] vhci_hcd vhci_hcd.0: stop threads [ 170.585082][ T229] vhci_hcd vhci_hcd.0: release socket [ 170.586799][ T229] vhci_hcd vhci_hcd.0: disconnect device [ 170.631494][ T7563] netlink: 72 bytes leftover after parsing attributes in process `syz.1.403'. [ 170.636375][ T7563] netlink: 84 bytes leftover after parsing attributes in process `syz.1.403'. [ 170.706560][ T5829] usb 38-1: device descriptor read/8, error -110 [ 171.314255][ T5829] usb usb38-port1: attempt power cycle [ 171.924599][ T5829] usb usb38-port1: unable to enumerate USB device [ 173.133348][ T10] usb 8-1: USB disconnect, device number 13 [ 173.228537][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 173.654217][ T10] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 173.818212][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 173.820651][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.824332][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.829107][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.833126][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.837507][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 173.840231][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.843971][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.847588][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.852925][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.857119][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 173.859592][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.863300][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.866842][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.870143][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.876593][ T10] usb 8-1: string descriptor 0 read error: -22 [ 173.878681][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.882536][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.898859][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.901220][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 173.906925][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 174.185259][ T5829] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.239503][ T1485] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 174.358654][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 174.362227][ T5829] usb 5-1: config 0 has no interfaces? [ 174.364236][ T5829] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 174.367260][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.373462][ T5829] usb 5-1: config 0 descriptor?? [ 174.572728][ T7654] syzkaller0: entered promiscuous mode [ 174.574780][ T7654] syzkaller0: entered allmulticast mode [ 174.585508][ T7654] input: syz1 as /devices/virtual/input/input12 [ 174.674670][ T7654] tipc: Enabled bearer , priority 0 [ 174.868070][ T5106] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.978936][ T5829] tipc: Resetting bearer [ 175.002574][ T5829] tipc: Disabling bearer [ 175.396213][ T7669] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 175.398887][ T7669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.405343][ T7669] vhci_hcd vhci_hcd.0: Device attached [ 175.430815][ T7669] netlink: 'syz.1.431': attribute type 12 has an invalid length. [ 175.702580][ T29] usb 40-1: SetAddress Request (10) to port 0 [ 175.705625][ T29] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 176.080844][ T7670] vhci_hcd: connection reset by peer [ 176.085121][ T70] vhci_hcd vhci_hcd.1: stop threads [ 176.087351][ T70] vhci_hcd vhci_hcd.1: release socket [ 176.104249][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 176.249031][ T7686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.437'. [ 176.249550][ T7686] binder: 7683:7686 ioctl c0306201 80000640 returned -22 [ 176.789202][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 177.221829][ T7695] FAULT_INJECTION: forcing a failure. [ 177.221829][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.227302][ T7695] CPU: 3 UID: 0 PID: 7695 Comm: syz.1.440 Not tainted syzkaller #0 PREEMPT(full) [ 177.227327][ T7695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.227338][ T7695] Call Trace: [ 177.227345][ T7695] [ 177.227353][ T7695] dump_stack_lvl+0x100/0x190 [ 177.227377][ T7695] should_fail_ex.cold+0x5/0xa [ 177.227401][ T7695] _copy_from_user+0x2e/0xd0 [ 177.227426][ T7695] kstrtouint_from_user+0xd6/0x1d0 [ 177.227445][ T7695] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 177.227463][ T7695] ? __lock_acquire+0x4a5/0x2630 [ 177.227501][ T7695] proc_fail_nth_write+0x83/0x220 [ 177.227530][ T7695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.227564][ T7695] vfs_write+0x2aa/0x1070 [ 177.227587][ T7695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.227617][ T7695] ? __pfx_vfs_write+0x10/0x10 [ 177.227636][ T7695] ? find_held_lock+0x2b/0x80 [ 177.227656][ T7695] ? __fget_files+0x215/0x3d0 [ 177.227682][ T7695] ? __fget_files+0x21f/0x3d0 [ 177.227710][ T7695] ksys_write+0x12a/0x250 [ 177.227730][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 177.227753][ T7695] ? rcu_is_watching+0x12/0xc0 [ 177.227784][ T7695] do_int80_emulation+0x14b/0x720 [ 177.227815][ T7695] asm_int80_emulation+0x1a/0x20 [ 177.227834][ T7695] RIP: 0023:0xf71061ab [ 177.227849][ T7695] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 177.227865][ T7695] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 177.227882][ T7695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53c65d0 [ 177.227894][ T7695] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.227904][ T7695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.227914][ T7695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.227924][ T7695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.227948][ T7695] [ 177.233338][ T1485] usb 5-1: USB disconnect, device number 11 [ 178.441468][ T7713] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 178.444427][ T7713] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.454945][ T7713] vhci_hcd vhci_hcd.0: Device attached [ 178.527651][ T7719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 178.530231][ T7719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.541482][ T7719] vhci_hcd vhci_hcd.0: Device attached [ 178.561914][ T7719] netlink: 'syz.2.445': attribute type 12 has an invalid length. [ 178.672133][ T1485] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 178.747942][ T1485] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 178.834716][ T53] usb 42-1: SetAddress Request (22) to port 0 [ 178.840342][ T53] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 179.166170][ T7720] vhci_hcd: connection reset by peer [ 179.168888][ T229] vhci_hcd vhci_hcd.2: stop threads [ 179.171569][ T229] vhci_hcd vhci_hcd.2: release socket [ 179.174143][ T229] vhci_hcd vhci_hcd.2: disconnect device [ 179.292318][ T7715] vhci_hcd: connection reset by peer [ 179.295323][ T229] vhci_hcd vhci_hcd.0: stop threads [ 179.298789][ T229] vhci_hcd vhci_hcd.0: release socket [ 179.301176][ T229] vhci_hcd vhci_hcd.0: disconnect device [ 179.626529][ T5994] usb 8-1: USB disconnect, device number 14 [ 179.688262][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 179.697577][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 180.094603][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 180.098594][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 180.200230][ T5994] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 180.536123][ T5994] usb 8-1: Using ep0 maxpacket: 16 [ 180.542418][ T5994] usb 8-1: config 0 has no interfaces? [ 180.548335][ T5994] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 180.554573][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.571940][ T5994] usb 8-1: config 0 descriptor?? [ 180.969773][ T5994] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 181.148799][ T5994] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.152916][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.159410][ T5994] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.164300][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.169171][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.175217][ T5994] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.179862][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.184351][ T5994] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.186439][ T29] usb 40-1: device descriptor read/8, error -110 [ 181.189605][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.196045][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.202243][ T5994] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 181.205250][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.209474][ T5994] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.214151][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.218475][ T5994] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.226302][ T5994] usb 5-1: string descriptor 0 read error: -22 [ 181.229027][ T5994] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.232880][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.245120][ T5994] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 181.609651][ T29] usb usb40-port1: attempt power cycle [ 182.281477][ T29] usb usb40-port1: unable to enumerate USB device [ 182.381925][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 182.391118][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 182.476366][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 182.479511][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 182.835583][ T5106] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.839218][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 183.154238][ T29] usb 8-1: USB disconnect, device number 15 [ 184.084441][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 184.307754][ T53] usb 42-1: device descriptor read/8, error -110 [ 184.307765][ T1485] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 184.482610][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 184.486041][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 184.731140][ T53] usb usb42-port1: attempt power cycle [ 185.282249][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 185.999238][ T53] usb usb42-port1: unable to enumerate USB device [ 186.137634][ T7842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 186.140274][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 186.142369][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 186.146314][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 186.152225][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 186.197121][ T7842] netlink: 'syz.1.481': attribute type 12 has an invalid length. [ 186.475301][ T53] usb 40-1: SetAddress Request (14) to port 0 [ 186.477405][ T53] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 186.787532][ T7845] vhci_hcd: connection reset by peer [ 186.822907][ T216] vhci_hcd vhci_hcd.1: stop threads [ 186.824682][ T216] vhci_hcd vhci_hcd.1: release socket [ 186.826504][ T216] vhci_hcd vhci_hcd.1: disconnect device [ 186.865539][ T1485] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 187.030429][ T1485] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 187.034650][ T1485] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 187.039732][ T1485] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 187.044505][ T1485] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 187.048965][ T1485] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 187.055932][ T1485] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 187.059775][ T1485] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.063300][ T1485] usb 8-1: Product: syz [ 187.065053][ T1485] usb 8-1: Manufacturer: syz [ 187.067371][ T1485] usb 8-1: SerialNumber: syz [ 187.073935][ T7859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 187.090463][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 187.100740][ T1485] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input13 [ 187.171606][ T5994] usb 5-1: USB disconnect, device number 12 [ 187.332062][ T1485] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 187.340070][ T1485] (id 0x00) [ 187.551341][ T1485] rc_core: IR keymap rc-imon-pad not found [ 187.555654][ T1485] Registered IR keymap rc-empty [ 187.569917][ T1485] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 187.581513][ T1485] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 187.603784][ T1485] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 187.615120][ T1485] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input14 [ 187.641035][ T1485] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:16> initialized [ 187.811028][ T29] usb 8-1: USB disconnect, device number 16 [ 187.837201][ T7877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 187.839354][ T7877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.849794][ T7877] vhci_hcd vhci_hcd.0: Device attached [ 187.875932][ T7877] netlink: 'syz.0.491': attribute type 12 has an invalid length. [ 188.253426][ T5829] usb 38-1: SetAddress Request (18) to port 0 [ 188.258507][ T5829] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 188.368709][ T7878] vhci_hcd: connection reset by peer [ 188.374578][ T58] vhci_hcd vhci_hcd.0: stop threads [ 188.376443][ T58] vhci_hcd vhci_hcd.0: release socket [ 188.379588][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 188.675471][ T59] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 188.838551][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 188.843090][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.846882][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.851769][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.855690][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.859364][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.864975][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.869020][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.873907][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.879839][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.885595][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.889336][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.894757][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.898711][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.902363][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.907201][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.911007][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.915080][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.920252][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.924388][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.928277][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.932964][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.936915][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.940680][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.945217][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 188.950415][ T59] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 188.954157][ T59] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 188.957864][ T59] usb 8-1: Product: syz [ 188.959595][ T59] usb 8-1: Manufacturer: syz [ 188.961575][ T59] usb 8-1: SerialNumber: syz [ 188.965518][ T59] usb 8-1: config 0 descriptor?? [ 188.983472][ T59] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.199013][ T34] usb 8-1: USB disconnect, device number 17 [ 189.216749][ T34] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 189.226772][ T7895] __nla_validate_parse: 3 callbacks suppressed [ 189.226784][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 189.347282][ T59] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 189.516335][ T59] usb 7-1: unable to get BOS descriptor or descriptor too short [ 189.524246][ T59] usb 7-1: not running at top speed; connect to a high speed hub [ 189.530756][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.538548][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.548186][ T59] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 189.553422][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.564054][ T59] usb 7-1: Product: syz [ 189.565776][ T59] usb 7-1: Manufacturer: syz [ 189.567705][ T59] usb 7-1: SerialNumber: syz [ 189.823480][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.831611][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.935773][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 189.939374][ T7887] netlink: 44 bytes leftover after parsing attributes in process `syz.2.498'. [ 190.003434][ T59] usb 7-1: USB disconnect, device number 10 [ 190.029362][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.833883][ T7910] FAULT_INJECTION: forcing a failure. [ 190.833883][ T7910] name failslab, interval 1, probability 0, space 0, times 0 [ 190.842363][ T7910] CPU: 3 UID: 0 PID: 7910 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT(full) [ 190.842404][ T7910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.842416][ T7910] Call Trace: [ 190.842423][ T7910] [ 190.842430][ T7910] dump_stack_lvl+0x100/0x190 [ 190.842453][ T7910] should_fail_ex.cold+0x5/0xa [ 190.842473][ T7910] should_failslab+0xc2/0x120 [ 190.842494][ T7910] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 190.842521][ T7910] ? __alloc_skb+0x140/0x710 [ 190.842542][ T7910] __alloc_skb+0x140/0x710 [ 190.842556][ T7910] ? __alloc_skb+0x5b7/0x710 [ 190.842569][ T7910] ? __pfx___alloc_skb+0x10/0x10 [ 190.842586][ T7910] ? __local_bh_enable_ip+0x9e/0x120 [ 190.842610][ T7910] kcm_sendmsg+0x2493/0x3120 [ 190.842640][ T7910] ? aa_sk_perm+0x309/0xaa0 [ 190.842668][ T7910] ? __pfx_kcm_sendmsg+0x10/0x10 [ 190.842691][ T7910] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 190.842719][ T7910] sock_write_iter+0x524/0x5a0 [ 190.842741][ T7910] ? __pfx_kcm_sendmsg+0x10/0x10 [ 190.842778][ T7910] ? __pfx_sock_write_iter+0x10/0x10 [ 190.842798][ T7910] ? get_pid_task+0xfc/0x250 [ 190.842827][ T7910] ? bpf_lsm_file_permission+0x9/0x10 [ 190.842844][ T7910] ? security_file_permission+0x76/0x210 [ 190.842867][ T7910] ? rw_verify_area+0xce/0x6d0 [ 190.842887][ T7910] vfs_write+0x6ac/0x1070 [ 190.842907][ T7910] ? __pfx_sock_write_iter+0x10/0x10 [ 190.842931][ T7910] ? __pfx_vfs_write+0x10/0x10 [ 190.842945][ T7910] ? find_held_lock+0x2b/0x80 [ 190.842980][ T7910] ksys_write+0x1f8/0x250 [ 190.842999][ T7910] ? __pfx_ksys_write+0x10/0x10 [ 190.843017][ T7910] ? ksys_write+0x1ac/0x250 [ 190.843038][ T7910] ? rcu_is_watching+0x12/0xc0 [ 190.843060][ T7910] __do_fast_syscall_32+0xe7/0x970 [ 190.843081][ T7910] ? lockdep_hardirqs_on+0x78/0x100 [ 190.843106][ T7910] do_fast_syscall_32+0x32/0x70 [ 190.843145][ T7910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.843167][ T7910] RIP: 0023:0xf7f32f7c [ 190.843181][ T7910] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 190.843195][ T7910] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 190.843211][ T7910] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000140 [ 190.843221][ T7910] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 190.843231][ T7910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.843240][ T7910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.843250][ T7910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.843273][ T7910] [ 191.985261][ T53] usb 40-1: device descriptor read/8, error -110 [ 193.220863][ T53] usb usb40-port1: attempt power cycle [ 193.241936][ T7936] tc action pedit unable to extract header offset for header type (0x5) [ 193.246367][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.510'. [ 193.355906][ T7940] 0x0000fffffffd-0x00010000fffd : "" [ 193.357787][ T7940] mtd: partition "" is out of reach -- disabled [ 193.370120][ T7940] ftl_cs: FTL header not found. [ 193.442458][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x148000) [ 193.695068][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 193.702557][ T1129] ata1: failed to read log page 10h (errno=-5) [ 193.710629][ T1129] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 193.717629][ T1129] ata1.00: irq_stat 0x41000000 [ 193.719581][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 193.727546][ T1129] ata1.00: cmd 60/40:f0:a6:9a:03/0a:00:00:00:00/40 tag 30 ncq dma 1343488 in [ 193.727546][ T1129] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 193.740078][ T1129] ata1.00: status: { DRDY } [ 193.741961][ T1129] ata1.00: error: { ABRT } [ 193.748840][ T1129] ata1.00: configured for UDMA/100 [ 193.751415][ T1129] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 193.755212][ T1129] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 193.758637][ T1129] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 193.762586][ T1129] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 9a a6 00 0a 40 00 [ 193.767343][ T1129] I/O error, dev sda, sector 236198 op 0x0:(READ) flags 0x80700 phys_seg 83 prio class 2 [ 193.772297][ T1129] ata1: EH complete [ 193.911285][ T5829] usb 38-1: device descriptor read/8, error -110 [ 193.914430][ T53] usb usb40-port1: unable to enumerate USB device [ 194.013647][ T7961] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 194.015677][ T7961] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.018760][ T7961] vhci_hcd vhci_hcd.0: Device attached [ 194.036710][ T7961] netlink: 'syz.2.512': attribute type 12 has an invalid length. [ 194.094297][ T59] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.256805][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 194.261845][ T59] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 194.264780][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.267390][ T59] usb 5-1: Product: syz [ 194.269034][ T59] usb 5-1: Manufacturer: syz [ 194.275607][ T59] usb 5-1: SerialNumber: syz [ 194.423014][ T5829] usb usb38-port1: attempt power cycle [ 194.430469][ T53] usb 42-1: SetAddress Request (26) to port 0 [ 194.433202][ T53] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 194.533723][ T59] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 194.538344][ T59] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.541823][ T59] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 194.544799][ T59] usb 5-1: media controller created [ 194.575116][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.839331][ T59] zl10353_read_register: readreg error (reg=127, ret==-110) [ 194.927815][ T7962] vhci_hcd: connection reset by peer [ 194.930135][ T58] vhci_hcd vhci_hcd.2: stop threads [ 194.931686][ T58] vhci_hcd vhci_hcd.2: release socket [ 194.933571][ T58] vhci_hcd vhci_hcd.2: disconnect device [ 195.081300][ T5829] usb usb38-port1: unable to enumerate USB device [ 195.130204][ T59] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 195.143460][ T59] usb 5-1: USB disconnect, device number 13 [ 195.147813][ T5856] usb 6-1: new high-speed USB device number 9 using dummy_hcd qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x275000) [ 195.298041][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 195.300801][ T1129] ata1: failed to read log page 10h (errno=-5) [ 195.303487][ T1129] ata1.00: NCQ disabled due to excessive errors [ 195.305963][ T1129] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 195.309467][ T1129] ata1.00: irq_stat 0x41000000 [ 195.311365][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 195.314187][ T1129] ata1.00: cmd 60/a8:58:6e:32:01/13:00:00:00:00/40 tag 11 ncq dma 2576384 in [ 195.314187][ T1129] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 195.322031][ T1129] ata1.00: status: { DRDY } [ 195.323976][ T1129] ata1.00: error: { ABRT } [ 195.326742][ T1129] ata1.00: configured for UDMA/100 [ 195.329209][ T1129] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 195.333297][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 195.335948][ T1129] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 195.340191][ T1129] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 195.345809][ T1129] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 32 6e 00 13 a8 00 [ 195.348674][ T1129] I/O error, dev sda, sector 78446 op 0x0:(READ) flags 0x80700 phys_seg 83 prio class 2 [ 195.354440][ T5856] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 195.357476][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.360124][ T1129] ata1: EH complete [ 195.366983][ T5856] usb 6-1: Product: syz [ 195.376322][ T5856] usb 6-1: Manufacturer: syz [ 195.378203][ T5856] usb 6-1: SerialNumber: syz [ 195.491778][ T7974] netlink: 88 bytes leftover after parsing attributes in process `syz.0.519'. [ 195.500192][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 195.538620][ T7974] veth3: entered promiscuous mode [ 195.540855][ T7974] veth3: entered allmulticast mode [ 195.551024][ T7974] syzkaller1: entered promiscuous mode [ 195.552962][ T7974] syzkaller1: entered allmulticast mode [ 195.616068][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 195.636334][ T5856] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 195.651474][ T5856] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.660809][ T5856] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 195.668467][ T5856] usb 6-1: media controller created [ 195.684600][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.928628][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 196.074261][ T7990] 0x0000fffffffd-0x00010000fffd : "" [ 196.076782][ T7990] mtd: partition "" is out of reach -- disabled [ 196.097110][ T7990] ftl_cs: FTL header not found. [ 196.468591][ T5856] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 196.478753][ T5856] usb 6-1: USB disconnect, device number 9 syzkaller syzkaller login: [ 196.955547][ T5856] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 197.107707][ T5994] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.121311][ T5856] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.125797][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.130525][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.136635][ T5856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.152010][ T5856] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.156449][ T5856] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.160356][ T5856] usb 6-1: Manufacturer: syz [ 197.171536][ T8006] FAULT_INJECTION: forcing a failure. [ 197.171536][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 197.177095][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 197.177119][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.177131][ T8006] Call Trace: [ 197.177138][ T8006] [ 197.177147][ T8006] dump_stack_lvl+0x100/0x190 [ 197.177174][ T8006] should_fail_ex.cold+0x5/0xa [ 197.177201][ T8006] should_failslab+0xc2/0x120 [ 197.177224][ T8006] __kmalloc_cache_noprof+0x7a/0x6f0 [ 197.177253][ T8006] ? fuse_dentry_init+0x45/0x140 [ 197.177273][ T8006] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 197.177302][ T8006] ? __d_alloc+0x34/0xa40 [ 197.177326][ T8006] ? __pfx_fuse_dentry_init+0x10/0x10 [ 197.177350][ T8006] fuse_dentry_init+0x45/0x140 [ 197.177373][ T8006] ? __pfx_fuse_dentry_init+0x10/0x10 [ 197.177396][ T8006] __d_alloc+0x5fe/0xa40 [ 197.177424][ T8006] d_alloc+0x4a/0x1e0 [ 197.177451][ T8006] lookup_one_qstr_excl+0x171/0x250 [ 197.177479][ T8006] ? mnt_get_write_access+0x52/0x2f0 [ 197.177511][ T8006] __start_renaming+0x16d/0x520 [ 197.177546][ T8006] filename_renameat2+0x538/0xa60 [ 197.177578][ T8006] ? __pfx_filename_renameat2+0x10/0x10 [ 197.177608][ T8006] ? __might_fault+0xc5/0x140 [ 197.177666][ T8006] ? do_getname+0x191/0x390 [ 197.177695][ T8006] __ia32_sys_rename+0x80/0xb0 [ 197.177723][ T8006] __do_fast_syscall_32+0xe7/0x970 [ 197.177751][ T8006] ? lockdep_hardirqs_on+0x78/0x100 [ 197.177779][ T8006] do_fast_syscall_32+0x32/0x70 [ 197.177808][ T8006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.177830][ T8006] RIP: 0023:0xf7f47f7c [ 197.177848][ T8006] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 197.177866][ T8006] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 197.177888][ T8006] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 197.177898][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.177910][ T8006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.177922][ T8006] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.177932][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.177957][ T8006] [ 197.203180][ T5856] usb 6-1: config 0 descriptor?? [ 197.320451][ T8007] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 197.327878][ T8007] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 197.335054][ T8007] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 197.391819][ T8007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.415338][ T8007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 197.497831][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 197.522675][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.531'. [ 197.889604][ T5856] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 197.953567][ T5856] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 198.034313][ T5994] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 198.050028][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.052628][ T5994] usb 5-1: Product: syz [ 198.061168][ T5994] usb 5-1: Manufacturer: syz [ 198.062779][ T5994] usb 5-1: SerialNumber: syz [ 198.079822][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.534'. [ 198.261542][ T8030] 9pnet_fd: Insufficient options for proto=fd [ 198.305391][ T5994] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 198.336008][ T5994] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.340725][ T5842] usb 6-1: USB disconnect, device number 10 [ 198.357913][ T5994] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 198.367592][ T5994] usb 5-1: media controller created [ 198.401149][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.635783][ T5994] zl10353_read_register: readreg error (reg=127, ret==-110) [ 198.816624][ T5994] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 198.826285][ T5994] usb 5-1: USB disconnect, device number 14 [ 198.994291][ T8037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 198.996886][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.000130][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 199.188009][ T5842] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 199.253055][ T5842] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 199.804403][ T8039] vhci_hcd: connection reset by peer [ 199.811804][ T58] vhci_hcd vhci_hcd.0: stop threads [ 199.814170][ T58] vhci_hcd vhci_hcd.0: release socket [ 199.817303][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 199.914319][ T53] usb 42-1: device descriptor read/8, error -110 [ 200.015614][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 200.021542][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 200.092951][ T8053] loop2: detected capacity change from 0 to 7 [ 200.100299][ T8053] Dev loop2: unable to read RDB block 7 [ 200.102586][ T8053] loop2: unable to read partition table [ 200.104967][ T8053] loop2: partition table beyond EOD, truncated [ 200.108705][ T8053] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.148613][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 200.224197][ T8057] syzkaller0: entered promiscuous mode [ 200.226144][ T8057] syzkaller0: entered allmulticast mode [ 200.232984][ T8057] input: syz1 as /devices/virtual/input/input15 [ 200.337671][ T53] usb usb42-port1: attempt power cycle [ 200.455986][ T5994] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 200.523591][ T5764] Bluetooth: hci2: command 0x0406 tx timeout [ 200.525822][ T5765] Bluetooth: hci3: command 0x0406 tx timeout [ 200.528118][ T5765] Bluetooth: hci0: command 0x0406 tx timeout [ 200.528136][ T5766] Bluetooth: hci1: command 0x0406 tx timeout [ 200.555874][ T8059] netlink: 'syz.2.543': attribute type 11 has an invalid length. [ 200.619839][ T5994] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 200.625420][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.633044][ T5994] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.638121][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.642227][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.647309][ T5994] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 200.650657][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.655876][ T5994] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.660824][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.666673][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.671192][ T5994] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 200.674546][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.678069][ T5994] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.681764][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.687063][ T5994] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.693338][ T5994] usb 6-1: string descriptor 0 read error: -22 [ 200.695954][ T5994] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.698987][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.711310][ T5994] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.802784][ T5968] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 200.889538][ T5856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.945210][ T53] usb usb42-port1: unable to enumerate USB device [ 200.965320][ T5968] usb 8-1: Using ep0 maxpacket: 16 [ 200.971330][ T5968] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 200.974695][ T5968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.978299][ T5968] usb 8-1: Product: syz [ 200.980104][ T5968] usb 8-1: Manufacturer: syz [ 200.982006][ T5968] usb 8-1: SerialNumber: syz [ 201.052060][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 201.059634][ T5856] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 201.064378][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.067710][ T5856] usb 5-1: Product: syz [ 201.069628][ T5856] usb 5-1: Manufacturer: syz [ 201.071775][ T5856] usb 5-1: SerialNumber: syz [ 201.237745][ T5968] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 201.255873][ T5968] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.266467][ T5968] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 201.272791][ T5968] usb 8-1: media controller created [ 201.296874][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.365040][ T5856] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 201.380612][ T5856] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.388788][ T5856] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 201.394687][ T5856] usb 5-1: media controller created [ 201.414565][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.540058][ T5968] zl10353_read_register: readreg error (reg=127, ret==-110) [ 201.824517][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 201.909679][ T5856] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 203.306566][ T5994] usb 6-1: USB disconnect, device number 11 [ 203.343815][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 203.611206][ T8089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 203.614066][ T8089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 203.628091][ T8089] vhci_hcd vhci_hcd.0: Device attached [ 203.645153][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.646290][ T8089] netlink: 'syz.1.550': attribute type 12 has an invalid length. [ 203.648873][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.900916][ T5968] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 203.908507][ T5856] usb 5-1: USB disconnect, device number 15 [ 203.935825][ T53] usb 40-1: SetAddress Request (18) to port 0 [ 203.941740][ T5968] usb 8-1: USB disconnect, device number 18 [ 203.945425][ T53] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 204.001048][ T8098] syzkaller0: entered promiscuous mode [ 204.003472][ T8098] syzkaller0: entered allmulticast mode [ 204.009071][ T8098] input: syz1 as /devices/virtual/input/input16 [ 204.088569][ T8101] netlink: 332 bytes leftover after parsing attributes in process `syz.2.554'. [ 204.096983][ T8101] netlink: 'syz.2.554': attribute type 9 has an invalid length. [ 204.102422][ T8101] netlink: 108 bytes leftover after parsing attributes in process `syz.2.554'. [ 204.106714][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 204.111113][ T8096] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 204.113696][ T8096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.122457][ T8096] vhci_hcd vhci_hcd.0: Device attached [ 204.259186][ T8106] IPVS: set_ctl: invalid protocol: 162 10.1.1.1:20001 [ 204.262858][ T8106] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 204.266496][ T8106] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 204.325178][ T5994] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 204.369291][ T8090] vhci_hcd: connection reset by peer [ 204.372180][ T216] vhci_hcd vhci_hcd.1: stop threads [ 204.374225][ T216] vhci_hcd vhci_hcd.1: release socket [ 204.376651][ T216] vhci_hcd vhci_hcd.1: disconnect device [ 204.834432][ T5842] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 204.850460][ T8103] vhci_hcd: connection closed [ 204.851119][ T216] vhci_hcd vhci_hcd.3: stop threads [ 205.127016][ T5994] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 205.342347][ T216] vhci_hcd vhci_hcd.3: release socket [ 205.345082][ T216] vhci_hcd vhci_hcd.3: disconnect device [ 205.372363][ T5994] usb 43-1: enqueue for inactive port 0 [ 205.441618][ T5994] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 205.524874][ T8116] [U]  [ 205.525967][ T8116] [U] K{‘ [ 205.526942][ T8116] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 205.529130][ T8116] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 205.533977][ T8116] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 205.537181][ T8116] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 205.548793][ T8116] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 205.556155][ T8116] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 205.560662][ T8116] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 205.566024][ T8116] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 205.608928][ T8116] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 205.612491][ T8116] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 205.617967][ T8116] [U] 22½“Æ©Ðû©x?0;3u± [ 205.619659][ T8116] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 205.629696][ T8116] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 205.632882][ T8116] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 205.636012][ T8116] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 205.638104][ T8116] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 205.642674][ T8116] [U] ¹ ec [ 205.643674][ T8116] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 205.862022][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 205.866615][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 206.001219][ T8127] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 206.091580][ T5829] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 206.162321][ T8135] syzkaller0: entered promiscuous mode [ 206.164172][ T8135] syzkaller0: entered allmulticast mode [ 206.170819][ T8135] input: syz1 as /devices/virtual/input/input17 [ 206.275867][ T5829] usb 7-1: Using ep0 maxpacket: 16 [ 206.364093][ T5829] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 206.367131][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.369646][ T5829] usb 7-1: Product: syz [ 206.370974][ T5829] usb 7-1: Manufacturer: syz [ 206.372558][ T5829] usb 7-1: SerialNumber: syz [ 206.714715][ T8145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 206.716926][ T8145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.725251][ T8145] vhci_hcd vhci_hcd.0: Device attached [ 206.768892][ T5829] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 206.806047][ T8145] wg2 speed is unknown, defaulting to 1000 [ 206.848649][ T8145] wg2 speed is unknown, defaulting to 1000 [ 206.854717][ T5829] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.858564][ T5829] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 206.863800][ T8145] wg2 speed is unknown, defaulting to 1000 [ 206.866779][ T5829] usb 7-1: media controller created [ 206.943558][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.298469][ T8148] vhci_hcd: connection closed [ 207.308397][ T229] vhci_hcd vhci_hcd.1: stop threads [ 207.424969][ T5829] zl10353_read_register: readreg error (reg=127, ret==-110) [ 207.460714][ T229] vhci_hcd vhci_hcd.1: release socket [ 207.465691][ T229] vhci_hcd vhci_hcd.1: disconnect device [ 207.556840][ T29] wg2 speed is unknown, defaulting to 1000 [ 207.560093][ T8145] infiniband syz2: set down [ 207.562112][ T8145] infiniband syz2: added wg2 [ 207.580051][ T8145] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 207.585987][ T8145] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 207.593268][ T8145] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 207.627742][ T8145] RDS/IB: syz2: added [ 207.633313][ T8145] smc: adding ib device syz2 with port count 1 [ 207.636106][ T8145] smc: ib device syz2 port 1 has no pnetid [ 207.640611][ T29] wg2 speed is unknown, defaulting to 1000 [ 207.644621][ T8145] wg2 speed is unknown, defaulting to 1000 [ 207.993065][ T8145] wg2 speed is unknown, defaulting to 1000 [ 208.209877][ T8167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 208.212220][ T8167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.226654][ T8167] vhci_hcd vhci_hcd.0: Device attached [ 208.354908][ T8145] wg2 speed is unknown, defaulting to 1000 [ 208.410923][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 208.475932][ T10] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 208.535049][ T8145] wg2 speed is unknown, defaulting to 1000 [ 208.848493][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 208.852695][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 208.965789][ T8169] vhci_hcd: connection reset by peer [ 208.969835][ T216] vhci_hcd vhci_hcd.3: stop threads [ 208.972683][ T216] vhci_hcd vhci_hcd.3: release socket [ 208.976858][ T216] vhci_hcd vhci_hcd.3: disconnect device [ 209.085298][ T5829] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 209.097757][ T5829] usb 7-1: USB disconnect, device number 11 [ 209.129637][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 209.235248][ T8182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 209.238531][ T8182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.409441][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.411790][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.451582][ T8182] vhci_hcd vhci_hcd.0: Device attached [ 209.487579][ T53] usb 40-1: device descriptor read/8, error -110 [ 209.552144][ T5994] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 209.711551][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 209.717720][ T5994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.717743][ T5994] usb 5-1: config 0 has no interfaces? [ 209.720392][ T5994] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.727179][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.727193][ T5994] usb 5-1: Product: syz [ 209.727201][ T5994] usb 5-1: Manufacturer: syz [ 209.727209][ T5994] usb 5-1: SerialNumber: syz [ 209.730556][ T5842] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 209.731194][ T5994] usb 5-1: config 0 descriptor?? [ 210.036807][ T8182] fuse: Bad value for 'fd' [ 210.049549][ T53] usb usb40-port1: attempt power cycle [ 210.097206][ T8182] binder: 8181:8182 ioctl c0306201 80000080 returned -14 [ 210.662575][ T53] usb usb40-port1: unable to enumerate USB device [ 210.669656][ T8201] syz.2.580 (8201): drop_caches: 2 [ 211.058981][ T8204] mmap: syz.1.581 (8204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 211.083675][ T40] audit: type=1326 audit(1780369596.592:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.1.581" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f07f7c code=0x0 [ 211.200910][ T8206] loop5: detected capacity change from 0 to 7 [ 211.238575][ T8206] Dev loop5: unable to read RDB block 7 [ 211.240686][ T8206] loop5: unable to read partition table [ 211.243157][ T8206] loop5: partition table beyond EOD, truncated [ 211.245618][ T8206] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.007034][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 212.011439][ T8217] bridge: RTM_NEWNEIGH with invalid ether address [ 212.495805][ T59] usb 5-1: USB disconnect, device number 16 [ 212.508488][ T8183] vhci_hcd: connection reset by peer [ 212.510615][ T216] vhci_hcd vhci_hcd.0: stop threads [ 212.512904][ T216] vhci_hcd vhci_hcd.0: release socket [ 212.528252][ T216] vhci_hcd vhci_hcd.0: disconnect device [ 212.755972][ T8226] FAULT_INJECTION: forcing a failure. [ 212.755972][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 212.766472][ T8226] CPU: 3 UID: 0 PID: 8226 Comm: syz.3.588 Not tainted syzkaller #0 PREEMPT(full) [ 212.766498][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.766508][ T8226] Call Trace: [ 212.766516][ T8226] [ 212.766523][ T8226] dump_stack_lvl+0x100/0x190 [ 212.766548][ T8226] should_fail_ex.cold+0x5/0xa [ 212.766572][ T8226] should_failslab+0xc2/0x120 [ 212.766594][ T8226] __kvmalloc_node_noprof+0xfa/0xa00 [ 212.766611][ T8226] ? bucket_table_alloc.isra.0+0x88/0x460 [ 212.766640][ T8226] bucket_table_alloc.isra.0+0x88/0x460 [ 212.766664][ T8226] rhashtable_init_noprof+0x43b/0x890 [ 212.766685][ T8226] ? __init_waitqueue_head+0xca/0x150 [ 212.766707][ T8226] rhltable_init_noprof+0x20/0x60 [ 212.766730][ T8226] sta_info_init+0x27/0x160 [ 212.766753][ T8226] ieee80211_alloc_hw_nm+0x86b/0x22e0 [ 212.766779][ T8226] ? __local_bh_enable_ip+0x9e/0x120 [ 212.766805][ T8226] mac80211_hwsim_new_radio+0x1de/0x5aa0 [ 212.766839][ T8226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.766865][ T8226] ? __nla_validate_parse+0x1e7/0x28b0 [ 212.766887][ T8226] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 212.766923][ T8226] hwsim_new_radio_nl+0xc5f/0x1370 [ 212.766945][ T8226] ? rcu_is_watching+0x12/0xc0 [ 212.766967][ T8226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 212.766997][ T8226] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 212.767024][ T8226] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 212.767056][ T8226] genl_family_rcv_msg_doit+0x214/0x300 [ 212.767085][ T8226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.767111][ T8226] ? genl_get_cmd+0x3e7/0x760 [ 212.767142][ T8226] ? bpf_lsm_capable+0x9/0x10 [ 212.767161][ T8226] ? security_capable+0x80/0x260 [ 212.767180][ T8226] ? ns_capable+0xd2/0xf0 [ 212.767202][ T8226] genl_rcv_msg+0x560/0x800 [ 212.767231][ T8226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.767258][ T8226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 212.767282][ T8226] ? __lock_acquire+0x4a5/0x2630 [ 212.767314][ T8226] netlink_rcv_skb+0x159/0x420 [ 212.767338][ T8226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.767364][ T8226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.767398][ T8226] ? netlink_deliver_tap+0x1ae/0xcc0 [ 212.767423][ T8226] genl_rcv+0x28/0x40 [ 212.767445][ T8226] netlink_unicast+0x585/0x850 [ 212.767472][ T8226] ? __pfx_netlink_unicast+0x10/0x10 [ 212.767503][ T8226] netlink_sendmsg+0x8b0/0xda0 [ 212.767544][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.767574][ T8226] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 212.767597][ T8226] ____sys_sendmsg+0x9e1/0xb70 [ 212.767620][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.767645][ T8226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.767680][ T8226] ___sys_sendmsg+0x190/0x1e0 [ 212.767722][ T8226] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.767761][ T8226] ? find_held_lock+0x2b/0x80 [ 212.767800][ T8226] __sys_sendmsg+0x170/0x220 [ 212.767818][ T8226] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.767835][ T8226] ? __fget_files+0x21f/0x3d0 [ 212.767863][ T8226] ? ksys_write+0x1ac/0x250 [ 212.767886][ T8226] ? rcu_is_watching+0x12/0xc0 [ 212.767914][ T8226] __do_fast_syscall_32+0xe7/0x970 [ 212.767941][ T8226] ? lockdep_hardirqs_on+0x78/0x100 [ 212.767967][ T8226] do_fast_syscall_32+0x32/0x70 [ 212.767994][ T8226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.768016][ T8226] RIP: 0023:0xf7f47f7c [ 212.768031][ T8226] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 212.768047][ T8226] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 212.768065][ T8226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 212.768075][ T8226] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.768085][ T8226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.768095][ T8226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.768104][ T8226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.768129][ T8226] [ 214.035793][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 214.124981][ T8251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 214.127714][ T8251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.131493][ T8251] vhci_hcd vhci_hcd.0: Device attached [ 214.151682][ T8251] netlink: 'syz.0.594': attribute type 12 has an invalid length. [ 214.625028][ T8262] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 214.627755][ T8262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.638745][ T8262] vhci_hcd vhci_hcd.0: Device attached [ 214.652782][ T8262] netlink: 'syz.1.595': attribute type 12 has an invalid length. [ 214.948293][ T53] usb 40-1: SetAddress Request (22) to port 0 [ 214.951127][ T53] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 215.023751][ T8252] vhci_hcd: connection closed [ 215.025421][ T1202] vhci_hcd vhci_hcd.0: stop threads [ 215.032359][ T1202] vhci_hcd vhci_hcd.0: release socket [ 215.038994][ T1202] vhci_hcd vhci_hcd.0: disconnect device [ 215.249644][ T5842] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 215.261201][ T8263] vhci_hcd: connection reset by peer [ 215.266418][ T12] vhci_hcd vhci_hcd.1: stop threads [ 215.270191][ T12] vhci_hcd vhci_hcd.1: release socket [ 215.285311][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 216.758332][ T5829] usb usb38-port1: attempt power cycle [ 216.776787][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 216.782559][ T8284] bridge: RTM_NEWNEIGH with invalid ether address [ 217.617524][ T8292] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 217.619723][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.622421][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 217.645107][ T8292] netlink: 'syz.2.605': attribute type 12 has an invalid length. [ 217.701086][ T8297] vhci_hcd: connection closed [ 217.701827][ T216] vhci_hcd vhci_hcd.2: stop threads [ 217.709705][ T216] vhci_hcd vhci_hcd.2: release socket [ 217.715078][ T216] vhci_hcd vhci_hcd.2: disconnect device [ 217.797080][ T8304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 217.799216][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 217.807285][ T8309] syz_tun: left allmulticast mode [ 217.809402][ T8309] syz_tun: left promiscuous mode [ 217.811791][ T8309] bridge0: port 3(syz_tun) entered disabled state [ 217.820284][ T8309] bridge_slave_0: left allmulticast mode [ 217.822107][ T8309] bridge_slave_0: left promiscuous mode [ 217.825057][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 217.839818][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.840327][ T5829] usb usb38-port1: unable to enumerate USB device [ 217.849497][ T8309] bridge_slave_1: left allmulticast mode [ 217.854234][ T8309] bridge_slave_1: left promiscuous mode [ 217.856167][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.867365][ T8309] bond0: (slave bond_slave_0): Releasing backup interface [ 217.875231][ T8309] bond0: (slave bond_slave_1): Releasing backup interface [ 217.879587][ T8309] team0: Port device team_slave_0 removed [ 217.884866][ T8309] team0: Port device team_slave_1 removed [ 217.887771][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.890890][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.003140][ T8309] vlan0: entered promiscuous mode [ 218.634624][ T8306] vhci_hcd: connection closed [ 218.635174][ T1202] vhci_hcd vhci_hcd.1: stop threads [ 218.641521][ T1202] vhci_hcd vhci_hcd.1: release socket [ 218.645161][ T1202] vhci_hcd vhci_hcd.1: disconnect device [ 219.015299][ T8329] FAULT_INJECTION: forcing a failure. [ 219.015299][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.021524][ T8329] CPU: 2 UID: 0 PID: 8329 Comm: syz.0.616 Not tainted syzkaller #0 PREEMPT(full) [ 219.021549][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.021561][ T8329] Call Trace: [ 219.021567][ T8329] [ 219.021574][ T8329] dump_stack_lvl+0x100/0x190 [ 219.021599][ T8329] should_fail_ex.cold+0x5/0xa [ 219.021621][ T8329] _copy_to_user+0x32/0xd0 [ 219.021647][ T8329] simple_read_from_buffer+0xcb/0x170 [ 219.021670][ T8329] proc_fail_nth_read+0x1af/0x230 [ 219.021698][ T8329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.021727][ T8329] ? rw_verify_area+0xce/0x6d0 [ 219.021745][ T8329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.021770][ T8329] vfs_read+0x1e4/0xb30 [ 219.021794][ T8329] ? __pfx_vfs_read+0x10/0x10 [ 219.021811][ T8329] ? find_held_lock+0x2b/0x80 [ 219.021834][ T8329] ? __fget_files+0x215/0x3d0 [ 219.021858][ T8329] ? __fget_files+0x21f/0x3d0 [ 219.021886][ T8329] ksys_read+0x12a/0x250 [ 219.021905][ T8329] ? __pfx_ksys_read+0x10/0x10 [ 219.021926][ T8329] ? rcu_is_watching+0x12/0xc0 [ 219.021946][ T8329] ? rcu_is_watching+0x12/0xc0 [ 219.021969][ T8329] do_int80_emulation+0x14b/0x720 [ 219.021998][ T8329] asm_int80_emulation+0x1a/0x20 [ 219.022016][ T8329] RIP: 0023:0xf71c61ab [ 219.022029][ T8329] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 219.022045][ T8329] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 219.022063][ T8329] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0 [ 219.022074][ T8329] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 219.022084][ T8329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.022093][ T8329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.022103][ T8329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.022132][ T8329] [ 220.586870][ T53] usb 40-1: device descriptor read/8, error -110 [ 220.625268][ T8373] netlink: 'syz.0.621': attribute type 12 has an invalid length. [ 220.694499][ T8352] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 220.697980][ T8352] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.721097][ T8352] vhci_hcd vhci_hcd.0: Device attached [ 221.060456][ T8372] vhci_hcd: connection closed [ 221.062848][ T12] vhci_hcd vhci_hcd.0: stop threads [ 221.069155][ T12] vhci_hcd vhci_hcd.0: release socket [ 221.099061][ T5829] usb 38-1: SetAddress Request (26) to port 0 [ 221.105425][ T5829] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 221.132933][ T53] usb usb40-port1: attempt power cycle [ 221.158080][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 221.177025][ T5842] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 221.477607][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'. [ 223.744333][ T53] usb usb40-port1: unable to enumerate USB device [ 224.384068][ T8391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 224.386568][ T8391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.482802][ T8391] vhci_hcd vhci_hcd.0: Device attached [ 224.488340][ T8394] vhci_hcd: connection closed [ 224.505468][ T58] vhci_hcd vhci_hcd.0: stop threads [ 224.523991][ T58] vhci_hcd vhci_hcd.0: release socket [ 224.560501][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 226.618428][ T5829] usb 38-1: device descriptor read/8, error -110 [ 226.666107][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 226.918563][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 227.064992][ T5829] usb usb38-port1: attempt power cycle [ 227.533805][ T8426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 227.540966][ T8426] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.592854][ T8426] vhci_hcd vhci_hcd.0: Device attached [ 227.692679][ T5829] usb usb38-port1: unable to enumerate USB device [ 227.810785][ T5994] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 227.875672][ T5994] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 228.260515][ T8430] vhci_hcd: connection reset by peer [ 228.265373][ T1202] vhci_hcd vhci_hcd.0: stop threads [ 228.272483][ T1202] vhci_hcd vhci_hcd.0: release socket [ 228.274900][ T1202] vhci_hcd vhci_hcd.0: disconnect device [ 228.508157][ T8446] input: syz0 as /devices/virtual/input/input18 [ 229.268344][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 229.307834][ T5842] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 229.544597][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 229.551946][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 229.584878][ T5842] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 229.603061][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.606406][ T5842] usb 7-1: Product: syz [ 229.608053][ T5842] usb 7-1: Manufacturer: syz [ 229.622082][ T5842] usb 7-1: SerialNumber: syz [ 229.626329][ T5842] usb 7-1: config 0 descriptor?? [ 229.658733][ T5842] hub 7-1:0.0: bad descriptor, ignoring hub [ 229.671323][ T5842] hub 7-1:0.0: probe with driver hub failed with error -5 [ 229.683931][ T5842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.926628][ T8474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 232.354308][ T5842] usb 7-1: USB disconnect, device number 12 [ 232.978544][ T5856] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 233.061769][ T5856] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 233.077109][ T5856] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 233.127123][ T5856] hid-generic 0006:0004:0009.0004: hidraw1: VIRTUAL HID v0.08 Device [syz1] on syz0 [ 233.402617][ T8483] fido_id[8483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.487797][ T5994] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 233.633065][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.651'. [ 234.026688][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 234.078271][ T8492] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 234.081897][ T8492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 234.105509][ T8492] vhci_hcd vhci_hcd.0: Device attached [ 234.320392][ T5842] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 234.389370][ T5842] usb 43-1: new full-speed USB device number 6 using vhci_hcd [ 234.421306][ T8502] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 234.427149][ T8502] team0: Device dummy0 failed to register rx_handler [ 234.523682][ T8502] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 234.781343][ T8494] vhci_hcd: connection reset by peer [ 234.804984][ T70] vhci_hcd vhci_hcd.3: stop threads [ 234.807287][ T70] vhci_hcd vhci_hcd.3: release socket [ 234.817144][ T70] vhci_hcd vhci_hcd.3: disconnect device [ 234.909337][ T5856] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.071877][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 235.081134][ T5856] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 235.085421][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.092623][ T5856] usb 5-1: Product: syz [ 235.118063][ T5856] usb 5-1: Manufacturer: syz [ 235.120402][ T5856] usb 5-1: SerialNumber: syz [ 235.370769][ T5856] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 235.445662][ T5856] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.469009][ T5856] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 235.473999][ T5856] usb 5-1: media controller created [ 235.677189][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.060634][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 236.973959][ T8518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.660'. [ 238.828775][ T5856] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 238.852800][ T5856] usb 5-1: USB disconnect, device number 17 [ 239.959911][ T5842] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 242.071455][ T8539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 242.074208][ T8539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.162558][ T8539] vhci_hcd vhci_hcd.0: Device attached [ 242.915730][ T8544] vhci_hcd: connection closed [ 242.944795][ T58] vhci_hcd vhci_hcd.1: stop threads [ 242.949031][ T58] vhci_hcd vhci_hcd.1: release socket [ 242.965418][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 242.983422][ T1485] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 243.313195][ T5856] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.546116][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 243.598236][ T5856] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 243.614927][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.618388][ T5856] usb 5-1: Product: syz [ 243.621006][ T5856] usb 5-1: Manufacturer: syz [ 243.635635][ T5856] usb 5-1: SerialNumber: syz [ 243.939704][ T5856] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 243.975851][ T5856] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.989919][ T5856] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 244.034637][ T5856] usb 5-1: media controller created [ 244.123211][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.481376][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 245.280788][ T8588] ipip1: entered allmulticast mode [ 246.020597][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 246.550657][ T5856] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 246.559493][ T5856] usb 5-1: USB disconnect, device number 18 [ 250.060424][ T5856] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 250.181770][ T8626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 250.185505][ T8626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 250.193169][ T8626] vhci_hcd vhci_hcd.0: Device attached [ 250.229014][ T8626] netlink: 'syz.2.689': attribute type 12 has an invalid length. [ 250.253010][ T5856] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.284104][ T5856] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.311131][ T5856] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.316445][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.321135][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 250.326585][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.334808][ T5856] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.339879][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.362364][ T5856] usb 5-1: config 0 descriptor?? [ 250.366410][ T8624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.516140][ T5829] usb 42-1: SetAddress Request (30) to port 0 [ 250.533825][ T5829] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 250.622863][ T8627] vhci_hcd: connection reset by peer [ 250.625508][ T229] vhci_hcd vhci_hcd.2: stop threads [ 250.626282][ T5856] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 250.627863][ T229] vhci_hcd vhci_hcd.2: release socket [ 250.627974][ T229] vhci_hcd vhci_hcd.2: disconnect device [ 250.698308][ T5856] usb 5-1: USB disconnect, device number 19 [ 250.750977][ T5856] usblp0: removed [ 251.215032][ T5856] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.371988][ T5856] usb 5-1: device descriptor read/64, error -71 [ 251.642940][ T5856] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 251.786353][ T5856] usb 5-1: device descriptor read/64, error -71 [ 251.903186][ T5856] usb usb5-port1: attempt power cycle [ 252.327329][ T5856] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 252.348158][ T5856] usb 5-1: device descriptor read/8, error -71 [ 252.620095][ T5856] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.680134][ T5856] usb 5-1: device descriptor read/8, error -71 [ 252.868157][ T5856] usb usb5-port1: unable to enumerate USB device [ 256.035234][ T5829] usb 42-1: device descriptor read/8, error -110 [ 256.477269][ T5829] usb usb42-port1: attempt power cycle [ 256.803716][ T8677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 256.807395][ T8677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.812989][ T8677] vhci_hcd vhci_hcd.0: Device attached [ 257.095352][ T5829] usb usb42-port1: unable to enumerate USB device [ 257.181511][ T5856] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 257.257444][ T5856] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 257.401430][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.453013][ T8690] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 257.520222][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 257.532846][ T8690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.605408][ T8679] vhci_hcd: connection reset by peer [ 257.637842][ T1202] vhci_hcd vhci_hcd.2: stop threads [ 257.640187][ T1202] vhci_hcd vhci_hcd.2: release socket [ 257.642791][ T1202] vhci_hcd vhci_hcd.2: disconnect device [ 257.660156][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 257.669787][ T59] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 257.673204][ T59] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 257.700799][ T59] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 257.713407][ T59] usb 6-1: config 250 has no interface number 0 [ 257.719746][ T59] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 257.736471][ T59] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 257.764014][ T59] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.792096][ T59] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.796958][ T59] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 257.803789][ T59] usb 6-1: config 250 interface 228 has no altsetting 0 [ 257.831311][ T59] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 257.834445][ T59] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 257.837371][ T59] usb 6-1: Product: syz [ 257.839100][ T59] usb 6-1: SerialNumber: syz [ 257.913283][ T59] hub 6-1:250.228: bad descriptor, ignoring hub [ 257.916391][ T59] hub 6-1:250.228: probe with driver hub failed with error -5 [ 258.155527][ T59] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 258.395770][ T59] usb 6-1: USB disconnect, device number 12 [ 258.427660][ T59] usblp0: removed [ 259.412382][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 259.417442][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 259.706039][ T5857] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.912068][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 259.919021][ T5857] usb 6-1: config 0 has no interfaces? [ 259.927163][ T5857] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 259.931322][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.955333][ T5857] usb 6-1: config 0 descriptor?? [ 261.122987][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 262.715141][ T5829] usb 6-1: USB disconnect, device number 13 [ 262.784083][ T5856] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 264.266833][ T8756] tipc: Enabled bearer , priority 0 [ 264.459973][ T8757] syzkaller0: entered promiscuous mode [ 264.462390][ T8757] syzkaller0: entered allmulticast mode [ 264.501579][ T8753] tipc: Resetting bearer [ 264.593334][ T8753] tipc: Disabling bearer [ 264.821073][ T8774] input: syz0 as /devices/virtual/input/input19 [ 265.403715][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 265.552437][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 265.887787][ T5994] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 266.078677][ T5994] usb 6-1: Using ep0 maxpacket: 16 [ 266.083386][ T5994] usb 6-1: config 0 has no interfaces? [ 266.086188][ T5994] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 266.098154][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.154028][ T5994] usb 6-1: config 0 descriptor?? [ 267.325266][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 268.330325][ T8821] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 268.335948][ T8821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.414452][ T8821] vhci_hcd vhci_hcd.0: Device attached [ 268.426958][ T8826] netlink: 'syz.2.737': attribute type 12 has an invalid length. [ 268.579237][ T5857] usb 6-1: USB disconnect, device number 14 [ 268.596827][ T8828] tipc: Started in network mode [ 268.605742][ T8828] tipc: Node identity 1abe2240a356, cluster identity 4711 [ 268.608990][ T8828] tipc: Enabled bearer , priority 0 [ 268.613801][ T8828] syzkaller0: entered promiscuous mode [ 268.622749][ T8828] syzkaller0: entered allmulticast mode [ 268.685944][ T5994] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.741648][ T8828] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 268.773977][ T8822] vhci_hcd: connection closed [ 268.774308][ T216] vhci_hcd vhci_hcd.2: stop threads [ 268.778385][ T5829] usb 42-1: SetAddress Request (34) to port 0 [ 268.786210][ T216] vhci_hcd vhci_hcd.2: release socket [ 268.790741][ T5829] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 268.790814][ T216] vhci_hcd vhci_hcd.2: disconnect device [ 268.809756][ T5829] usb 42-1: enqueue for inactive port 0 [ 268.866851][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 268.876052][ T5994] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 268.877631][ T8828] tipc: Resetting bearer [ 268.887506][ T5994] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 268.906622][ T5994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 268.911679][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.933570][ T5994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.937824][ T5994] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.943879][ T5994] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 268.952873][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.987307][ T5994] usb 5-1: config 0 descriptor?? [ 269.008886][ T8827] tipc: Resetting bearer [ 269.078654][ T8827] tipc: Disabling bearer [ 269.234915][ T8825] 9p: Bad value for 'rfdno' [ 269.262510][ T5829] usb usb42-port1: attempt power cycle [ 269.713937][ T8825] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 269.857689][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.877917][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.892297][ T5829] usb usb42-port1: unable to enumerate USB device [ 269.964785][ T8849] usb usb1: check_ctrlrecip: process 8849 (syz.1.745) requesting ep 01 but needs 81 [ 269.971425][ T8849] usb usb1: usbfs: process 8849 (syz.1.745) did not claim interface 0 before use [ 270.024133][ T5994] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 271.070848][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 271.143297][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 271.148373][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 271.421656][ T5829] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 271.584226][ T5829] usb 7-1: Using ep0 maxpacket: 16 [ 271.590746][ T5829] usb 7-1: config 0 has no interfaces? [ 271.593885][ T5829] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 271.606357][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.620237][ T5829] usb 7-1: config 0 descriptor?? [ 272.008419][ T5829] usb 5-1: USB disconnect, device number 24 [ 272.021690][ T5829] usblp0: removed [ 272.115404][ T8901] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 272.117488][ T8901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.365154][ T8904] netlink: 'syz.1.752': attribute type 12 has an invalid length. [ 272.398639][ T8901] vhci_hcd vhci_hcd.0: Device attached [ 272.593322][ T8902] vhci_hcd: connection closed [ 272.593793][ T58] vhci_hcd vhci_hcd.1: stop threads [ 272.606384][ T58] vhci_hcd vhci_hcd.1: release socket [ 272.612388][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 272.746140][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 273.800116][ T8924] gtp0: left allmulticast mode [ 273.808960][ T8924] veth3: left promiscuous mode [ 273.849361][ T8924] veth3: left allmulticast mode [ 274.044411][ T59] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 274.215703][ T59] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 274.224562][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.239980][ T59] usb 6-1: config 0 has no interfaces? [ 274.245143][ T59] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 274.260748][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.302817][ T59] usb 6-1: config 0 descriptor?? [ 274.452016][ T59] usb 7-1: USB disconnect, device number 13 [ 275.059883][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'. [ 275.101274][ T8930] ALSA: mixer_oss: invalid OSS volume '' [ 275.406480][ T8940] wg2 speed is unknown, defaulting to 1000 [ 275.967422][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.969755][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.065202][ T5994] usb 6-1: USB disconnect, device number 15 [ 277.291211][ T8958] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 277.293795][ T8958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.297966][ T8958] vhci_hcd vhci_hcd.0: Device attached [ 277.314200][ T8958] netlink: 'syz.0.766': attribute type 12 has an invalid length. [ 277.559248][ T8960] vhci_hcd: connection closed [ 277.559748][ T216] vhci_hcd vhci_hcd.0: stop threads [ 277.568595][ T216] vhci_hcd vhci_hcd.0: release socket [ 277.572290][ T216] vhci_hcd vhci_hcd.0: disconnect device [ 277.610134][ T5829] usb 38-1: enqueue for inactive port 0 [ 278.272122][ T5829] usb usb38-port1: attempt power cycle [ 278.806190][ T8977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 278.808613][ T8977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.835693][ T8977] vhci_hcd vhci_hcd.0: Device attached [ 278.942821][ T8980] siw: device registration error -23 [ 279.122305][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 279.188513][ T8980] smbdirect: ib_dev[syz1] removed [ 279.268946][ T5829] usb usb38-port1: unable to enumerate USB device [ 279.387516][ T3264] usb 44-1: SetAddress Request (14) to port 0 [ 279.410981][ T3264] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 279.481138][ T8978] vhci_hcd: connection closed [ 279.511496][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 279.531795][ T8989] macsec3: entered promiscuous mode [ 279.539500][ T8989] macsec3: entered allmulticast mode [ 279.570470][ T8989] macvlan0: entered promiscuous mode [ 279.575515][ T8992] netlink: 220 bytes leftover after parsing attributes in process `syz.1.775'. [ 279.575535][ T8989] netlink: 'syz.2.773': attribute type 1 has an invalid length. [ 279.580154][ T8992] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 279.585264][ T8992] ======================================================= [ 279.585264][ T8992] WARNING: The mand mount option has been deprecated and [ 279.585264][ T8992] and is ignored by this kernel. Remove the mand [ 279.585264][ T8992] option from the mount to silence this warning. [ 279.585264][ T8992] ======================================================= [ 279.589487][ T8989] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 279.599338][ T229] vhci_hcd vhci_hcd.3: stop threads [ 279.671050][ T229] vhci_hcd vhci_hcd.3: release socket [ 279.673833][ T229] vhci_hcd vhci_hcd.3: disconnect device [ 280.228747][ T9001] Bluetooth: MGMT ver 1.23 [ 281.022507][ T9008] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 281.025972][ T9008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 281.039493][ T9008] vhci_hcd vhci_hcd.0: Device attached [ 281.045663][ T9008] netlink: 'syz.1.779': attribute type 12 has an invalid length. [ 281.154531][ T9014] vhci_hcd: connection closed [ 281.154831][ T58] vhci_hcd vhci_hcd.1: stop threads [ 281.160359][ T58] vhci_hcd vhci_hcd.1: release socket [ 281.230646][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 281.288107][ T9020] comedi: valid board names for 8255 driver are: [ 281.293619][ T9020] 8255 [ 281.298376][ T9020] comedi: valid board names for vmk80xx driver are: [ 281.303132][ T9020] vmk80xx [ 281.305234][ T9020] comedi: valid board names for usbduxsigma driver are: [ 281.341933][ T9020] usbduxsigma [ 281.344225][ T9020] comedi: valid board names for usbduxfast driver are: [ 281.347085][ T9020] usbduxfast [ 281.348782][ T9020] comedi: valid board names for usbdux driver are: [ 281.380162][ T9020] usbdux [ 281.381830][ T9020] comedi: valid board names for ni6501 driver are: [ 281.384646][ T9020] ni6501 [ 281.385962][ T9020] comedi: valid board names for dt9812 driver are: [ 281.391457][ T9020] dt9812 [ 281.397151][ T9020] comedi: valid board names for ni_labpc_cs driver are: [ 281.401272][ T9020] ni_labpc_cs [ 281.403426][ T9020] comedi: valid board names for ni_daq_700 driver are: [ 281.406775][ T9020] ni_daq_700 [ 281.408782][ T9020] comedi: valid board names for labpc_pci driver are: [ 281.412775][ T9020] labpc_pci [ 281.415461][ T9020] comedi: valid board names for adl_pci9118 driver are: [ 281.421115][ T9020] pci9118dg [ 281.425089][ T9020] pci9118hg [ 281.433471][ T9020] pci9118hr [ 281.437673][ T9020] comedi: valid board names for 8255_pci driver are: [ 281.457549][ T9020] 8255_pci [ 281.470152][ T9020] comedi: valid board names for s526 driver are: [ 281.472754][ T9020] s526 [ 281.479561][ T9020] comedi: valid board names for multiq3 driver are: [ 281.484069][ T9020] multiq3 [ 281.486932][ T9020] comedi: valid board names for pcmuio driver are: [ 281.492059][ T9020] pcmuio48 [ 281.493818][ T9020] pcmuio96 [ 281.495540][ T9020] comedi: valid board names for pcmmio driver are: [ 281.499630][ T9020] pcmmio [ 281.501510][ T9020] comedi: valid board names for pcmda12 driver are: [ 281.507759][ T9020] pcmda12 [ 281.509461][ T9020] comedi: valid board names for pcmad driver are: [ 281.512728][ T9020] pcmad12 [ 281.514570][ T9020] pcmad16 [ 281.516044][ T9020] comedi: valid board names for ni_labpc driver are: [ 281.522074][ T9020] lab-pc-1200 [ 281.525933][ T9020] lab-pc-1200ai [ 281.527744][ T9020] lab-pc+ [ 281.529256][ T9020] comedi: valid board names for atmio16 driver are: [ 281.532698][ T9020] atmio16 [ 281.537037][ T9020] atmio16d [ 281.538619][ T9020] comedi: valid board names for ni_at_ao driver are: [ 281.542773][ T9020] at-ao-6 [ 281.544534][ T9020] at-ao-10 [ 281.546108][ T9020] comedi: valid board names for ni_at_a2150 driver are: [ 281.550632][ T9020] ni_at_a2150 [ 281.553328][ T9020] comedi: valid board names for adq12b driver are: [ 281.556373][ T9020] adq12b [ 281.557841][ T9020] comedi: valid board names for mpc624 driver are: [ 281.560910][ T9020] mpc624 [ 281.563035][ T9020] comedi: valid board names for c6xdigio driver are: [ 281.569437][ T9020] c6xdigio [ 281.571272][ T9020] comedi: valid board names for aio_iiro_16 driver are: [ 281.574767][ T9020] aio_iiro_16 [ 281.576337][ T9020] comedi: valid board names for aio_aio12_8 driver are: [ 281.580946][ T9020] aio_aio12_8 [ 281.582378][ T9020] aio_ai12_8 [ 281.583926][ T9020] aio_ao12_4 [ 281.585308][ T9020] comedi: valid board names for fl512 driver are: [ 281.590510][ T9020] fl512 [ 281.594493][ T9020] comedi: valid board names for dmm32at driver are: [ 281.600873][ T9020] dmm32at [ 281.608128][ T9020] comedi: valid board names for dt282x driver are: [ 281.618760][ T9020] dt2821 [ 281.619798][ T9020] dt2821-f [ 281.629198][ T9020] dt2821-g [ 281.631059][ T9020] dt2823 [ 281.632641][ T9020] dt2824-pgh [ 281.634303][ T9020] dt2824-pgl [ 281.635669][ T9020] dt2825 [ 281.636874][ T9020] dt2827 [ 281.637968][ T9020] dt2828 [ 281.639064][ T9020] dt2829 [ 281.641166][ T9020] dt21-ez [ 281.643572][ T9020] dt23-ez [ 281.644797][ T9020] dt24-ez [ 281.645999][ T9020] dt24-ez-pgl [ 281.647503][ T9020] comedi: valid board names for dt2817 driver are: [ 281.650424][ T9020] dt2817 [ 281.651676][ T9020] comedi: valid board names for dt2815 driver are: [ 281.655402][ T9020] dt2815 [ 281.656726][ T9020] comedi: valid board names for dt2814 driver are: [ 281.660288][ T9020] dt2814 [ 281.662034][ T9020] comedi: valid board names for dt2811 driver are: [ 281.666193][ T9020] dt2811-pgh [ 281.667947][ T9020] dt2811-pgl [ 281.669389][ T9020] comedi: valid board names for dt2801 driver are: [ 281.672266][ T9020] dt2801 [ 281.673512][ T9020] comedi: valid board names for das6402 driver are: [ 281.678049][ T9020] das6402-12 [ 281.680484][ T9020] das6402-16 [ 281.682460][ T9020] comedi: valid board names for das1800 driver are: [ 281.686618][ T9020] das-1701st [ 281.688225][ T9020] das-1701st-da [ 281.690135][ T9020] das-1702st [ 281.691895][ T9020] das-1702st-da [ 281.696687][ T9020] das-1702hr [ 281.699136][ T9020] das-1702hr-da [ 281.701449][ T9020] das-1701ao [ 281.703716][ T9020] das-1702ao [ 281.705308][ T9020] das-1801st [ 281.762714][ T9020] das-1801st-da [ 281.789473][ T9020] das-1802st [ 281.790844][ T9020] das-1802st-da [ 281.792591][ T9020] das-1802hr [ 281.794802][ T9020] das-1802hr-da [ 281.797281][ T9020] das-1801hc [ 281.798941][ T9020] das-1802hc [ 281.827515][ T9020] das-1801ao [ 281.828907][ T9020] das-1802ao [ 281.830363][ T9020] comedi: valid board names for das800 driver are: [ 281.832996][ T9020] das-800 [ 281.841761][ T9020] cio-das800 [ 281.920775][ T9020] das-801 [ 281.922326][ T9020] cio-das801 [ 281.944089][ T9020] das-802 [ 281.945755][ T9020] cio-das802 [ 281.956783][ T9020] cio-das802/16 [ 281.959034][ T9020] comedi: valid board names for isa-das08 driver are: [ 281.963412][ T9020] isa-das08 [ 281.964809][ T9020] das08-pgm [ 281.986316][ T9020] das08-pgh [ 281.987793][ T9020] das08-pgl [ 282.013983][ T9020] das08-aoh [ 282.015581][ T9020] das08-aol [ 282.017351][ T9020] das08-aom [ 282.062334][ T9020] das08/jr-ao [ 282.063778][ T9020] das08jr-16-ao [ 282.070526][ T9020] pc104-das08 [ 282.072276][ T9020] das08jr/16 [ 282.131229][ T9020] comedi: valid board names for das16m1 driver are: [ 282.134966][ T9020] das16m1 [ 282.137386][ T9020] comedi: valid board names for dac02 driver are: [ 282.151660][ T9020] dac02 [ 282.153456][ T9020] comedi: valid board names for rti802 driver are: [ 282.156350][ T9020] rti802 [ 282.157744][ T9020] comedi: valid board names for rti800 driver are: [ 282.179587][ T9020] rti800 [ 282.181037][ T9020] rti815 [ 282.191691][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 282.231597][ T9020] comedi: valid board names for pcm3724 driver are: [ 282.255008][ T9020] pcm3724 [ 282.256888][ T9020] comedi: valid board names for pcl818 driver are: [ 282.260953][ T9020] pcl818l [ 282.265188][ T9020] pcl818h [ 282.269398][ T9020] pcl818hd [ 282.283154][ T9020] pcl818hg [ 282.285711][ T9020] pcl818 [ 282.287113][ T9020] pcl718 [ 282.289208][ T9020] pcm3718 [ 282.290831][ T9020] comedi: valid board names for pcl816 driver are: [ 282.293800][ T9020] pcl816 [ 282.294913][ T9020] pcl814b [ 282.296093][ T9020] comedi: valid board names for pcl812 driver are: [ 282.317286][ T9020] pcl812 [ 282.329125][ T9020] pcl812pg [ 282.330822][ T9020] acl8112pg [ 282.341198][ T9020] acl8112dg [ 282.343073][ T9020] acl8112hg [ 282.344653][ T9020] a821pgl [ 282.346179][ T9020] a821pglnda [ 282.371905][ T9020] a821pgh [ 282.373355][ T9020] a822pgl [ 282.374873][ T9020] a822pgh [ 282.384708][ T9020] a823pgl [ 282.387422][ T9020] a823pgh [ 282.389191][ T9020] pcl813 [ 282.390639][ T9020] pcl813b [ 282.418112][ T9020] acl8113 [ 282.421480][ T9020] iso813 [ 282.440834][ T9020] acl8216 [ 282.447852][ T9020] a826pg [ 282.468404][ T9020] comedi: valid board names for pcl730 driver are: [ 282.475580][ T9020] pcl730 [ 282.479438][ T9020] iso730 [ 282.481779][ T9020] acl7130 [ 282.483111][ T9020] pcm3730 [ 282.499101][ T9020] pcl725 [ 282.509308][ T9020] p8r8dio [ 282.518327][ T9020] acl7225b [ 282.527924][ T9020] p16r16dio [ 282.530969][ T9020] pcl733 [ 282.539711][ T9020] pcl734 [ 282.542966][ T9020] opmm-1616-xt [ 282.545331][ T9020] pearl-mm-p [ 282.549422][ T9020] ir104-pbf [ 282.557394][ T9020] comedi: valid board names for pcl726 driver are: [ 282.567638][ T9020] pcl726 [ 282.569421][ T9020] pcl727 [ 282.571369][ T9020] pcl728 [ 282.573248][ T9020] acl6126 [ 282.575773][ T9020] acl6128 [ 282.580186][ T9020] comedi: valid board names for pcl724 driver are: [ 282.583386][ T9020] pcl724 [ 282.586959][ T9020] pcl722 [ 282.814588][ T9020] pcl731 [ 282.831607][ T9020] acl7122 [ 282.964635][ T9020] acl7124 [ 282.965844][ T9020] pet48dio [ 282.966858][ T9020] pcmio48 [ 282.968288][ T9020] onyx-mm-dio [ 282.969775][ T9020] comedi: valid board names for pcl711 driver are: [ 282.972844][ T9020] pcl711 [ 282.974397][ T9020] pcl711b [ 283.006305][ T9020] acl8112hg [ 283.007809][ T9020] acl8112dg [ 283.009091][ T9020] comedi: valid board names for amplc_pc263 driver are: [ 283.012295][ T9020] pc263 [ 283.014024][ T9020] comedi: valid board names for amplc_pc236 driver are: [ 283.019942][ T9020] pc36at [ 283.025679][ T9020] comedi: valid board names for amplc_dio200 driver are: [ 283.041424][ T9020] pc212e [ 283.042925][ T9020] pc214e [ 283.044663][ T9020] pc215e [ 283.046439][ T9020] pc218e [ 283.052923][ T9020] pc272e [ 283.054063][ T9020] comedi: valid board names for comedi_parport driver are: [ 283.056722][ T9020] comedi_parport [ 283.060394][ T9020] comedi: valid board names for comedi_test driver are: [ 283.078305][ T9020] comedi_test [ 283.081891][ T9020] comedi: valid board names for comedi_bond driver are: [ 283.108512][ T9020] comedi_bond [ 283.414341][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 283.635821][ T5994] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 283.868106][ T5994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.902895][ T5994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.932947][ T5994] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 283.938107][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.945292][ T5994] usb 5-1: Product: syz [ 283.950523][ T5994] usb 5-1: Manufacturer: syz [ 283.956830][ T5994] usb 5-1: SerialNumber: syz [ 284.237986][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'. [ 284.511953][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 285.095071][ T3264] usb 44-1: device descriptor read/8, error -110 [ 285.187671][ T9067] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 285.215430][ T9067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.314043][ T9067] vhci_hcd vhci_hcd.0: Device attached [ 285.654358][ T9067] netlink: 'syz.2.794': attribute type 12 has an invalid length. [ 285.775961][ T9068] vhci_hcd: connection closed [ 285.791557][ T1202] vhci_hcd vhci_hcd.2: stop threads [ 285.839251][ T1202] vhci_hcd vhci_hcd.2: release socket [ 285.860532][ T1202] vhci_hcd vhci_hcd.2: disconnect device [ 286.014939][ T3264] usb usb44-port1: attempt power cycle [ 286.660448][ T3264] usb usb44-port1: unable to enumerate USB device [ 286.842865][ T5994] usb 5-1: unit 4 not found! [ 286.853433][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'. [ 287.174824][ T9087] capability: warning: `syz.0.800' uses deprecated v2 capabilities in a way that may be insecure [ 288.028311][ T5994] usb 5-1: USB disconnect, device number 25 [ 288.133042][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.413343][ T9108] trusted_key: encrypted_key: insufficient parameters specified [ 289.865790][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.808'. [ 290.791444][ T9128] bridge0: port 1(syz_tun) entered blocking state [ 290.794944][ T9128] bridge0: port 1(syz_tun) entered disabled state [ 290.804889][ T9128] syz_tun: entered allmulticast mode [ 290.817167][ T9128] syz_tun: entered promiscuous mode [ 293.225453][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'. [ 293.349733][ T9165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 293.706503][ T9174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 293.715154][ T9174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.722740][ T9174] vhci_hcd vhci_hcd.0: Device attached [ 294.217834][ T5994] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 294.294487][ T5994] usb 43-1: new full-speed USB device number 7 using vhci_hcd [ 294.834827][ T9186] bond2: Removing last ns target with arp_interval on [ 294.877464][ T9175] vhci_hcd: connection reset by peer [ 294.928900][ T103] vhci_hcd vhci_hcd.3: stop threads [ 294.966604][ T103] vhci_hcd vhci_hcd.3: release socket [ 294.983408][ T103] vhci_hcd vhci_hcd.3: disconnect device [ 295.170698][ C0] ================================================================== [ 295.174037][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 295.177404][ C0] Read of size 1 at addr ffff8880500cdc18 by task swapper/0/0 [ 295.186095][ C0] [ 295.199423][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 295.199442][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.199449][ C0] Call Trace: [ 295.199455][ C0] [ 295.199462][ C0] dump_stack_lvl+0x100/0x190 [ 295.199477][ C0] print_report+0x13d/0x4b0 [ 295.199492][ C0] ? __virt_addr_valid+0x239/0x430 [ 295.199520][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 295.199538][ C0] kasan_report+0xdf/0x1d0 [ 295.199554][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 295.199571][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 295.199587][ C0] __kasan_check_byte+0x36/0x50 [ 295.199605][ C0] lock_acquire+0x12a/0x370 [ 295.199629][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 295.199643][ C0] ? .slowpath+0x9/0x18 [ 295.199659][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 295.199677][ C0] ? p9_req_put+0xaf/0x250 [ 295.199698][ C0] p9_req_put+0xaf/0x250 [ 295.199717][ C0] req_done+0x1dc/0x2e0 [ 295.199831][ C0] ? __pfx_req_done+0x10/0x10 [ 295.199856][ C0] ? __pfx_req_done+0x10/0x10 [ 295.199873][ C0] vring_interrupt+0x2ef/0x650 [ 295.199893][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 295.199910][ C0] __handle_irq_event_percpu+0x235/0x8c0 [ 295.199932][ C0] handle_irq_event+0xab/0x1e0 [ 295.199954][ C0] handle_edge_irq+0x35e/0x960 [ 295.199974][ C0] __common_interrupt+0xd8/0x2f0 [ 295.200004][ C0] common_interrupt+0xb9/0xe0 [ 295.200020][ C0] [ 295.200025][ C0] [ 295.200034][ C0] asm_common_interrupt+0x26/0x40 [ 295.200052][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 295.200073][ C0] Code: d6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 295.200089][ C0] RSP: 0000:ffffffff8e407e00 EFLAGS: 00000202 [ 295.200105][ C0] RAX: 00000000007b254f RBX: ffffffff8e4955c0 RCX: ffffffff8b86e225 [ 295.200118][ C0] RDX: 0000000000000000 RSI: ffffffff8df1a757 RDI: ffffffff8c1c4380 [ 295.200130][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056467b5 [ 295.200141][ C0] R10: ffff88802b233dab R11: 0000000000000000 R12: 0000000000000000 [ 295.200152][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73c50 [ 295.200167][ C0] ? ct_kernel_exit+0x125/0x180 [ 295.200194][ C0] default_idle+0x9/0x10 [ 295.200209][ C0] default_idle_call+0x6c/0xb0 [ 295.200224][ C0] do_idle+0x464/0x590 [ 295.200242][ C0] ? __pfx_do_idle+0x10/0x10 [ 295.200262][ C0] cpu_startup_entry+0x4f/0x60 [ 295.200284][ C0] rest_init+0x251/0x260 [ 295.200300][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 295.200321][ C0] start_kernel+0x484/0x490 [ 295.200348][ C0] x86_64_start_reservations+0x24/0x30 [ 295.200366][ C0] x86_64_start_kernel+0x12b/0x130 [ 295.200382][ C0] common_startup_64+0x13e/0x148 [ 295.200409][ C0] [ 295.200416][ C0] [ 295.430650][ C0] Allocated by task 9192: [ 295.433114][ C0] kasan_save_stack+0x30/0x50 [ 295.435653][ C0] kasan_save_track+0x14/0x30 [ 295.438136][ C0] __kasan_kmalloc+0xaa/0xb0 [ 295.440727][ C0] p9_client_create+0xaf/0xd40 [ 295.443765][ C0] v9fs_session_init+0x3c/0xd20 [ 295.446292][ C0] v9fs_get_tree+0xb8/0xb50 [ 295.450215][ C0] vfs_get_tree+0x92/0x320 [ 295.453489][ C0] path_mount+0x7d0/0x23d0 [ 295.455475][ C0] __ia32_sys_mount+0x292/0x310 [ 295.457499][ C0] __do_fast_syscall_32+0xe7/0x970 [ 295.459421][ C0] do_fast_syscall_32+0x32/0x70 [ 295.461350][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.464305][ C0] [ 295.465465][ C0] Freed by task 9192: [ 295.483583][ C0] kasan_save_stack+0x30/0x50 [ 295.490752][ C0] kasan_save_track+0x14/0x30 [ 295.502582][ C0] kasan_save_free_info+0x3b/0x70 [ 295.505119][ C0] __kasan_slab_free+0x5f/0x80 [ 295.507281][ C0] kfree+0x223/0x6c0 [ 295.509348][ C0] p9_client_create+0x72d/0xd40 [ 295.511834][ C0] v9fs_session_init+0x3c/0xd20 [ 295.514089][ C0] v9fs_get_tree+0xb8/0xb50 [ 295.516599][ C0] vfs_get_tree+0x92/0x320 [ 295.518565][ C0] path_mount+0x7d0/0x23d0 [ 295.522108][ C0] __ia32_sys_mount+0x292/0x310 [ 295.526144][ C0] __do_fast_syscall_32+0xe7/0x970 [ 295.528646][ C0] do_fast_syscall_32+0x32/0x70 [ 295.530686][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.533428][ C0] [ 295.534740][ C0] The buggy address belongs to the object at ffff8880500cdc00 [ 295.534740][ C0] which belongs to the cache kmalloc-512 of size 512 [ 295.541596][ C0] The buggy address is located 24 bytes inside of [ 295.541596][ C0] freed 512-byte region [ffff8880500cdc00, ffff8880500cde00) [ 295.548020][ C0] [ 295.549064][ C0] The buggy address belongs to the physical page: [ 295.551696][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880500ce800 pfn:0x500cc [ 295.556541][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 295.561306][ C0] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 295.565272][ C0] page_type: f5(slab) [ 295.567211][ C0] raw: 04fff00000000240 ffff88801b842c80 ffff8880404007c8 ffffea0001819e10 [ 295.570786][ C0] raw: ffff8880500ce800 000000080010000f 00000000f5000000 0000000000000000 [ 295.573978][ C0] head: 04fff00000000240 ffff88801b842c80 ffff8880404007c8 ffffea0001819e10 [ 295.577411][ C0] head: ffff8880500ce800 000000080010000f 00000000f5000000 0000000000000000 [ 295.580751][ C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 295.584392][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 295.588481][ C0] page dumped because: kasan: bad access detected [ 295.591733][ C0] page_owner tracks the page as allocated [ 295.594575][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5156, tgid 5156 (udevd), ts 265290484783, free_ts 265082184652 [ 295.606619][ C0] post_alloc_hook+0xfd/0x120 [ 295.609254][ C0] get_page_from_freelist+0x11a6/0x3410 [ 295.612114][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 295.617067][ C0] new_slab+0xa6/0x6c0 [ 295.629481][ C0] refill_objects+0x277/0x420 [ 295.632175][ C0] __pcs_replace_empty_main+0x375/0x650 [ 295.639760][ C0] __kmalloc_cache_noprof+0x493/0x6f0 [ 295.651232][ C0] kernfs_fop_open+0x23d/0xd50 [ 295.653772][ C0] do_dentry_open+0x6ab/0x14d0 [ 295.656393][ C0] vfs_open+0x82/0x3f0 [ 295.680170][ C0] path_openat+0x208c/0x31a0 [ 295.682436][ C0] do_file_open+0x20e/0x430 [ 295.684580][ C0] do_sys_openat2+0x10d/0x1e0 [ 295.686529][ C0] __x64_sys_openat+0x12d/0x210 [ 295.688834][ C0] do_syscall_64+0x115/0x840 [ 295.694057][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.697933][ C0] page last free pid 8771 tgid 8771 stack trace: [ 295.706921][ C0] __free_frozen_pages+0x794/0x10a0 [ 295.712772][ C0] device_release+0xd2/0x270 [ 295.718502][ C0] kobject_put+0x1f7/0x640 [ 295.720192][ C0] netdev_run_todo+0x80f/0x12b0 [ 295.722016][ C0] tun_chr_close+0xea/0x220 [ 295.723639][ C0] __fput+0x3ff/0xb50 [ 295.736009][ C0] task_work_run+0x150/0x240 [ 295.747943][ C0] exit_to_user_mode_loop+0x157/0x670 [ 295.750266][ C0] __do_fast_syscall_32+0x701/0x970 [ 295.753606][ C0] do_fast_syscall_32+0x32/0x70 [ 295.757253][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.776204][ C0] [ 295.777211][ C0] Memory state around the buggy address: [ 295.779475][ C0] ffff8880500cdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.794350][ C0] ffff8880500cdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.822185][ C0] >ffff8880500cdc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.831663][ C0] ^ [ 295.868544][ C0] ffff8880500cdc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.893970][ C0] ffff8880500cdd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 295.919752][ C0] ================================================================== [ 295.928070][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.930930][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 295.940300][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.952299][ C0] Call Trace: [ 295.953974][ C0] [ 295.955140][ C0] dump_stack_lvl+0x100/0x190 [ 295.956880][ C0] vpanic+0x552/0x970 [ 295.968969][ C0] ? __pfx_vpanic+0x10/0x10 [ 295.971962][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 295.974683][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 295.978970][ C0] panic+0xd1/0xe0 [ 295.987474][ C0] ? __pfx_panic+0x10/0x10 [ 295.990006][ C0] ? end_report.part.0+0x23/0x90 [ 296.006762][ C0] ? rcu_is_watching+0x12/0xc0 [ 296.009536][ C0] ? end_report.part.0+0x23/0x90 [ 296.012095][ C0] ? check_panic_on_warn+0x1f/0x90 [ 296.014763][ C0] check_panic_on_warn.cold+0x19/0x34 [ 296.017818][ C0] end_report.part.0+0x3a/0x90 [ 296.020559][ C0] kasan_report.cold+0xe/0x18 [ 296.023789][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 296.027888][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 296.031770][ C0] __kasan_check_byte+0x36/0x50 [ 296.034292][ C0] lock_acquire+0x12a/0x370 [ 296.036721][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 296.040100][ C0] ? .slowpath+0x9/0x18 [ 296.042447][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 296.046059][ C0] ? p9_req_put+0xaf/0x250 [ 296.049234][ C0] p9_req_put+0xaf/0x250 [ 296.051977][ C0] req_done+0x1dc/0x2e0 [ 296.053985][ C0] ? __pfx_req_done+0x10/0x10 [ 296.055765][ C0] ? __pfx_req_done+0x10/0x10 [ 296.057618][ C0] vring_interrupt+0x2ef/0x650 [ 296.059634][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 296.063230][ C0] __handle_irq_event_percpu+0x235/0x8c0 [ 296.066645][ C0] handle_irq_event+0xab/0x1e0 [ 296.069978][ C0] handle_edge_irq+0x35e/0x960 [ 296.073335][ C0] __common_interrupt+0xd8/0x2f0 [ 296.076595][ C0] common_interrupt+0xb9/0xe0 [ 296.079949][ C0] [ 296.081581][ C0] [ 296.083171][ C0] asm_common_interrupt+0x26/0x40 [ 296.085801][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 296.088760][ C0] Code: d6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 296.099206][ C0] RSP: 0000:ffffffff8e407e00 EFLAGS: 00000202 [ 296.104027][ C0] RAX: 00000000007b254f RBX: ffffffff8e4955c0 RCX: ffffffff8b86e225 [ 296.135541][ C0] RDX: 0000000000000000 RSI: ffffffff8df1a757 RDI: ffffffff8c1c4380 [ 296.148505][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10056467b5 [ 296.152767][ C0] R10: ffff88802b233dab R11: 0000000000000000 R12: 0000000000000000 [ 296.156417][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73c50 [ 296.196996][ C0] ? ct_kernel_exit+0x125/0x180 [ 296.198923][ C0] default_idle+0x9/0x10 [ 296.200716][ C0] default_idle_call+0x6c/0xb0 [ 296.202711][ C0] do_idle+0x464/0x590 [ 296.204316][ C0] ? __pfx_do_idle+0x10/0x10 [ 296.206230][ C0] cpu_startup_entry+0x4f/0x60 [ 296.218670][ C0] rest_init+0x251/0x260 [ 296.228632][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 296.230870][ C0] start_kernel+0x484/0x490 [ 296.233290][ C0] x86_64_start_reservations+0x24/0x30 [ 296.236249][ C0] x86_64_start_kernel+0x12b/0x130 [ 296.252846][ C0] common_startup_64+0x13e/0x148 [ 296.255483][ C0] [ 296.277802][ C0] Kernel Offset: disabled [ 296.280355][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:08:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c35a5 RDI=ffffffff9b44d300 RBP=ffffffff9b44d2c0 RSP=ffffc90000007710 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff857c3540 RIP=ffffffff857c35cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809718a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fba190 CR3=000000004c736000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff8880403854f0 RCX=ffffffff81e445f8 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc90003147940 RBP=ffff8880403854f8 RSP=ffffc90003147918 R8 =0000000000000001 R9 =fffff52000628f28 R10=0000000000000003 R11=0000000000000000 R12=1ffff92000628f24 R13=ffff888040385500 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff81e445fc RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809728a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080005000 CR3=0000000057477000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000036ea0d RBX=ffff88801c7dca80 RCX=ffffffff8b86e225 RDX=0000000000000000 RSI=ffffffff8df1a757 RDI=ffffffff8c1c4380 RBP=0000000000000000 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed10056867b5 R10=ffff88802b433dab R11=0000000000000000 R12=0000000000000002 R13=ffffed10038fb950 R14=0000000000000002 R15=ffffffff90d73c50 RIP=ffffffff8b86c87f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809738a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034222ff8 CR3=000000004cc4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e7e5360 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e7e5360 RDI=ffff88802565b0d0 RBP=ffff88802565a540 RSP=ffffc9000368efc8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffff88802565b0d0 R15=0000000000000000 RIP=ffffffff8b86d000 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0063 ffff88809748a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f545bff4 CR3=000000004f0e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db59526ee024bb7f 0ff19541f19f61e5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 890400f5785850bc 1e6fb83b6b9998e1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9de40a280ac5a22a 30b9fb3e885c7650 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 405cc9c64317f525 83dfb74a079f54a7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b400000000 18a01e3c00800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b4 000000b400800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b400020b52 15711e2201f6003b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b41aa944e4 1925c87413aa52cc ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3ce87edb5cc32d0 ca7502a69628eda4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2d6055fa5f9ee6 026b9a669a18e0e3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000