last executing test programs: 7m22.673980745s ago: executing program 1 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) 7m22.625163552s ago: executing program 1 (id=735): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40001) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000010001, 0x4, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x10252000) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) 7m21.634041766s ago: executing program 1 (id=742): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f00000004070000002800000002000000420000000c00000000000000000000000000002e"], 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000900)={0x1, 0x5, 0x7, &(0x7f0000000c40)={0x2c, "178bc42ade35af5ea7840300"}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x179, 0x0, 0x5}]}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m19.763152956s ago: executing program 1 (id=760): gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="7012fbd831533e6a3ab41d1cc8626cf3b2df3dc79fa458dec5d65f27fb22101e4902ca2ecb20ba450de7c88cf01ff72bd575cbc349982927a71504674830e7cbbacc91bde220c837750508e4", &(0x7f00000001c0)="446f772ce893f2646232c02723ffac9258c5011f98043cc68226df141858d851d001d91af25dfa8aa62af924cab36d525c20042ea6aa04149de8104c0a859ecc71f0c5fb0863c96cf173652167bfd8098fe6d593bf2488d820b1882d11c4b6e62db61d648d5c17b12088e801b574ade308dcb971f7515287898ee44d512fcb4c81d2f0189bbd40920faefdd7623ba4270bdc119f57fa15e2"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 7m16.770619038s ago: executing program 1 (id=781): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmmsg$sock(r1, &(0x7f0000002100)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{}, 0x5}}, 0x80, 0x0}}], 0x41, 0x4000084) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x4e, 0x2f]}}}, 0x4e}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000340), 0x1004001, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x1e, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m16.68436495s ago: executing program 1 (id=782): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r2, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 7m1.722596225s ago: executing program 32 (id=782): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r2, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 7m1.038415011s ago: executing program 0 (id=888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0, 0x254) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, &(0x7f0000000240)={0x401, 0xa21, 0x3, 0xb, 0x1ff, 0x6, 0x8}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r1, 0x0, 0xf}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffc7ab5c19d3f804d94000000014060100000000000000000000000000000000fe800000000000000000004ef9b771cdabc01c5188744efcc99c9a529d3645542360d35eb9e4750873740e7b424b55833b34f1dbca8252957db3d8d42f020d98ebcf1102544159cf2c9247ce0a3bcd6cb4cac01dc5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500700009078000f"], 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) r4 = socket(0x10, 0x803, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002d007f00000000000000df250400000004007180", @ANYRES16=r2, @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x8044) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 7m0.843610054s ago: executing program 0 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) 7m0.842620009s ago: executing program 0 (id=890): creat(&(0x7f0000000200)='./file0\x00', 0xd931d3864d39ddce) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8240022a, r3}) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x3, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) io_uring_enter(r6, 0x3516, 0x2, 0x0, 0x0, 0x0) 6m59.501925487s ago: executing program 0 (id=898): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f00000004070000002800000002000000420000000c00000000000000000000000000002e"], 0x0, 0x45, 0x0, 0x1}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0xb, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000900)={0x1, 0x5, 0x7, &(0x7f0000000c40)={0x2c, "178bc42ade35af5ea7840300"}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x179, 0x0, 0x5}]}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m57.712806267s ago: executing program 0 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) link(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file2\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r1 = syz_clone(0x100, &(0x7f00000001c0)="35784f700e8a2c1c03fe538a8fdbadac33f98e4f2c26d50022dfd527a65b70d6f9c75088a384ee97c8d931affd8a5fb50de4c9dd39a15b6c986bf7b53d54d8da20a3522fdf419f3890944c118ba5dd1b33b01a27133326a6d63fa0cdb40ea5cf16bb79be616ab749dbffbfbc40baf3049cae512dc421cb8592044c00cc7054e47f768edf297e331f7a02f6c4d95cb200bd8beff1373ce23c31584700bb60ffcafe9fdfb9238d58e3bd55aafb0b2d076e992b52dda3cccf2e6034529ada92d4e9fc8f5fed070643ab75486cb262272de883aa1a1170d0abf46194c63550b58152e0e458e0f91e3f60c9015ccb03f2ced99d48020d56a359ba30f1b3e1a521", 0xfe, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000380)="030db211dfc760345108240cf9532a90c6609eeb5665261a41c200f5ae7a2714ee2e313ded83f78ea8319b58c18a7ac3cfeca6a947881a0cc774ea207658b0aa472abc56d3cf76250555eb") prlimit64(r1, 0xc, &(0x7f00000002c0)={0x500}, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 6m57.494635057s ago: executing program 0 (id=907): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 6m42.232231986s ago: executing program 33 (id=907): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 5m54.290971529s ago: executing program 4 (id=1312): creat(&(0x7f0000000200)='./file0\x00', 0xd931d3864d39ddce) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8240022a}) r2 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x3, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) io_uring_enter(r3, 0x3516, 0x2, 0x0, 0x0, 0x0) 5m53.333731615s ago: executing program 4 (id=1316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)={0x138, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x11c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xfc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3000000}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xbe5b29c11aaac84b}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xb, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x138}}, 0x0) 5m53.222570943s ago: executing program 4 (id=1317): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@gettfilter={0x6c, 0x2e, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf3791b9c46974b67}, {0x2, 0x3}, {0xfff3, 0x1}}, [{0x8, 0xb, 0x800}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xfffffc00}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x6c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000100020000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r5 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r8], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150000200012800800010073697400140002810500090089000000060012024e220000"], 0x40}}, 0x28048810) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) 5m53.082912061s ago: executing program 4 (id=1319): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000840)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24058080}, 0x40400d0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x7, 'hsr0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r5, &(0x7f0000000240)) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x20, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000840)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24058080}, 0x40400d0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x7, 'hsr0\x00'}) (async) fstat(0xffffffffffffffff, &(0x7f0000000140)) (async) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r5, &(0x7f0000000240)) (async) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x20, 0x0) (async) 5m52.994395378s ago: executing program 4 (id=1321): socket$netlink(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) r2 = gettid() (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) (async) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) (async) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=ANY=[@ANYBLOB="d00f00001300e99900000000ffdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010000009c001100fc010000000000000000000000000001fe8000000000000000000000000000aaffffffff000000000000000000000000fe8000000000000000000000000000bb3c010000073500000a000000ff0100000000000000000000000000012001000000000000000000000000000120010000000000000000000000000001000000000000000000000000000000000002000005350000020002000c000f00040000000000000008000c00ffff00000c000f00020000000000000024000900000000000000000000000000000040000c0000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="020000002c001300fe80000000000000000000000000002164010102000000000000000000000000000000000a000000"], 0xfd0}}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xfffffffc}, 0x94) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0188f400000005e1ffffffffffffff000000000079d14a0af866eff8010f9add704f9f59388851dcb8b311269d254cceb44b73edda0c7317885212e80505f8e8f620ad3d33f4d54e191c2c473684336c149909c0f2b621fa9af15ec5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)="8303561298bca5ffa79305004451bb35710a034064711167ac40a5aed1125fbf57cf8a9b79dec97560ac776582f757cb4c8fa26357b733ac63577b9cc736d421cddf4787ef2be6afa4047ced804e19d551183ae3dc84c361514dd8c7d175bfc356265e0f3710ab9d0ec2b3cda560a037527149ee120177b627bee16290fa7f86de745a34b0994c9c0e6f7559a7b2e2a74e398602759df8688d", &(0x7f0000000240), 0x801, r6}, 0x38) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x84, &(0x7f0000000680)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, @in6={0xa, 0x4e24, 0x1, @loopback}]}, &(0x7f0000000280)=0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 5m52.852051058s ago: executing program 4 (id=1325): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x5, &(0x7f00000002c0)={0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x2ac4, 0x10100, 0x0, 0x10000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000b8b000/0x3000)=nil, 0x930, 0x300000b, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="3584a4cf22467aa5f5a595981acb84942b35aea45ce291807f7f789f0063593f0f4f407e43a180e13178f9ef539d44fc8e2357750c6697b1a1ecb3b2f1f9efd473a0629aaa4961a1", 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) connect$unix(r8, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f00000025c0)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$IP_VS_SO_SET_EDITDEST(r11, 0x0, 0x489, &(0x7f00000000c0)={{0x87, @loopback, 0x4e21, 0x4, 'dh\x00', 0x0, 0xd, 0x13}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e24, 0x4, 0x1, 0x5, 0xd5b}}, 0x44) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 5m52.800827784s ago: executing program 34 (id=1325): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x5, &(0x7f00000002c0)={0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x2ac4, 0x10100, 0x0, 0x10000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000b8b000/0x3000)=nil, 0x930, 0x300000b, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="3584a4cf22467aa5f5a595981acb84942b35aea45ce291807f7f789f0063593f0f4f407e43a180e13178f9ef539d44fc8e2357750c6697b1a1ecb3b2f1f9efd473a0629aaa4961a1", 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) connect$unix(r8, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f00000025c0)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$IP_VS_SO_SET_EDITDEST(r11, 0x0, 0x489, &(0x7f00000000c0)={{0x87, @loopback, 0x4e21, 0x4, 'dh\x00', 0x0, 0xd, 0x13}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e24, 0x4, 0x1, 0x5, 0xd5b}}, 0x44) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 7.567551509s ago: executing program 5 (id=3263): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000001ee00)=[{{&(0x7f0000019100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, &(0x7f00000191c0)=[{&(0x7f0000019180)="fe9e1fd0dbf871aee7ca", 0xa}], 0x1, &(0x7f0000019200)=[{0xf8, 0x117, 0x5dc8, "8be05fb2bde8269e60deb4bde63cb08926fa11c84e24b532cfe145a448b10ee2b6edf3fb7e5cc46ba9283af7eb5607e4661069164ac558027be96cf0266a38117f2983e4daf3c399bf9a8639a2da3c2d88c1f9225ebbdf9d36ff61d8592a741e110f8323b1e7cd4a2544e21650767fc1a3f2e614f7639f30367683718ce14f6e0f00c2861b0f46223cc9978b758129947f2371965c0b34127ba5a8e853ceab678274474ab01682c591c5273494868a19c33121738ae0ad1d392f626dd3d673eadbfab2d7bd6e1b07650b02a192f8e808750b455e3dd91c947f26c21a9060dc3d4d063b059555e175c5ea10"}, {0x44, 0xbd, 0x5, "11ca49858fe50f0764585c130a995498dcf93a79bfdbe840bb0d0479d2e703a423ff45fa1c19bf939b258b8b03c2da76a0e8c62a2ffa10f2"}, {0x58, 0x110, 0x284, "85d352e80154df58eefc1a19ebb15c23429f3811ef79bdc0f1e2dec1bcf2652226967431b1832067844fa9871b84ebe0674b27e2b115452d1bb0c441fc1690b769fd1c4578f3220566df"}, {0xc, 0x10a, 0x4f07}, {0x9c, 0x107, 0x7, "7e7645f56b740479343bdbc098e44317cbf317fdb66ebc20fed159658698888dd59b00aeef306dfef3870ca62514bb85631c57b5b698160cf2d363a8c784db2117287c2f506b6994902aa1bfbf44e692347ca0951da8c701fd1fb9596634f05639eb69f9162c297d2b93cd0a43f3ceffcf72a123c1315cdbc810f46e05e810c89b3571318abc0dac566a9728bcfde6"}], 0x23c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000001c440)=[{0x3c4, 0x1, 0x1, "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"}], 0x3c4}}], 0x2, 0x4040840) 7.488561015s ago: executing program 5 (id=3264): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000001c0)=0x1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) write(r5, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r6, 0x400, 0x1) 6.38859383s ago: executing program 5 (id=3269): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f0000000007ff00"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 5.951251827s ago: executing program 2 (id=3270): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 5.890651739s ago: executing program 2 (id=3271): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@phonet={0x23, 0x6, 0x2, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="9f3d9b2e0b2ca270f0aa14e4581e8450e2920cc959692179233db6b9fdb0eb4d6d0b3d2d38b468f117fd0a9c6d429760e8f173104805400a85c5173adb620f261a70f60f86601e91c70c2773be1286c7ecdf4dd3f03088567b4a241f6fe043f7fcfe15fd1046cfaf147a8f1155f7f61a80b4cde9755c173e7cd1cf653776dead5605ccfd8a8650d194b2099a8e380f5daac34b58969832bcd9e8db737d857eb6dd9ec4862b8eec547baaec73f423d5fddaa1fc99501adbd09bfd48da60", 0xbd}, {&(0x7f00000001c0)="39c96f4fe2adf8322f1c087d3b9dcadfe2cf95202b82d3cf5c7a55856f6252d2a00e7ed70d7cb1beaf849e2b13f625f8d3cd300ed63d4914f59e50c5de2e33ca0fed7e179b5a6489ff742bdac293ed1dcd787dee19e5961eeda97b3ab0cb1fa7c3330dd9a00681729240a2c31b58dcc2a9c8f47d0334178350dca55bfda211b9590f6a5b2fe0cc15fed2185d641a068bf14ffb7ac54ca5d05d9623d9936f8dfcf48b04117d2276728de25c2f5bad5e3031495aaffa02e4d54ce9f4dcb94d90f66d974ea60e8361c4b7fe30bba3de34e6ad096fcea9ffd74a9a9eced2070c8858ba72e0c5572c8f35a1b0febc", 0xec}], 0x2}, 0x44004) socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000006000000040000000000000000100000d908000006000000ffffffea000021119f07052d255e46720000000000009aea"]) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) unshare(0x26000400) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, r11, 0x26, 0x0, @void}, 0x10) 5.002314324s ago: executing program 5 (id=3276): r0 = socket(0x3, 0x5, 0x5) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd, 0x4, 0x0, 0x0, 0x10, 0x1, {0x1}}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005002000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000000c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) 4.253844975s ago: executing program 6 (id=3280): r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x800, 0x2, 0x5}, 0xfffffffffffffea6, 0x0) syz_clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x3a}, &(0x7f0000000380)=""/174, 0xae, &(0x7f0000000e40)=""/4096, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001e40)={{r1}, "aeff2e80d7aa512a12e9a2ef62e87e9f8b23a41897e13c3eba800694b4d5ede7348f66373caa24582f8ea3e5c28ca1bce849ea5ec40d43a3bf1017fd32d271c59e66245a58b75610b69c4a92067a322a4033f3b9218a265098fea35b698558e1de544806c677aefbc6ae6ed81abdfa69194691528c64ba7aa3a8467b092c5b346377cb0dcafff056d18e68db89b0f51993579472b064e4561d095185fb8a69f316c13789fe232de861d5eef3f7539933bc36688e25762224dee954cca5fe47cda1f4572c16d1421c27a933d53069043fc95e98792e3482cb4bd4eb22e07fd3d1bf1fb2f4b6039b53f72e36ced88717a13805fa28eb1c047bbfd49fd6da3d22b6de90be2bbe2817809bfcf0686797f57200e115cf387d13542f933b9b082243f2cfbebb1b37d2c6f48ea91822bf064090ee02ca5708aa0ab547b1ab10601870b7463861791f5cb163ef1da1041163ddfb9d5185a09ff37c54e2239981d6b300f24e57d73fdbd5cce1f0f01d5e92093db8ac2fc869e6591981c6e02d256cbbec30e16fe01a653fb5013c35397fcdaf15274a19d37f2854a17dd77980bafb8030cfb18e24b8ada6bfb8e0621deacb618535881c13ded50ae31b01b46f028555f7e299e349cd227d0a7b4251932542a4cd03978bda5609f448a4ad8bd1d0838b924be6aa4844ccb7fd5d824b400ba556af7f5aef41a175bb573da7a5109e1c9bf6331d3dc87e528546c3f4c54d0c0008c50941025a035b195bfd22a24485c86c5158444dffd44ace240401d5d7f0f58c2dc7d02edc6e68e91b5f53f1c8556e0cdc779bf5014c5b4540c6d87bd55980cc11838028f85502a0ce1463b1ed2fa6eb6f8bfbccd15d4af11e8e3e8413fc6a55538c15f2706f2117138761f684d2337ff07248126705130ab2490f6ac6f0b20e78d57acbcea427a9e3741253326b513e75b38d6f732b367f655819210c87342eaa7003a5484543d3f658b784be866f2443638ad123da558406aaca708c8abf80bf10282b36d531dcf8ad2488cd9d529ed9307a6299a455fa4b1a3215675b8178a526a37b1df9a8b00d1b66d4d13b960f4ac64091793fc5a2a4b913969807f1b6cfb36a85ccedf474aa25ad4892f20a48d667fe982e71d59e3682a6567874efccac1bb6ddc72d08cc9970d9ecf8b870c95eede682239371033d128d8ac0a0dd85ad157d951eec695fc0009b7751b096a282f0143f53b77d1a216911531955c69c5e706d109b09db5e454d2279201b1eae47234ad10ea841e80ca231791943d8740fdf7513696faf1ec0f9faba7b260822c6bf0ddb45ed01d90cd291b35843cf2f3a1205130f131fb3d3487cb3a3e23a3520f8c8dae4231a10b5e748d4e2508fadddf093523a09346f05cc8bf795f946acb1a08009459b15e7dd35e25d079a4d67c523494de2c1f9f7772394b3cf62dbb24856b4c733ca9f6869ee7e84bf9c9d1b44d2e254704f4aa9bda56d83981e5de9986896b352ee6bfef0ec76416ed597d74b6df2d8ee37661e43e30e7827fb00811892c5ff2193e4062a1cbb19f89e0e1f49b8dd2824984fc941e5b79e28dd3cd4b9cb5345147172b023b5c6e88352b85cacc4f26f42afd0d918430c55d9e1c217f5a2be6ce4e6d700624623fa6a16a84c751852274076925c486094f9cf8750b5ebabd57660c5b5f0e49874d014fbf21aa547e70630488ecfed6f837fe3ff2f3eba35ded6715a043e4212cc8faf0e388ec136eb384a063a2e9716decca616d0801f2502fb584e14e6b8153651e84808bf822b6c4eae6d45f85cef8915c959d9c21b5392bd7919405f4f9045a13a049086224cfbfc0c779e96c020723c0a2ec1e07fcea4052ec5d350538715fa0d589f1cf9c194cc8984cb64ab157443dec0747008c6d08c7d4432b13975f875d4a973a5a7bb0de3f8ca44f22291f08c558ead58e5894a5767e93bf382557b50a61a930b872351203308e61cd5d0fd58db8e9a8ec4ab5d20e0184d075cbf9a84c9c8ae6e33ab7f8599ecb270703c331bb2dadf063a5c9a75bbb17acf6fd6ea559aac0dfdca6841f362ca2576f08010c580ab9e750ab9863bbdae63af39ffc39cd5a99c8dae27467ae04cb94a8b658bedabcebc7fb10c07fae18bef47d1c88ff7107e8adf6095396c6a076dd4dfb3d0b177f16ace7e8f07b13caf4651caeda3e258988813d52067a2d099cd14a7cb43e8837539b17eeb26e0202787537d08f4558d9adc9ed01221df0e6235d81cdf7fabf3540551bd7acbd9689e6ba8998e727cde2c273a945213b24d763ba9d4ce28c8d8af5bbcfb5c8241ad9733ade1a015af29f2aaf22bc8debaa6b192f998f0d8146f03032c741ed7a30e9e07d6084c116b2d7266e6fbb6844c58463690ea6b37c27fca4ac600f8aba1187ef3dd8d2c552cb9c1fa28bf1784be0e0a7bbcb527741232d780c7c91eae5565d47a492bb669941739084b3afc28c9ea8e877bf345549c7e97c191306c942a60b74c1b91af5ff503531b32980334477173e837a765c25f7f6034768b350b993220f7516d5383e4ac6a0b0f16669537faca7f34c14e6d86e188d74349b4f7d8fdd5d70f26745bf3f7bb03fbe76a2471e75a551e695bd59b6c5d1bfcc4d30d792d2248edee523068f3fc13877c29c87947ad96c79823a33cd5b7ef438d27108dcc8ed58b3a196f63cc69367e08f7598fb94c2df3cd53dc20deead229c1cfcd0c807a02e680aeeae66c0f20fdee09eb6028d902b2eb7d90f02ca2e26faccc4301918af76f06e2e10b6bf36ff2820edba36b5d71156f7db9aaba6719dfb20a6eeca849fefd1130781b2cc6e208eb1a3ee15e4bf1501a290f4423b2c7ccf6971d09e13895e43a8dca1e652c05f43daff22d171328bd58c4cb12d0e35a558e3279eff9eb42570e91bb5d0c8d5efedfcd296d635896e8d27d1904904adf16c99ca152e55d79b93484eb43307e15856a8f2ed725b6206375b26106c1b43bb508ef6405fcd6a226e7f953e619f73d7b91fd4078819af728a1be04a85a5dcb921784db04298eff61b53b05fbd45ecbc463f5c9e12699a37c567e02f2d8061bb5692fd879b6409fabfcc2a969bbbb89a23ce2aedc6fb5531ec50059dd3a7260dd77b9e253ff94829c405ef96f1d53dc77c2c07e9078cc34cc3e2faab9bbc6af6b4e0550893b9f0a52b5842de29c655945a790c5159e3a4297ede944e71f30f25726c2be4d7f6521f99d2b953db68998c3837ae4764f18c97f4f724f49e8aff306ede8500aac0bf1b5e9adf085d3ca0b1a6c13f187fa74a8f77e82a4ed348d54281d8d228e42dda1c19e3b12303d98961a12f2658be16dd86cfe882169daf20f45f2feba8f8f71d2b112d4a8655adce6d3b83c37d678e50e498caa59d2474e6dc8b19c96729878ec647b25a2b112666de1f8adbbd5cfa8c3c1af23c1e783aba114795bcec6b6fda9c9f1b271f9aedb02021f8da0bfd40b5f0907d25d15c7d6b74d754a5cdcffb7a34171f5694cda4ef9dd073f322a01955b1abfe39acf260c976a9ed24d4a1f4d586ee5ad927722f145b862a7940ad56992d7a592a50ccd6f8f1a14759d468fa020c345d8d0b1f73f2de0601223e62682170d772d1cc1df99f9458fc67c75014788cf61307dbb3d57a27515c98cbc681d206033a258abecedaabe24dbff99d0f972b928f69ed1b4179540425b6e80d9342ebceaad7f35e305658cb130fc47c4765213fac9a78695dfe74cf5e52cd2a3b72e2a75dde77849b4327506312c31c2bb3d1cda4707655fa64c4c96da0af9cb2f60bfe1942933fcf27c377d9900a1324861f7469b66f26599310ca4a832f37cd6601e7c53b833aeea900af284929d96763247035ab9770c0452494ab5c3dd77f6e045ff769ec3aaa5e01061e2445bb801f71155c5df6f2df2d1fb5f67b373e3c2caaeece8a06a7d3da6aee73b214a4a75158f9a4efc60c85711ccfdc2520cfce2bfe5c49eb60a23571da49a4365227ba91e586c709c3915bb11bb050e57f4423513c6ff0ce93981ecc2f17a6653c75b7270d5e46184f5114632524eeaf09ed4129060a36ddebd01a76fbc0201a8eee5fb2ecbe77fea36bf7bc9e80796a64c5f8df5a1854a138f3688e6d53546f0d9dd946d17d86663ba4254cf9e88f8b927a56ab3bb9f7e353cf2b4ce6adab8694dd76df0fffaf4c567cb920c8f2ae325e10f0bb5607f670441e475df240a5f37c1644e8873f324b8121094be49472a5a0b82a4bfbff15c2d00c57acd03e6e1285b56645a5b6aa127b1291786d8bd1db713047bc2a73517ad631bcf064a562d2e6a708c8cbb615ee14e468040c63c87fbf556a97f1c61f764c3367fa487165a9f51c49f2331db2deb90581c3424e4cc6d67b8d6c4de3b0640c346ac25af8d525976419aa3f97391830c2bc7a425990f702931ee4a16688a6e5264a06146c7eb307f3ef4d5d538731ed5fc2e88cfce26e7cf70fd09a5f90441c9d0b8c158ae830ba794e75d56d1030550e7d9fefb9fc10358f7fdf4a1ba30124fa7ed13f47a889289201723dbb23d50ea5387f411c5483942810629dbad7a29a86c301ebebf262ae957611eb02a27ee9920cbc2d5093731da799379fe50da9d02c74209c57b745b1cc6bfc19a07f9c18da712c763ddf0dbf48ab7233cf093d523a4a64f0372bdbee95c667209429b0913fd4ddbabf38820ab41d1ab080f19919039d78a334acf24926b89f182771b6e70c788c9ef3dd9381648a4e522a779f19535392d960629282669afe81aa41b756eb517a7841740c63c390c4990e113fc014ad2758c61ba59ba9f467ee46564ea36a9766c5f0919f72c62feda9974ee7e412d19d22213344963788f557516963e5685e173c66705774ddda8ae5c63bb3d873daaca7961f2895fca67d3d9023f252396da3f61de6a26669cb077c64891fa5191c244f7126d371f3eb0d1115b98b1e82435192555667289774c02a4fa3db6252206a1f71bf9110e6fe7ab5164b395e05696e192be349c0086797b60193d35b341757ca11b463eb3617bb71e30b6fba0b5b03579e6989ecdf412c7f27046dcee88dc71e60a2b4a85fac9449e2dc82ca124f820d25da5daa7362a48e2dfa51b33eb948cafd166358f7aa2004fc4ce2a1badbb12eab3be3d2da12c561d31527e903dbc62fdb245ab37c9c5c8aaeec36242818b98b2135cafb0641e63e0dbc92721b54efd83b9a86bbccc852fb5c7607ed65e623eb7ee819c023a3c6e917c56598402aa910119c07cb9e780a121eee6c8684ee1d06488d11cba4d147d3b63709189c4f720074d0fe9655b7286b0396766f7801a92121dfa3da81d4755cb169c6282a1e58ec7a9600e0771d4a3d4a7008d9efe210240b81e52080c6388658177033dcd6a8a5b1a50bebc18aa552d9e6927883b358641ea5589c0b98b5664985a5f67d1d46ff4a01182f52f13c2f1195fe0fdba4ab27b1d3b06c41973c79578cacaf3e42ebd9c47b8c1a166f8c54fdca032c245b2f7699fac5ac0469edff1e399f2cec1fcbf84a871a79993143598b93b657bdd18675586d3f0ec0874ced7c37f539b190cbee38138ee1b3955a1dafb4a3aeeaa7e3e3a5df2bfb360b1a8d62fb9f5b4108bf845e017a705b1225613adf2c50f9ca92fa842e0fdb5c630108335eae8133ac46e311ee18cbb01cbf9e29f4da63bff31562a20443c4c63350cfb9eb7a99411533ca546675db63872bc6c6154f2e76314acf6cd20adebaf1f310690e488ca48c99a6332427d1c70df3c8aa4a79b99170ccb69c540b75a6d90709ebf99"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r3, r3, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x16c0, 0x5df, 0x9, 0x1, 0x1, 'syz1\x00'}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, "eac4"}, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000000600)=@disckey={0x2, 0x1, "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"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe58}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7c533121ba56b5b1000000000000", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x12000000, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000002e40)) 4.081949858s ago: executing program 5 (id=3283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000007c0)=@manufact={0x4, 0x3, 0x800, "54af9e9274c94b4e086dfd2afb5ed97321ec6bda7037e1cc2e7716ffb73f7cab03b8c2adfcea9f29525993d8faf5992b13d6bd6d98546f74ecacac8465e52623f26d36c659f22101a95404e7753c329a9131110c31bccb40e124c7328d3fc2cb6beb511a22fb9095668ac95b0fd364e80c3c9c4b4302a4ed71949aadeec34efb44028f2eb3a856492aeac3c85217c546cf3ae28893671f6dec7a51620a66883c2f3ee8eb94d2e74e19ab114bf4508cd90a9fde8a7259d6d2bcfbddb19298b074c0fa81b5a098b2cc11db848b74279382e64ab28e413614ce70ea9484f11c6c77c5aaa9db1e83da26982d45d1a112e65e8c0837a50448122fb688d40b2c4c2645e0ff4c7cfe46231da00703b948452fb80100eca252a5ae133e89dd086984d9df9b11477326d91376519546d2e71df276b714ff7b445bd03107bf057397e80acea978a1eb4d31636084bff2a7a47cff33bc425f9be3db528fa80259df8b06216a753deca2f9b5ec98fa7d014ca6d47f1a716ed5c31f9e3067fb0cdb3e58a0aa99660e6ec1645fad034401b06e25f27c8d26e7fc50e9851761ae482ab1309dfe0722bdc2301a2257414528c52f0681fc3dac2c525e6f46f8f9275c48c9cb1b1a9e2b667925b7ffe89e256b584e25f0f2e64397e74cc80371a7b31b193d9164b244e35eab796567cfe0420b4a4c29b4b7fb5f34d1a23b1b26730aaca7c8c73a8253595d99786afd0b7430979a2b54b70a3d3570795e6d12ad36c7d89cc183a958173d1ce46ff9947a0c45ff1f3cbed8fad4a61102f6ed6b17c4ec5ef07ee007ed2db8c50ea2c6167ca89913fae67e37681395b6526b996704bdec70e9891cb8ed54e35bd4d3642e2a5bfca62c543d647a4357e1175cd9da811b0f107db88c237f83d2331cd2adbec883c18fe5d534f1cbbd6f237c0715d3d399b0f18516544c156efb5dad55430a87c0b5b22f9fee6337903833c9f3ece66239650c5a536ec84d6728fe46745affdb5e83f0b7579c300326dac8b1bc285ced5933c018461274eb37e9d2c59af41f4d9b9276e46b5556aa817ec5e73fe185d4bc5a936e54b2b2f1e63a481f667423693f1f1cf79c1953138cf238e70bd240cfc86f0d482dc3042bca37b72619f61fdebf114c6410e9162b3e61efab26a50d63ebf7da8411592a4fbf7e4fed217ac791aff232309290c6657a36f06a13ead84532316d1f2633a57d4913e23251b1bd84a4c5ef2931cf4c70ee55cffe2778124168e4daae95d9174415559e543d35ec51d3b155e365d67e9a3698d2ae612e7ef0cf43c6037cbe3ebf7436110fc93879345759a3982a92547fd2b15af8903195992fc20f92baa60fcdadcd25d5c2a8d97e5db667590027eee3bed6fec165138b67d76b5f2f10f847c96a354989161cd560315be32e3e398e01121ee523af200b80fbe3bc281408545ecc3e40f6026238c71ae420c374d6aeef9e128ca78fac6d1d909b67e5c2b833f13ef36c5e9f0bbbdef533c75b6e1db5eb6f611e03ee1d67c792db2a8af5749b5b0f9d0d69118d74eda5f74126aec61126aef450f1283ca13b9c5b9afbf8cc1319bfd7cf69d411f64d76c9cb9873de3de2b3b98c40a0645ff34c7c61b1acdb2863ae0b3a3ef7bcf31f876804176c6dd4ebea27579541a84db13d32a1d4c36cc4ac52fba6757578aa268ae23dad81b42651552a887ca8313d3720c7432db5e27fa9632d852e5cbf5bf096d5ef64d01f2053258ee481ae9d29f58d6e341fe524a671b5f1f2d06f24db0e286750346302c305398db1509eeaef6f1123e0f9838a4efdfd6fcc3b67b9a8cb36ae125c167840e497ff0834e3e8c4722c263e73323d2315179c5900028e88cca08153be82f2bb5acc06a42986fbf81411b64c0e6de309ecd54127b9f70e6b035a09bf96df4c1e1dd9d5854d4a96623148396596d860b7f860f714b6664ba6e05ab85337144ce09f0cf8bedb3b15e1bebc8312f85c7709081a6ae0a637bf421e0599e1729bc30767c59db660e3051fdf1661ed157197bd946a39147910083afca47062336489d23ee34266ba604ebedc57f70164e127317065375dd92d65b6e1fc10f174fc01526efe322caca66f01c4d57084853ee76336a8c3e222b79beefda6e35199f664bedd0988a054feed15ab51ef6acdf2a1c2383b4a9d7b89181e47c9b4bb0b8cd70a20ae58675d6cfd53d78e4640cd022646edb1bcd4cbddbc66222994803f9b2020e1eb155ebf148df6603700b063b7c9bc258f168fbb455c5c2a70f5e48a47fce51b0bba65d6da038e66e61631d39f33aaeb5b1acb87af835e7c1569fcda6c874f550bec9ea363d368377cc19d16ef473e1e9278565ee6f6f3d6f284df811612637969396dcec39f87d5f93023d6e6361e1605d307c8ee58f3c5d657889bdb82bd6c88ba2a3db5b144d6583f6b5b0078a39116b2ab3bcb569b34a6239075421e0ae42af177fd3d8d59025e5ec29e5025650179387124689a8e892dd988f1f312d34d5d005823cb044d2c2f48b81505bb1011d9b0fd15cca9149f8e8f9deb8119f31763c3c746acc64f3f0f0ce171ed0b806d4e3486c41dc8eeeaad7eaa11ec23796b7c963d836806b2f4905db465644292d6d3dee6cee4f09c1fc7883413667acff6b341662ea534cc6d4d51ee681596fae28bd8f6cd9082cfc515f973474cdf1841ea644faf6f74f58ba354dd2f178f9c67f264eda032eb9f09b8d0801f09aba20a2537a1dd59df0b058c3e934d6420ff38ba91f265dc2ea2e1deb9c603230553f8ec8a20515e50893bfe3ced60fb937b1e639c7090895b919e8eab767fa7e017af89d58de750ac1558b7b81cedec4c27244e0a97aebd80ac5e9b3fd05d62578c2b9f30995529887aa5eb1aeff988b0a63d86"}) r3 = io_uring_setup(0x2c48, &(0x7f0000000280)={0x0, 0xdfc8, 0x80, 0x2, 0x1af}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000028c0)='asymmetric\x00', 0x0) keyctl$get_persistent(0x16, 0x0, r9) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r10, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x4, '\x00', 0x4, 0x9}) 4.066955002s ago: executing program 6 (id=3284): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000000005000000f59407a0125d9bca29ed421ca373a0c0f1c95f4b660bf55aa5916dd9ac95478dbb0ae2a64fe7a85090203472eb242b0120bf4f878a4d611db7ef7c80fc593391de47faab5ff2c2fabb6e4f1f2b0bbae2a612c4e7524b69d3ea493fbfd916b93ebf0e98f5f3ba01800000669c46f380691ada2e49fd64837179c518d545df2f3c6ca46d57223bf89aaa63af670b1be7a72e8010d5f4e50ab0a41a6777eabc75cf9421655490f7d37dc0c6c57f1fdc7d96e51756c68f39b404a00b5be196cb72b6a5a644041eeb88c4d3eb419d12af54b55b6a753a4636dd19b743848158dd722aea3f585ad226f4562c18052f73cfcc"]) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000080)=0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff1}}]}}]}, 0x40}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.056059141s ago: executing program 3 (id=3285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000007c0)=@manufact={0x4, 0x3, 0x800, "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"}) r3 = io_uring_setup(0x2c48, &(0x7f0000000280)={0x0, 0xdfc8, 0x80, 0x2, 0x1af}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000028c0)='asymmetric\x00', 0x0) keyctl$get_persistent(0x16, 0x0, r9) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r10, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x4, '\x00', 0x4, 0x9}) 3.785518965s ago: executing program 2 (id=3286): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="01ffffff00000000000002050000000000000000", @ANYRES16, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x1c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f00002bc000/0x1000)=nil, 0x1000, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000003c0), 0x0}, 0x1c) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x4105, 0x10}, 0xc) openat$nvram(0xffffff9c, &(0x7f00000004c0), 0x80, 0x0) 2.774361282s ago: executing program 3 (id=3287): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.743094825s ago: executing program 2 (id=3288): r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc000201e}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000001c0)=0x88e1, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020}, 0x2020) 2.628218908s ago: executing program 6 (id=3289): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 2.573733403s ago: executing program 3 (id=3290): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8a\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfp\xe3k\xd8?\xd9OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x00'/392, 0x3) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pwritev(r1, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x9) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.767123924s ago: executing program 3 (id=3291): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8, 0x0, {0x0, 0x0, r1}}) io_setup(0x1, &(0x7f0000000000)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x101000, 0x40) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) io_submit(r8, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, &(0x7f0000000300)="e83924", 0x3}]) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) 1.701281938s ago: executing program 6 (id=3292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000010) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffc, 0x0, 0x8, 0xa}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) 835.949143ms ago: executing program 6 (id=3293): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\n \x00', "2c09000000ffd8ffffff02ff"]}) 821.839025ms ago: executing program 5 (id=3294): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x7c8d6e50c8057f2d) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8240022a}) socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000180)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3ea1, &(0x7f0000000400)={0x0, 0x8e7b, 0x100, 0x14, 0x84, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x3, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000080000000000000000000400000000003fc85027fda9310c002d5fa0bd98c260277c43e37e8f6870de2bea1d5e5d87fdb863b1faf3432a62b74dc059fd589c497549413e3f30e53fb1e61ec7746361efe990282da545d0b04e54c46a422b0c6e5dd69f0ce253d5cf2e0a509b87049341f0fef666", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 820.287896ms ago: executing program 6 (id=3295): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000000005000000f59407a0125d9bca29ed421ca373a0c0f1c95f4b660bf55aa5916dd9ac95478dbb0ae2a64fe7a85090203472eb242b0120bf4f878a4d611db7ef7c80fc593391de47faab5ff2c2fabb6e4f1f2b0bbae2a612c4e7524b69d3ea493fbfd916b93ebf0e98f5f3ba01800000669c46f380691ada2e49fd64837179c518d545df2f3c6ca46d57223bf89aaa63af670b1be7a72e8010d5f4e50ab0a41a6777eabc75cf9421655490f7d37dc0c6c57f1fdc7d96e51756c68f39b404a00b5be196cb72b6a5a644041eeb88c4d3eb419d12af54b55b6a753a4636dd19b743848158dd722aea3f585ad226f4562c18052f73cfcc"]) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000080)=0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff1}}]}}]}, 0x40}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 742.627314ms ago: executing program 2 (id=3296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$null(0xffffff9c, &(0x7f00000001c0), 0x101000, 0x0) cachestat(r5, &(0x7f0000003dc0)={0x3}, &(0x7f0000003e00), 0x0) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001bc0), 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x7323, 0x0, 0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r6, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1, {0x0, r11}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r11) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r12, 0x40a0ae49, &(0x7f0000000300)={0x1ff, 0x2, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x9}) r13 = inotify_init() ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f0000000000)={0xfffffff8, [[0x8, 0x100, 0x5e, 0x40, 0x401, 0x3, 0x557, 0x7fff], [0xfffeffff, 0x3, 0x0, 0x8, 0xc00, 0x7, 0x45ce, 0x7fff], [0x6, 0x6, 0x8, 0x8, 0x39ebfcf2, 0x5d98, 0x98, 0x5]], '\x00', [{0x281, 0x0, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xa, 0x0, 0x1}, {0x3, 0x1}, {0xaf5d, 0x1ff, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x8000, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xae94, 0xf2, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x6c9}], '\x00', 0x6}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) inotify_add_watch(r13, &(0x7f0000000340)='.\x00', 0xa50003d1) 401.532486ms ago: executing program 2 (id=3297): r0 = open$dir(0x0, 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r1, &(0x7f0000000040), 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xfffffffe}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 77.10995ms ago: executing program 3 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x300}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 0s ago: executing program 3 (id=3299): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000079", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(r0, &(0x7f0000000440)=@rc={0x1f, @none}, &(0x7f0000000240)=0x80, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="240000001a005f0214f9d4010400000004000000000000000009000000000400012a46cdd3", 0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r4, &(0x7f00000000c0)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00', 0x271) mmap$usbmon(&(0x7f00004c6000/0x14000)=nil, 0x14000, 0x0, 0x5010, r4, 0x7ff) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=virtio,fscache,noxattr']) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42302, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x24040800) kernel console output (not intermixed with test programs): T29] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 446.389447][ T29] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 446.393405][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 446.396760][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 446.400401][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 446.411472][ T29] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.415637][ T29] usb 11-1: config 9 interface 170 has no altsetting 0 [ 446.417731][ T29] usb 11-1: config 9 interface 35 has no altsetting 0 [ 446.432899][ T29] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 446.435714][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.438201][ T29] usb 11-1: Product: Ј [ 446.439732][ T29] usb 11-1: Manufacturer: 䰊 [ 446.441842][ T29] usb 11-1: SerialNumber: syz [ 446.445426][T19655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 446.665780][T19655] cgroup: noprefix used incorrectly [ 446.696735][ T29] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 446.700630][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 446.706994][ T29] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 446.710942][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 446.722199][ T29] usb 11-1: USB disconnect, device number 28 [ 446.728634][ T29] ftdi_sio 11-1:9.170: device disconnected [ 446.733507][ T29] ftdi_sio 11-1:9.35: device disconnected [ 446.847066][T19667] ceph: No mds server is up or the cluster is laggy [ 447.239174][T19683] syzkaller1: entered promiscuous mode [ 447.246594][T19683] syzkaller1: entered allmulticast mode [ 447.284467][T19687] tipc: Enabling of bearer rejected, failed to enable media [ 450.866947][T19725] FAULT_INJECTION: forcing a failure. [ 450.866947][T19725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.873236][T19725] CPU: 2 UID: 0 PID: 19725 Comm: syz.3.2609 Not tainted syzkaller #0 PREEMPT(full) [ 450.873253][T19725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.873259][T19725] Call Trace: [ 450.873275][T19725] [ 450.873280][T19725] dump_stack_lvl+0x16c/0x1f0 [ 450.873299][T19725] should_fail_ex+0x512/0x640 [ 450.873316][T19725] __fpu_restore_sig+0x90c/0x13a0 [ 450.873333][T19725] ? __pfx___fpu_restore_sig+0x10/0x10 [ 450.873349][T19725] ? rcu_is_watching+0x12/0xc0 [ 450.873365][T19725] ? __might_fault+0xe3/0x190 [ 450.873377][T19725] ? __might_fault+0x13b/0x190 [ 450.873391][T19725] fpu__restore_sig+0x151/0x190 [ 450.873406][T19725] ia32_restore_sigcontext+0x44a/0x630 [ 450.873423][T19725] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 450.873442][T19725] ? rcu_is_watching+0x12/0xc0 [ 450.873453][T19725] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.873465][T19725] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.873481][T19725] __do_compat_sys_rt_sigreturn+0x120/0x1f0 [ 450.873497][T19725] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 450.873514][T19725] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 450.873533][T19725] do_int80_emulation+0x104/0x460 [ 450.873549][T19725] asm_int80_emulation+0x1a/0x20 [ 450.873559][T19725] RIP: 0023:0xf7f85579 [ 450.873568][T19725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.873578][T19725] RSP: 002b:00000000f5496590 EFLAGS: 00000293 [ 450.873598][T19725] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 00000000f5496610 [ 450.873605][T19725] RDX: 0000000000000001 RSI: 00000000f7414ff4 RDI: 0000000000000000 [ 450.873610][T19725] RBP: 00000000f7444f80 R08: 0000000000000000 R09: 0000000000000000 [ 450.873616][T19725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.873622][T19725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.873638][T19725] [ 451.863714][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 452.008291][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 452.053878][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 452.113029][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 452.181106][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 452.318223][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2616'. [ 452.945400][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2621'. [ 453.287904][T19839] bridge0: port 1(erspan0) entered blocking state [ 453.290933][T19839] bridge0: port 1(erspan0) entered disabled state [ 453.294959][T19839] erspan0: entered allmulticast mode [ 453.303015][T19839] erspan0: entered promiscuous mode [ 454.072027][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2624'. [ 454.700474][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 454.777240][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 455.677350][T19870] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.182443][T19881] dvmrp0: entered allmulticast mode [ 456.274666][T19881] bond2 (unregistering): Released all slaves [ 456.933265][T19905] __nla_validate_parse: 1 callbacks suppressed [ 456.933284][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2641'. [ 457.015086][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2641'. [ 457.488955][T19908] siw: device registration error -23 [ 457.982837][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 459.089023][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2653'. [ 459.225931][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2653'. [ 459.804091][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 460.627682][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2663'. [ 461.100057][ T5983] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 461.112497][T20014] veth0_to_hsr: entered allmulticast mode [ 461.114545][T20014] veth0_to_hsr: left allmulticast mode [ 461.819440][T20029] netlink: 'syz.6.2671': attribute type 1 has an invalid length. [ 461.822756][T20029] netlink: 'syz.6.2671': attribute type 1 has an invalid length. [ 462.598247][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2677'. [ 462.602736][T20056] netlink: 23 bytes leftover after parsing attributes in process `syz.5.2677'. [ 462.799596][T20060] tipc: Enabled bearer , priority 0 [ 462.804242][T20060] syzkaller0: entered promiscuous mode [ 462.805980][T20060] syzkaller0: entered allmulticast mode [ 462.816677][T20060] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 463.430096][T20075] tipc: Resetting bearer [ 463.497725][T20078] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.622587][T20059] tipc: Resetting bearer [ 463.634769][T20059] tipc: Disabling bearer [ 465.576587][T20092] siw: device registration error -23 [ 466.771233][ T61] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 466.961158][ T61] usb 11-1: Using ep0 maxpacket: 8 [ 467.181573][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 467.183755][ T61] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 467.187180][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.282319][ T61] usb 11-1: config 0 descriptor?? [ 467.672621][T20131] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 467.696553][ T61] mcp2221 0003:04D8:00DD.0040: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 467.723397][T20135] Invalid logical block size (53355) [ 467.728723][T20138] FAULT_INJECTION: forcing a failure. [ 467.728723][T20138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.733826][T20138] CPU: 1 UID: 0 PID: 20138 Comm: syz.3.2703 Not tainted syzkaller #0 PREEMPT(full) [ 467.733840][T20138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.733847][T20138] Call Trace: [ 467.733851][T20138] [ 467.733856][T20138] dump_stack_lvl+0x16c/0x1f0 [ 467.733874][T20138] should_fail_ex+0x512/0x640 [ 467.733891][T20138] _copy_to_iter+0x29f/0x1710 [ 467.733903][T20138] ? do_raw_spin_unlock+0x172/0x230 [ 467.733920][T20138] ? _raw_spin_unlock+0x28/0x50 [ 467.733933][T20138] ? __pfx__copy_to_iter+0x10/0x10 [ 467.733943][T20138] ? rcu_is_watching+0x12/0xc0 [ 467.733956][T20138] ? __folio_put+0x32e/0x450 [ 467.733972][T20138] copy_page_to_iter+0x12a/0x1e0 [ 467.733984][T20138] pipe_to_user+0xb0/0x170 [ 467.733994][T20138] ? anon_pipe_buf_release+0x40a/0x520 [ 467.734008][T20138] __splice_from_pipe+0x397/0x800 [ 467.734021][T20138] ? __pfx_pipe_to_user+0x10/0x10 [ 467.734034][T20138] __do_sys_vmsplice+0x716/0x11a0 [ 467.734049][T20138] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 467.734062][T20138] ? get_pid_task+0x106/0x250 [ 467.734078][T20138] ? find_held_lock+0x2b/0x80 [ 467.734092][T20138] ? find_held_lock+0x2b/0x80 [ 467.734111][T20138] ? __fget_files+0x20e/0x3c0 [ 467.734121][T20138] ? handle_mm_fault+0x1d0/0xd10 [ 467.734135][T20138] ? fput+0x9b/0xd0 [ 467.734162][T20138] ? ksys_write+0x1ac/0x250 [ 467.734174][T20138] ? __pfx_ksys_write+0x10/0x10 [ 467.734190][T20138] ? __do_fast_syscall_32+0x7c/0x3a0 [ 467.734205][T20138] __do_fast_syscall_32+0x7c/0x3a0 [ 467.734220][T20138] do_fast_syscall_32+0x32/0x80 [ 467.734235][T20138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.734248][T20138] RIP: 0023:0xf7f85579 [ 467.734257][T20138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.734267][T20138] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 000000000000013c [ 467.734277][T20138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 467.734284][T20138] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.734290][T20138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.734296][T20138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 467.734302][T20138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.734316][T20138] [ 468.240813][ T29] usb 11-1: USB disconnect, device number 29 [ 468.876327][T20162] tipc: Enabled bearer , priority 0 [ 468.879485][T20162] syzkaller0: entered promiscuous mode [ 468.881871][T20162] syzkaller0: entered allmulticast mode [ 468.885709][T20162] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 468.910806][T20162] tipc: Resetting bearer [ 468.916525][T20161] tipc: Resetting bearer [ 468.926094][T20161] tipc: Disabling bearer [ 469.068562][T20172] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2716'. [ 469.857023][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 469.862476][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 469.918710][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 470.131397][T20046] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 470.171366][ T29] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 470.271182][ T6045] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 470.281170][T20046] usb 7-1: Using ep0 maxpacket: 8 [ 470.285019][T20046] usb 7-1: config 0 interface 0 has no altsetting 0 [ 470.288044][T20046] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 470.295727][T20046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.301336][T20046] usb 7-1: config 0 descriptor?? [ 470.324143][ T29] usb 8-1: config 9 has an invalid interface number: 170 but max is 2 [ 470.327664][ T29] usb 8-1: config 9 has an invalid interface number: 35 but max is 2 [ 470.331054][ T29] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 470.335686][ T29] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 470.339385][ T29] usb 8-1: config 9 has no interface number 0 [ 470.342141][ T29] usb 8-1: config 9 has no interface number 1 [ 470.344739][ T29] usb 8-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 470.349223][ T29] usb 8-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 470.354183][ T29] usb 8-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 470.358602][ T29] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 470.363641][ T29] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 470.368370][ T29] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 470.373429][ T29] usb 8-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.378607][ T29] usb 8-1: config 9 interface 170 has no altsetting 0 [ 470.381609][ T29] usb 8-1: config 9 interface 35 has no altsetting 0 [ 470.386900][ T29] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 470.390549][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.393972][ T29] usb 8-1: Product: Ј [ 470.395392][ T29] usb 8-1: Manufacturer: 䰊 [ 470.397194][ T29] usb 8-1: SerialNumber: syz [ 470.403732][T20183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 470.620932][T20183] cgroup: noprefix used incorrectly [ 470.633428][ T29] ftdi_sio 8-1:9.170: FTDI USB Serial Device converter detected [ 470.636470][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 470.641364][ T29] ftdi_sio 8-1:9.35: FTDI USB Serial Device converter detected [ 470.644482][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 470.652405][ T29] usb 8-1: USB disconnect, device number 43 [ 470.665218][ T29] ftdi_sio 8-1:9.170: device disconnected [ 470.668900][ T29] ftdi_sio 8-1:9.35: device disconnected [ 470.681397][ T6045] usb 10-1: Using ep0 maxpacket: 16 [ 470.690303][ T6045] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.696038][ T6045] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 470.699813][ T6045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.707037][ T6045] usb 10-1: config 0 descriptor?? [ 470.715836][ T6045] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input177 [ 470.749154][T20046] mcp2221 0003:04D8:00DD.0041: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 470.932157][ T5374] bcm5974 10-1:0.0: could not read from device [ 470.936834][ T6045] bcm5974 10-1:0.0: could not read from device [ 470.939557][ T5374] bcm5974 10-1:0.0: could not read from device [ 470.946035][ T6045] input: failed to attach handler mousedev to device input177, error: -5 [ 470.962240][ T6045] usb 10-1: USB disconnect, device number 26 [ 471.073556][T20046] usb 7-1: USB disconnect, device number 45 [ 471.135611][T20208] siw: device registration error -23 [ 471.381258][ T6045] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 471.395790][T20212] loop8: detected capacity change from 0 to 8 [ 471.400013][ T7515] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 471.402279][ T7515] loop8: partition table partially beyond EOD, truncated [ 471.405486][ T7515] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 471.414905][T20212] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 471.416739][T20212] loop8: partition table partially beyond EOD, truncated [ 471.419140][T20212] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 471.446341][ T7515] udevd[7515]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 471.459192][ T7515] udevd[7515]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 471.474106][ T5389] udevd[5389]: worker [7515] terminated by signal 33 (Unknown signal 33) [ 471.476993][ T5389] udevd[5389]: worker [7515] failed while handling '/devices/virtual/block/loop8' [ 471.511678][ T6045] usb 10-1: device descriptor read/64, error -71 [ 471.677514][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 471.771216][ T6045] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 471.901555][ T6045] usb 10-1: device descriptor read/64, error -71 [ 471.997696][ T29] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 472.022238][ T6045] usb usb10-port1: attempt power cycle [ 472.361332][ T6045] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 472.419551][ T6045] usb 10-1: device descriptor read/8, error -71 [ 472.640417][T20239] fuse: Unknown parameter '' [ 472.681377][ T6045] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 472.715822][ T6045] usb 10-1: device descriptor read/8, error -71 [ 472.794414][ T29] usb 7-1: config 9 has an invalid interface number: 170 but max is 2 [ 472.797327][ T29] usb 7-1: config 9 has an invalid interface number: 35 but max is 2 [ 472.799831][ T29] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 472.803729][ T29] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 472.806924][ T29] usb 7-1: config 9 has no interface number 0 [ 472.808897][ T29] usb 7-1: config 9 has no interface number 1 [ 472.810865][ T29] usb 7-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 472.814385][ T29] usb 7-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 472.817640][ T29] usb 7-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 472.821017][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 472.822504][ T6045] usb usb10-port1: unable to enumerate USB device [ 472.824830][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 472.830175][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 472.833781][ T29] usb 7-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.837931][ T29] usb 7-1: config 9 interface 170 has no altsetting 0 [ 472.840113][ T29] usb 7-1: config 9 interface 35 has no altsetting 0 [ 472.844104][ T29] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 472.847279][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.849923][ T29] usb 7-1: Product: Ј [ 472.851504][ T29] usb 7-1: Manufacturer: 䰊 [ 472.853408][ T29] usb 7-1: SerialNumber: syz [ 472.857334][T20221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 473.013142][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 473.104727][T20221] cgroup: noprefix used incorrectly [ 473.141699][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 473.156910][ T29] ftdi_sio 7-1:9.170: FTDI USB Serial Device converter detected [ 473.161572][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 473.164434][T20249] lo speed is unknown, defaulting to 1000 [ 473.172329][ T29] ftdi_sio 7-1:9.35: FTDI USB Serial Device converter detected [ 473.176086][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 473.177664][T20249] lo speed is unknown, defaulting to 1000 [ 473.185503][T20249] lo speed is unknown, defaulting to 1000 [ 473.186451][ T29] usb 7-1: USB disconnect, device number 46 [ 473.203697][ T29] ftdi_sio 7-1:9.170: device disconnected [ 473.211334][ T29] ftdi_sio 7-1:9.35: device disconnected [ 473.912085][T20263] tipc: Enabled bearer , priority 0 [ 473.914811][T20263] syzkaller0: entered promiscuous mode [ 473.916543][T20263] syzkaller0: entered allmulticast mode [ 473.928010][T20263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.181429][T20266] tipc: Resetting bearer [ 474.206641][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 474.216660][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 474.230730][T20262] tipc: Resetting bearer [ 474.243457][T20262] tipc: Disabling bearer [ 474.510197][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2748'. [ 474.511174][ T53] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 474.661259][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 474.665368][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 474.671352][ T53] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 474.674188][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.677728][ T53] usb 8-1: config 0 descriptor?? [ 474.685400][ T53] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input179 [ 474.864210][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2748'. [ 474.928430][ T5374] bcm5974 8-1:0.0: could not read from device [ 474.935030][ T53] bcm5974 8-1:0.0: could not read from device [ 474.937538][ T5374] bcm5974 8-1:0.0: could not read from device [ 474.948415][ T53] input: failed to attach handler mousedev to device input179, error: -5 [ 474.965540][ T53] usb 8-1: USB disconnect, device number 44 [ 475.594936][T20301] tipc: Enabled bearer , priority 0 [ 475.614538][T20301] syzkaller0: entered promiscuous mode [ 475.616589][T20301] syzkaller0: entered allmulticast mode [ 475.645067][T20301] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 475.752558][T20304] tipc: Resetting bearer [ 475.812135][T20300] tipc: Resetting bearer [ 475.838999][T20300] tipc: Disabling bearer [ 476.123510][T20319] tipc: Enabled bearer , priority 0 [ 476.126852][T20319] syzkaller0: entered promiscuous mode [ 476.129198][T20319] syzkaller0: entered allmulticast mode [ 476.133988][T20319] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 476.295964][T20322] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.964214][T20326] FAULT_INJECTION: forcing a failure. [ 476.964214][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 476.968413][T20326] CPU: 2 UID: 0 PID: 20326 Comm: syz.3.2756 Not tainted syzkaller #0 PREEMPT(full) [ 476.968428][T20326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 476.968435][T20326] Call Trace: [ 476.968439][T20326] [ 476.968445][T20326] dump_stack_lvl+0x16c/0x1f0 [ 476.968464][T20326] should_fail_ex+0x512/0x640 [ 476.968481][T20326] should_failslab+0xc2/0x120 [ 476.968495][T20326] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 476.968512][T20326] ? __alloc_skb+0x2b2/0x380 [ 476.968537][T20326] __alloc_skb+0x2b2/0x380 [ 476.968558][T20326] ? __pfx___alloc_skb+0x10/0x10 [ 476.968579][T20326] ? ip6_dst_check+0x8e0/0x950 [ 476.968598][T20326] ? find_held_lock+0x2b/0x80 [ 476.968622][T20326] inet6_rt_notify+0x1e0/0x4b0 [ 476.968653][T20326] fib6_del+0xf60/0x1770 [ 476.968668][T20326] ? __pfx_fib6_del+0x10/0x10 [ 476.968680][T20326] ? fib6_ifdown+0xcd/0x8f0 [ 476.968690][T20326] ? fib6_clean_node+0x247/0x5b0 [ 476.968700][T20326] ? fib6_clean_node+0x254/0x5b0 [ 476.968712][T20326] fib6_clean_node+0x424/0x5b0 [ 476.968724][T20326] ? __pfx_fib6_clean_node+0x10/0x10 [ 476.968741][T20326] fib6_walk_continue+0x452/0x8d0 [ 476.968760][T20326] fib6_walk+0x182/0x370 [ 476.968776][T20326] ? __pfx_fib6_ifdown+0x10/0x10 [ 476.968785][T20326] fib6_clean_tree+0xd4/0x110 [ 476.968801][T20326] ? __pfx_fib6_clean_tree+0x10/0x10 [ 476.968816][T20326] ? bpf_trace_run2+0x26b/0x590 [ 476.968832][T20326] ? __pfx_fib6_clean_node+0x10/0x10 [ 476.968843][T20326] ? __pfx_fib6_ifdown+0x10/0x10 [ 476.968857][T20326] ? __pfx_fib6_ifdown+0x10/0x10 [ 476.968867][T20326] __fib6_clean_all+0x107/0x2d0 [ 476.968880][T20326] rt6_disable_ip+0x2ec/0x990 [ 476.968895][T20326] ? __pfx___mutex_trylock_common+0x10/0x10 [ 476.968910][T20326] ? __pfx_rt6_disable_ip+0x10/0x10 [ 476.968925][T20326] ? trace_contention_end+0xdd/0x130 [ 476.968941][T20326] addrconf_ifdown.isra.0+0x11d/0x1aa0 [ 476.968955][T20326] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 476.968972][T20326] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 476.968989][T20326] addrconf_notify+0x89a/0x19e0 [ 476.969002][T20326] ? ip6mr_device_event+0x1bc/0x230 [ 476.969018][T20326] notifier_call_chain+0xbc/0x410 [ 476.969031][T20326] ? __pfx_addrconf_notify+0x10/0x10 [ 476.969061][T20326] call_netdevice_notifiers_info+0xbe/0x140 [ 476.969074][T20326] netif_set_mtu_ext+0x590/0x7d0 [ 476.969089][T20326] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 476.969111][T20326] netif_set_mtu+0x98/0x140 [ 476.969124][T20326] ? __pfx_netif_set_mtu+0x10/0x10 [ 476.969143][T20326] ? full_name_hash+0xbc/0x110 [ 476.969160][T20326] dev_set_mtu+0xb2/0x260 [ 476.969176][T20326] dev_ifsioc+0xd1f/0x1ee0 [ 476.969191][T20326] ? __pfx_dev_ifsioc+0x10/0x10 [ 476.969204][T20326] ? __pfx___mutex_lock+0x10/0x10 [ 476.969223][T20326] ? dev_load+0x8e/0x240 [ 476.969238][T20326] dev_ioctl+0x223/0x1060 [ 476.969252][T20326] sock_do_ioctl+0x19d/0x280 [ 476.969269][T20326] ? __pfx_sock_do_ioctl+0x10/0x10 [ 476.969288][T20326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.969306][T20326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.969324][T20326] compat_sock_ioctl+0x301/0x730 [ 476.969340][T20326] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 476.969350][T20326] ? hook_file_ioctl_common+0x145/0x410 [ 476.969368][T20326] ? __fget_files+0x20e/0x3c0 [ 476.969385][T20326] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 476.969395][T20326] __ia32_compat_sys_ioctl+0x23f/0x370 [ 476.969413][T20326] __do_fast_syscall_32+0x7c/0x3a0 [ 476.969429][T20326] do_fast_syscall_32+0x32/0x80 [ 476.969443][T20326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.969457][T20326] RIP: 0023:0xf7f85579 [ 476.969467][T20326] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 476.969477][T20326] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 476.969488][T20326] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 476.969495][T20326] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.969501][T20326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.969507][T20326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 476.969513][T20326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.969527][T20326] [ 476.971967][T20326] tipc: Resetting bearer [ 477.121007][T20317] tipc: Resetting bearer [ 477.138291][T20317] tipc: Disabling bearer [ 478.841876][T20367] siw: device registration error -23 [ 479.001822][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2771'. [ 479.095310][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2771'. [ 479.955248][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 480.191417][ T29] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 480.380904][ T29] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 480.401849][ T29] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 480.422615][ T29] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 480.456657][ T29] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 480.489678][ T29] usb 11-1: config 9 has no interface number 0 [ 480.510462][ T29] usb 11-1: config 9 has no interface number 1 [ 480.529264][ T29] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 480.562327][ T29] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 480.578617][ T29] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 480.600483][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 480.615020][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 480.635345][ T29] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 480.657518][ T29] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.678285][ T29] usb 11-1: config 9 interface 170 has no altsetting 0 [ 480.691614][ T29] usb 11-1: config 9 interface 35 has no altsetting 0 [ 480.759824][ T29] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 480.762819][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.765404][ T29] usb 11-1: Product: Ј [ 480.766807][ T29] usb 11-1: Manufacturer: 䰊 [ 480.768137][ T29] usb 11-1: SerialNumber: syz [ 480.852288][T20379] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 481.189904][T20379] cgroup: noprefix used incorrectly [ 481.427400][ T29] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 481.430399][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 481.437002][ T29] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 481.439816][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 481.444538][ T29] usb 11-1: USB disconnect, device number 30 [ 481.448254][ T29] ftdi_sio 11-1:9.170: device disconnected [ 481.451413][ T29] ftdi_sio 11-1:9.35: device disconnected [ 482.036876][T20419] netlink: 'syz.6.2787': attribute type 1 has an invalid length. [ 482.040798][T20419] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2787'. [ 486.304019][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'. [ 486.308170][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'. [ 486.603116][ T1472] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 486.751417][ T1472] usb 10-1: Using ep0 maxpacket: 16 [ 486.761862][ T1472] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 486.767267][ T1472] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 486.771238][ T1472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.779893][ T1472] usb 10-1: config 0 descriptor?? [ 486.788107][ T1472] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input183 [ 487.395558][ T1472] bcm5974 10-1:0.0: could not read from device [ 487.398207][ T5374] bcm5974 10-1:0.0: could not read from device [ 487.403722][ T1472] input: failed to attach handler mousedev to device input183, error: -5 [ 487.412123][ T1472] usb 10-1: USB disconnect, device number 31 [ 487.890622][T20515] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 487.893942][T20515] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 487.897595][T20515] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 487.924937][T20516] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 487.925449][T20521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 487.927138][T20516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.938568][T20516] vhci_hcd vhci_hcd.0: Device attached [ 488.251276][ T29] usb 48-1: SetAddress Request (6) to port 0 [ 488.253317][ T29] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 488.275967][T20536] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.100158][T20556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2820'. [ 489.104841][T20556] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2820'. [ 489.124130][T20517] vhci_hcd: connection reset by peer [ 489.128649][T19806] vhci_hcd: stop threads [ 489.130514][T19806] vhci_hcd: release socket [ 489.132596][T19806] vhci_hcd: disconnect device [ 489.695612][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'. [ 489.765592][T20566] cgroup: fork rejected by pids controller in /syz6 [ 489.800242][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 491.204511][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 491.856111][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 493.010578][T21112] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2833'. [ 493.361473][ T29] usb 48-1: device descriptor read/8, error -110 [ 493.626244][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2834'. [ 493.629463][T21121] netlink: 'syz.3.2834': attribute type 7 has an invalid length. [ 493.633620][T21121] netlink: 'syz.3.2834': attribute type 8 has an invalid length. [ 493.650211][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 493.761652][ T29] usb usb48-port1: attempt power cycle [ 493.824222][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 494.071157][ T54] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 494.351495][ T54] usb 7-1: config 9 has an invalid interface number: 170 but max is 2 [ 494.354044][ T54] usb 7-1: config 9 has an invalid interface number: 35 but max is 2 [ 494.356530][ T54] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 494.359617][ T54] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 494.584762][ T29] usb usb48-port1: unable to enumerate USB device [ 494.631292][ T54] usb 7-1: config 9 has no interface number 0 [ 494.633279][ T54] usb 7-1: config 9 has no interface number 1 [ 494.636590][ T54] usb 7-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 494.639979][ T54] usb 7-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 494.643138][ T54] usb 7-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 494.646430][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 494.650095][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 494.654094][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 494.657792][ T54] usb 7-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.661934][ T54] usb 7-1: config 9 interface 170 has no altsetting 0 [ 494.664071][ T54] usb 7-1: config 9 interface 35 has no altsetting 0 [ 494.668339][ T54] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 494.671194][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.673662][ T54] usb 7-1: Product: Ј [ 494.674896][ T54] usb 7-1: Manufacturer: 䰊 [ 494.676332][ T54] usb 7-1: SerialNumber: syz [ 494.681802][T21128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 494.896488][T21128] cgroup: noprefix used incorrectly [ 495.020503][ T54] ftdi_sio 7-1:9.170: FTDI USB Serial Device converter detected [ 495.026243][ T54] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 495.030901][ T54] ftdi_sio 7-1:9.35: FTDI USB Serial Device converter detected [ 495.035230][ T54] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 495.044417][ T54] usb 7-1: USB disconnect, device number 47 [ 495.063397][ T54] ftdi_sio 7-1:9.170: device disconnected [ 495.065955][ T54] ftdi_sio 7-1:9.35: device disconnected [ 495.411595][T21148] tipc: Enabled bearer , priority 0 [ 495.476761][T21148] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 495.488807][T21148] tipc: Resetting bearer [ 495.500872][T21147] tipc: Disabling bearer [ 496.428362][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 496.453953][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 496.506941][T21151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2843'. [ 496.509798][T21151] bridge_slave_1: left allmulticast mode [ 496.511712][T21151] bridge_slave_1: left promiscuous mode [ 496.513586][T21151] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.518241][T21151] bridge_slave_0: left allmulticast mode [ 496.520056][T21151] bridge_slave_0: left promiscuous mode [ 496.522032][T21151] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.562609][T21152] netlink: 'syz.6.2843': attribute type 1 has an invalid length. [ 496.565303][T21152] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2843'. [ 496.761314][T21146] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 496.839455][T21168] tipc: Enabled bearer , priority 0 [ 496.851467][T21168] syzkaller0: entered promiscuous mode [ 496.854189][T21168] syzkaller0: entered allmulticast mode [ 496.874905][T21168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 496.901751][T21167] tipc: Resetting bearer [ 496.921694][T21167] tipc: Disabling bearer [ 496.922194][T21146] usb 7-1: Using ep0 maxpacket: 16 [ 496.926865][T21146] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.930849][T21146] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 496.941284][T21146] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.982171][T21146] usb 7-1: config 0 descriptor?? [ 496.991646][T21146] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input187 [ 497.390212][ T5374] bcm5974 7-1:0.0: could not read from device [ 497.395909][T21146] bcm5974 7-1:0.0: could not read from device [ 497.399223][ T5374] bcm5974 7-1:0.0: could not read from device [ 497.415443][T21146] input: failed to attach handler mousedev to device input187, error: -5 [ 497.430163][T21146] usb 7-1: USB disconnect, device number 48 [ 497.451260][ T34] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 497.515513][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 497.520229][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 497.613284][ T34] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 497.616167][ T34] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 497.618705][ T34] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 497.622129][ T34] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 497.625679][ T34] usb 11-1: config 9 has no interface number 0 [ 497.627664][ T34] usb 11-1: config 9 has no interface number 1 [ 497.629958][ T34] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 497.633780][ T34] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 497.636903][ T34] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 497.640521][ T34] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 497.644089][ T34] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 497.648555][ T34] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 497.653350][ T34] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.658784][ T34] usb 11-1: config 9 interface 170 has no altsetting 0 [ 497.662484][ T34] usb 11-1: config 9 interface 35 has no altsetting 0 [ 497.668492][ T34] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 497.671863][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.675184][ T34] usb 11-1: Product: Ј [ 497.676936][ T34] usb 11-1: Manufacturer: 䰊 [ 497.678953][ T34] usb 11-1: SerialNumber: syz [ 497.686193][T21184] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 497.744804][T21194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.818554][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 497.823874][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 497.828544][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 497.831272][ T6044] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 497.944858][T21177] cgroup: noprefix used incorrectly [ 497.951688][ T34] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 497.954966][ T34] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 497.962999][ T34] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 497.966541][ T34] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 497.972428][ T34] usb 11-1: USB disconnect, device number 31 [ 497.982745][ T34] ftdi_sio 11-1:9.170: device disconnected [ 497.985800][ T34] ftdi_sio 11-1:9.35: device disconnected [ 498.003421][ T6044] usb 8-1: Using ep0 maxpacket: 16 [ 498.011790][ T6044] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.016279][ T6044] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 498.019243][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.034992][ T6044] usb 8-1: config 0 descriptor?? [ 498.107403][ T6044] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input188 [ 499.280251][ T6044] bcm5974 8-1:0.0: could not read from device [ 499.324940][ T6044] input: failed to attach handler mousedev to device input188, error: -5 [ 499.326585][ T6044] usb 8-1: USB disconnect, device number 45 [ 499.466162][T21226] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 499.466162][T21226] Q&|xXX, priority 0 [ 508.457444][T21434] syzkaller0: entered promiscuous mode [ 508.459455][T21434] syzkaller0: entered allmulticast mode [ 508.471349][T21434] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 508.576816][ T10] tipc: Resetting bearer [ 508.609303][ T10] tipc: Disabling bearer [ 510.111247][T21740] tipc: Enabled bearer , priority 0 [ 510.114742][T21740] syzkaller0: entered promiscuous mode [ 510.117159][T21740] syzkaller0: entered allmulticast mode [ 510.135225][T21740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 510.390451][T21739] tipc: Resetting bearer [ 510.432429][T21739] tipc: Disabling bearer [ 510.863437][T21752] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2938'. [ 511.321298][ T6045] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 511.473275][ T6045] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 511.476918][ T6045] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 511.480352][ T6045] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 511.486130][ T6045] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 511.489154][ T6045] usb 11-1: config 9 has no interface number 0 [ 511.491152][ T6045] usb 11-1: config 9 has no interface number 1 [ 511.493286][ T6045] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 511.497074][ T6045] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 511.511218][ T6045] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 511.515218][ T6045] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 511.519458][ T6045] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 511.523843][ T6045] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 511.528317][ T6045] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.534067][ T6045] usb 11-1: config 9 interface 170 has no altsetting 0 [ 511.536949][ T6045] usb 11-1: config 9 interface 35 has no altsetting 0 [ 511.542714][ T6045] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 511.545760][ T6045] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.548947][ T6045] usb 11-1: Product: Ј [ 511.550663][ T6045] usb 11-1: Manufacturer: 䰊 [ 511.552785][ T6045] usb 11-1: SerialNumber: syz [ 511.557593][T21766] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 511.641178][ T6044] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 511.801251][ T6044] usb 10-1: Using ep0 maxpacket: 8 [ 511.804657][ T6044] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.807876][ T6044] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.808315][T21759] cgroup: noprefix used incorrectly [ 511.811066][ T6044] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.815923][ T6044] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.820533][ T6044] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.825720][ T6044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.841428][ T6045] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 511.846037][ T6045] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 511.853722][ T6045] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 511.857008][ T6045] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 511.863061][ T6045] usb 11-1: USB disconnect, device number 34 [ 511.878603][ T6045] ftdi_sio 11-1:9.170: device disconnected [ 511.886022][ T6045] ftdi_sio 11-1:9.35: device disconnected [ 512.040434][ T6044] usb 10-1: GET_CAPABILITIES returned 0 [ 512.042321][ T6044] usbtmc 10-1:16.0: can't read capabilities [ 512.266488][ T9] usb 10-1: USB disconnect, device number 32 [ 512.660707][T21787] hpfs: hpfs_map_sector(): read error [ 512.971702][ T9] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 513.142287][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 513.154005][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 513.163741][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 513.175496][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.200103][ T9] usb 8-1: config 0 descriptor?? [ 513.591706][T21803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.598305][T21803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.666638][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2952'. [ 513.759708][T21807] netlink: 'syz.6.2953': attribute type 58 has an invalid length. [ 513.759720][T21807] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2953'. [ 513.760575][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2952'. [ 513.797863][ T9] mcp2221 0003:04D8:00DD.0042: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 513.851337][ T34] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 514.012697][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 514.015520][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.019102][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 514.024543][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.031403][ T34] usb 7-1: config 0 descriptor?? [ 514.112757][T21146] usb 8-1: USB disconnect, device number 46 [ 514.467993][ T34] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 514.491595][T21821] tipc: Enabled bearer , priority 0 [ 514.494074][T21821] syzkaller0: entered promiscuous mode [ 514.495761][T21821] syzkaller0: entered allmulticast mode [ 514.504718][T21821] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 514.516658][T21820] tipc: Resetting bearer [ 514.524735][T21820] tipc: Disabling bearer [ 514.680459][T21146] usb 7-1: USB disconnect, device number 50 [ 514.969648][T21837] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.082710][T21838] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2958'. [ 515.085685][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2958'. [ 517.031185][T21868] tipc: Enabled bearer , priority 0 [ 517.033958][T21868] syzkaller0: entered promiscuous mode [ 517.036084][T21868] syzkaller0: entered allmulticast mode [ 517.046164][T21868] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 517.060356][T21867] tipc: Resetting bearer [ 517.073933][T21867] tipc: Disabling bearer [ 517.133408][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 517.136846][T21864] netlink: 'syz.5.2966': attribute type 5 has an invalid length. [ 517.139557][T21864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2966'. [ 517.148327][T21864] geneve3: entered promiscuous mode [ 517.150491][T21864] geneve3: entered allmulticast mode [ 517.156568][T19808] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 517.160253][T19808] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 517.164060][T19793] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 517.167507][T19793] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 517.514174][ T61] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 517.701410][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 517.712347][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.744780][ T61] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 517.748690][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.759664][ T61] usb 7-1: config 0 descriptor?? [ 517.766101][ T61] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input199 [ 517.893254][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2973'. [ 517.969897][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2973'. [ 518.503221][ T5374] bcm5974 7-1:0.0: could not read from device [ 518.507711][ T61] bcm5974 7-1:0.0: could not read from device [ 518.510779][ T5374] bcm5974 7-1:0.0: could not read from device [ 518.517045][ T61] input: failed to attach handler mousedev to device input199, error: -5 [ 518.527285][ T61] usb 7-1: USB disconnect, device number 51 [ 519.063972][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2975'. [ 519.120545][T21889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2975'. [ 519.666299][T21913] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 519.668845][T21913] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 519.671849][T21913] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 519.755869][ T10] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 520.431191][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 520.436200][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 520.440544][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 520.444209][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.460257][ T10] usb 10-1: config 0 descriptor?? [ 520.649593][ T40] audit: type=1326 audit(2000000021.229:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21917 comm="syz.3.2985" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x0 [ 521.063502][ T10] mcp2221 0003:04D8:00DD.0043: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 521.115009][T21939] tipc: Enabled bearer , priority 0 [ 521.117820][T21939] syzkaller0: entered promiscuous mode [ 521.119729][T21939] syzkaller0: entered allmulticast mode [ 521.140436][T21938] tipc: Resetting bearer [ 521.155166][T21938] tipc: Disabling bearer [ 521.412994][T21146] usb 10-1: USB disconnect, device number 33 [ 522.138302][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 522.381415][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 522.533066][ T9] usb 10-1: config 9 has an invalid interface number: 170 but max is 2 [ 522.535700][ T9] usb 10-1: config 9 has an invalid interface number: 35 but max is 2 [ 522.538905][ T9] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 522.544137][ T9] usb 10-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 522.547370][ T9] usb 10-1: config 9 has no interface number 0 [ 522.549393][ T9] usb 10-1: config 9 has no interface number 1 [ 522.551757][ T9] usb 10-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 522.554801][ T9] usb 10-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 522.557493][ T9] usb 10-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 522.560882][ T9] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 522.566778][ T9] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 522.570420][ T9] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 522.574431][ T9] usb 10-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.579128][ T9] usb 10-1: config 9 interface 170 has no altsetting 0 [ 522.583639][ T9] usb 10-1: config 9 interface 35 has no altsetting 0 [ 522.589339][ T9] usb 10-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 522.592355][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.594834][ T9] usb 10-1: Product: Ј [ 522.596213][ T9] usb 10-1: Manufacturer: 䰊 [ 522.597701][ T9] usb 10-1: SerialNumber: syz [ 522.604841][T21966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 522.817086][T21966] cgroup: noprefix used incorrectly [ 523.457261][ T9] ftdi_sio 10-1:9.170: FTDI USB Serial Device converter detected [ 523.465679][ T9] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 523.477362][ T9] ftdi_sio 10-1:9.35: FTDI USB Serial Device converter detected [ 523.480895][ T9] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 523.494587][ T9] usb 10-1: USB disconnect, device number 34 [ 523.498979][ T9] ftdi_sio 10-1:9.170: device disconnected [ 523.565476][ T9] ftdi_sio 10-1:9.35: device disconnected [ 523.591754][T21977] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 523.921181][ T6045] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 524.054126][T21987] siw: device registration error -23 [ 524.082710][ T6045] usb 8-1: Using ep0 maxpacket: 32 [ 524.090640][ T6045] usb 8-1: config 239 has an invalid interface number: 45 but max is 0 [ 524.096964][ T6045] usb 8-1: config 239 has no interface number 0 [ 524.099414][ T6045] usb 8-1: config 239 interface 45 has no altsetting 0 [ 524.104096][ T6045] usb 8-1: New USB device found, idVendor=048d, idProduct=9135, bcdDevice=ff.f3 [ 524.107116][ T6045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.111542][ T6045] usb 8-1: Product: syz [ 524.114893][ T6045] usb 8-1: Manufacturer: syz [ 524.118150][ T6045] usb 8-1: SerialNumber: syz [ 524.134846][T21989] tipc: Enabled bearer , priority 0 [ 524.138408][T21989] syzkaller0: entered promiscuous mode [ 524.140259][T21989] syzkaller0: entered allmulticast mode [ 524.174180][T21988] tipc: Resetting bearer [ 524.189237][T21988] tipc: Disabling bearer [ 524.674924][T22001] siw: device registration error -23 [ 524.751395][ T61] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 524.786817][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3003'. [ 524.901197][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 524.905702][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 524.908655][ T61] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 524.912566][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.918989][ T61] usb 7-1: config 0 descriptor?? [ 525.031216][T18928] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 525.183756][T18928] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 525.186463][T18928] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 525.189080][T18928] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 525.192427][T18928] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 525.195276][T18928] usb 11-1: config 9 has no interface number 0 [ 525.197292][T18928] usb 11-1: config 9 has no interface number 1 [ 525.199321][T18928] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 525.203366][T18928] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 525.206589][T18928] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 525.210192][T18928] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 525.220943][T18928] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 525.224949][T18928] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 525.228597][T18928] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.232960][T18928] usb 11-1: config 9 interface 170 has no altsetting 0 [ 525.235229][T18928] usb 11-1: config 9 interface 35 has no altsetting 0 [ 525.243225][T18928] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 525.246206][T18928] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.248745][T18928] usb 11-1: Product: Ј [ 525.250099][T18928] usb 11-1: Manufacturer: 䰊 [ 525.251811][T18928] usb 11-1: SerialNumber: syz [ 525.255528][T22003] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 525.334109][ T61] mcp2221 0003:04D8:00DD.0044: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 525.379099][T22007] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.3005'. [ 525.388023][T22007] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 525.392371][T22007] gfs2: error -5 reading superblock [ 525.487141][T22003] cgroup: noprefix used incorrectly [ 525.495992][T18928] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 525.499474][T18928] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 525.504471][T18928] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 525.507861][T18928] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 525.512602][T18928] usb 11-1: USB disconnect, device number 35 [ 525.518227][T18928] ftdi_sio 11-1:9.170: device disconnected [ 525.521443][T18928] ftdi_sio 11-1:9.35: device disconnected [ 525.612987][ T61] usb 7-1: USB disconnect, device number 52 [ 525.641293][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 525.792889][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 525.796582][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 525.800714][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 525.803721][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 525.807149][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 525.811933][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 525.815213][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.817896][ T9] usb 10-1: Product: syz [ 525.819701][ T9] usb 10-1: Manufacturer: syz [ 525.829204][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 525.831879][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 525.835292][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 525.837786][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 526.571317][ T6045] usb 8-1: USB disconnect, device number 47 [ 527.409175][T22034] tipc: Enabled bearer , priority 0 [ 527.433576][T22030] syzkaller0: entered promiscuous mode [ 527.435388][T22030] syzkaller0: entered allmulticast mode [ 527.464821][T22030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 528.050881][T22032] tipc: Resetting bearer [ 528.238272][T22029] tipc: Resetting bearer [ 528.260413][T22029] tipc: Disabling bearer [ 528.538745][ T10] usb 10-1: USB disconnect, device number 35 [ 529.018204][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 529.024957][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3018'. [ 529.170475][T22057] loop8: detected capacity change from 0 to 8 [ 529.174205][T22057] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 529.176392][T22057] loop8: partition table partially beyond EOD, truncated [ 529.179845][T22057] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 529.239209][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 530.195052][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3023'. [ 530.198980][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3023'. [ 530.554153][T22079] tipc: Enabled bearer , priority 0 [ 530.558125][T22079] syzkaller0: entered promiscuous mode [ 530.560965][T22079] syzkaller0: entered allmulticast mode [ 530.570551][T22079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 531.148725][T22088] tipc: Resetting bearer [ 531.399356][T22078] tipc: Resetting bearer [ 531.428695][T22078] tipc: Disabling bearer [ 531.474298][T22093] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.095837][T22625] loop8: detected capacity change from 0 to 8 [ 533.099053][ T7525] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 533.101008][ T7525] loop8: partition table partially beyond EOD, truncated [ 533.103565][ T7525] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 533.110445][T22625] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 533.112484][T22625] loop8: partition table partially beyond EOD, truncated [ 533.115076][T22625] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 533.133635][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 533.167370][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 533.452354][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 533.471475][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3035'. [ 533.487279][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3035'. [ 533.671284][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 533.683572][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 533.686175][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 533.689878][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.801635][ T10] usb 7-1: config 0 descriptor?? [ 534.237853][ T10] mcp2221 0003:04D8:00DD.0045: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 534.414249][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3036'. [ 534.445276][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3036'. [ 535.101348][ T10] usb 7-1: USB disconnect, device number 53 [ 535.256379][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'. [ 535.511266][ T29] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 535.879115][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3042'. [ 536.374950][ T29] usb 10-1: config 9 has an invalid interface number: 170 but max is 2 [ 536.377513][ T29] usb 10-1: config 9 has an invalid interface number: 35 but max is 2 [ 536.380165][ T29] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 536.383334][ T29] usb 10-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 536.386111][ T29] usb 10-1: config 9 has no interface number 0 [ 536.388041][ T29] usb 10-1: config 9 has no interface number 1 [ 536.389965][ T29] usb 10-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 536.393414][ T29] usb 10-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 536.396481][ T29] usb 10-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 536.399769][ T29] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 536.403133][ T29] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 536.406558][ T29] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 536.409884][ T29] usb 10-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.414655][ T29] usb 10-1: config 9 interface 170 has no altsetting 0 [ 536.416907][ T29] usb 10-1: config 9 interface 35 has no altsetting 0 [ 536.428667][ T29] usb 10-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 536.431644][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.434137][ T29] usb 10-1: Product: Ј [ 536.435440][ T29] usb 10-1: Manufacturer: 䰊 [ 536.437138][ T29] usb 10-1: SerialNumber: syz [ 536.634599][T22651] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 536.860942][T22651] cgroup: noprefix used incorrectly [ 536.871268][ T54] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 536.944285][ T29] ftdi_sio 10-1:9.170: FTDI USB Serial Device converter detected [ 536.951430][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 536.963337][ T29] ftdi_sio 10-1:9.35: FTDI USB Serial Device converter detected [ 536.966624][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 536.969621][ T29] usb 10-1: USB disconnect, device number 36 [ 536.973095][ T29] ftdi_sio 10-1:9.170: device disconnected [ 536.976195][ T29] ftdi_sio 10-1:9.35: device disconnected [ 537.022060][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 537.034727][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 537.038647][ T54] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 537.049562][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.053705][ T54] usb 8-1: config 0 descriptor?? [ 537.079622][ T54] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input208 [ 537.131143][T18439] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 537.281988][T18439] usb 11-1: Using ep0 maxpacket: 8 [ 537.296499][T18439] usb 11-1: config 0 interface 0 has no altsetting 0 [ 537.305639][T18439] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 537.313226][T18439] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.330183][T18439] usb 11-1: config 0 descriptor?? [ 537.483525][ T34] usb 8-1: USB disconnect, device number 48 [ 537.488245][ T5374] bcm5974 8-1:0.0: could not read from device [ 537.937807][T22707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'. [ 538.745946][T22717] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 538.748458][T22717] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 538.850968][T18439] mcp2221 0003:04D8:00DD.0046: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 538.855355][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 538.918184][T18439] usb 11-1: USB disconnect, device number 36 [ 539.006883][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 539.301289][ T29] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 539.531009][ T29] usb 7-1: config 9 has an invalid interface number: 170 but max is 2 [ 539.542763][ T29] usb 7-1: config 9 has an invalid interface number: 35 but max is 2 [ 539.554089][ T29] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 539.567190][ T29] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 539.579666][ T29] usb 7-1: config 9 has no interface number 0 [ 539.583800][ T29] usb 7-1: config 9 has no interface number 1 [ 539.587810][ T29] usb 7-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 539.594364][ T29] usb 7-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 539.600558][ T29] usb 7-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 539.608891][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 539.616719][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 539.624490][ T29] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 539.631442][ T29] usb 7-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.641436][ T29] usb 7-1: config 9 interface 170 has no altsetting 0 [ 539.647278][ T29] usb 7-1: config 9 interface 35 has no altsetting 0 [ 539.654688][ T29] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 539.661380][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.667249][ T29] usb 7-1: Product: Ј [ 539.671148][ T29] usb 7-1: Manufacturer: 䰊 [ 539.673872][ T29] usb 7-1: SerialNumber: syz [ 539.680555][T22729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.809086][T22742] siw: device registration error -23 [ 539.973474][T22729] cgroup: noprefix used incorrectly [ 539.997303][ T29] ftdi_sio 7-1:9.170: FTDI USB Serial Device converter detected [ 540.005687][ T29] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 540.016541][ T29] ftdi_sio 7-1:9.35: FTDI USB Serial Device converter detected [ 540.020988][ T29] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 540.027260][ T29] usb 7-1: USB disconnect, device number 54 [ 540.040822][ T29] ftdi_sio 7-1:9.170: device disconnected [ 540.048261][ T29] ftdi_sio 7-1:9.35: device disconnected [ 540.701636][T22754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3066'. [ 543.084610][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3076'. [ 543.298335][T22784] lo speed is unknown, defaulting to 1000 [ 543.305007][T22784] lo speed is unknown, defaulting to 1000 [ 543.313586][T22784] lo speed is unknown, defaulting to 1000 [ 543.331137][ T54] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 543.504543][ T54] usb 8-1: config 9 has an invalid interface number: 170 but max is 2 [ 543.507363][ T54] usb 8-1: config 9 has an invalid interface number: 35 but max is 2 [ 543.509949][ T54] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 543.515205][ T54] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 543.518413][ T54] usb 8-1: config 9 has no interface number 0 [ 543.520321][ T54] usb 8-1: config 9 has no interface number 1 [ 543.524811][ T54] usb 8-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 543.528946][ T54] usb 8-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 543.533186][ T54] usb 8-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 543.537383][ T54] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 543.541607][ T54] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 543.545435][ T54] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 543.549482][ T54] usb 8-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.554081][ T54] usb 8-1: config 9 interface 170 has no altsetting 0 [ 543.556636][ T54] usb 8-1: config 9 interface 35 has no altsetting 0 [ 543.562345][ T54] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 543.565871][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.568848][ T54] usb 8-1: Product: Ј [ 543.570254][ T54] usb 8-1: Manufacturer: 䰊 [ 543.572110][ T54] usb 8-1: SerialNumber: syz [ 543.627366][T22789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.207477][T22789] cgroup: noprefix used incorrectly [ 544.254047][ T54] ftdi_sio 8-1:9.170: FTDI USB Serial Device converter detected [ 544.268198][ T54] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 544.290499][ T54] ftdi_sio 8-1:9.35: FTDI USB Serial Device converter detected [ 544.298231][ T54] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 544.312160][ T54] usb 8-1: USB disconnect, device number 49 [ 544.330289][ T54] ftdi_sio 8-1:9.170: device disconnected [ 544.333754][T22807] tipc: Enabled bearer , priority 0 [ 544.339611][ T54] ftdi_sio 8-1:9.35: device disconnected [ 544.409445][ T6018] tipc: Disabling bearer [ 544.426314][T22811] loop8: detected capacity change from 0 to 8 [ 544.429105][ T7525] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 544.430771][ T7525] loop8: partition table partially beyond EOD, truncated [ 544.435039][ T7525] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 544.454919][T22811] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-16) [ 546.554656][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 546.792289][ T54] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 546.983779][ T54] usb 7-1: config 9 has an invalid interface number: 170 but max is 2 [ 546.986510][ T54] usb 7-1: config 9 has an invalid interface number: 35 but max is 2 [ 546.988903][ T54] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 546.992164][ T54] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 546.995134][ T54] usb 7-1: config 9 has no interface number 0 [ 546.997098][ T54] usb 7-1: config 9 has no interface number 1 [ 546.999086][ T54] usb 7-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 547.002642][ T54] usb 7-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 547.006638][ T54] usb 7-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 547.010040][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 547.013765][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 547.017023][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 547.020335][ T54] usb 7-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.024939][ T54] usb 7-1: config 9 interface 170 has no altsetting 0 [ 547.027157][ T54] usb 7-1: config 9 interface 35 has no altsetting 0 [ 547.031892][ T54] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 547.034976][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.037386][ T54] usb 7-1: Product: Ј [ 547.038636][ T54] usb 7-1: Manufacturer: 䰊 [ 547.040124][ T54] usb 7-1: SerialNumber: syz [ 547.057099][T22855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.271513][T22855] cgroup: noprefix used incorrectly [ 547.327265][ T54] ftdi_sio 7-1:9.170: FTDI USB Serial Device converter detected [ 547.333022][ T54] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 547.344214][ T54] ftdi_sio 7-1:9.35: FTDI USB Serial Device converter detected [ 547.347015][ T54] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 547.350662][ T54] usb 7-1: USB disconnect, device number 55 [ 547.359134][ T54] ftdi_sio 7-1:9.170: device disconnected [ 547.363711][ T54] ftdi_sio 7-1:9.35: device disconnected [ 548.211175][ T6018] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 548.214046][T22883] syzkaller0: entered promiscuous mode [ 548.215889][T22883] syzkaller0: entered allmulticast mode [ 548.548081][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'. [ 548.551240][T22887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3108'. [ 548.575664][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'. [ 548.915853][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3112'. [ 548.951560][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 548.954940][ T6018] usb 7-1: config 0 interface 0 has no altsetting 0 [ 548.957030][ T6018] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 548.960048][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.965315][ T6018] usb 7-1: config 0 descriptor?? [ 549.161149][T21146] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 549.325610][T21146] usb 10-1: config 9 has an invalid interface number: 170 but max is 2 [ 549.325628][T21146] usb 10-1: config 9 has an invalid interface number: 35 but max is 2 [ 549.325638][T21146] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 549.325648][T21146] usb 10-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 549.325659][T21146] usb 10-1: config 9 has no interface number 0 [ 549.325707][T21146] usb 10-1: config 9 has no interface number 1 [ 549.325730][T21146] usb 10-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 549.325744][T21146] usb 10-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 549.325757][T21146] usb 10-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 549.325768][T21146] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 549.325778][T21146] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 549.325789][T21146] usb 10-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 549.325806][T21146] usb 10-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.325820][T21146] usb 10-1: config 9 interface 170 has no altsetting 0 [ 549.325829][T21146] usb 10-1: config 9 interface 35 has no altsetting 0 [ 549.332467][T21146] usb 10-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 549.332482][T21146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.332492][T21146] usb 10-1: Product: Ј [ 549.332500][T21146] usb 10-1: Manufacturer: 䰊 [ 549.332507][T21146] usb 10-1: SerialNumber: syz [ 549.334329][T22898] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 549.355730][T22906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3113'. [ 549.373082][ T6018] mcp2221 0003:04D8:00DD.0047: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 549.677798][T22898] cgroup: noprefix used incorrectly [ 549.786092][ T24] usb 7-1: USB disconnect, device number 56 [ 550.090969][T21146] ftdi_sio 10-1:9.170: FTDI USB Serial Device converter detected [ 550.093965][T21146] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 550.099451][T21146] ftdi_sio 10-1:9.35: FTDI USB Serial Device converter detected [ 550.102476][T21146] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 550.105634][T21146] usb 10-1: USB disconnect, device number 37 [ 550.113848][T21146] ftdi_sio 10-1:9.170: device disconnected [ 550.117083][T21146] ftdi_sio 10-1:9.35: device disconnected [ 550.243202][T22916] syzkaller0: entered promiscuous mode [ 550.244965][T22916] syzkaller0: entered allmulticast mode [ 550.857714][T22931] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.647722][T22949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3120'. [ 552.250358][T22962] syzkaller0: entered promiscuous mode [ 552.254239][T22962] syzkaller0: entered allmulticast mode [ 552.267946][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 552.511182][ T1021] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 552.724941][ T1021] usb 8-1: config 9 has an invalid interface number: 170 but max is 2 [ 552.727613][ T1021] usb 8-1: config 9 has an invalid interface number: 35 but max is 2 [ 552.730416][ T1021] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 552.751026][ T1021] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 552.754980][ T1021] usb 8-1: config 9 has no interface number 0 [ 552.757036][ T1021] usb 8-1: config 9 has no interface number 1 [ 552.758982][ T1021] usb 8-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 552.821816][ T1021] usb 8-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 552.884469][ T1021] usb 8-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 552.888224][ T1021] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 552.892955][ T1021] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 552.897054][ T1021] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 552.901715][ T1021] usb 8-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.907083][ T1021] usb 8-1: config 9 interface 170 has no altsetting 0 [ 552.909896][ T1021] usb 8-1: config 9 interface 35 has no altsetting 0 [ 552.917002][ T1021] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 552.920759][ T1021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.924314][ T1021] usb 8-1: Product: Ј [ 552.926042][ T1021] usb 8-1: Manufacturer: 䰊 [ 552.927773][ T1021] usb 8-1: SerialNumber: syz [ 552.942761][T22964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 553.159148][T22964] cgroup: noprefix used incorrectly [ 553.259450][ T1021] ftdi_sio 8-1:9.170: FTDI USB Serial Device converter detected [ 553.284228][ T1021] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 553.411827][ T1021] ftdi_sio 8-1:9.35: FTDI USB Serial Device converter detected [ 553.414647][ T1021] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 553.426170][ T1021] usb 8-1: USB disconnect, device number 50 [ 553.445382][ T1021] ftdi_sio 8-1:9.170: device disconnected [ 553.524070][ T1021] ftdi_sio 8-1:9.35: device disconnected [ 554.416412][T23013] syzkaller0: entered promiscuous mode [ 554.418787][T23013] syzkaller0: entered allmulticast mode [ 554.741678][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3137'. [ 555.375107][T23039] FAULT_INJECTION: forcing a failure. [ 555.375107][T23039] name failslab, interval 1, probability 0, space 0, times 0 [ 555.404933][T23039] CPU: 3 UID: 0 PID: 23039 Comm: syz.2.3140 Not tainted syzkaller #0 PREEMPT(full) [ 555.404951][T23039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 555.404958][T23039] Call Trace: [ 555.404962][T23039] [ 555.404967][T23039] dump_stack_lvl+0x16c/0x1f0 [ 555.404987][T23039] should_fail_ex+0x512/0x640 [ 555.405002][T23039] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 555.405016][T23039] should_failslab+0xc2/0x120 [ 555.405031][T23039] __kmalloc_cache_noprof+0x6a/0x3e0 [ 555.405042][T23039] ? madvise_collapse+0x1a6/0xaa0 [ 555.405059][T23039] madvise_collapse+0x1a6/0xaa0 [ 555.405077][T23039] ? __pfx_madvise_collapse+0x10/0x10 [ 555.405097][T23039] madvise_vma_behavior+0x10a4/0x2d60 [ 555.405114][T23039] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 555.405128][T23039] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 555.405144][T23039] ? __pfx_mas_prev+0x10/0x10 [ 555.405173][T23039] ? find_vma_prev+0xda/0x160 [ 555.405190][T23039] ? __pfx_find_vma_prev+0x10/0x10 [ 555.405209][T23039] ? __lock_acquire+0x62e/0x1ce0 [ 555.405225][T23039] madvise_walk_vmas+0x31f/0x9c0 [ 555.405242][T23039] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 555.405261][T23039] madvise_do_behavior+0x1e2/0x530 [ 555.405277][T23039] ? __pfx_madvise_do_behavior+0x10/0x10 [ 555.405292][T23039] ? down_read+0x13d/0x480 [ 555.405315][T23039] do_madvise+0x176/0x240 [ 555.405329][T23039] ? __pfx_do_madvise+0x10/0x10 [ 555.405342][T23039] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 555.405378][T23039] ? __fget_files+0x20e/0x3c0 [ 555.405412][T23039] ? __pfx_ksys_write+0x10/0x10 [ 555.405428][T23039] __ia32_sys_madvise+0xa7/0x110 [ 555.405443][T23039] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 555.405458][T23039] __do_fast_syscall_32+0x7c/0x3a0 [ 555.405474][T23039] do_fast_syscall_32+0x32/0x80 [ 555.405488][T23039] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.405501][T23039] RIP: 0023:0xf703e579 [ 555.405510][T23039] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 555.405521][T23039] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 555.405531][T23039] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600722 [ 555.405538][T23039] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.405544][T23039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.405550][T23039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 555.405556][T23039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.405570][T23039] [ 555.967966][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 555.970880][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 555.998821][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 556.001770][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 556.059791][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 556.065442][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 556.521159][ T6018] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 556.525559][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 556.671256][ T6018] usb 10-1: Using ep0 maxpacket: 16 [ 556.676396][ T6018] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 556.741183][ T6018] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 556.745693][ T6018] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 556.750289][ T6018] usb 10-1: config 0 interface 0 has no altsetting 0 [ 556.791920][ T6018] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 556.796099][ T6018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.798290][T23051] siw: device registration error -23 [ 556.799058][ T6018] usb 10-1: Product: syz [ 556.821432][ T6018] usb 10-1: Manufacturer: syz [ 556.832739][ T6018] usb 10-1: SerialNumber: syz [ 557.220843][ T6018] usb 10-1: config 0 descriptor?? [ 557.368963][T23080] syzkaller0: entered promiscuous mode [ 557.374151][T23080] syzkaller0: entered allmulticast mode [ 557.442882][ T6018] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input225 [ 557.446918][ T5374] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 557.451636][ T5374] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 557.521501][ T6018] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 557.581196][ T6018] input: failed to attach handler mousedev to device input225, error: -5 [ 557.892886][T23095] __nla_validate_parse: 1 callbacks suppressed [ 557.892992][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 558.388872][ T6018] kernel write not supported for file /uhid (pid: 6018 comm: kworker/3:2) [ 558.926492][T23113] syzkaller1: entered promiscuous mode [ 558.928581][T23113] syzkaller1: entered allmulticast mode [ 559.240494][ T24] usb 10-1: USB disconnect, device number 38 [ 559.638971][T23127] lo speed is unknown, defaulting to 1000 [ 559.641651][T23127] lo speed is unknown, defaulting to 1000 [ 559.644459][T23127] lo speed is unknown, defaulting to 1000 [ 559.685811][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3161'. [ 559.801870][T18439] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 560.671274][T18439] usb 7-1: Using ep0 maxpacket: 8 [ 560.686872][T18439] usb 7-1: config 0 interface 0 has no altsetting 0 [ 560.689113][T18439] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 560.692137][T18439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.703199][T18439] usb 7-1: config 0 descriptor?? [ 561.041288][ T10] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 561.117275][T18439] mcp2221 0003:04D8:00DD.0048: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 561.195341][ T10] usb 11-1: Using ep0 maxpacket: 16 [ 561.202433][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.211366][ T10] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 561.217641][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.231718][ T10] usb 11-1: config 0 descriptor?? [ 561.243292][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input227 [ 561.462641][T18439] usb 7-1: USB disconnect, device number 57 [ 563.166997][T23169] siw: device registration error -23 [ 563.465482][T23180] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 563.755235][ T5374] bcm5974 11-1:0.0: could not read from device [ 563.764570][ T10] bcm5974 11-1:0.0: could not read from device [ 563.768142][ T5374] bcm5974 11-1:0.0: could not read from device [ 563.788781][ T10] input: failed to attach handler mousedev to device input227, error: -5 [ 563.830541][ T10] usb 11-1: USB disconnect, device number 37 [ 564.738151][T23201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3183'. [ 565.281150][ T6044] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 565.441366][ T6044] usb 8-1: Using ep0 maxpacket: 16 [ 565.446179][ T6044] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 565.451752][ T6044] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 565.454779][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.458529][ T6044] usb 8-1: config 0 descriptor?? [ 565.468572][ T6044] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input229 [ 565.635806][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3191'. [ 565.684741][T19695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.696457][T19695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.708392][T19695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.723505][T19695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.728630][T19695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.792276][T23244] lo speed is unknown, defaulting to 1000 [ 565.795024][T23244] lo speed is unknown, defaulting to 1000 [ 565.797654][T23244] lo speed is unknown, defaulting to 1000 [ 565.890575][T23244] chnl_net:caif_netlink_parms(): no params data found [ 565.891159][ T54] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 566.070120][ T54] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 566.072847][ T54] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 566.077534][ T54] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 566.079015][T23244] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.081227][ T54] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 566.083498][T23244] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.088138][T23244] bridge_slave_0: entered allmulticast mode [ 566.089542][ T54] usb 11-1: config 9 has no interface number 0 [ 566.090742][T23244] bridge_slave_0: entered promiscuous mode [ 566.092343][ T54] usb 11-1: config 9 has no interface number 1 [ 566.096588][ T54] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 566.100303][ T54] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 566.103887][ T54] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 566.107331][ T54] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 566.109105][T23244] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.110756][ T54] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 566.113238][T23244] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.116385][ T54] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 566.116409][ T54] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.118749][T23244] bridge_slave_1: entered allmulticast mode [ 566.122019][ T54] usb 11-1: config 9 interface 170 has no altsetting 0 [ 566.122031][ T54] usb 11-1: config 9 interface 35 has no altsetting 0 [ 566.123772][ T54] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 566.127400][T23244] bridge_slave_1: entered promiscuous mode [ 566.128453][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.140114][ T54] usb 11-1: Product: Ј [ 566.141517][ T54] usb 11-1: Manufacturer: 䰊 [ 566.143021][ T54] usb 11-1: SerialNumber: syz [ 566.147581][T23223] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 566.167930][T23244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.176719][T23244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.212061][T23244] team0: Port device team_slave_0 added [ 566.215390][T23244] team0: Port device team_slave_1 added [ 566.246622][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.248921][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.256774][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.260968][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.263418][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.272551][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.318316][T23244] hsr_slave_0: entered promiscuous mode [ 566.320629][T23244] hsr_slave_1: entered promiscuous mode [ 566.323196][T23244] debugfs: 'hsr0' already exists in 'hsr' [ 566.325051][T23244] Cannot create hsr debugfs directory [ 566.359667][T23223] cgroup: noprefix used incorrectly [ 566.368116][ T54] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 566.376260][ T54] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 566.382237][ T54] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 566.385336][ T54] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 566.389133][ T54] usb 11-1: USB disconnect, device number 38 [ 566.395332][T23415] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3194'. [ 566.402194][ T54] ftdi_sio 11-1:9.170: device disconnected [ 566.405167][T23415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3194'. [ 566.410537][ T54] ftdi_sio 11-1:9.35: device disconnected [ 566.487110][T23244] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.581172][T23244] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.662464][T23244] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.740461][T23244] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.905747][T23244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 566.910768][T23244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 566.916425][T23244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.920482][T23244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.977904][T23244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.990211][T23244] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.997198][T19808] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.000138][T19808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.007144][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.009409][T19806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.137508][T23244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.168666][T23244] veth0_vlan: entered promiscuous mode [ 567.176269][T23244] veth1_vlan: entered promiscuous mode [ 567.194566][T23244] veth0_macvtap: entered promiscuous mode [ 567.198698][T23244] veth1_macvtap: entered promiscuous mode [ 567.208321][T23244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.217177][T23244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.226439][T19757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.229355][T19757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.236077][T19757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.238909][T19757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.313651][T19802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.316140][T19802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.338888][T19802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.341555][T19802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.751797][ T5983] Bluetooth: hci2: command tx timeout [ 568.037232][ T5374] bcm5974 8-1:0.0: could not read from device [ 568.040984][ T5374] bcm5974 8-1:0.0: could not read from device [ 568.052106][ T6044] bcm5974 8-1:0.0: could not read from device [ 568.055442][ T5374] bcm5974 8-1:0.0: could not read from device [ 568.197265][ T6044] input: failed to attach handler mousedev to device input229, error: -5 [ 568.232753][ T6044] usb 8-1: USB disconnect, device number 51 [ 568.444021][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 568.570045][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 568.661466][ T6044] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 568.831564][ T6044] usb 8-1: Using ep0 maxpacket: 8 [ 568.835341][ T6044] usb 8-1: config 0 interface 0 has no altsetting 0 [ 568.837464][ T6044] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 568.840067][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.843888][ T6044] usb 8-1: config 0 descriptor?? [ 569.260459][ T6044] mcp2221 0003:04D8:00DD.0049: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 569.476899][ T6044] usb 8-1: USB disconnect, device number 52 [ 569.831428][ T5983] Bluetooth: hci2: command tx timeout [ 570.150595][T23485] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3209'. [ 570.333412][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3206'. [ 570.336521][T23487] netlink: 'syz.5.3206': attribute type 7 has an invalid length. [ 570.339031][T23487] netlink: 'syz.5.3206': attribute type 8 has an invalid length. [ 570.341575][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 570.412067][ T6018] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 570.565873][ T6018] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 570.569191][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.576056][ T6018] usb 8-1: Product: syz [ 570.577720][ T6018] usb 8-1: Manufacturer: syz [ 570.581861][ T6018] usb 8-1: SerialNumber: syz [ 570.593999][ T6018] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 570.621941][ T61] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 570.835348][ T6045] usb 8-1: USB disconnect, device number 53 [ 571.641367][ T6018] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 571.671214][ T61] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 571.673460][ T61] ath9k_htc: Failed to initialize the device [ 571.675854][ T6045] usb 8-1: ath9k_htc: USB layer deinitialized [ 571.794006][ T6018] usb 11-1: config 9 has an invalid interface number: 170 but max is 2 [ 571.796740][ T6018] usb 11-1: config 9 has an invalid interface number: 35 but max is 2 [ 571.800339][ T6018] usb 11-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 571.805198][ T6018] usb 11-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 571.808657][ T6018] usb 11-1: config 9 has no interface number 0 [ 571.810928][ T6018] usb 11-1: config 9 has no interface number 1 [ 571.817216][ T6018] usb 11-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 571.820927][ T6018] usb 11-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 571.825344][ T6018] usb 11-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 571.828623][ T6018] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 571.832278][ T6018] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 571.835713][ T6018] usb 11-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 571.839134][ T6018] usb 11-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.844044][ T6018] usb 11-1: config 9 interface 170 has no altsetting 0 [ 571.846225][ T6018] usb 11-1: config 9 interface 35 has no altsetting 0 [ 571.850732][ T6018] usb 11-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 571.853721][ T6018] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.856258][ T6018] usb 11-1: Product: Ј [ 571.857572][ T6018] usb 11-1: Manufacturer: 䰊 [ 571.859077][ T6018] usb 11-1: SerialNumber: syz [ 571.864901][T23508] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 571.911455][ T5983] Bluetooth: hci2: command tx timeout [ 572.041216][ T6045] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 572.102097][T23502] cgroup: noprefix used incorrectly [ 572.186324][ T6018] ftdi_sio 11-1:9.170: FTDI USB Serial Device converter detected [ 572.189335][ T6018] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 572.211895][ T6018] ftdi_sio 11-1:9.35: FTDI USB Serial Device converter detected [ 572.215654][ T6018] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 572.218169][ T6045] usb 8-1: config 9 has an invalid interface number: 170 but max is 2 [ 572.220676][ T6045] usb 8-1: config 9 has an invalid interface number: 35 but max is 2 [ 572.224298][ T6045] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 572.227493][ T6045] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 572.230182][ T6045] usb 8-1: config 9 has no interface number 0 [ 572.233238][ T6045] usb 8-1: config 9 has no interface number 1 [ 572.235281][ T6045] usb 8-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 572.238701][ T6018] usb 11-1: USB disconnect, device number 39 [ 572.241307][ T6045] usb 8-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 572.244349][ T6045] usb 8-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 572.247612][ T6045] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 572.250917][ T6045] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 572.255784][ T6018] ftdi_sio 11-1:9.170: device disconnected [ 572.258293][ T6018] ftdi_sio 11-1:9.35: device disconnected [ 572.261697][ T6045] usb 8-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 572.265047][ T6045] usb 8-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.268952][ T6045] usb 8-1: config 9 interface 170 has no altsetting 0 [ 572.271062][ T6045] usb 8-1: config 9 interface 35 has no altsetting 0 [ 572.281157][ T6045] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 572.283917][ T6045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.286374][ T6045] usb 8-1: Product: Ј [ 572.287676][ T6045] usb 8-1: Manufacturer: 䰊 [ 572.289377][ T6045] usb 8-1: SerialNumber: syz [ 572.296233][T23513] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 572.625782][T23511] cgroup: noprefix used incorrectly [ 572.724334][ T6045] ftdi_sio 8-1:9.170: FTDI USB Serial Device converter detected [ 572.731001][ T6045] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 572.743389][ T6045] ftdi_sio 8-1:9.35: FTDI USB Serial Device converter detected [ 572.749099][ T6045] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 572.755467][ T6045] usb 8-1: USB disconnect, device number 54 [ 572.772279][ T6045] ftdi_sio 8-1:9.170: device disconnected [ 572.775204][ T6045] ftdi_sio 8-1:9.35: device disconnected [ 573.197412][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'. [ 573.330226][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'. [ 573.338517][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 573.558300][T23546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 573.997658][ T5983] Bluetooth: hci2: command tx timeout [ 574.320482][T23566] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 574.323719][T23566] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 574.325848][T23566] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 574.328400][T23566] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 574.330668][T23566] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 574.333480][T23566] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 574.336425][T23566] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 574.339946][T23566] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 574.343319][T23566] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 574.348551][T23566] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 574.352197][T23566] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 574.355276][T23566] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 574.358209][T23566] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 574.361479][T23566] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 574.369946][T23566] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 574.538347][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 574.801311][ T54] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 574.805198][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 575.301728][ T54] usb 7-1: device descriptor read/64, error -32 [ 575.551335][ T54] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 575.715812][ T54] usb 7-1: config 9 has an invalid interface number: 170 but max is 2 [ 575.718828][ T54] usb 7-1: config 9 has an invalid interface number: 35 but max is 2 [ 575.721696][ T54] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 575.724885][ T54] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 575.727717][ T54] usb 7-1: config 9 has no interface number 0 [ 575.730713][ T54] usb 7-1: config 9 has no interface number 1 [ 575.732822][ T54] usb 7-1: config 9 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 575.736215][ T54] usb 7-1: config 9 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 32 [ 575.739333][ T54] usb 7-1: config 9 interface 170 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 575.742905][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 575.746318][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 575.749712][ T54] usb 7-1: config 9 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 575.759037][ T54] usb 7-1: config 9 interface 35 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.763446][ T54] usb 7-1: config 9 interface 170 has no altsetting 0 [ 575.766232][ T54] usb 7-1: config 9 interface 35 has no altsetting 0 [ 575.772374][ T54] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0130, bcdDevice=8b.65 [ 575.775495][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.778004][ T54] usb 7-1: Product: Ј [ 575.779387][ T54] usb 7-1: Manufacturer: 䰊 [ 575.780921][ T54] usb 7-1: SerialNumber: syz [ 575.791878][T23576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.006146][T23576] cgroup: noprefix used incorrectly [ 576.009280][T23576] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 576.011727][T23576] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 576.014495][T23576] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 576.016823][T23576] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 576.019040][T23576] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 576.039235][ T54] ftdi_sio 7-1:9.170: FTDI USB Serial Device converter detected [ 576.060932][ T54] ftdi_sio ttyUSB0: unknown device type: 0x8b65 [ 576.075706][ T54] ftdi_sio 7-1:9.35: FTDI USB Serial Device converter detected [ 576.079713][ T54] ftdi_sio ttyUSB1: unknown device type: 0x8b65 [ 576.100548][ T54] usb 7-1: USB disconnect, device number 59 [ 576.118580][ T54] ftdi_sio 7-1:9.170: device disconnected [ 576.127964][ T54] ftdi_sio 7-1:9.35: device disconnected [ 576.701689][T23615] loop8: detected capacity change from 0 to 8 [ 576.704916][T23615] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 576.706886][T23615] loop8: partition table partially beyond EOD, truncated [ 576.709830][T23615] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 576.739564][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 576.751220][T20046] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 576.858619][T23621] siw: device registration error -23 [ 576.941204][T20046] usb 10-1: Using ep0 maxpacket: 8 [ 576.944408][T20046] usb 10-1: config 0 interface 0 has no altsetting 0 [ 576.946543][T20046] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 576.949047][T20046] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.953299][T20046] usb 10-1: config 0 descriptor?? [ 577.325258][T23638] block nbd6: Attempted send on invalid socket [ 577.328314][T23638] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.332923][T23638] exFAT-fs (nbd6): unable to read boot sector [ 577.335332][T23638] exFAT-fs (nbd6): failed to read boot sector [ 577.337876][T23638] exFAT-fs (nbd6): failed to recognize exfat type [ 577.383367][T20046] mcp2221 0003:04D8:00DD.004A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 577.478427][T23650] syzkaller1: entered promiscuous mode [ 577.480255][T23650] syzkaller1: entered allmulticast mode [ 578.379927][ T61] usb 10-1: USB disconnect, device number 39 [ 578.526478][T23666] Bluetooth: MGMT ver 1.23 [ 578.933348][T23682] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3254'. [ 578.936481][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3254'. [ 579.748083][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 579.783231][T23687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'. [ 581.307427][T23725] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 581.546850][T23729] siw: device registration error -23 [ 581.961194][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'. [ 582.042128][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3273'. [ 582.341296][ T61] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 582.502000][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 582.511068][ T61] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 582.515733][ T61] usb 7-1: config 0 has no interface number 0 [ 582.633496][ T61] usb 7-1: config 0 interface 12 has no altsetting 0 [ 582.689836][ T61] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 582.711183][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.714666][ T61] usb 7-1: Product: syz [ 582.718180][ T61] usb 7-1: Manufacturer: syz [ 582.723875][ T61] usb 7-1: SerialNumber: syz [ 582.761126][ T61] usb 7-1: config 0 descriptor?? [ 583.001179][ T54] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 583.151126][ T54] usb 11-1: Using ep0 maxpacket: 16 [ 583.154357][ T54] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 583.158835][ T54] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 583.163817][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.171480][ T54] usb 11-1: config 0 descriptor?? [ 583.176125][ T54] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input239 [ 583.401889][ T5374] bcm5974 11-1:0.0: could not read from device [ 583.406302][ T5374] bcm5974 11-1:0.0: could not read from device [ 583.409418][ T54] bcm5974 11-1:0.0: could not read from device [ 583.414788][ T5374] bcm5974 11-1:0.0: could not read from device [ 583.418759][ T54] input: failed to attach handler mousedev to device input239, error: -5 [ 583.442345][ T54] usb 11-1: USB disconnect, device number 40 [ 583.630260][ T61] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 583.633124][ T61] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 583.635407][ T61] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 583.639008][ T61] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 583.644059][ T61] usb 7-1: USB disconnect, device number 60 [ 583.718907][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3284'. [ 583.817384][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3284'. [ 584.873577][T23793] loop8: detected capacity change from 0 to 8 [ 584.877647][ T7525] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 584.882270][ T7525] loop8: partition table partially beyond EOD, truncated [ 584.888816][ T7525] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 584.927075][T23793] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 584.929370][T23793] loop8: partition table partially beyond EOD, truncated [ 584.945945][T23793] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 584.977643][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 585.013176][ T7525] udevd[7525]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 585.366104][ T6044] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 585.571239][ T6044] usb 7-1: Using ep0 maxpacket: 16 [ 585.583104][ T6044] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 585.587268][ T6044] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 585.591539][ T6044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.685132][ T6044] usb 7-1: config 0 descriptor?? [ 585.882193][ T6044] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input240 [ 586.861238][ T6044] bcm5974 7-1:0.0: could not read from device [ 586.867973][ T5374] bcm5974 7-1:0.0: could not read from device [ 586.881636][ T6044] input: failed to attach handler mousedev to device input240, error: -5 [ 586.902091][ T6044] usb 7-1: USB disconnect, device number 61 [ 587.023572][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 587.282358][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3295'. [ 588.032292][T23838] ------------[ cut here ]------------ [ 588.034037][T23838] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffffffffffffff, 0xfffffffffffffffe] s64=[0xffffffffffffffff, 0xfffffffffffffffe] u32=[0xffffffff, 0xfffffffe] s32=[0xfffffffe, 0xffffffff] var_off=(0xfffffffffffffffe, 0x1)(1) [ 588.061311][T23838] WARNING: CPU: 1 PID: 23838 at kernel/bpf/verifier.c:2722 reg_bounds_sanity_check+0x62b/0x1200 [ 588.064583][T23838] Modules linked in: [ 588.065905][T23838] CPU: 1 UID: 0 PID: 23838 Comm: syz.2.3297 Not tainted syzkaller #0 PREEMPT(full) [ 588.070602][T23838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 588.074537][T23838] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 588.076690][T23838] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 b6 b8 ab ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 588.083137][T23838] RSP: 0018:ffffc90003b672e8 EFLAGS: 00010282 [ 588.085115][T23838] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffc90028032000 [ 588.087768][T23838] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 588.090395][T23838] RBP: ffffc90003b673e0 R08: 0000000000000001 R09: 0000000000000000 [ 588.093011][T23838] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806ff10000 [ 588.095508][T23838] R13: ffff8880644d148c R14: ffff8880644d1484 R15: ffff8880644d1438 [ 588.097992][T23838] FS: 0000000000000000(0000) GS:ffff8880975c0000(0063) knlGS:00000000f5446b40 [ 588.101210][T23838] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 588.103427][T23838] CR2: 0000000030217ff8 CR3: 000000005e47b000 CR4: 0000000000352ef0 [ 588.106030][T23838] DR0: 000000005ffffffd DR1: 0000000000000000 DR2: 0000000000000000 [ 588.108623][T23838] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.111189][T23838] Call Trace: [ 588.112537][T23838] [ 588.113500][T23838] reg_set_min_max+0x183/0x2c0 [ 588.114998][T23838] check_cond_jmp_op+0x19b0/0x72d0 [ 588.116642][T23838] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 588.118484][T23838] ? check_store_reg+0xfa/0x470 [ 588.120064][T23838] do_check_common+0xa13e/0xb410 [ 588.121895][T23838] ? get_call_summary+0xf6/0x740 [ 588.123488][T23838] ? __pfx_do_check_common+0x10/0x10 [ 588.125137][T23838] ? kfree+0x2b4/0x4d0 [ 588.126421][T23838] ? bpf_check+0x7cf8/0xc4d0 [ 588.127880][T23838] bpf_check+0x8763/0xc4d0 [ 588.129422][T23838] ? __pfx_bpf_check+0x10/0x10 [ 588.130918][T23838] ? __lock_acquire+0xb97/0x1ce0 [ 588.132656][T23838] ? __asan_memset+0x23/0x50 [ 588.134215][T23838] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 588.136175][T23838] bpf_prog_load+0xe41/0x2490 [ 588.137777][T23838] ? __pfx_bpf_prog_load+0x10/0x10 [ 588.139394][T23838] __sys_bpf+0x4a3f/0x4de0 [ 588.140830][T23838] ? __pfx___sys_bpf+0x10/0x10 [ 588.142468][T23838] ? task_mm_cid_work+0x37b/0x900 [ 588.144201][T23838] ? do_futex+0x122/0x350 [ 588.145599][T23838] ? __pfx_do_futex+0x10/0x10 [ 588.147083][T23838] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 588.149062][T23838] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 588.151350][T23838] __ia32_sys_bpf+0x76/0xe0 [ 588.152936][T23838] __do_fast_syscall_32+0x7c/0x3a0 [ 588.154581][T23838] do_fast_syscall_32+0x32/0x80 [ 588.156095][T23838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.157988][T23838] RIP: 0023:0xf7f36579 [ 588.159289][T23838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.165676][T23838] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 588.168167][T23838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 588.170817][T23838] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.173352][T23838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.176052][T23838] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 588.178501][T23838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.181056][T23838] [ 588.182248][T23838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 588.184524][T23838] CPU: 1 UID: 0 PID: 23838 Comm: syz.2.3297 Not tainted syzkaller #0 PREEMPT(full) [ 588.187347][T23838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 588.190689][T23838] Call Trace: [ 588.191832][T23838] [ 588.192778][T23838] dump_stack_lvl+0x3d/0x1f0 [ 588.194559][T23838] vpanic+0x6e8/0x7a0 [ 588.195868][T23838] ? __pfx_vpanic+0x10/0x10 [ 588.197304][T23838] ? reg_bounds_sanity_check+0x62b/0x1200 [ 588.199104][T23838] panic+0xca/0xd0 [ 588.200314][T23838] ? __pfx_panic+0x10/0x10 [ 588.201736][T23838] check_panic_on_warn+0xab/0xb0 [ 588.203287][T23838] __warn+0xf6/0x3c0 [ 588.204517][T23838] ? reg_bounds_sanity_check+0x62b/0x1200 [ 588.206272][T23838] report_bug+0x3c3/0x580 [ 588.207647][T23838] ? reg_bounds_sanity_check+0x62b/0x1200 [ 588.209426][T23838] handle_bug+0x184/0x210 [ 588.210856][T23838] exc_invalid_op+0x17/0x50 [ 588.212316][T23838] asm_exc_invalid_op+0x1a/0x20 [ 588.213846][T23838] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 588.215859][T23838] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 b6 b8 ab ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 588.221833][T23838] RSP: 0018:ffffc90003b672e8 EFLAGS: 00010282 [ 588.223741][T23838] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffc90028032000 [ 588.226333][T23838] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 588.228719][T23838] RBP: ffffc90003b673e0 R08: 0000000000000001 R09: 0000000000000000 [ 588.231318][T23838] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806ff10000 [ 588.233778][T23838] R13: ffff8880644d148c R14: ffff8880644d1484 R15: ffff8880644d1438 [ 588.236260][T23838] ? __warn_printk+0x1a5/0x350 [ 588.237783][T23838] ? reg_bounds_sanity_check+0x62a/0x1200 [ 588.239594][T23838] reg_set_min_max+0x183/0x2c0 [ 588.241117][T23838] check_cond_jmp_op+0x19b0/0x72d0 [ 588.242739][T23838] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 588.244467][T23838] ? check_store_reg+0xfa/0x470 [ 588.246012][T23838] do_check_common+0xa13e/0xb410 [ 588.247589][T23838] ? get_call_summary+0xf6/0x740 [ 588.249144][T23838] ? __pfx_do_check_common+0x10/0x10 [ 588.250820][T23838] ? kfree+0x2b4/0x4d0 [ 588.252118][T23838] ? bpf_check+0x7cf8/0xc4d0 [ 588.253583][T23838] bpf_check+0x8763/0xc4d0 [ 588.255007][T23838] ? __pfx_bpf_check+0x10/0x10 [ 588.256526][T23838] ? __lock_acquire+0xb97/0x1ce0 [ 588.258180][T23838] ? __asan_memset+0x23/0x50 [ 588.259656][T23838] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 588.261299][T23838] bpf_prog_load+0xe41/0x2490 [ 588.262726][T23838] ? __pfx_bpf_prog_load+0x10/0x10 [ 588.264175][T23838] __sys_bpf+0x4a3f/0x4de0 [ 588.265591][T23838] ? __pfx___sys_bpf+0x10/0x10 [ 588.267109][T23838] ? task_mm_cid_work+0x37b/0x900 [ 588.268692][T23838] ? do_futex+0x122/0x350 [ 588.270053][T23838] ? __pfx_do_futex+0x10/0x10 [ 588.271598][T23838] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 588.273471][T23838] ? __pfx___ia32_compat_sys_sched_setaffinity+0x10/0x10 [ 588.275652][T23838] __ia32_sys_bpf+0x76/0xe0 [ 588.277089][T23838] __do_fast_syscall_32+0x7c/0x3a0 [ 588.278712][T23838] do_fast_syscall_32+0x32/0x80 [ 588.280251][T23838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.282250][T23838] RIP: 0023:0xf7f36579 [ 588.283545][T23838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.289471][T23838] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 588.292075][T23838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 588.294525][T23838] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.296985][T23838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.299458][T23838] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 588.301914][T23838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.304377][T23838] [ 588.305980][T23838] Kernel Offset: disabled [ 588.307381][T23838] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:28:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90003817b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85151a94 RDI=ffffc90003817b60 RBP=ffffc90003817b20 RSP=ffffc90003817a80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90003817b60 R14=ffffc90003817b28 R15=0000000000000000 RIP=ffffffff85151abd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080031000 CR3=000000006e8e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856170b5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90003b66c50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b0fc6c0 R15=ffffffff85617050 RIP=ffffffff856170df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030217ff8 CR3=000000005e47b000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000011e9029 RBX=0000000000000002 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003a5a910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2d4880 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c1dce5d890 CR3=0000000070a9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000004000008fd RBX=ffff88801d2d4880 RCX=0000000000000830 RDX=0000000000000004 RSI=00000000000000fd RDI=0000000000000004 RBP=0000000000000008 RSP=ffffc90003def7a8 R8 =0000000000000000 R9 =fffffbfff2157112 R10=ffffffff90ab8897 R11=0000000000000001 R12=1ffff920007bdef6 R13=0000000000000003 R14=0000000000000002 R15=ffffc90003def7d0 RIP=ffffffff81695748 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032e10ff8 CR3=0000000070a9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000