last executing test programs: 1m43.130373251s ago: executing program 0 (id=1432): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x7, 0x121000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) r1 = openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x450c00, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x0, 0x2, 0x600000}) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000001c0)={'macvtap0\x00', {0x2, 0x0, @multicast2}}) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xfff, r0, &(0x7f0000000240)="894c74ea19a7bfd76a245e3207dd3aa7e0b35217eba34a814c465850ffe0dd175f4d80ec9d1bae4a7d4d06612bab03b7baaafad006f3ab697b0fd3f8a5b0f7beef5aec1131783d0c2dcc2e90b0208c456dc676898e4f6839e15c60c10d58f71d341e43ab2f8efcce716ac7e95d1c7e4a8d57c8a6e722e00ef64a22f9dab529c06dd610bc", 0x84, 0x7, 0x0, 0x2}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@delqdisc={0x40, 0x25, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff6, 0xe}, {0xc, 0xfff1}, {0xfff2, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0xbd, 0x9}}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60048801}, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) io_cancel(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfff9, r2, &(0x7f0000000480)="03881e6f460d8640f31d89f52f95273a09cd3e70a503fcf71af66827b47f8acf6ffe8cb60fcf", 0x26, 0x8, 0x0, 0x1, r4}, &(0x7f0000000540)) r5 = socket(0x18, 0xe, 0x6) recvmsg$unix(r5, &(0x7f0000000980)={&(0x7f0000000580), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/205, 0xcd}, {&(0x7f00000007c0)=""/176, 0xb0}], 0x3, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x90}, 0x2120) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$KVM_S390_VCPU_FAULT(r11, 0x4004ae52, &(0x7f0000000a00)=0x6) accept4$phonet_pipe(r6, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000ac0)=0xd4, 0x4) sendmsg$kcm(r4, &(0x7f0000002100)={&(0x7f0000000b00)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b80)="76ed7839e9ab56cff383e89436a4b2a40286ecfa1b024470b9c95140c039025e3a8e52cb826f9d0e1236dd253fec51969a2b123b9eb0753f2780b5897365a2d844d5", 0x42}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="5846a0d614acb1b2674aac13bf37c9512199de544be8f5bc98874d591a5e580083c45363911035e9dde140b9b94dec6a561d40f4e6d94e705515d56d499e9cf887fffdfb2286c0df65043ee320fb8f53cec66ac0d157f46b4a53703ab1aa22d552fb03e4988387e76422c8dce1d1e9d8909dcced5a247b8c92719ceb", 0x7c}, {&(0x7f0000001c80)="929f0130ad23951484d89563e2bc875c697a53aa379615abd90f724bdca246684a75e7afbf8e0af272c5b6c70585aa005f01b3c5518455bbcd82e5fc2d0483b1fd8794cc99c6ae0118fcd43060d78abda8caf18c5b6aa7da039cf5e625e3baa566a80b351869a6bb0bf431014b82818a16f33afc925edc177f314f96f9eb1c7ff1ca", 0x82}], 0x4, &(0x7f0000001d80)=[{0x7c, 0x10f, 0x1, "8481b8ab15e08ef0edbf8a6208c8705e06df24530e29c3625fd2853634b3d74f7122f5247c5a4af03df41d657356af9e27aef05e081a5e9fef9034629be1f847a13037ac2c3e4e418e1b22222089a9e0c5cf1851943a7648cad0615f8b28f48e0e120a9ad67bfbb31207f76990279d9a"}, {0xb4, 0x109, 0x7fffffff, "66a2f42e1d0f82c2f5ae8f5d3f7264327028f2a88af8805b7518959bcdc0e74bb2f4cf72fa7cf318eeebc62d272543d857107dfaa775299f4ab78f606cb5fee34adc24b7304d900d8554ddc3bd74a788e982ead5a976d7ab4bc9160cd9ca4d0ceb77f42be8d0d1cfbb7ef558b23b17365d1578a9b4f0b441623cc7865aa1db15a2d6ade262c173162b6938899c632531a2bd72b601f177696ab777b100e220c39b92d56b0e"}, {0xb4, 0x10c, 0x1, "6fbfa8cef92ac36eb845939feea19c6012b92b0e84c9718b28d537f39afeea37615f3b6fcfc3fa76d88340ebfff3f566cf35e0c07232e768f7a5e0226b056358aeb8a5864d8e91d65dfd678c319cefe937234a748a04bdf5637761b7a3f857aa3813b0409127a50e80be18344f3da476a316902482fc59beea1b466f8a0617135886639ef2474d77f6fc866e4d148b470cb438e167d23713f68ca4dc0aecff269acef00ea64a"}, {0x18, 0x107, 0x4, "0a6ba609473f24c982"}, {0x9c, 0x6, 0x7, "be5d765db8818e4a88e7cb77f2df3be3c07909b5a47a93e7928254dd86d743a75a5fdfe9563fb0f11739a1983856917948305fcce303c5d45e52b59dd707e87f4c7bd1b6026de86fb385378a3ca8ba412a59101efe6b4ba370b66ed2ecf60ba5488d76937359b09a8179fbdd773988e6acf4507ca58cb81130d8bf7e576f98a63ec651563a77206943823d8a998c"}, {0xd8, 0x1, 0x9, "26ba555d8dd2e99c39f51cfe7ed500a7332cba46190bf8e2c15e513bbe0c5ac36a60c7972cbf70ea5114aa5325918e3a5a68779f807af1ac0552e74d72f83981550cf5d83352d2483ff6ba8ed4e12cde9e4ea48d3dc31e2cb5cc92446f4a062964acc879335d4e943fbf7f3e9a787eab82cd34ef8db800b8da6975a66c5577b00d0e4f49efb8dd67ee3355ef322247fe3752c0d0b3675e8aad70f7dc948db5d5ae492122d87c4ff1a636772fcddbe0381d03aac37eddaa344ba385bdebddc865c14fc09abd33ebde49"}], 0x370}, 0x20008000) ioctl$SNDCTL_TMR_STOP(r8, 0x5403) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f0000002140)=@routing={0x1, 0x12, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @private1={0xfc, 0x1, '\x00', 0x7}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}, 0x98) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000002200)={0x3}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r11, 0x1, &(0x7f0000002240)={0x8060, r6}, 0x0) r12 = openat$vcsu(0xffffff9c, &(0x7f0000002280), 0x80000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r12, 0x40383d0c, &(0x7f00000022c0)={{0x9, 0x2}, {0xff, 0x8}, 0x2, 0x1}) fgetxattr(r6, &(0x7f0000002300)=@random={'security.', '\x00'}, &(0x7f0000002340)=""/200, 0xc8) r13 = semget(0x2, 0x4, 0xa0713ec53c631a20) semctl$SETVAL(r13, 0x0, 0x10, &(0x7f0000002440)=0x5) r14 = accept4$llc(r5, &(0x7f0000002480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000024c0)=0x10, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r14, 0xc0389423, &(0x7f0000002540)={0x7, 0x20, [0x6, 0x6b3, 0x10000, 0x9], &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002980)={0xac, 0x0, &(0x7f0000002800)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002680)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/145, 0x91, 0x1, 0x1a}, @flat=@handle, @fd}, &(0x7f0000002700)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002740)={@fda={0x66646185, 0x6, 0x0, 0x6}, @fda={0x66646185, 0x4, 0xffff, 0x34}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f00000027c0)={0x0, 0x1c, 0x38}}, 0x40}], 0xaf, 0x0, &(0x7f00000028c0)="d49394b2c6d78c81bde746b0d00fd8384f1ce331d232f2f89a87c5da9f7b795566061c823586897de4ed799c321b24634be7853cd3609e19f29bc82166eeb4e04b933b7b77b7ef1fe1b5b0d6c88dec239d119cdc64f51f92081fa9de3eab0c034135b503710f214cb6174e51581f189073a94a5aba1542ee15c164072dd65fd5246c43be50dbe913694a77f0c423e00a11299ff13e4fdbf77bb6690521d6d492ea6ad11e13ec6ae7861829a8e20f04"}) 1m42.89060027s ago: executing program 0 (id=1433): syz_socket_connect_nvme_tcp() (async) r0 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x1, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 1m42.889804053s ago: executing program 0 (id=1434): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @val={0xc, 0x99, {0xffffff51, 0x7c}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001040)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') unshare(0x2a020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r6, 0x0, 0x0, 0x200) write$binfmt_misc(r4, &(0x7f0000000100)='F', 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m42.710747335s ago: executing program 0 (id=1435): syz_open_dev$evdev(0x0, 0x400000000000, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) (async) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) (async) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x15e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) getpid() 1m42.669825097s ago: executing program 0 (id=1437): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r1, 0x20, 0xd, 0x9) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000040)={0x8, 0x7fff}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001000390425bd70000000000000000500", @ANYRES32=r4, @ANYBLOB="019800000000000014001280080001006772650008000280040012"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x210}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250b0000000c0099001e000000030000000a000200ffffffff509d1e3ec68ffa20"], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x40) 1m42.570044038s ago: executing program 0 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f0000002640)=""/4101, 0x1005) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_free_batched\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x29, 0xb}], 0xc}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x21, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect={{0x0, 0x3}}}], 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000640)="8d5ed6d259471b77da2ccbc8d451ba457de461f024d2422094d643564fb598370fb32f32056a155cefcf817447bfe819350c1ec9d032218499e1b1f7556c01fb194ad99f7438b4f0cad58d4ae5556e31f42e9673ad37cd2b1283212426d1f26e29cd9e06dd7ecaca6d3bfaaf549b44838b49c577120b4948c1a385e4991527bd51db450f8c6b687ae7207606ad6498acac82c23920561294bdc3f5c8edc73fd58efdd94e333f963079fc451c8a667689167df6c926fce890f36cfc8a93b7ee88e5c7ece53e521266228d7aa950fb1397e179c84ee8bc8e58c1b5054cffb3817a0284ce3ea79d8fe783b6b1eee02b7e583dc5bd13fedeac8d8d03c0defae28c9407fbb8a4fc528935f942858886559ac39d52f55da401991471f9dcd95e79ed94ce419d2d7838e84c854b1780912bceba62f4d5107c465ed6d40f39cc1011716e378cd744dae4f9764f69558616bdfb36e8e1c25dc9cbf7f446e810dfce40b43bfdb7a2a95512d406f4447f1dabbbb778179babf1b1156c917fe858f8732131384b2033c5182c1ef1d1dbddba1dc7d9c664dcff35dee792cf6a7451e7ee8d149bfacbd03081a48ede66fbf7d693b92bf48862b21968b99a9027587c3dd354dd39a73bf453a1c60738833b34f024c63ad7d3f1155f49f5dac934f4556f9863d6d0f00078c105e97fd5af7b33647447e18e0715c031383c2ce0f48e97337fe478398a91c34956152988f295274a1c33aa7c2ed2252ea9fcf92d7418c4bfe170790e6e7867b8c171044ed1ced1b98094ff795fdcf5cfcf90829c15009043936a9255cc5a2648cbcd7349b5fd339e9a907ee52ac85d494401a6a4fdf309163c2d5c8994bfb41ba5e543d12011b0e5308985311f5ea8c77b983368dd379bcfd344f3c62b47cdb15cc6715c61015da0b85c3b67446ae904f73ab0b7d382d332271ec3f3103e7b746e93d75da5f8bf373d5cbf09ca903f7e674fd0a061881f1ea7862854c226688f97338407cc2108d1d817d869826db7065fea0fc9db091fce064b848bb21900a2cab170c2e9abfb02d3300f8253b33a9817177e3d99a543202cb31d708be163f471cf6ca6dc3aaa2199f66e8eb6805aea463ea61cf5ef20ba020bbc8f431bb76481bb621cbaeec215bbf4075a8836c74f7550cac604d71ad16d020e01fd2e1a9c6c5e780552c7ee716f12c3cf1b8a6e2526775b014d75db2d81262486e1e36d5a9bcd379fe7827b906bd7f0f9db8a1c581c3ef9b4cafceb0f5f1d1d5472bc8b210063e5b8b3f4b82cfaa1fe56bb01574af7ba9d456b9ace6eb12aca72f31baec3e8f0b0ff212809e9ef2354acd5d39b453f65871d46b5d78d77f197bcc16c3a95913b56c4e5e1a5cbda5efe3fef6d181aa404c403f0251a7bf2094f2389b632d0327ddce0a5b9c43c95df12e967b14fdf895d80db373b93e990e7cc0a4e24e3bb3ca5f5e438907bd7da57a8a5d23dfaccae0b6094ff59777d76762f16caabd3fbb04e772a5729df45813ce28f81597a005a5b8497110f5e5a7891c5f75a00f7cc39f5257941383b8e184e901616be6053d8993e6c94e9fa6e56e84b4d60dfd4c43b4f004d9775bff8612ca253590611175795faabb8ab425c00e4e65f724342dec9218dcb829cb56ca45e977c30688c5ab282fffbb944384c968df7cbb1e14923176b0452439f3968fe300ff43b5164f2c58f95aef32a3e46174cace96b89ee402a8237a72ff69b0816fd23b71b6934b52dc4a433fb80b0780fcd252a86bc1f74e1166126054dc5d3d72d71948d73ba2a0ae334af6378eceb5b59d22327e225bd7261bb25d3f673d1454ff1969b8da34b0b0c46576c58af225d02ac6acb3bcc92ff32132cb5072a4f954ee0b28382b232e5c017533377f7e59106c794a982fb45b2cb1e6e430c12318b881419ab94990fe3b732be1f8459674235be1bf779b2d223453f1ba73f0b9364c47702cebac91a03e16cf53cb830c1031dbce66e106b93d2bab2b49a7ac0fd51073f6f953992b82e93e791a39d6d226eb35f95ab4b04f8b92a8852c2a7b5a75e595c13551f066f9b726c51c71ecdbb8f22b6f0d8a9ac00bffc2f7c316ebaa91d0846887387e10b7f243602a41b06fa2634529673a78a3419137d5828b4adab1a0e24e02bde07162e7e5ccdc0d3bb77fda1a064b03b37a21abbe355d76c62db0eaf05a7f6c2286423fa7f01dbab84ebc3dc0cb203d523348761d02b38112389815c429bd8e3557196c4360352d0821d59e5716968b653e5afc2a0bc0cf7b48dc5a4ef2f46f86285a332a656aad6f6a2195792623e8f50d5b4d99b6b4f9a5b33bfeadb9158f24661dd83d93e751ebd810a94da41ada1b67a687b0cc41f1cfdb1fee6ad3d40e911c5ee5751c4c3f9d5398f17ff9a6f8d06cbad540d29c9de2c8571fec975530b9edd91f8971c3cbc160c8faaa7bdf229e442bf9bc004c686162ee732760ff7eac00396baa8e72873cbba8e0467b9cbb666ab2d0cf0b99e5987aa58bdb082feff023cb7190e369c6000433812d9d5c274011e8132d09f6cfa3bbaa70d96dcb6152efc31b069d68016b27928ba997031e50352e75aa1aff877b39be9e694281c378a51f92b95ccace98a3357a686c858f7583787f7ea3b5117a35a4aca7afedd22e05ec8e4710435f8e30fe797c716126cb5d5e75e587a4c1da73bf20bee2df0e1da5be2fb3108c3febdb8366b54a6cd25844593f0b08f469f6e52d0ea465ec460d49c3a80ce3f3b17028fb7c67b57c03b2ec4900dc695d1d62a61c2a330aa2f099ce983df122dad23466ebb2f1ac1ef06ddc122d1133e5b48507ad006ac7578bc44e8232b91fdbcf6481a4ca418e420627d93bd496e4361e9701dc2ce73fdf35d6e943f159e93570c7cf55db8535ccd03f8bb673f6bd0de52075f9d95252ef4c8e49d91ee8497bd39b5cbdd5dfe6e856216eef9612d9a453bc0d0826e420df812f183761d5d45cafe71dacf3b7c07cfa66ca3647784bd805994a5417b87b2a7600d86b5e4c4ab0e0d8fa1fceb2f2a3a14c5fa19ab3a497198d4f1bfec3fbed93ad1d9cf66603426d1086a18ffbdf102131661bdb327691ae7883f1578072d8a23961a0ac9f40260c9bcc8374154ae141745845edb3cda37efa5c733a7f5c14f22c0d1f73763706bc77944b954066e397fdf51c31e4b62c70956055997c172b43568bb45fc10895d19ca5b0fab485a172e37ad6330efb019b9a84700fae259cd32286ceb0f0d323c3723ff34c168e38af9291ce94d3e68718391edf4272da7676ce08ab3ff5ca88df45f970945521858d90ba33852f24a1ed4689dfd536df6584565ada8a248560d11f54fd5e9270ec45ebe090067d7fb9f52a9ca9780bd7b07d1e323bd72ad211e819dcdb71b514927a97f8fb9858331a54ac736ae92c7e63f6811f7ab8382bb602412fcac585d70a4dd8cb834711658abd96cf151ac28d9298d640f8d537fd352a41ae0e59b415f24e25a1e12f405451a03230793b23f31d1f4750d69cfe072d31afe8c5ffbbd082e05f8a82f4fb1b08e13036c4fa782f65014dbc14cf4260e6185c18d70ae3e8e98387bfbacf58b5628cc6b9a46550a0cbaebca712d316f2bc81b49600d7b51a294fcf6b879b1a4df086798e5a3656c97ec26e3acfbfb7aec8bb7f24d1d0ee91cae452e035cc73eb8f0dd6f309db5bacbd49cc12ecfc94faf4167eeb54216388d59d5d923f617e5aa3f7e2eb71d49e61a6c33f3fe352efa2e071c470782ebdc8b7e008c4b6329428c7426e03b62dd4946120b46107e3d1d416a5b15a494ac014c4856560a58d81ec7f621f4946aef665583956003d691b7e1571db43b2cceb4f7809531c9871210002de7495c5b6d4ee8bf32690f02d79f1352a9a41ff2c2dc7a4696ef8fb9a419510aa70cbd789eb99742ffdec70e9083d781967e1c6b0d99850a66759975735e40f5e9c4d60577dbc8b12e5385c5a0f8ec20e594a3db9a041e24ff70284d690ca71a6de37c07033da1c555cdedf0dd220fa681ac513aa9d4a617cc77a6cb465e42f5e2bd4ce4df809d52160073ff6c509bd1ba397edbe610d1f90b49245fbf7a6969eaaeefaf246f05c08141c432044922e1637e6379862c701b954fdc4c74966cb1990a3b2eb09243f85e8b404abfd1cf81d3bdea80b5f5a11f1daf7f6371883c16d2f913f801a25a92ae03ffaca02e2cd8eb70ca7d92fd2ab442b5f06bad8d563301e84bbbea49bcc964b8ee3b34332f82cab40177adb675923ec123958608455e1adf53b2baa91ce2578d9a133b5f7a751ca4b916d50f5d75cfb7123925e82fb1ed88cfc993e7c2126f7603ecf547b1e510c9aa7247d700ab0b4d667acae612ef43ed27551bccd5139a0dd9f82ddce0c219f94277c50b6ba6befdfd3da18db023aaeefbf8bd9f24baf38dc49bf255bfc8b76f2dfa226d19d6ce12ac698bc379673d557fd3e6f2cabdc37d7656ceea4285b24abc6b01c70402b63abb75d6e45289794821c8e61d1997f6424bd8c6602224a4e7284a18cc40892762e7078878c2adf0035b9f3b80ca3ee04c7f48b320caa304873b29308ffb306cd2fa16924b6eaa07a38e1364ac695da740ea1e65dc95727b086a379776c7bc55af1c177ec1a755630617dec0f3c881d84f4060b2c873a074bf73ffb407f2723961e5733103559b6ab00fa87c2b93f3d5d38da4f006404c6529b59e7d8b67574438fd15fdf574992e6c2517c1309732151a503d1ade39bc9463e0ea3295126b0329c67d127ee688ced772e1305d4e6b84860c8dc1790f47a2c659099142aa8b308c0337fa324ba98d8e75a4d6eb1e482953d74d6277e45ffce13019d80517c92deccbe0637604af682e52bfa8a28d59cfa42a9897e68bd436cb83ca9c8c35e50f9d0d9136095604e1f0cc07cbb51f57899a615458234a7de66fdf41af0c7ad68704ab3ec31c89b452f4376098364f7d723004fe60b52cd2286a1d143fd5c0ffac838c5eb4d18e2e7cb6361ac9db6f264796f9dce94e427b134d86cdd46212e63157b3b1e9eede469a87b775a20f9aa075390e86a25ddc410b342ea1a6a6dfd5a8c53e3b3147394134b1e4a0e73a54cb10327332482c783f4d30e3d2ce36c2d6f438afd7465f3c539ce7169a934e7869f99d3d02dc8cf4022c87ed47f18ed21e2297bf3276f02afccf718fedf0545519023478f87fac185b733701bc7cd6972a9590cea2337567274c23364ce6ad18b1d607e5f8bc43381ea9aaa617cb14484b57cde1cc26470935c232c3406ac1472873d339ffe7f6d20d740eeaef74e48ced693604ed18d18b87d26542c5347aca3e54fe5b7a2905a13bff0e5f39279c3806b72da5dae3b33fa61b4a330332596cb742f75c53bed7f53216a4014fe70a6496882f9e8154abfb337e6fedc14e9ea0f332b1a066d1b392e3ced5b1e7059e3f0672704fa1d11108e3e49947924e0f04861692e4a418c6b9b4499fe87c16aff6aa7b2c4af2f4f082db45650ea3c697b89a263499629fba00b11310e7caa185c1b2cbde116e0632275eb33c306a738481a8f2b03baf38b63d902684100d7957ab9952004975eef44547c7984fc2ed1308ac44e6cee8806d31fc8b2c0d69e2f8191bdb9d84f777a2cb06f51b8bd6751a7fcdd1645ba345358eacfc1c3b5583144c78b4760b3332329f5f9ce9b3c1da932cb54140836665fc308868027f1bca4b44f72b1fdebef02eb5096a51ce08dbb4f608abe2c63dc16e8875719e14d090673e7c544f89925d14dbd723e2accc040761ee31ea83f6a59e28e2a25db09ccec87528f8ddef63825b68e4d70536491e541bb136776fb057fee3314e02ae87680f0fb00aa2f09976a7f5366b80bab25886d63e4074083340376b9628cc32e206d87deaf2d9e683517e009a38ca8589da3b2637ebda64b3cbe2733392e1ded6115259296d31ec6cf672f872420a24f747cd23bcccc63292a266339377aa6b1df9afe9fce5f4bd1447bdc1cee4a1c6a1b75b6212b918a061846ba5f88ee2637c654738a2659096d19370325e1d8c0a2ba9d82e4fac2d6e8adf4a8d12969da62f9772bdc1460fe2b7dbcd247dab9f4f65c8e3fd1aff10179b02284c5fb41069991c24ff4ed58caeec85cba34aa735df7f91d790b24f8d4f70882f224fe50ed120b090f4ca2435d89bc83126fa48e523e5179906c92653571869249667f3363e5de6565bd2dfdc51526396a4fe7b8106e0e0d5c651a766f6af706bd90bdb6dcfa2bcbd1c5f6ddff65dde3c6aea05158e8081a7ccaf9b923fb837e361ce70e9b28b28194199a73b7c36c5d4c658cdd9742ce515d970bc52d50533b02742122b873ba73e789fe816b82783254179f8854e31b4b24a0f317e575dce476ed4decb6c6826790d2df0cb86a693abc95834be4cd601e7ef2b53a040cf88d10158e22e9983835572804ff5a25c7e259254abe6609342a01e02a814f762240dc9afa9b908325ee1ffd8b884088f3ece2f417a40e6deb49cf2d0b2302ff32114779f67e28b6294de4f44285ac182a3278ebf3999cfacb4dc46350ba79c3d97f8b98ffdc800ee315b9031e9051247461f2e00b8c13e1a11dd5f06b4a51a12c0eb0b169d905296481f511ba131f953c44b43fced8739d4a91eab4d49f1d59cfb071f0c48b6b25d49f6cfc48d8af6c2139fc839d4a633d0df43ca781016ecd334a805145a7b61dd3cf5c5e412aceb4bac28e793c2ccdde0c27d7db913f14af85eefbb69452b68540a319c3ce91701a8dbcfe2a69e645546a44db0f908557e528806df5c3a12945d295b105d5c3f0d3741804343630725e151a7113f46828845c3b2b809ff17035a422c9d04f665283e20e6dbad51705bc08dc0f4b9f158e58cfbe3c7bd24debd4c25ed3e57614902c3645472952c710e353bc22efc7197e5a1cd313a255ddfc9671e719e8c45ed5e780bbc75652e4d2ec9d22e76904201a01570937ee210215b5b3f112b349362919fde6336b34c7d0fe46ed8d1a0a9f1a28183e79b280bbfa8e9659ee8cf83228c9dcd220167f26b9bc9f650c0f617e4a35fe7aa06bb6f13041a273b16aa5462685069d9a78096605c41b202466d4a085b5bb78633c200926f9a9ddedcea980a4e2834c8d9c07fd3ace9fcd7e137ce28cf388c3d9d539051ef7d60e5e65735848c43264e5fac36af3f7a7302cbcdaf314440e769c2566eeb43cd20ca46fa56ffa90b6a042bb08f4d49b80c8c3cce824ec2f7868ebaba79bed8823a9beee48477fe7937c43cfb7b71b4be33151891f8a1188a9465ac55c3c5f5918bae437df214f464c65f85e60bbd730b073d7346a03c508385d46b1f1f377f8cabd2072e144a90dee39fd4f823f7ff0ff832e2de65c356b3b355039e95d8dfa3c2be1dfafb6a7445a912a6d4c2da6b5cc6acd4f4772060249687b1ff30f35acd248782a9fb2a2cea7f15aabf7cae2e15f78642ca4f6e75283c75ef4510e8f6a460031de79e445c20a7fa83214a396718b9492c26dc6ea64a3053d521763131f5e0cb9b6ec2c5ebe3d8547672f9c422cfc12b5ef66e2158c0ec2b63b927978c7b6f38e6dd7a9a7cf069cefc85224ccb054b9d835aeca0f708fa256e71dbf7a254eaa8c925e684f69ec76935591ece057dcfea94f63a03ca87801721760e10cfdd19447274d106d85a0ad8a80f5de9a747383650e88b7a5ab7167f6984fd0f17b538a5416aacc97b70696182bd8f7bf80c4d9f8cf887fad68bc2aa5cf9d7e04325fc378943276786ba0726ea2f10a40d1b66f1ba8e91e10c4176e43803b38b4189cd643919e1d6996be00cede04c5ebc2dfb9a17c4aa9b3f9d7dfdf8bbe1d80a6d2723bbd52de10e538c72283bc220cc657d32a4c6d940c6df0742238ee1f223cdb6a218b048680b746c31bbc88d12fb2745a1c2b2536625d28ddf10e685fede490bd7d5b258d671c29994acfa1a84d83e7eb6a631e6d6f634769d91fd1891e768e428881c643ac92cd1d4e6ed4587e19e2bcbe0984eb5bd83db65bcc5aa0e4c6563b542ca7bc647f0d5dfc357264e8a42e0e41121a51647c0c3cd2e17faa0b6c7117f974389a986c4bc422ff8d246c824427473c4b86ec102ff241bfb7b68fd32a73b84107085730e50fea6d86a8b9e773a14c982e440f21b20b47badf5053599c9aa6eaca38645d3a1fcca43c1269749c741abda5532591f3f4c2b0d17cbeb67ff03c92b0e3b7a223c52f61bb3e1e702a0090221998495c1a89011be14a2c48f239a2ca0314d866ff1ad16e5684c4ee9798a9690d1a88da2fc1e31ebbbe8df1faec74bbddc8051a4e8389e8d95b314d6d04da12521cdffad3789d9bde3112939429b9e457543f69d2ef9bedb367faaa0b1104e648a0b84f980a6f55d1f767dc26ac63aa35d399895d851d7b68acddd0d90c1abb0ebd387341c3999ebeeb2c9fa7bc7c28bbc2206b08ec0525163c6a6016495d984e481b180ea2ab40bef749ab2cc0b995a48af0d896b347d3aca80e5cc1c3c31be143a0cf3257175b5e83969b8bbad889a88bd9afcf4c8c4d8969d4d6e36b7346e27fd3d5c520a81c753d9dccfef08ac57a3d1a3c380c10aba880fd838068bfb5025e5c63ccd994bcdfbf606e33a294c2989203f9ce792c0216221bd2a80dd29be813e8ffd5429b1c970aad61c4db2a477666a136eaeeafe7d4a7715dbbac58cf5591c1dcea1e0f380659f203bf98c23cf062f218c2060c59bddaf76a66be76277863c22fddf52889fcd5a4c6142cac197cc9680f12b3b6f836f1a9dc2632c798d09820c2674e8375cb46816e8e4667404875d9521c8c833b36fc7f148b121f8a962b3567d4d1fbd6be34b2e8a29ecb13dbeadad8354d118f993d112c57dada4e70f0532e8ee28fa284817e648815f06ac855c2be2d3e8c99b03737b499dcccf2eb0cf7d5eca23e0be794d645eedcefbbe18adc2f99f8203530e1bfd1f4362cc65c665d3a2e79cbd852385427f738a9c6bd699f3173b7471b5599a6e41f803ab316a7b3c5f51633fb62798ba87d4ef8acc44c61130f91e6d73f008f49d5ef88cf9aabf8953bbd9f7164935df14de83f19b31d33e5a2198fba6614ca2c044fbadbc549bf1c91c311fd93da13f9941988794c40cab14abf537f0ec1c43c6ecd85a92405a387c0f5c272a6c4f3a4b8aaee9560e5a27f55e1376cd0fc83ee736868b95d2870bccaaa28616c4980134e44f666eed585085770cfbf4eb8eebe09b78503b4943a62d2a4a2e387011937d8cb8500121a89b0a3ac5de84f6262476092d10f1800d91471c6cd4b84ecd6ef61060588b50b77f0b1e1d7544851f4ec9f4c752df3fca2ead24538ef3c8a9cdca2bddbc1415d3ee3fd765d6880608515ebca549b1a5e28d1988b0295aefc25329ee809d33ee04783028153cd6537407f13e095eb1ca8123643b7ae6c14cccd7e3a50b5030cb4d830915c5947f26216ee5a0d9d41780f7100cf36d65f79d6730dce9912536dc9338d95cdd5282fafbccc0766a5609d25309003e5cbfa89ac23991789050c0fc54c9e6660eda71a2812af41117a443722c29c8d55193db6c30033873595691c5f3132b2d6f3d64c63a3f6d1b46c6ecaa10552fd7ffacc94e37ef2dab5c101dd1c935d16999ce9d520ed4f7a9054659842ece10f3722193ec0c0e09dc7d31984f152e59104f1f438040151f18090aba3ea735cd2bdc88588fb3a978b5a504108dec4d837e3d4d21c4db6f4b77cfc4cc1a47bcdd67d18e1f9fec50d3bec252cf0dd0c56002524c2dce6b0cf0f6bdaf4e036b63425409d4b523b8d3f5bf39c7765e8c7bc2e63ecef5dd4aeb1b46727116969ef06ba6d34bb70568a1e1703c45aab0740e4b806523bf910ba828df95c28fb218f3893c9c937a1ab582a0b000379acfe484021eaccfafb08f60988a058afa8085a884bf5d2423a78196097802b3d517b1864b61d1f8f4280ff148332015ab2db6bd2f5d4c487b0606d48105a3db8bf9562400250ff098e692fedc0606ef50770945442e90c33aec8d595fa6935b54b4ab232d23693f315b2bf345906813041f5ae2d8fb9766e4dc8174f96e7e78f7128f2dadda27d173e77b9445f106e04d54331a77cdac75bd325758fb04c7d0e675b652f6a246558445c4635a00cfb4d2dc9e18e1cdd60a9bfb3c611d514e4800068377815fc94d59d47281c7bc111906418d39a0167431969eab1416f9038786e985dec7d07c5b51bf56c75d87b9edeb8d3e8e97fcaabf1281e43596a97dc8b1942a491c9e7972e6ee22a6c1aa0eb2011cf348c07d056d1c7c887206a3da355548048fbd4953dd4a45156636e34d1a34cd27bd79b8c7c8965c59ecdad95957f23e658f190cafce4377d2c64aeb5cacaddf0256635de5b88b5b1f23766c56c7eba541efac53080266bb17826b764ad6cd80dd74f87eb745ac615f63679ee6f9d8f832850f4739fb2d1f1cee9040356b230768bf05ad86f01fabd6a940a10123b217890583109c4ac8cb064f02014a21541444c64568c4d9429153cd40d8326703e70bf82931ec1a8adb115b79265b0987a73b50a35ee722dd0d7eeb376cc122a6f38e10b8dd6396f6720df68ce6becfa1cea56246985f9bfa3e102a851fd988fbbc529e90ea49d78d7d8ed52b5458cbcb1df76d9e25722e969fc21765fb7184118e98b52efe4cfa4a6668a4b87814f0ccf4386f3590950ae2b2e6f7d77328f7caa8dc733ddedb865aa20582cc6f9ce90a0b32efccb5a029e9f8f973764b23f77c916305750f2d94681abcb7ad7bf65147714dc5af0a782ca9e75220fa6e2920ed7f0628d5ca77ab6ebc53a79787b491268eb562e35c90b50133f39df4331bc164792c69e4149d1fd6b2a9b3af4691529bbc5dce3414d4d636552565f5955c9ed5003771eaafa8f5356e85995ea8eb37865dc9e3f4c098d1f60c4f0bcaf89f531c16d5e92acb2f5b0958a1c4dc3d4d0f76da0e06de645221c94eca09fb54b6a44558209c058ceee4e0bea26b2a54d4ab659ad4346b67f5e4d3cadfab26799d58d14e9579cc6772cb03082089d4771478c59ec838cca230e398f67b7f9dbbff9ada51d20040b2ece6ca3979447e9061138408377470e89eed073fd79c2b49384d7d34554e8d452887180b9fbb1d85fe24136fd923837b7d4911f18dc25b88b14b994c000b0f02e7c271bf4e880348885dee153c80e19c930e07c8a82d81f0dfa7d08c1ecf6f922ad32dd4fa3e8951e0c9a067d090c7cacc297af6d5201f060d7cf7dcac09213c163a924ed791dc406c2a1fb37430f0a1f5545794d2ec3744a2c32fb9e3d92b2ebbc5f013fbe04bff63c25b85d6da96b1bb4f06e001e166de610026ffe092167aaf1aedd09dcc0a45760bb8891f6605c9663175348ce2435dbcd7937093fe6658817fc0e42559d2828324000d9f39d8b48a50d882f357f69599bb6b54ae801530392655a6ec08655b8ba16980b418999f4ee625da63ff6458195cd0d7a7c85eb9c02c6b951502f08415046b75a1f3740074be26da2305b68e090fb3ab250822cf75c8b07995453a70797d40d2bb369ba40dca7558b625fb2c3f5306ca897a5fbc22edb00d4a749d1ed9e9b2037beb8410bc13cc2747718aac485c", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x48140, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'fl512\x00', [0x4f27, 0x100, 0x2, 0xd, 0x5, 0x1, 0x8, 0x4000007, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x0, 0x20001, 0x6, 0x101, 0x800ea, 0x80000000, 0x5, 0x8, 0x89, 0xcaa7, 0x0, 0x7b, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4}) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) landlock_create_ruleset(&(0x7f00000001c0)={0x4080, 0x3, 0x1}, 0x18, 0xba2f2605bdbd916d) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) 1m42.510687807s ago: executing program 32 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f0000002640)=""/4101, 0x1005) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_free_batched\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x29, 0xb}], 0xc}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x21, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect={{0x0, 0x3}}}], 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000640)="8d5ed6d259471b77da2ccbc8d451ba457de461f024d2422094d643564fb598370fb32f32056a155cefcf817447bfe819350c1ec9d032218499e1b1f7556c01fb194ad99f7438b4f0cad58d4ae5556e31f42e9673ad37cd2b1283212426d1f26e29cd9e06dd7ecaca6d3bfaaf549b44838b49c577120b4948c1a385e4991527bd51db450f8c6b687ae7207606ad6498acac82c23920561294bdc3f5c8edc73fd58efdd94e333f963079fc451c8a667689167df6c926fce890f36cfc8a93b7ee88e5c7ece53e521266228d7aa950fb1397e179c84ee8bc8e58c1b5054cffb3817a0284ce3ea79d8fe783b6b1eee02b7e583dc5bd13fedeac8d8d03c0defae28c9407fbb8a4fc528935f942858886559ac39d52f55da401991471f9dcd95e79ed94ce419d2d7838e84c854b1780912bceba62f4d5107c465ed6d40f39cc1011716e378cd744dae4f9764f69558616bdfb36e8e1c25dc9cbf7f446e810dfce40b43bfdb7a2a95512d406f4447f1dabbbb778179babf1b1156c917fe858f8732131384b2033c5182c1ef1d1dbddba1dc7d9c664dcff35dee792cf6a7451e7ee8d149bfacbd03081a48ede66fbf7d693b92bf48862b21968b99a9027587c3dd354dd39a73bf453a1c60738833b34f024c63ad7d3f1155f49f5dac934f4556f9863d6d0f00078c105e97fd5af7b33647447e18e0715c031383c2ce0f48e97337fe478398a91c34956152988f295274a1c33aa7c2ed2252ea9fcf92d7418c4bfe170790e6e7867b8c171044ed1ced1b98094ff795fdcf5cfcf90829c15009043936a9255cc5a2648cbcd7349b5fd339e9a907ee52ac85d494401a6a4fdf309163c2d5c8994bfb41ba5e543d12011b0e5308985311f5ea8c77b983368dd379bcfd344f3c62b47cdb15cc6715c61015da0b85c3b67446ae904f73ab0b7d382d332271ec3f3103e7b746e93d75da5f8bf373d5cbf09ca903f7e674fd0a061881f1ea7862854c226688f97338407cc2108d1d817d869826db7065fea0fc9db091fce064b848bb21900a2cab170c2e9abfb02d3300f8253b33a9817177e3d99a543202cb31d708be163f471cf6ca6dc3aaa2199f66e8eb6805aea463ea61cf5ef20ba020bbc8f431bb76481bb621cbaeec215bbf4075a8836c74f7550cac604d71ad16d020e01fd2e1a9c6c5e780552c7ee716f12c3cf1b8a6e2526775b014d75db2d81262486e1e36d5a9bcd379fe7827b906bd7f0f9db8a1c581c3ef9b4cafceb0f5f1d1d5472bc8b210063e5b8b3f4b82cfaa1fe56bb01574af7ba9d456b9ace6eb12aca72f31baec3e8f0b0ff212809e9ef2354acd5d39b453f65871d46b5d78d77f197bcc16c3a95913b56c4e5e1a5cbda5efe3fef6d181aa404c403f0251a7bf2094f2389b632d0327ddce0a5b9c43c95df12e967b14fdf895d80db373b93e990e7cc0a4e24e3bb3ca5f5e438907bd7da57a8a5d23dfaccae0b6094ff59777d76762f16caabd3fbb04e772a5729df45813ce28f81597a005a5b8497110f5e5a7891c5f75a00f7cc39f5257941383b8e184e901616be6053d8993e6c94e9fa6e56e84b4d60dfd4c43b4f004d9775bff8612ca253590611175795faabb8ab425c00e4e65f724342dec9218dcb829cb56ca45e977c30688c5ab282fffbb944384c968df7cbb1e14923176b0452439f3968fe300ff43b5164f2c58f95aef32a3e46174cace96b89ee402a8237a72ff69b0816fd23b71b6934b52dc4a433fb80b0780fcd252a86bc1f74e1166126054dc5d3d72d71948d73ba2a0ae334af6378eceb5b59d22327e225bd7261bb25d3f673d1454ff1969b8da34b0b0c46576c58af225d02ac6acb3bcc92ff32132cb5072a4f954ee0b28382b232e5c017533377f7e59106c794a982fb45b2cb1e6e430c12318b881419ab94990fe3b732be1f8459674235be1bf779b2d223453f1ba73f0b9364c47702cebac91a03e16cf53cb830c1031dbce66e106b93d2bab2b49a7ac0fd51073f6f953992b82e93e791a39d6d226eb35f95ab4b04f8b92a8852c2a7b5a75e595c13551f066f9b726c51c71ecdbb8f22b6f0d8a9ac00bffc2f7c316ebaa91d0846887387e10b7f243602a41b06fa2634529673a78a3419137d5828b4adab1a0e24e02bde07162e7e5ccdc0d3bb77fda1a064b03b37a21abbe355d76c62db0eaf05a7f6c2286423fa7f01dbab84ebc3dc0cb203d523348761d02b38112389815c429bd8e3557196c4360352d0821d59e5716968b653e5afc2a0bc0cf7b48dc5a4ef2f46f86285a332a656aad6f6a2195792623e8f50d5b4d99b6b4f9a5b33bfeadb9158f24661dd83d93e751ebd810a94da41ada1b67a687b0cc41f1cfdb1fee6ad3d40e911c5ee5751c4c3f9d5398f17ff9a6f8d06cbad540d29c9de2c8571fec975530b9edd91f8971c3cbc160c8faaa7bdf229e442bf9bc004c686162ee732760ff7eac00396baa8e72873cbba8e0467b9cbb666ab2d0cf0b99e5987aa58bdb082feff023cb7190e369c6000433812d9d5c274011e8132d09f6cfa3bbaa70d96dcb6152efc31b069d68016b27928ba997031e50352e75aa1aff877b39be9e694281c378a51f92b95ccace98a3357a686c858f7583787f7ea3b5117a35a4aca7afedd22e05ec8e4710435f8e30fe797c716126cb5d5e75e587a4c1da73bf20bee2df0e1da5be2fb3108c3febdb8366b54a6cd25844593f0b08f469f6e52d0ea465ec460d49c3a80ce3f3b17028fb7c67b57c03b2ec4900dc695d1d62a61c2a330aa2f099ce983df122dad23466ebb2f1ac1ef06ddc122d1133e5b48507ad006ac7578bc44e8232b91fdbcf6481a4ca418e420627d93bd496e4361e9701dc2ce73fdf35d6e943f159e93570c7cf55db8535ccd03f8bb673f6bd0de52075f9d95252ef4c8e49d91ee8497bd39b5cbdd5dfe6e856216eef9612d9a453bc0d0826e420df812f183761d5d45cafe71dacf3b7c07cfa66ca3647784bd805994a5417b87b2a7600d86b5e4c4ab0e0d8fa1fceb2f2a3a14c5fa19ab3a497198d4f1bfec3fbed93ad1d9cf66603426d1086a18ffbdf102131661bdb327691ae7883f1578072d8a23961a0ac9f40260c9bcc8374154ae141745845edb3cda37efa5c733a7f5c14f22c0d1f73763706bc77944b954066e397fdf51c31e4b62c70956055997c172b43568bb45fc10895d19ca5b0fab485a172e37ad6330efb019b9a84700fae259cd32286ceb0f0d323c3723ff34c168e38af9291ce94d3e68718391edf4272da7676ce08ab3ff5ca88df45f970945521858d90ba33852f24a1ed4689dfd536df6584565ada8a248560d11f54fd5e9270ec45ebe090067d7fb9f52a9ca9780bd7b07d1e323bd72ad211e819dcdb71b514927a97f8fb9858331a54ac736ae92c7e63f6811f7ab8382bb602412fcac585d70a4dd8cb834711658abd96cf151ac28d9298d640f8d537fd352a41ae0e59b415f24e25a1e12f405451a03230793b23f31d1f4750d69cfe072d31afe8c5ffbbd082e05f8a82f4fb1b08e13036c4fa782f65014dbc14cf4260e6185c18d70ae3e8e98387bfbacf58b5628cc6b9a46550a0cbaebca712d316f2bc81b49600d7b51a294fcf6b879b1a4df086798e5a3656c97ec26e3acfbfb7aec8bb7f24d1d0ee91cae452e035cc73eb8f0dd6f309db5bacbd49cc12ecfc94faf4167eeb54216388d59d5d923f617e5aa3f7e2eb71d49e61a6c33f3fe352efa2e071c470782ebdc8b7e008c4b6329428c7426e03b62dd4946120b46107e3d1d416a5b15a494ac014c4856560a58d81ec7f621f4946aef665583956003d691b7e1571db43b2cceb4f7809531c9871210002de7495c5b6d4ee8bf32690f02d79f1352a9a41ff2c2dc7a4696ef8fb9a419510aa70cbd789eb99742ffdec70e9083d781967e1c6b0d99850a66759975735e40f5e9c4d60577dbc8b12e5385c5a0f8ec20e594a3db9a041e24ff70284d690ca71a6de37c07033da1c555cdedf0dd220fa681ac513aa9d4a617cc77a6cb465e42f5e2bd4ce4df809d52160073ff6c509bd1ba397edbe610d1f90b49245fbf7a6969eaaeefaf246f05c08141c432044922e1637e6379862c701b954fdc4c74966cb1990a3b2eb09243f85e8b404abfd1cf81d3bdea80b5f5a11f1daf7f6371883c16d2f913f801a25a92ae03ffaca02e2cd8eb70ca7d92fd2ab442b5f06bad8d563301e84bbbea49bcc964b8ee3b34332f82cab40177adb675923ec123958608455e1adf53b2baa91ce2578d9a133b5f7a751ca4b916d50f5d75cfb7123925e82fb1ed88cfc993e7c2126f7603ecf547b1e510c9aa7247d700ab0b4d667acae612ef43ed27551bccd5139a0dd9f82ddce0c219f94277c50b6ba6befdfd3da18db023aaeefbf8bd9f24baf38dc49bf255bfc8b76f2dfa226d19d6ce12ac698bc379673d557fd3e6f2cabdc37d7656ceea4285b24abc6b01c70402b63abb75d6e45289794821c8e61d1997f6424bd8c6602224a4e7284a18cc40892762e7078878c2adf0035b9f3b80ca3ee04c7f48b320caa304873b29308ffb306cd2fa16924b6eaa07a38e1364ac695da740ea1e65dc95727b086a379776c7bc55af1c177ec1a755630617dec0f3c881d84f4060b2c873a074bf73ffb407f2723961e5733103559b6ab00fa87c2b93f3d5d38da4f006404c6529b59e7d8b67574438fd15fdf574992e6c2517c1309732151a503d1ade39bc9463e0ea3295126b0329c67d127ee688ced772e1305d4e6b84860c8dc1790f47a2c659099142aa8b308c0337fa324ba98d8e75a4d6eb1e482953d74d6277e45ffce13019d80517c92deccbe0637604af682e52bfa8a28d59cfa42a9897e68bd436cb83ca9c8c35e50f9d0d9136095604e1f0cc07cbb51f57899a615458234a7de66fdf41af0c7ad68704ab3ec31c89b452f4376098364f7d723004fe60b52cd2286a1d143fd5c0ffac838c5eb4d18e2e7cb6361ac9db6f264796f9dce94e427b134d86cdd46212e63157b3b1e9eede469a87b775a20f9aa075390e86a25ddc410b342ea1a6a6dfd5a8c53e3b3147394134b1e4a0e73a54cb10327332482c783f4d30e3d2ce36c2d6f438afd7465f3c539ce7169a934e7869f99d3d02dc8cf4022c87ed47f18ed21e2297bf3276f02afccf718fedf0545519023478f87fac185b733701bc7cd6972a9590cea2337567274c23364ce6ad18b1d607e5f8bc43381ea9aaa617cb14484b57cde1cc26470935c232c3406ac1472873d339ffe7f6d20d740eeaef74e48ced693604ed18d18b87d26542c5347aca3e54fe5b7a2905a13bff0e5f39279c3806b72da5dae3b33fa61b4a330332596cb742f75c53bed7f53216a4014fe70a6496882f9e8154abfb337e6fedc14e9ea0f332b1a066d1b392e3ced5b1e7059e3f0672704fa1d11108e3e49947924e0f04861692e4a418c6b9b4499fe87c16aff6aa7b2c4af2f4f082db45650ea3c697b89a263499629fba00b11310e7caa185c1b2cbde116e0632275eb33c306a738481a8f2b03baf38b63d902684100d7957ab9952004975eef44547c7984fc2ed1308ac44e6cee8806d31fc8b2c0d69e2f8191bdb9d84f777a2cb06f51b8bd6751a7fcdd1645ba345358eacfc1c3b5583144c78b4760b3332329f5f9ce9b3c1da932cb54140836665fc308868027f1bca4b44f72b1fdebef02eb5096a51ce08dbb4f608abe2c63dc16e8875719e14d090673e7c544f89925d14dbd723e2accc040761ee31ea83f6a59e28e2a25db09ccec87528f8ddef63825b68e4d70536491e541bb136776fb057fee3314e02ae87680f0fb00aa2f09976a7f5366b80bab25886d63e4074083340376b9628cc32e206d87deaf2d9e683517e009a38ca8589da3b2637ebda64b3cbe2733392e1ded6115259296d31ec6cf672f872420a24f747cd23bcccc63292a266339377aa6b1df9afe9fce5f4bd1447bdc1cee4a1c6a1b75b6212b918a061846ba5f88ee2637c654738a2659096d19370325e1d8c0a2ba9d82e4fac2d6e8adf4a8d12969da62f9772bdc1460fe2b7dbcd247dab9f4f65c8e3fd1aff10179b02284c5fb41069991c24ff4ed58caeec85cba34aa735df7f91d790b24f8d4f70882f224fe50ed120b090f4ca2435d89bc83126fa48e523e5179906c92653571869249667f3363e5de6565bd2dfdc51526396a4fe7b8106e0e0d5c651a766f6af706bd90bdb6dcfa2bcbd1c5f6ddff65dde3c6aea05158e8081a7ccaf9b923fb837e361ce70e9b28b28194199a73b7c36c5d4c658cdd9742ce515d970bc52d50533b02742122b873ba73e789fe816b82783254179f8854e31b4b24a0f317e575dce476ed4decb6c6826790d2df0cb86a693abc95834be4cd601e7ef2b53a040cf88d10158e22e9983835572804ff5a25c7e259254abe6609342a01e02a814f762240dc9afa9b908325ee1ffd8b884088f3ece2f417a40e6deb49cf2d0b2302ff32114779f67e28b6294de4f44285ac182a3278ebf3999cfacb4dc46350ba79c3d97f8b98ffdc800ee315b9031e9051247461f2e00b8c13e1a11dd5f06b4a51a12c0eb0b169d905296481f511ba131f953c44b43fced8739d4a91eab4d49f1d59cfb071f0c48b6b25d49f6cfc48d8af6c2139fc839d4a633d0df43ca781016ecd334a805145a7b61dd3cf5c5e412aceb4bac28e793c2ccdde0c27d7db913f14af85eefbb69452b68540a319c3ce91701a8dbcfe2a69e645546a44db0f908557e528806df5c3a12945d295b105d5c3f0d3741804343630725e151a7113f46828845c3b2b809ff17035a422c9d04f665283e20e6dbad51705bc08dc0f4b9f158e58cfbe3c7bd24debd4c25ed3e57614902c3645472952c710e353bc22efc7197e5a1cd313a255ddfc9671e719e8c45ed5e780bbc75652e4d2ec9d22e76904201a01570937ee210215b5b3f112b349362919fde6336b34c7d0fe46ed8d1a0a9f1a28183e79b280bbfa8e9659ee8cf83228c9dcd220167f26b9bc9f650c0f617e4a35fe7aa06bb6f13041a273b16aa5462685069d9a78096605c41b202466d4a085b5bb78633c200926f9a9ddedcea980a4e2834c8d9c07fd3ace9fcd7e137ce28cf388c3d9d539051ef7d60e5e65735848c43264e5fac36af3f7a7302cbcdaf314440e769c2566eeb43cd20ca46fa56ffa90b6a042bb08f4d49b80c8c3cce824ec2f7868ebaba79bed8823a9beee48477fe7937c43cfb7b71b4be33151891f8a1188a9465ac55c3c5f5918bae437df214f464c65f85e60bbd730b073d7346a03c508385d46b1f1f377f8cabd2072e144a90dee39fd4f823f7ff0ff832e2de65c356b3b355039e95d8dfa3c2be1dfafb6a7445a912a6d4c2da6b5cc6acd4f4772060249687b1ff30f35acd248782a9fb2a2cea7f15aabf7cae2e15f78642ca4f6e75283c75ef4510e8f6a460031de79e445c20a7fa83214a396718b9492c26dc6ea64a3053d521763131f5e0cb9b6ec2c5ebe3d8547672f9c422cfc12b5ef66e2158c0ec2b63b927978c7b6f38e6dd7a9a7cf069cefc85224ccb054b9d835aeca0f708fa256e71dbf7a254eaa8c925e684f69ec76935591ece057dcfea94f63a03ca87801721760e10cfdd19447274d106d85a0ad8a80f5de9a747383650e88b7a5ab7167f6984fd0f17b538a5416aacc97b70696182bd8f7bf80c4d9f8cf887fad68bc2aa5cf9d7e04325fc378943276786ba0726ea2f10a40d1b66f1ba8e91e10c4176e43803b38b4189cd643919e1d6996be00cede04c5ebc2dfb9a17c4aa9b3f9d7dfdf8bbe1d80a6d2723bbd52de10e538c72283bc220cc657d32a4c6d940c6df0742238ee1f223cdb6a218b048680b746c31bbc88d12fb2745a1c2b2536625d28ddf10e685fede490bd7d5b258d671c29994acfa1a84d83e7eb6a631e6d6f634769d91fd1891e768e428881c643ac92cd1d4e6ed4587e19e2bcbe0984eb5bd83db65bcc5aa0e4c6563b542ca7bc647f0d5dfc357264e8a42e0e41121a51647c0c3cd2e17faa0b6c7117f974389a986c4bc422ff8d246c824427473c4b86ec102ff241bfb7b68fd32a73b84107085730e50fea6d86a8b9e773a14c982e440f21b20b47badf5053599c9aa6eaca38645d3a1fcca43c1269749c741abda5532591f3f4c2b0d17cbeb67ff03c92b0e3b7a223c52f61bb3e1e702a0090221998495c1a89011be14a2c48f239a2ca0314d866ff1ad16e5684c4ee9798a9690d1a88da2fc1e31ebbbe8df1faec74bbddc8051a4e8389e8d95b314d6d04da12521cdffad3789d9bde3112939429b9e457543f69d2ef9bedb367faaa0b1104e648a0b84f980a6f55d1f767dc26ac63aa35d399895d851d7b68acddd0d90c1abb0ebd387341c3999ebeeb2c9fa7bc7c28bbc2206b08ec0525163c6a6016495d984e481b180ea2ab40bef749ab2cc0b995a48af0d896b347d3aca80e5cc1c3c31be143a0cf3257175b5e83969b8bbad889a88bd9afcf4c8c4d8969d4d6e36b7346e27fd3d5c520a81c753d9dccfef08ac57a3d1a3c380c10aba880fd838068bfb5025e5c63ccd994bcdfbf606e33a294c2989203f9ce792c0216221bd2a80dd29be813e8ffd5429b1c970aad61c4db2a477666a136eaeeafe7d4a7715dbbac58cf5591c1dcea1e0f380659f203bf98c23cf062f218c2060c59bddaf76a66be76277863c22fddf52889fcd5a4c6142cac197cc9680f12b3b6f836f1a9dc2632c798d09820c2674e8375cb46816e8e4667404875d9521c8c833b36fc7f148b121f8a962b3567d4d1fbd6be34b2e8a29ecb13dbeadad8354d118f993d112c57dada4e70f0532e8ee28fa284817e648815f06ac855c2be2d3e8c99b03737b499dcccf2eb0cf7d5eca23e0be794d645eedcefbbe18adc2f99f8203530e1bfd1f4362cc65c665d3a2e79cbd852385427f738a9c6bd699f3173b7471b5599a6e41f803ab316a7b3c5f51633fb62798ba87d4ef8acc44c61130f91e6d73f008f49d5ef88cf9aabf8953bbd9f7164935df14de83f19b31d33e5a2198fba6614ca2c044fbadbc549bf1c91c311fd93da13f9941988794c40cab14abf537f0ec1c43c6ecd85a92405a387c0f5c272a6c4f3a4b8aaee9560e5a27f55e1376cd0fc83ee736868b95d2870bccaaa28616c4980134e44f666eed585085770cfbf4eb8eebe09b78503b4943a62d2a4a2e387011937d8cb8500121a89b0a3ac5de84f6262476092d10f1800d91471c6cd4b84ecd6ef61060588b50b77f0b1e1d7544851f4ec9f4c752df3fca2ead24538ef3c8a9cdca2bddbc1415d3ee3fd765d6880608515ebca549b1a5e28d1988b0295aefc25329ee809d33ee04783028153cd6537407f13e095eb1ca8123643b7ae6c14cccd7e3a50b5030cb4d830915c5947f26216ee5a0d9d41780f7100cf36d65f79d6730dce9912536dc9338d95cdd5282fafbccc0766a5609d25309003e5cbfa89ac23991789050c0fc54c9e6660eda71a2812af41117a443722c29c8d55193db6c30033873595691c5f3132b2d6f3d64c63a3f6d1b46c6ecaa10552fd7ffacc94e37ef2dab5c101dd1c935d16999ce9d520ed4f7a9054659842ece10f3722193ec0c0e09dc7d31984f152e59104f1f438040151f18090aba3ea735cd2bdc88588fb3a978b5a504108dec4d837e3d4d21c4db6f4b77cfc4cc1a47bcdd67d18e1f9fec50d3bec252cf0dd0c56002524c2dce6b0cf0f6bdaf4e036b63425409d4b523b8d3f5bf39c7765e8c7bc2e63ecef5dd4aeb1b46727116969ef06ba6d34bb70568a1e1703c45aab0740e4b806523bf910ba828df95c28fb218f3893c9c937a1ab582a0b000379acfe484021eaccfafb08f60988a058afa8085a884bf5d2423a78196097802b3d517b1864b61d1f8f4280ff148332015ab2db6bd2f5d4c487b0606d48105a3db8bf9562400250ff098e692fedc0606ef50770945442e90c33aec8d595fa6935b54b4ab232d23693f315b2bf345906813041f5ae2d8fb9766e4dc8174f96e7e78f7128f2dadda27d173e77b9445f106e04d54331a77cdac75bd325758fb04c7d0e675b652f6a246558445c4635a00cfb4d2dc9e18e1cdd60a9bfb3c611d514e4800068377815fc94d59d47281c7bc111906418d39a0167431969eab1416f9038786e985dec7d07c5b51bf56c75d87b9edeb8d3e8e97fcaabf1281e43596a97dc8b1942a491c9e7972e6ee22a6c1aa0eb2011cf348c07d056d1c7c887206a3da355548048fbd4953dd4a45156636e34d1a34cd27bd79b8c7c8965c59ecdad95957f23e658f190cafce4377d2c64aeb5cacaddf0256635de5b88b5b1f23766c56c7eba541efac53080266bb17826b764ad6cd80dd74f87eb745ac615f63679ee6f9d8f832850f4739fb2d1f1cee9040356b230768bf05ad86f01fabd6a940a10123b217890583109c4ac8cb064f02014a21541444c64568c4d9429153cd40d8326703e70bf82931ec1a8adb115b79265b0987a73b50a35ee722dd0d7eeb376cc122a6f38e10b8dd6396f6720df68ce6becfa1cea56246985f9bfa3e102a851fd988fbbc529e90ea49d78d7d8ed52b5458cbcb1df76d9e25722e969fc21765fb7184118e98b52efe4cfa4a6668a4b87814f0ccf4386f3590950ae2b2e6f7d77328f7caa8dc733ddedb865aa20582cc6f9ce90a0b32efccb5a029e9f8f973764b23f77c916305750f2d94681abcb7ad7bf65147714dc5af0a782ca9e75220fa6e2920ed7f0628d5ca77ab6ebc53a79787b491268eb562e35c90b50133f39df4331bc164792c69e4149d1fd6b2a9b3af4691529bbc5dce3414d4d636552565f5955c9ed5003771eaafa8f5356e85995ea8eb37865dc9e3f4c098d1f60c4f0bcaf89f531c16d5e92acb2f5b0958a1c4dc3d4d0f76da0e06de645221c94eca09fb54b6a44558209c058ceee4e0bea26b2a54d4ab659ad4346b67f5e4d3cadfab26799d58d14e9579cc6772cb03082089d4771478c59ec838cca230e398f67b7f9dbbff9ada51d20040b2ece6ca3979447e9061138408377470e89eed073fd79c2b49384d7d34554e8d452887180b9fbb1d85fe24136fd923837b7d4911f18dc25b88b14b994c000b0f02e7c271bf4e880348885dee153c80e19c930e07c8a82d81f0dfa7d08c1ecf6f922ad32dd4fa3e8951e0c9a067d090c7cacc297af6d5201f060d7cf7dcac09213c163a924ed791dc406c2a1fb37430f0a1f5545794d2ec3744a2c32fb9e3d92b2ebbc5f013fbe04bff63c25b85d6da96b1bb4f06e001e166de610026ffe092167aaf1aedd09dcc0a45760bb8891f6605c9663175348ce2435dbcd7937093fe6658817fc0e42559d2828324000d9f39d8b48a50d882f357f69599bb6b54ae801530392655a6ec08655b8ba16980b418999f4ee625da63ff6458195cd0d7a7c85eb9c02c6b951502f08415046b75a1f3740074be26da2305b68e090fb3ab250822cf75c8b07995453a70797d40d2bb369ba40dca7558b625fb2c3f5306ca897a5fbc22edb00d4a749d1ed9e9b2037beb8410bc13cc2747718aac485c", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x48140, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'fl512\x00', [0x4f27, 0x100, 0x2, 0xd, 0x5, 0x1, 0x8, 0x4000007, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x0, 0x20001, 0x6, 0x101, 0x800ea, 0x80000000, 0x5, 0x8, 0x89, 0xcaa7, 0x0, 0x7b, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4}) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) landlock_create_ruleset(&(0x7f00000001c0)={0x4080, 0x3, 0x1}, 0x18, 0xba2f2605bdbd916d) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) 11.289929336s ago: executing program 2 (id=1815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)='u', 0x1}], 0x1}}], 0x1, 0x4c040) (fail_nth: 12) 11.147535608s ago: executing program 2 (id=1816): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000500)=@v2={0x2000000, [{0x8}, {0x7fff, 0xcd15}]}, 0x14, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfff, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x81, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x6, &(0x7f0000000180)=[{0xd, 0x7, 0x8, 0xe54a}, {0x6, 0x2, 0x80, 0x7ff}, {0xfffe, 0xf7, 0xc, 0x7}, {0x10, 0x3, 0x0, 0x7ba}, {0x7, 0x1, 0x64, 0x2}, {0x7, 0x2, 0x40, 0xee4}]}, 0x8) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 2.569242713s ago: executing program 4 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00007b1000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0x2da0f000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, r5, 0x2316739cd6f9b78d, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xec}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2ad0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4d}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x40) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) 2.568809869s ago: executing program 2 (id=1830): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x1, 0x4) read$alg(r3, &(0x7f0000000000)=""/30, 0x1e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0x10001) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, 0x0, 0x0, 0x20004f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.568562557s ago: executing program 3 (id=1831): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000140)=@mmap={0x8, 0x8, 0x4, 0x1, 0x1, {}, {0x5, 0x32ff3581ba874129, 0x8, 0x5, 0x4, 0x6, "194d7267"}, 0x3, 0x1, {}, 0x8e}) r2 = socket(0xb, 0x3, 0x0) r3 = syz_io_uring_setup(0x72d6, &(0x7f00000003c0)={0x0, 0x727b, 0x8, 0x3, 0x254}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x80010, 0xffffffffffffffff, 0x23a78000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x50, 0x2000, @fd=r2, 0x4, &(0x7f00000019c0)=[{&(0x7f00000004c0)="cd8900e8979c3757860d214e8d24c4533b96fc5fe2db00b00f0da000b3456c0f18b03cf436325a914aac8fb36c5bf729dcda561e547a40864a5e36da7ecdc4bcf40c680560dd9f744fb844a33c5b94985c32074e02b45333d54249bd9bce04fffc7f8b25644318e7bdb3e6877ef7e79d2d680ff0c68d14babc6f9bb49586920b71252f20a3a43df5a61d988b0f0129b94b05c690f598f4d6058befc7ff5118679e72dd07adee276fc7a57be666ace5d0320fe8e90cc992d5f0e2595e48c8aa3a9e8d8e448e2b50b2fc91d700dff9f02a6fd8be8dc0fc55fd63f4f1db28", 0xdd}, {&(0x7f0000000680)="514a9044023f5dabe5e4d42bd5e38b2646642175825955ca5f26485c5a59f389327da2c391e9e94db6ee9ca99669c6861a471a5d1cfb56b0b34f52c6b1394238de4f2a654435e7ad25233f8f0163afa78dafc820c30305713313ff3b05aedbfbb0acf8e9294de102da19215b5cedfccb5a75eb0be99a6752a8e9699cfd2c156f6875807ab5e9d0bcf9428461bf1f1179339d26bc51e94eebddf5ef0e583fabab598134933a95bfe3d5a7981113e748c3828e8973b9f9caa55e44a72927850a1ac54633ac0bcd", 0xc6}, {&(0x7f00000001c0)="af3df9691ef2c81dec1a55c408f352a7f335fd7dd19721ca9a852d01ad6c4802ec34eafbf2b32ee76ea17941bcd7a04a8b78b44a9e1df3b450", 0x39}, {&(0x7f00000005c0)="856757b53b949209bcd59522fc1f7180f9ecd245ed3a32bf888f3cfaffc3b18a8870808317a13d63de960aef944ca9764c9067d08019ad", 0x37}, {&(0x7f0000000780)="6c3d532e51b7afb0f61571cdaf424960c71193ba218cc8b9ba040bdb5156986ab1134b5ce7c128174ddc2cd8973da862b5afa3886be5598417be36b6dc5703caca545a5e82a721f1ed5fca37f6c1c17f510565d56255b69adfc99a4238a72c2e2a2a6f915ceeab7a98986da95c6950698885b0a0880e7a1c09420c8216dfd8a43dcfea93ea50596e1a5da3e7e485bb1d664c", 0x92}, {&(0x7f0000000840)="605e00ee2e836dd9c76d1dee48a9127f98dcf0b0068e7bb4f5656fc489d98a4cba156728b79ea0ca718efd2453178e451d7eb17ebd", 0x35}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="28bee6cdf84c047454dfc89be65d99629ccd18232f7523217c473db1e1c7b3962f611cfadca6f5c2d483dd6d0275d8c52986acec9837b323be5da09169ea61d36eb3a2f1d80c9c0062eb974d818e36312601b7f5b5b42a457a1e3216ec5db4e9b1b3ac3ef9e5e5b08cb51dd85e6e6a7b9dc19b978ae37585dc5a54192a5f085102b276d1b5bbe16cc78c05372518", 0x8e}, {&(0x7f0000001940)="f403b4c4357d4a22030ccc711fb3617137735d2847faf0d9ad63f5d99ef0a5f2e1018d21eca50d917a662b13ff311030976ea6ba084c9325aa85e356896f8f6e0285cd6a0a090d3d6781451f39c1ff521eb94a0d2be3da18ca15284a0e160f72", 0x60}], 0x9, 0x8, 0x1, {0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000300)={[0xfffffffb, 0x6]}, 0x8, 0x0) io_uring_enter(r3, 0x6827, 0xd4f7, 0x10, &(0x7f0000000340)={[0x1, 0x10001]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r6, 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x289c0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x7fffffff, 0x0) io_uring_enter(r3, 0x26c8, 0x0, 0x1, 0x0, 0x10) 1.681902476s ago: executing program 3 (id=1834): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x4238, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x19}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000007c0), 0x0) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8, @ANYBLOB="2008010800040000"], 0x20}}, 0x4084) r9 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r9, &(0x7f0000000480)=""/105, 0x69) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0xf0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x640, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0xf, 0x4, 0x1, 0x0, 0x3}) 1.502023636s ago: executing program 4 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x4040140) 1.429427758s ago: executing program 4 (id=1836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000001280)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.379421386s ago: executing program 3 (id=1838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) getpid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 1.377051146s ago: executing program 4 (id=1839): socket(0xa, 0x3, 0x3a) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x3d13, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x8800}, 0x80) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000000c0)=0x100000001, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r7, 0x6, 0x2000, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2810}, 0x40080) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') get_thread_area(0x0) 1.374547394s ago: executing program 3 (id=1840): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) ftruncate(r9, 0x6) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.278962489s ago: executing program 4 (id=1841): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_emit_ethernet(0x31a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x2e4, 0x3a, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x22, 0x10, "0cc4bf008f04a462eaedb9cfa50205ff096bf89e5fa70d52e959e53188fe7634e4face388bcf7787cae17d2018582b5b04edf206a50f4a56ab3c3b8f60f72f133261ddfad1328275b2d587e7f0d84acbfbfe645f33a6887b5464d5626be8fc2be6add5d0dd08b32f88f6d66dff90dcbcc6b11dec7a41d0fb6cfce492b9e891f9fd"}, {0x3, 0x3, "89da6d142ec298a905716ac84db6b7d878495e1c2d34"}, {0x18, 0x19, "ab9ae687230022440f454f4257fee9cb68bfaa30d73f3eaddea8d00b2305a0ff73b28e3d300f913c26cdecbb93a5164d072150de7c18f35bdc1ceeff5951fd9935824b25d14efd19c840efa4173f48744a8b3d987bfd29e18c80ec8ed41929305bb174f4cbd384b0604c18e309782cbb0a2a27f2468af335aaf35851578c62f6507dbe737ac7a1e146f9824c16ff1960fc412e6eece0e42e382622dd259977205b1cf87554f53de6a0bfb830b6f0f26bebc3d4cdcaf5ac93304498f8ac27dd3b56a6543ac74e2f07959d"}, {0x4, 0x1c, "5e01b44326d95399141b56802268c565ab3a44abf1cf7cd91e08ea8ecfa1b71bd185f16f2a387d2b40e300d8f9d18562db7d709a1183ab8a6a56bbe63c8b1df3d0081ecd0498a0b84a36b59474bc7bd7ae7d7d0e55f6a0dd42a050007787d231dc1a459c2a5496db7b65f27fda288b43ce4d9cda14ce1e799524f09bf430b45bc992bf6b5d5c63c1b1e2665387a42fbc924b1762b460c95b91fa1a4f34eea77fb854f7d491b44253575dea87eec3d05933751cc0e7f816e4b65bfb0a21aa0af1a7f433fe86a0827699f73c62aa885e13df65bdf01523ee2b132033a67dffaf4b"}, {0x19, 0x10, "0c53b29958393c7ab0f2fbef6737b7b7af7b39334a9802171f7c9bfdb4a62420346090941438f8a166546c2e793b0e085673b16d46b2840f5bcc0bba859b562d0a0b3a1637fdc0317eb1ec0307672200bf641c182dccd3f836e5968206ecee75590df65353e6cdea60edd1d9bb4d55fb6e0db7db12725a26d96852f04d787a52da32972b32"}]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 1.11927147s ago: executing program 2 (id=1842): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/64, 0x40) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.057309986s ago: executing program 2 (id=1843): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0, 0x800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x4876, &(0x7f0000000340)={0x0, 0xbdf1, 0x800, 0x1, 0xb3}, &(0x7f00000001c0), &(0x7f00000003c0)) clock_gettime(0x1, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r3, &(0x7f00000007c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000300)={{r4, r5/1000+10000}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 449.845508ms ago: executing program 1 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0xff, 0x2}, 0xff}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xee0000}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 449.611822ms ago: executing program 1 (id=1846): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 433.935927ms ago: executing program 3 (id=1847): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = io_uring_setup(0x4238, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x19}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000007c0), 0x0) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8, @ANYBLOB="2008010800040000"], 0x20}}, 0x4084) r9 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r9, &(0x7f0000000480)=""/105, 0x69) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0xf0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x640, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0xf, 0x4, 0x1, 0x0, 0x3}) 310.114268ms ago: executing program 1 (id=1848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000001280)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 247.968226ms ago: executing program 1 (id=1849): socket(0xa, 0x3, 0x3a) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x3d13, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x8800}, 0x80) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000000c0)=0x100000001, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r7, 0x6, 0x2000, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2810}, 0x40080) get_thread_area(0x0) 247.663685ms ago: executing program 1 (id=1850): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) close(r0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x80020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000180)='./control\x00') write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) 198.684359ms ago: executing program 1 (id=1851): openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000000c0)={0x190003, 0x0, {[0x100000000000006, 0x1000, 0x80, 0xf000000, 0x8001, 0xffffffffffffffff, 0x40, 0xe]}}) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sched_getattr(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r7, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x117}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)=""/228, 0xe4}], 0x1}, 0x7}], 0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 139.748548ms ago: executing program 2 (id=1852): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) connect$qrtr(r1, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x10009, 0x4000008, 0x40}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1, 0x0, 0x0, 0x1000000}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r10, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0xfffffffd, 0x4000}) 139.360655ms ago: executing program 3 (id=1853): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000540)={0x3, @sliced={0xf, [0x8000, 0x2, 0x8, 0x200, 0xd, 0x1, 0x4d87, 0xd, 0x4, 0x9, 0x7ff, 0x59da, 0x30, 0x2, 0x6, 0x7, 0xda, 0x989c, 0x3, 0x3, 0x7, 0xa12d, 0x400, 0x9, 0x5, 0x3, 0xf3bb, 0x9, 0x5, 0x9, 0x7027, 0x9, 0x4cd4, 0x3846, 0xf, 0x6, 0xff7f, 0x4, 0x8, 0x800, 0x4, 0xfa, 0x5, 0x3, 0x99c8, 0x1ff, 0x1, 0x700], 0x1}}) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r11, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r11, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0xfffffffd, 0x4000}) 0s ago: executing program 4 (id=1854): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c0022000600000000000000080004008100000005002400010000000500160001000000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x9c, 0x2c, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4, 0x1}, {0xd, 0x5}, {0x9, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_U32_HASH={0x8, 0x2, 0x274}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mlockall(0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 0s ago: executing program 4 (id=1856): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1001, 0x20000, 0x5, 0xfffffff8, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 1262" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 407.441209][ T40] audit: type=1326 audit(1760154898.364:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 407.476185][ T40] audit: type=1326 audit(1760154898.364:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 407.484026][ T40] audit: type=1326 audit(1760154898.364:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1262" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 408.084971][T11298] vhci_hcd: connection reset by peer [ 408.087332][ T7583] vhci_hcd: stop threads [ 408.088824][ T7583] vhci_hcd: release socket [ 408.090663][ T7583] vhci_hcd: disconnect device [ 408.134869][T11323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1266'. [ 408.162672][T11326] netlink: 'syz.1.1267': attribute type 27 has an invalid length. [ 408.185372][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.188486][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.195110][T11326] bond_slave_0: left promiscuous mode [ 408.203039][T11326] bond_slave_1: left promiscuous mode [ 408.255810][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.264310][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.350181][T11326] vlan2: left promiscuous mode [ 408.352284][T11326] bond2: left promiscuous mode [ 408.354431][T11326] vlan2: left allmulticast mode [ 408.356532][T11326] bond2: left allmulticast mode [ 408.377031][ T7579] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.381477][ T7579] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.387198][ T7579] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.391652][ T7579] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.753930][T11329] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 408.756859][T11329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.760912][T11329] vhci_hcd vhci_hcd.0: Device attached [ 409.015849][T11331] vhci_hcd: connection closed [ 409.016094][ T7579] vhci_hcd: stop threads [ 409.019086][ T7579] vhci_hcd: release socket [ 409.021130][ T7579] vhci_hcd: disconnect device [ 409.037930][ T53] usb 40-1: enqueue for inactive port 0 [ 409.064859][T11336] input: syz1 as /devices/virtual/input/input115 [ 410.320398][ T53] usb usb40-port1: attempt power cycle [ 410.355650][T11348] FAULT_INJECTION: forcing a failure. [ 410.355650][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 410.360471][T11348] CPU: 0 UID: 0 PID: 11348 Comm: syz.1.1270 Not tainted syzkaller #0 PREEMPT(full) [ 410.360486][T11348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 410.360492][T11348] Call Trace: [ 410.360496][T11348] [ 410.360500][T11348] dump_stack_lvl+0x16c/0x1f0 [ 410.360518][T11348] should_fail_ex+0x512/0x640 [ 410.360531][T11348] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 410.360543][T11348] should_failslab+0xc2/0x120 [ 410.360557][T11348] kmem_cache_alloc_noprof+0x75/0x6e0 [ 410.360567][T11348] ? down_read+0x13d/0x480 [ 410.360580][T11348] ? ep_ptable_queue_proc+0x5b/0x280 [ 410.360600][T11348] ? ep_ptable_queue_proc+0x5b/0x280 [ 410.360616][T11348] ep_ptable_queue_proc+0x5b/0x280 [ 410.360633][T11348] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 410.360649][T11348] comedi_poll+0x339/0xa30 [ 410.360666][T11348] ? __pfx_comedi_poll+0x10/0x10 [ 410.360681][T11348] ep_item_poll+0x141/0x1f0 [ 410.360692][T11348] do_epoll_ctl+0x1fae/0x3790 [ 410.360709][T11348] ? __pfx_do_epoll_ctl+0x10/0x10 [ 410.360719][T11348] ? find_held_lock+0x2b/0x80 [ 410.360731][T11348] ? __might_fault+0xe3/0x190 [ 410.360740][T11348] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 410.360762][T11348] ? __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 410.360773][T11348] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 410.360785][T11348] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 410.360798][T11348] ? rcu_is_watching+0x12/0xc0 [ 410.360811][T11348] __do_fast_syscall_32+0x7c/0x300 [ 410.360825][T11348] do_fast_syscall_32+0x32/0x80 [ 410.360838][T11348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.360851][T11348] RIP: 0023:0xf70ad579 [ 410.360860][T11348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 410.360870][T11348] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff [ 410.360880][T11348] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 410.360886][T11348] RDX: 0000000000000003 RSI: 00000000800000c0 RDI: 0000000000000000 [ 410.360892][T11348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.360898][T11348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 410.360904][T11348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.360918][T11348] [ 410.907673][ T53] usb usb40-port1: unable to enumerate USB device [ 411.126241][ T53] IPVS: starting estimator thread 0... [ 411.217888][T11363] IPVS: using max 27 ests per chain, 64800 per kthread [ 412.327255][ T61] usb 38-1: device descriptor read/8, error -110 [ 412.353024][T11388] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 412.355083][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.394097][T11388] vhci_hcd vhci_hcd.0: Device attached [ 412.507365][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 412.507375][ T40] audit: type=1326 audit(1760154903.464:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.516314][ T40] audit: type=1326 audit(1760154903.474:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.523457][ T40] audit: type=1326 audit(1760154903.474:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.533012][ T40] audit: type=1326 audit(1760154903.474:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.540337][ T40] audit: type=1326 audit(1760154903.474:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.549307][ T40] audit: type=1326 audit(1760154903.474:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.558540][ T40] audit: type=1326 audit(1760154903.474:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.565130][ T40] audit: type=1326 audit(1760154903.474:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.572030][ T40] audit: type=1326 audit(1760154903.474:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.578943][ T40] audit: type=1326 audit(1760154903.474:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.2.1282" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 412.667344][ T61] usb 38-1: SetAddress Request (47) to port 0 [ 412.669652][ T61] usb 38-1: new SuperSpeed USB device number 47 using vhci_hcd [ 412.723011][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 412.884374][T11402] fuse: Bad value for 'fd' [ 412.936625][T11402] fuse: Bad value for 'fd' [ 412.983644][T11389] vhci_hcd: connection reset by peer [ 412.988034][ T7579] vhci_hcd: stop threads [ 412.989735][ T7579] vhci_hcd: release socket [ 412.991629][ T7579] vhci_hcd: disconnect device [ 414.906408][T11427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 414.908469][T11427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 414.923067][T11427] vhci_hcd vhci_hcd.0: Device attached [ 415.126906][T11440] tipc: Cannot configure node identity twice [ 415.269820][T11441] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 415.271897][T11441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 415.292975][T11441] vhci_hcd vhci_hcd.0: Device attached [ 415.339830][ T5977] usb 44-1: SetAddress Request (59) to port 0 [ 415.341793][ T5977] usb 44-1: new SuperSpeed USB device number 59 using vhci_hcd [ 415.906908][T11429] vhci_hcd: connection reset by peer [ 415.910019][ T7583] vhci_hcd: stop threads [ 415.912220][ T7583] vhci_hcd: release socket [ 415.917631][ T7583] vhci_hcd: disconnect device [ 415.927178][T11442] vhci_hcd: connection closed [ 415.927564][ T13] vhci_hcd: stop threads [ 415.930635][ T13] vhci_hcd: release socket [ 415.932520][ T13] vhci_hcd: disconnect device [ 417.381824][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 417.467959][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 417.638261][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 417.777302][ T61] usb 38-1: device descriptor read/8, error -110 [ 417.888225][ T61] usb usb38-port1: attempt power cycle [ 418.530548][ T61] usb usb38-port1: unable to enumerate USB device [ 419.260428][T11502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 419.262274][T11502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.285630][T11502] vhci_hcd vhci_hcd.0: Device attached [ 419.354472][T11506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 419.356658][T11506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.359418][T11506] vhci_hcd vhci_hcd.0: Device attached [ 419.574880][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 419.853517][T11507] vhci_hcd: connection closed [ 419.853697][ T13] vhci_hcd: stop threads [ 419.854041][ T61] usb 42-1: SetAddress Request (59) to port 0 [ 419.855284][ T13] vhci_hcd: release socket [ 419.856857][ T61] usb 42-1: new SuperSpeed USB device number 59 using vhci_hcd [ 419.858894][ T13] vhci_hcd: disconnect device [ 419.943885][T11522] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 419.946186][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.949480][T11522] vhci_hcd vhci_hcd.0: Device attached [ 420.307198][ T6022] usb 40-1: SetAddress Request (68) to port 0 [ 420.309174][ T6022] usb 40-1: new SuperSpeed USB device number 68 using vhci_hcd [ 420.462751][T11503] vhci_hcd: connection reset by peer [ 420.464628][ T1146] vhci_hcd: stop threads [ 420.466015][ T1146] vhci_hcd: release socket [ 420.467969][ T1146] vhci_hcd: disconnect device [ 420.577248][ T5977] usb 44-1: device descriptor read/8, error -110 [ 420.769223][T11523] vhci_hcd: connection reset by peer [ 420.771165][ T7579] vhci_hcd: stop threads [ 420.772591][ T7579] vhci_hcd: release socket [ 420.774075][ T7579] vhci_hcd: disconnect device [ 420.998490][ T5977] usb usb44-port1: attempt power cycle [ 421.032828][T11536] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1310'. [ 421.444914][T11541] tipc: Cannot configure node identity twice [ 421.492996][T11542] tipc: Cannot configure node identity twice [ 421.845049][ T5977] usb usb44-port1: unable to enumerate USB device [ 421.898297][T11551] FAULT_INJECTION: forcing a failure. [ 421.898297][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 421.902224][T11551] CPU: 3 UID: 0 PID: 11551 Comm: syz.1.1314 Not tainted syzkaller #0 PREEMPT(full) [ 421.902238][T11551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 421.902244][T11551] Call Trace: [ 421.902248][T11551] [ 421.902252][T11551] dump_stack_lvl+0x16c/0x1f0 [ 421.902269][T11551] should_fail_ex+0x512/0x640 [ 421.902282][T11551] ? fs_reclaim_acquire+0xae/0x150 [ 421.902298][T11551] should_failslab+0xc2/0x120 [ 421.902312][T11551] __kmalloc_noprof+0xdd/0x880 [ 421.902329][T11551] ? tomoyo_encode2+0x100/0x3e0 [ 421.902342][T11551] ? tomoyo_encode2+0x100/0x3e0 [ 421.902351][T11551] tomoyo_encode2+0x100/0x3e0 [ 421.902363][T11551] tomoyo_encode+0x29/0x50 [ 421.902373][T11551] tomoyo_mount_acl+0x144/0x850 [ 421.902382][T11551] ? bpf_ksym_find+0x124/0x1c0 [ 421.902394][T11551] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.902408][T11551] ? is_bpf_text_address+0x94/0x1a0 [ 421.902424][T11551] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 421.902432][T11551] ? unwind_get_return_address+0x59/0xa0 [ 421.902459][T11551] ? tomoyo_domain+0xbb/0x150 [ 421.902471][T11551] ? tomoyo_profile+0x47/0x60 [ 421.902484][T11551] tomoyo_mount_permission+0x16d/0x420 [ 421.902494][T11551] ? tomoyo_mount_permission+0x14f/0x420 [ 421.902504][T11551] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 421.902522][T11551] security_sb_mount+0x9b/0x260 [ 421.902538][T11551] path_mount+0x158/0x23a0 [ 421.902552][T11551] ? __pfx_path_mount+0x10/0x10 [ 421.902565][T11551] ? kmem_cache_free+0x2d4/0x6c0 [ 421.902575][T11551] ? putname+0x154/0x1a0 [ 421.902591][T11551] ? putname+0x154/0x1a0 [ 421.902605][T11551] ? __ia32_sys_mount+0x291/0x310 [ 421.902617][T11551] __ia32_sys_mount+0x291/0x310 [ 421.902629][T11551] ? __pfx___ia32_sys_mount+0x10/0x10 [ 421.902642][T11551] ? rcu_is_watching+0x12/0xc0 [ 421.902656][T11551] __do_fast_syscall_32+0x7c/0x300 [ 421.902670][T11551] do_fast_syscall_32+0x32/0x80 [ 421.902683][T11551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.902696][T11551] RIP: 0023:0xf70ad579 [ 421.902704][T11551] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 421.902714][T11551] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 421.902724][T11551] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000040 [ 421.902730][T11551] RDX: 00000000800000c0 RSI: 0000000000a08410 RDI: 0000000000000000 [ 421.902736][T11551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.902742][T11551] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 421.902748][T11551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.902761][T11551] [ 422.852399][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 423.582705][T11585] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 423.768755][T11590] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1317'. [ 424.266451][T11578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 424.269264][T11578] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 424.272842][T11578] vhci_hcd vhci_hcd.0: Device attached [ 424.748253][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 424.787364][ T1134] usb 44-1: SetAddress Request (63) to port 0 [ 424.822548][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 424.829200][ T1134] usb 44-1: new SuperSpeed USB device number 63 using vhci_hcd [ 424.830605][T11604] pimreg: entered allmulticast mode [ 424.887236][ T61] usb 42-1: device descriptor read/8, error -110 [ 424.965322][T11594] vhci_hcd: connection reset by peer [ 424.967385][ T60] vhci_hcd: stop threads [ 424.968750][ T60] vhci_hcd: release socket [ 424.970218][ T60] vhci_hcd: disconnect device [ 425.087310][ T1022] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 425.247212][ T1022] usb 6-1: Using ep0 maxpacket: 16 [ 425.251281][ T1022] usb 6-1: config 0 has an invalid interface number: 252 but max is 1 [ 425.254595][ T1022] usb 6-1: config 0 has an invalid interface number: 220 but max is 1 [ 425.258775][ T1022] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 425.262907][ T1022] usb 6-1: config 0 has no interface number 0 [ 425.265380][ T1022] usb 6-1: config 0 has no interface number 1 [ 425.268360][ T1022] usb 6-1: config 0 interface 252 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 425.272848][ T1022] usb 6-1: config 0 interface 252 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 425.277829][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 425.282261][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 425.286442][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 425.291279][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 425.296024][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has a duplicate endpoint with address 0x87, skipping [ 425.300671][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 425.304616][ T1022] usb 6-1: config 0 interface 252 altsetting 6 endpoint 0xD has invalid maxpacket 1088, setting to 64 [ 425.308966][ T1022] usb 6-1: config 0 interface 252 altsetting 6 bulk endpoint 0xF has invalid maxpacket 64 [ 425.312091][ T1022] usb 6-1: config 0 interface 252 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 425.315503][ T1022] usb 6-1: config 0 interface 252 altsetting 6 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 425.320211][ T1022] usb 6-1: config 0 interface 220 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 425.323524][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 425.326954][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 425.330710][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 425.334251][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 425.337776][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 425.341055][ T1022] usb 6-1: config 0 interface 220 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 425.344387][ T1022] usb 6-1: config 0 interface 220 altsetting 4 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 425.348657][ T1022] usb 6-1: config 0 interface 252 has no altsetting 0 [ 425.350745][ T1022] usb 6-1: config 0 interface 220 has no altsetting 0 [ 425.357510][ T1022] usb 6-1: New USB device found, idVendor=055f, idProduct=c005, bcdDevice= b.45 [ 425.360943][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.363718][ T1022] usb 6-1: Product: â° [ 425.365034][ T1022] usb 6-1: Manufacturer: à “ [ 425.366498][ T1022] usb 6-1: SerialNumber: ã Š [ 425.370112][ T61] usb usb42-port1: attempt power cycle [ 425.370383][ T1022] usb 6-1: config 0 descriptor?? [ 425.377297][ T6022] usb 40-1: device descriptor read/8, error -110 [ 425.384268][T11605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.529456][T11611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 425.532234][T11611] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.535894][T11611] vhci_hcd vhci_hcd.0: Device attached [ 425.590569][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.594551][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.598754][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.602475][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.606488][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.610320][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.614217][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.617926][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.621863][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.625465][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.662033][ T1022] usb 6-1: USB disconnect, device number 9 [ 425.797272][ T61] usb 42-1: SetAddress Request (61) to port 0 [ 425.799060][ T61] usb 42-1: new SuperSpeed USB device number 61 using vhci_hcd [ 425.807661][ T6022] usb usb40-port1: attempt power cycle [ 426.090989][T11612] vhci_hcd: connection reset by peer [ 426.093665][ T1143] vhci_hcd: stop threads [ 426.095063][ T1143] vhci_hcd: release socket [ 426.096543][ T1143] vhci_hcd: disconnect device [ 426.377940][ T6022] usb usb40-port1: unable to enumerate USB device [ 429.927493][ T1134] usb 44-1: device descriptor read/8, error -110 [ 430.317764][ T1134] usb usb44-port1: attempt power cycle [ 430.877751][ T1134] usb usb44-port1: unable to enumerate USB device [ 430.897265][ T61] usb 42-1: device descriptor read/8, error -110 [ 431.297890][ T61] usb usb42-port1: unable to enumerate USB device [ 432.459369][T11641] cgroup: Invalid name [ 432.465509][T11641] bond0: (slave vlan3): Opening slave failed [ 434.803846][T11659] FAULT_INJECTION: forcing a failure. [ 434.803846][T11659] name failslab, interval 1, probability 0, space 0, times 0 [ 434.832449][T11659] CPU: 3 UID: 0 PID: 11659 Comm: syz.1.1331 Not tainted syzkaller #0 PREEMPT(full) [ 434.832466][T11659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.832473][T11659] Call Trace: [ 434.832477][T11659] [ 434.832481][T11659] dump_stack_lvl+0x16c/0x1f0 [ 434.832498][T11659] should_fail_ex+0x512/0x640 [ 434.832512][T11659] ? fs_reclaim_acquire+0xae/0x150 [ 434.832527][T11659] should_failslab+0xc2/0x120 [ 434.832542][T11659] __kmalloc_noprof+0xdd/0x880 [ 434.832559][T11659] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 434.832573][T11659] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 434.832583][T11659] tomoyo_realpath_from_path+0xc2/0x6e0 [ 434.832595][T11659] ? tomoyo_profile+0x47/0x60 [ 434.832609][T11659] tomoyo_path_number_perm+0x245/0x580 [ 434.832624][T11659] ? tomoyo_path_number_perm+0x237/0x580 [ 434.832641][T11659] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.832671][T11659] ? find_held_lock+0x2b/0x80 [ 434.832682][T11659] ? hook_file_ioctl_common+0x145/0x410 [ 434.832702][T11659] ? __fget_files+0x20e/0x3c0 [ 434.832715][T11659] security_file_ioctl_compat+0x9b/0x240 [ 434.832733][T11659] __ia32_compat_sys_ioctl+0xc3/0x370 [ 434.832751][T11659] __do_fast_syscall_32+0x7c/0x300 [ 434.832766][T11659] do_fast_syscall_32+0x32/0x80 [ 434.832778][T11659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.832792][T11659] RIP: 0023:0xf70ad579 [ 434.832801][T11659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.832811][T11659] RSP: 002b:00000000f545b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 434.832821][T11659] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c05064a7 [ 434.832828][T11659] RDX: 0000000080001480 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.832834][T11659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.832840][T11659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 434.832846][T11659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.832859][T11659] [ 434.832863][T11659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 435.872470][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 435.872488][ T40] audit: type=1326 audit(1760154926.834:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.885956][ T40] audit: type=1326 audit(1760154926.834:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.894394][ T40] audit: type=1326 audit(1760154926.834:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.915044][ T40] audit: type=1326 audit(1760154926.834:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.924992][ T40] audit: type=1326 audit(1760154926.834:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.934561][ T40] audit: type=1326 audit(1760154926.834:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.944558][ T40] audit: type=1326 audit(1760154926.834:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.954947][ T40] audit: type=1326 audit(1760154926.834:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.964292][ T40] audit: type=1326 audit(1760154926.834:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 435.975678][ T40] audit: type=1326 audit(1760154926.834:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.3.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 436.082146][T11684] overlayfs: failed to resolve './file1': -2 [ 436.521714][T11696] overlay: Unknown parameter 'subj_user' [ 436.950836][T11702] input: syz1 as /devices/virtual/input/input116 [ 438.111200][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 438.333905][T11747] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 438.336874][T11747] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 438.845915][T11749] FAULT_INJECTION: forcing a failure. [ 438.845915][T11749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.851698][T11749] CPU: 0 UID: 0 PID: 11749 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(full) [ 438.851720][T11749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.851729][T11749] Call Trace: [ 438.851735][T11749] [ 438.851741][T11749] dump_stack_lvl+0x16c/0x1f0 [ 438.851762][T11749] should_fail_ex+0x512/0x640 [ 438.851785][T11749] _copy_from_user+0x2e/0xd0 [ 438.851805][T11749] snd_timer_user_params.isra.0+0xf5/0x920 [ 438.851823][T11749] ? __pfx_snd_timer_user_params.isra.0+0x10/0x10 [ 438.851849][T11749] ? kasan_quarantine_put+0x10a/0x240 [ 438.851866][T11749] ? lockdep_hardirqs_on+0x7c/0x110 [ 438.851888][T11749] __snd_timer_user_ioctl.isra.0+0x12ab/0x2520 [ 438.851907][T11749] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 438.851923][T11749] ? rcu_is_watching+0x12/0xc0 [ 438.851939][T11749] ? trace_contention_end+0xdd/0x130 [ 438.851976][T11749] ? __mutex_lock+0x1c5/0x1060 [ 438.851993][T11749] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 438.852023][T11749] ? __pfx___mutex_lock+0x10/0x10 [ 438.852047][T11749] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 438.852080][T11749] snd_timer_user_ioctl_compat+0x253/0x410 [ 438.852097][T11749] ? __pfx_snd_timer_user_ioctl_compat+0x10/0x10 [ 438.852118][T11749] ? __fget_files+0x20e/0x3c0 [ 438.852137][T11749] ? __pfx_snd_timer_user_ioctl_compat+0x10/0x10 [ 438.852155][T11749] __ia32_compat_sys_ioctl+0x23f/0x370 [ 438.852179][T11749] __do_fast_syscall_32+0x7c/0x300 [ 438.852200][T11749] do_fast_syscall_32+0x32/0x80 [ 438.852219][T11749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.852238][T11749] RIP: 0023:0xf70ad579 [ 438.852250][T11749] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 438.852265][T11749] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 438.852281][T11749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505412 [ 438.852291][T11749] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.852300][T11749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.852309][T11749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 438.852318][T11749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.852340][T11749] [ 439.610022][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.883212][T11778] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 440.049430][T11784] netlink: 'syz.0.1361': attribute type 10 has an invalid length. [ 440.823027][T11778] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 440.824372][T11780] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 440.930341][T11797] fuse: Bad value for 'fd' [ 441.803481][T11810] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 441.850991][T11810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.854424][T11810] bond5: (slave bond6): making interface the new active one [ 441.857368][T11810] bond5: (slave bond6): Enslaving as an active interface with an up link [ 442.203450][T11835] evm: overlay not supported [ 443.359180][T11853] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 443.361249][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 443.372502][T11853] vhci_hcd vhci_hcd.0: Device attached [ 443.657673][ T6004] usb 44-1: SetAddress Request (67) to port 0 [ 443.659682][ T6004] usb 44-1: new SuperSpeed USB device number 67 using vhci_hcd [ 443.865849][T11858] netlink: 'syz.1.1382': attribute type 1 has an invalid length. [ 443.939758][T11858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.943927][T11858] bond5: (slave bond6): making interface the new active one [ 443.948025][T11858] bond5: (slave bond6): Enslaving as an active interface with an up link [ 444.012283][T11854] vhci_hcd: connection reset by peer [ 444.017442][ T1146] vhci_hcd: stop threads [ 444.018747][ T1146] vhci_hcd: release socket [ 444.020186][ T1146] vhci_hcd: disconnect device [ 444.060860][T11865] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 444.060888][T11864] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 444.086816][T11864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.171091][T11873] tipc: Cannot configure node identity twice [ 444.255111][T11880] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 445.259531][T11893] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 445.328843][T11893] 8021q: adding VLAN 0 to HW filter on device bond12 [ 445.337802][T11893] bond11: (slave bond12): making interface the new active one [ 445.344176][T11893] bond11: (slave bond12): Enslaving as an active interface with an up link [ 445.344931][T11896] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 445.349821][T11896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.352594][T11896] vhci_hcd vhci_hcd.0: Device attached [ 445.895453][T11897] vhci_hcd: connection closed [ 445.895605][ T7579] vhci_hcd: stop threads [ 445.898969][ T7579] vhci_hcd: release socket [ 445.900570][ T7579] vhci_hcd: disconnect device [ 446.412042][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 446.419051][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.591428][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.642167][T11924] trusted_key: encrypted_key: insufficient parameters specified [ 446.665568][T11919] tipc: Cannot configure node identity twice [ 446.775426][T11932] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 446.810555][T11932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.815634][T11932] bond5: (slave bond6): making interface the new active one [ 446.819427][T11932] bond5: (slave bond6): Enslaving as an active interface with an up link [ 446.897941][T11941] lo speed is unknown, defaulting to 1000 [ 446.996197][T11946] random: crng reseeded on system resumption [ 447.061800][T11950] overlayfs: failed to resolve './file0': -2 [ 447.229710][T11952] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1406'. [ 448.229948][T12001] tipc: Cannot configure node identity twice [ 448.594836][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 448.594850][ T40] audit: type=1326 audit(1760154939.554:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.606700][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 448.606719][ T40] audit: type=1326 audit(1760154939.554:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.606745][ T40] audit: type=1326 audit(1760154939.554:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.627015][ T40] audit: type=1326 audit(1760154939.554:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.634525][ T40] audit: type=1326 audit(1760154939.554:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.641157][ T40] audit: type=1326 audit(1760154939.554:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.649112][ T40] audit: type=1326 audit(1760154939.554:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.656886][ T40] audit: type=1326 audit(1760154939.554:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.665354][ T40] audit: type=1326 audit(1760154939.554:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.673513][ T40] audit: type=1326 audit(1760154939.554:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.1.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.796228][ T6004] usb 44-1: device descriptor read/8, error -110 [ 448.822413][T12012] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 448.853037][T12012] 8021q: adding VLAN 0 to HW filter on device bond14 [ 448.856275][T12012] bond13: (slave bond14): making interface the new active one [ 448.859048][T12012] bond13: (slave bond14): Enslaving as an active interface with an up link [ 449.198192][ T6004] usb usb44-port1: attempt power cycle [ 449.707750][T12026] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 449.709833][T12026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 449.712619][T12026] vhci_hcd vhci_hcd.0: Device attached [ 449.788207][ T6004] usb usb44-port1: unable to enumerate USB device [ 449.960130][T12034] tipc: Cannot configure node identity twice [ 450.046793][ T6022] usb 38-1: SetAddress Request (50) to port 0 [ 450.055377][ T6022] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 450.395449][T12027] vhci_hcd: connection reset by peer [ 450.397436][ T1146] vhci_hcd: stop threads [ 450.399252][ T1146] vhci_hcd: release socket [ 450.400818][ T1146] vhci_hcd: disconnect device [ 450.547288][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 450.554895][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 452.567157][T12044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 452.569230][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 452.579005][T12044] vhci_hcd vhci_hcd.0: Device attached [ 452.737205][T12050] lo speed is unknown, defaulting to 1000 [ 452.913094][T12058] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 452.939942][T12058] 8021q: adding VLAN 0 to HW filter on device bond9 [ 452.944009][T12058] bond8: (slave bond9): making interface the new active one [ 452.946514][T12058] bond8: (slave bond9): Enslaving as an active interface with an up link [ 452.999924][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 453.000012][T12063] x_tables: duplicate underflow at hook 3 [ 453.057509][ T1134] usb 44-1: SetAddress Request (71) to port 0 [ 453.059820][ T1134] usb 44-1: new SuperSpeed USB device number 71 using vhci_hcd [ 453.111600][T12071] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.1429' sets config #6 [ 453.139506][T12078] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 453.247446][T12045] vhci_hcd: connection reset by peer [ 453.249667][ T60] vhci_hcd: stop threads [ 453.251711][ T60] vhci_hcd: release socket [ 453.253649][ T60] vhci_hcd: disconnect device [ 454.003285][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.008808][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.012080][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.015437][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.018501][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.038019][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.041238][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.043649][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.046272][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.048955][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.079473][T12103] lo speed is unknown, defaulting to 1000 [ 454.216675][T12111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 454.233231][T12103] chnl_net:caif_netlink_parms(): no params data found [ 454.299728][ T7579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.341797][T12103] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.344101][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.346550][T12103] bridge_slave_0: entered allmulticast mode [ 454.349425][T12103] bridge_slave_0: entered promiscuous mode [ 454.352506][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.354779][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.357024][T12103] bridge_slave_1: entered allmulticast mode [ 454.359702][T12103] bridge_slave_1: entered promiscuous mode [ 454.377959][T12101] Cannot find add_set index 32771 as target [ 454.410131][ T7579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.419433][T12103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.428598][T12103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.467660][T12103] team0: Port device team_slave_0 added [ 454.472262][T12103] team0: Port device team_slave_1 added [ 454.516344][ T7579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.523451][T12103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.525844][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.533983][T12103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.539305][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.539535][T12103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.543439][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.544983][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.545010][T12103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.653074][ T61] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 454.659219][ T7579] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 454.674975][ T7579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.688382][T12103] hsr_slave_0: entered promiscuous mode [ 454.697464][T12103] hsr_slave_1: entered promiscuous mode [ 454.699573][T12103] debugfs: 'hsr0' already exists in 'hsr' [ 454.701418][T12103] Cannot create hsr debugfs directory [ 454.831620][ T61] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.835479][ T61] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.839470][ T61] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.842482][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.860428][T12101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.879215][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.987305][ T7579] bridge_slave_1: left allmulticast mode [ 454.989350][ T7579] bridge_slave_1: left promiscuous mode [ 454.992063][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.008972][ T7579] bridge_slave_0: left allmulticast mode [ 455.011382][ T7579] bridge_slave_0: left promiscuous mode [ 455.014940][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.089945][ T6024] usb 7-1: USB disconnect, device number 16 [ 455.137844][ T6022] usb 38-1: device descriptor read/8, error -110 [ 455.550464][ T6022] usb usb38-port1: attempt power cycle [ 456.073519][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.079630][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.083319][ T7579] bond0 (unregistering): Released all slaves [ 456.087298][T12106] Bluetooth: hci2: command tx timeout [ 456.091299][ T7579] bond1 (unregistering): (slave bond2): Releasing backup interface [ 456.094257][ T7579] bond1 (unregistering): Released all slaves [ 456.127829][ T6022] usb usb38-port1: unable to enumerate USB device [ 456.164017][ T7579] bond2 (unregistering): Released all slaves [ 456.172255][ T7579] bond3 (unregistering): Released all slaves [ 456.178911][ T7579] bond4 (unregistering): Released all slaves [ 456.189665][ T7579] bond5 (unregistering): (slave bond6): Releasing backup interface [ 456.193774][ T7579] bond5 (unregistering): Released all slaves [ 456.275472][ T7579] bond6 (unregistering): Released all slaves [ 456.377537][T12103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.391493][T12103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.484675][T12147] binder: BINDER_SET_CONTEXT_MGR already set [ 456.485494][ T7579] tipc: Left network mode [ 456.485964][T12103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.488334][T12147] binder: 12146:12147 ioctl 4018620d 80000240 returned -16 [ 456.504556][T12103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.534409][T12147] all (unregistering): Released all slaves [ 456.596939][T12151] binder: 12146:12151 ioctl c0306201 800004c0 returned -14 [ 456.603649][T12151] binder: 12146:12151 ioctl c0306201 800001c0 returned -14 [ 456.606390][T12151] binder: 12146:12151 ioctl c018937e 80000180 returned -22 [ 456.609404][T12151] binder: 12146:12151 ioctl c0306201 80004a40 returned -14 [ 456.645446][T12103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.655902][T12103] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.662115][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.664765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.684347][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.687191][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.723078][T12103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.729377][T12103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.008693][T12103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.287819][ T7579] hsr_slave_0: left promiscuous mode [ 457.290620][ T7579] hsr_slave_1: left promiscuous mode [ 457.292833][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.295290][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.306083][ T7579] veth1_macvtap: left promiscuous mode [ 457.308971][ T7579] veth0_macvtap: left promiscuous mode [ 457.310892][ T7579] veth1_vlan: left promiscuous mode [ 457.313271][ T7579] veth0_vlan: left promiscuous mode [ 457.892977][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 457.963624][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 458.100092][ T1134] usb 44-1: device descriptor read/8, error -110 [ 458.177748][T12106] Bluetooth: hci2: command tx timeout [ 458.479819][ T7204] lo speed is unknown, defaulting to 1000 [ 458.481656][ T7204] infiniband syz0: ib_query_port failed (-19) [ 458.486043][T12103] veth0_vlan: entered promiscuous mode [ 458.493166][T12103] veth1_vlan: entered promiscuous mode [ 458.514691][T12212] syz.2.1454 (12212) used greatest stack depth: 19688 bytes left [ 458.520136][ T1134] usb usb44-port1: attempt power cycle [ 458.554801][T12103] veth0_macvtap: entered promiscuous mode [ 458.560464][T12103] veth1_macvtap: entered promiscuous mode [ 458.570644][T12103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.575653][T12103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.583227][ T7583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.588963][ T7583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.594140][ T7583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.619189][ T7583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.786910][ T9] IPVS: starting estimator thread 0... [ 458.787909][T12234] IPVS: set_ctl: invalid protocol: 33 172.30.129.3:20001 [ 458.798323][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.801368][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.823870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.829229][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.907223][T12235] IPVS: using max 46 ests per chain, 110400 per kthread [ 459.088151][ T1134] usb usb44-port1: unable to enumerate USB device [ 459.101598][ T7579] IPVS: stop unused estimator thread 0... [ 459.368743][T12245] FAULT_INJECTION: forcing a failure. [ 459.368743][T12245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.373257][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.1.1460 Not tainted syzkaller #0 PREEMPT(full) [ 459.373271][T12245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.373278][T12245] Call Trace: [ 459.373281][T12245] [ 459.373285][T12245] dump_stack_lvl+0x16c/0x1f0 [ 459.373301][T12245] should_fail_ex+0x512/0x640 [ 459.373317][T12245] _copy_from_user+0x2e/0xd0 [ 459.373331][T12245] kstrtouint_from_user+0xd6/0x1d0 [ 459.373341][T12245] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 459.373350][T12245] ? __lock_acquire+0xb97/0x1ce0 [ 459.373372][T12245] proc_fail_nth_write+0x83/0x220 [ 459.373384][T12245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 459.373399][T12245] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 459.373409][T12245] vfs_write+0x2a0/0x11d0 [ 459.373423][T12245] ? __pfx_vfs_write+0x10/0x10 [ 459.373433][T12245] ? find_held_lock+0x2b/0x80 [ 459.373447][T12245] ? __fget_files+0x20e/0x3c0 [ 459.373462][T12245] ksys_write+0x12a/0x250 [ 459.373472][T12245] ? __pfx_ksys_write+0x10/0x10 [ 459.373484][T12245] ? rcu_is_watching+0x12/0xc0 [ 459.373498][T12245] __do_fast_syscall_32+0x7c/0x300 [ 459.373512][T12245] do_fast_syscall_32+0x32/0x80 [ 459.373525][T12245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.373537][T12245] RIP: 0023:0xf70ad579 [ 459.373546][T12245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.373556][T12245] RSP: 002b:00000000f549d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 459.373566][T12245] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d620 [ 459.373573][T12245] RDX: 0000000000000001 RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 459.373578][T12245] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 459.373584][T12245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 459.373590][T12245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.373604][T12245] [ 460.009464][T12277] tipc: Started in network mode [ 460.012226][T12277] tipc: Node identity 4, cluster identity 4711 [ 460.014657][T12277] tipc: Node number set to 4 [ 460.247208][T12106] Bluetooth: hci2: command tx timeout [ 460.828717][ T6024] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 460.978649][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.982065][ T6024] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 460.984898][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.988663][ T6024] usb 6-1: config 0 descriptor?? [ 460.992179][T12295] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 461.194402][ T6024] usbhid 6-1:0.0: can't add hid device: -71 [ 461.196421][ T6024] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 461.201226][ T6024] usb 6-1: USB disconnect, device number 10 [ 461.227318][ T1022] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 461.379488][T12298] syzkaller0: entered promiscuous mode [ 461.380991][ T1022] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.381312][T12298] syzkaller0: entered allmulticast mode [ 461.385733][ T1022] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.385771][ T1022] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.385790][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.402298][T12295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 461.410387][ T1022] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.643975][ T1022] usb 9-1: USB disconnect, device number 2 [ 461.647310][ T6024] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 461.797646][ T6024] usb 6-1: Using ep0 maxpacket: 32 [ 461.804836][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.809150][ T6024] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 461.812203][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.828292][ T6024] usb 6-1: config 0 descriptor?? [ 461.847350][ T6024] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 461.856067][ T6024] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 462.103751][T12289] FAULT_INJECTION: forcing a failure. [ 462.103751][T12289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.108507][T12289] CPU: 0 UID: 0 PID: 12289 Comm: syz.1.1473 Not tainted syzkaller #0 PREEMPT(full) [ 462.108522][T12289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.108541][T12289] Call Trace: [ 462.108545][T12289] [ 462.108549][T12289] dump_stack_lvl+0x16c/0x1f0 [ 462.108565][T12289] should_fail_ex+0x512/0x640 [ 462.108593][T12289] _copy_to_user+0x32/0xd0 [ 462.108610][T12289] ld_usb_read+0x618/0x900 [ 462.108631][T12289] ? __pfx_ld_usb_read+0x10/0x10 [ 462.108648][T12289] ? __pfx_autoremove_wake_function+0x10/0x10 [ 462.108662][T12289] ? bpf_lsm_file_permission+0x9/0x10 [ 462.108675][T12289] ? security_file_permission+0x71/0x210 [ 462.108686][T12289] ? rw_verify_area+0xcf/0x6c0 [ 462.108695][T12289] ? __pfx_ld_usb_read+0x10/0x10 [ 462.108711][T12289] vfs_read+0x1e1/0xcf0 [ 462.108725][T12289] ? __pfx_vfs_read+0x10/0x10 [ 462.108734][T12289] ? find_held_lock+0x2b/0x80 [ 462.108745][T12289] ? __fget_files+0x204/0x3c0 [ 462.108757][T12289] ? __fget_files+0x20e/0x3c0 [ 462.108771][T12289] ksys_read+0x1f8/0x250 [ 462.108782][T12289] ? __pfx_ksys_read+0x10/0x10 [ 462.108793][T12289] ? rcu_is_watching+0x12/0xc0 [ 462.108806][T12289] __do_fast_syscall_32+0x7c/0x300 [ 462.108821][T12289] do_fast_syscall_32+0x32/0x80 [ 462.108833][T12289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.108846][T12289] RIP: 0023:0xf70ad579 [ 462.108860][T12289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.108870][T12289] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 462.108879][T12289] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 462.108886][T12289] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.108891][T12289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.108897][T12289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 462.108902][T12289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.108916][T12289] [ 462.225689][T12303] FAULT_INJECTION: forcing a failure. [ 462.225689][T12303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.229864][T12303] CPU: 3 UID: 0 PID: 12303 Comm: syz.4.1477 Not tainted syzkaller #0 PREEMPT(full) [ 462.229885][T12303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.229895][T12303] Call Trace: [ 462.229901][T12303] [ 462.229906][T12303] dump_stack_lvl+0x16c/0x1f0 [ 462.229924][T12303] should_fail_ex+0x512/0x640 [ 462.229939][T12303] _copy_from_user+0x2e/0xd0 [ 462.229953][T12303] get_compat_msghdr+0xa7/0x170 [ 462.229966][T12303] ? __pfx_get_compat_msghdr+0x10/0x10 [ 462.229980][T12303] ? find_held_lock+0x2b/0x80 [ 462.229992][T12303] ___sys_sendmsg+0x1ae/0x1d0 [ 462.230005][T12303] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.230030][T12303] ? __pfx___might_resched+0x10/0x10 [ 462.230041][T12303] ? __sys_sendmmsg+0x30d/0x420 [ 462.230054][T12303] __sys_sendmmsg+0x2f9/0x420 [ 462.230068][T12303] ? __pfx___sys_sendmmsg+0x10/0x10 [ 462.230084][T12303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.230102][T12303] ? fput+0x9b/0xd0 [ 462.230116][T12303] ? ksys_write+0x1ac/0x250 [ 462.230127][T12303] ? __pfx_ksys_write+0x10/0x10 [ 462.230140][T12303] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 462.230152][T12303] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 462.230165][T12303] __do_fast_syscall_32+0x7c/0x300 [ 462.230179][T12303] do_fast_syscall_32+0x32/0x80 [ 462.230192][T12303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.230205][T12303] RIP: 0023:0xf70cd579 [ 462.230213][T12303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.230223][T12303] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 462.230233][T12303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003e40 [ 462.230239][T12303] RDX: 00000000fffffe3d RSI: 00000000000000f5 RDI: 0000000000000000 [ 462.230245][T12303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.230251][T12303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 462.230257][T12303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.230270][T12303] [ 462.304016][ T1022] usb 6-1: USB disconnect, device number 11 [ 462.312866][ T1022] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 462.337630][T12106] Bluetooth: hci2: command tx timeout [ 462.604554][T12310] syz.4.1479 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 463.260634][T12312] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 463.283153][T12312] VFS: Can't find a romfs filesystem on dev nullb0. [ 463.283153][T12312] [ 463.709489][T12331] FAULT_INJECTION: forcing a failure. [ 463.709489][T12331] name failslab, interval 1, probability 0, space 0, times 0 [ 463.717259][T12331] CPU: 0 UID: 0 PID: 12331 Comm: syz.1.1483 Not tainted syzkaller #0 PREEMPT(full) [ 463.717285][T12331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 463.717297][T12331] Call Trace: [ 463.717303][T12331] [ 463.717310][T12331] dump_stack_lvl+0x16c/0x1f0 [ 463.717334][T12331] should_fail_ex+0x512/0x640 [ 463.717354][T12331] ? __kmalloc_cache_noprof+0x5f/0x780 [ 463.717386][T12331] should_failslab+0xc2/0x120 [ 463.717411][T12331] __kmalloc_cache_noprof+0x72/0x780 [ 463.717438][T12331] ? genl_start+0x1e8/0x980 [ 463.717466][T12331] ? genl_start+0x1e8/0x980 [ 463.717487][T12331] genl_start+0x1e8/0x980 [ 463.717514][T12331] __netlink_dump_start+0x60b/0x990 [ 463.717538][T12331] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 463.717563][T12331] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 463.717593][T12331] ? __pfx_genl_get_cmd+0x10/0x10 [ 463.717628][T12331] ? __pfx_genl_start+0x10/0x10 [ 463.717649][T12331] ? __pfx_genl_dumpit+0x10/0x10 [ 463.717671][T12331] ? __pfx_genl_done+0x10/0x10 [ 463.717695][T12331] ? ____sys_sendmsg+0xa98/0xc70 [ 463.717720][T12331] ? ___sys_sendmsg+0x134/0x1d0 [ 463.717736][T12331] ? __radix_tree_lookup+0x21f/0x2c0 [ 463.717757][T12331] genl_rcv_msg+0x46e/0x800 [ 463.717783][T12331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.717806][T12331] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 463.717832][T12331] ? __lock_acquire+0x62e/0x1ce0 [ 463.717858][T12331] netlink_rcv_skb+0x155/0x420 [ 463.717877][T12331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.717900][T12331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.717934][T12331] ? netlink_deliver_tap+0x1ae/0xd30 [ 463.717956][T12331] genl_rcv+0x28/0x40 [ 463.717976][T12331] netlink_unicast+0x5aa/0x870 [ 463.717999][T12331] ? __pfx_netlink_unicast+0x10/0x10 [ 463.718028][T12331] netlink_sendmsg+0x8c8/0xdd0 [ 463.718052][T12331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.718074][T12331] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 463.718101][T12331] ____sys_sendmsg+0xa98/0xc70 [ 463.718125][T12331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.718148][T12331] ? get_compat_msghdr+0x11a/0x170 [ 463.718178][T12331] ___sys_sendmsg+0x134/0x1d0 [ 463.718198][T12331] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.718230][T12331] ? find_held_lock+0x2b/0x80 [ 463.718263][T12331] __sys_sendmsg+0x16d/0x220 [ 463.718282][T12331] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.718312][T12331] ? rcu_is_watching+0x12/0xc0 [ 463.718333][T12331] __do_fast_syscall_32+0x7c/0x300 [ 463.718355][T12331] do_fast_syscall_32+0x32/0x80 [ 463.718373][T12331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.718392][T12331] RIP: 0023:0xf70ad579 [ 463.718406][T12331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 463.718421][T12331] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 463.718453][T12331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 463.718463][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.718473][T12331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.718482][T12331] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 463.718492][T12331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.718516][T12331] [ 466.337696][ T1022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 466.623835][T12370] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 467.117220][ T6024] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 467.268812][ T6024] usb 7-1: not running at top speed; connect to a high speed hub [ 467.271995][ T6024] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 467.275504][ T6024] usb 7-1: config 1 interface 0 has no altsetting 0 [ 467.280069][ T6024] usb 7-1: string descriptor 0 read error: -22 [ 467.282054][ T6024] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 467.284840][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.299917][T12383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 467.607970][ T54] usb 7-1: USB disconnect, device number 17 [ 468.116209][T12402] netlink: 'syz.4.1501': attribute type 1 has an invalid length. [ 468.139624][T12402] bond1 (unregistering): Released all slaves [ 468.184502][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 468.417179][T12416] tipc: Cannot configure node identity twice [ 469.197673][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 469.620889][T12451] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 469.632115][T12451] FAULT_INJECTION: forcing a failure. [ 469.632115][T12451] name failslab, interval 1, probability 0, space 0, times 0 [ 469.636127][T12451] CPU: 2 UID: 0 PID: 12451 Comm: syz.1.1513 Not tainted syzkaller #0 PREEMPT(full) [ 469.636141][T12451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.636148][T12451] Call Trace: [ 469.636152][T12451] [ 469.636156][T12451] dump_stack_lvl+0x16c/0x1f0 [ 469.636173][T12451] should_fail_ex+0x512/0x640 [ 469.636189][T12451] should_failslab+0xc2/0x120 [ 469.636204][T12451] __kmalloc_cache_noprof+0x72/0x780 [ 469.636222][T12451] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 469.636241][T12451] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 469.636255][T12451] __hw_addr_add_ex+0x3c9/0x7c0 [ 469.636273][T12451] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 469.636288][T12451] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 469.636304][T12451] ? __pfx_geneve_setup+0x10/0x10 [ 469.636318][T12451] dev_addr_init+0x161/0x250 [ 469.636328][T12451] ? __pfx_dev_addr_init+0x10/0x10 [ 469.636342][T12451] alloc_netdev_mqs+0x363/0x1550 [ 469.636358][T12451] rtnl_create_link+0xc08/0xf90 [ 469.636375][T12451] rtnl_newlink+0xb69/0x2000 [ 469.636392][T12451] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.636404][T12451] ? __kernel_text_address+0xd/0x40 [ 469.636414][T12451] ? unwind_get_return_address+0x59/0xa0 [ 469.636437][T12451] ? rcu_is_watching+0x12/0xc0 [ 469.636453][T12451] ? find_held_lock+0x2b/0x80 [ 469.636464][T12451] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.636476][T12451] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.636487][T12451] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 469.636501][T12451] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.636516][T12451] rtnetlink_rcv_msg+0x95b/0xe90 [ 469.636537][T12451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.636563][T12451] ? __lock_acquire+0x62e/0x1ce0 [ 469.636591][T12451] netlink_rcv_skb+0x155/0x420 [ 469.636610][T12451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.636624][T12451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.636642][T12451] ? netlink_deliver_tap+0x1ae/0xd30 [ 469.636657][T12451] netlink_unicast+0x5aa/0x870 [ 469.636672][T12451] ? __pfx_netlink_unicast+0x10/0x10 [ 469.636690][T12451] netlink_sendmsg+0x8c8/0xdd0 [ 469.636705][T12451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.636720][T12451] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 469.636738][T12451] ____sys_sendmsg+0xa98/0xc70 [ 469.636755][T12451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.636769][T12451] ? get_compat_msghdr+0x11a/0x170 [ 469.636791][T12451] ___sys_sendmsg+0x134/0x1d0 [ 469.636805][T12451] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.636823][T12451] ? find_held_lock+0x2b/0x80 [ 469.636843][T12451] __sys_sendmsg+0x16d/0x220 [ 469.636855][T12451] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.636874][T12451] ? rcu_is_watching+0x12/0xc0 [ 469.636886][T12451] __do_fast_syscall_32+0x7c/0x300 [ 469.636901][T12451] do_fast_syscall_32+0x32/0x80 [ 469.636913][T12451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.636926][T12451] RIP: 0023:0xf70ad579 [ 469.636935][T12451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.636945][T12451] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 469.636955][T12451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 469.636961][T12451] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.636967][T12451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.636973][T12451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 469.636978][T12451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.636992][T12451] [ 471.693515][T12490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 471.695660][T12490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.710323][T12490] vhci_hcd vhci_hcd.0: Device attached [ 471.972781][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 472.057436][ T1134] usb 44-1: SetAddress Request (75) to port 0 [ 472.059533][ T1134] usb 44-1: new SuperSpeed USB device number 75 using vhci_hcd [ 472.388729][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 472.466274][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 472.515974][T12491] vhci_hcd: connection reset by peer [ 472.518849][ T1142] vhci_hcd: stop threads [ 472.521011][ T1142] vhci_hcd: release socket [ 472.523746][ T1142] vhci_hcd: disconnect device [ 472.715334][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 472.937645][ T1022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 473.601462][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 473.671563][T12548] program syz.4.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.699008][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 475.752322][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 477.207266][ T1134] usb 44-1: device descriptor read/8, error -110 [ 477.607768][ T1134] usb usb44-port1: attempt power cycle [ 478.168151][ T1134] usb usb44-port1: unable to enumerate USB device [ 483.490301][T12593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.558037][T12593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.577220][ T6004] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 483.728946][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.738566][ T6004] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 483.742130][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.756114][ T6004] usb 9-1: config 0 descriptor?? [ 483.767789][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 483.974875][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.979405][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.930231][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1539'. [ 484.933711][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 486.380564][ T6004] usbhid 9-1:0.0: can't add hid device: -71 [ 486.390770][ T6004] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 486.493916][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 486.498961][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 486.987330][ T6004] usb 9-1: USB disconnect, device number 3 [ 487.047726][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 487.230470][T12638] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.355111][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 487.610225][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.614046][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.946810][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 488.950368][T12659] bridge_slave_1: left allmulticast mode [ 488.952787][T12659] bridge_slave_1: left promiscuous mode [ 488.953013][T12665] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 488.954872][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.957354][T12665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.963452][T12665] vhci_hcd vhci_hcd.0: Device attached [ 488.984139][T12659] bridge_slave_0: left allmulticast mode [ 488.986935][T12659] bridge_slave_0: left promiscuous mode [ 488.990475][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.357388][ T1134] usb 42-1: SetAddress Request (63) to port 0 [ 489.359535][ T1134] usb 42-1: new SuperSpeed USB device number 63 using vhci_hcd [ 490.018271][T12666] vhci_hcd: connection reset by peer [ 490.020428][ T1168] vhci_hcd: stop threads [ 490.021778][ T1168] vhci_hcd: release socket [ 490.023232][ T1168] vhci_hcd: disconnect device [ 490.249635][T12687] IPVS: length: 26 != 24 [ 490.253703][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1555'. [ 490.256557][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1555'. [ 490.622728][T12696] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 490.672872][T12696] bond11 (unregistering): Released all slaves [ 491.479699][T12711] i2c i2c-1: Invalid block write size 34 [ 491.874304][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 491.932767][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 492.127369][ T6157] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 492.263283][ T6157] usb 7-1: device descriptor read/64, error -71 [ 492.467666][T12736] bridge0: port 2(ªªªªª») entered disabled state [ 492.470351][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.507215][ T6157] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 492.619742][T12746] ubi: mtd0 is already attached to ubi31 [ 492.622616][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 492.638568][ T6157] usb 7-1: device descriptor read/64, error -71 [ 492.683742][T12736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.688832][T12736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.757385][ T6157] usb usb7-port1: attempt power cycle [ 492.781584][ T1168] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.784955][ T1168] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.789334][ T1168] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.792859][ T1168] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.796318][ T1168] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.800002][ T1168] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.803440][ T1168] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.806050][ T1168] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.956287][T12749] Bluetooth: Invalid esc byte 0x02 [ 493.097226][ T6157] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 493.117809][ T6157] usb 7-1: device descriptor read/8, error -71 [ 493.377442][ T6157] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 493.407823][ T6157] usb 7-1: device descriptor read/8, error -71 [ 493.517381][ T6157] usb usb7-port1: unable to enumerate USB device [ 494.417278][ T1134] usb 42-1: device descriptor read/8, error -110 [ 494.757068][T12782] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 494.759171][T12782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.767212][T12782] vhci_hcd vhci_hcd.0: Device attached [ 494.821598][ T1134] usb usb42-port1: attempt power cycle [ 494.977564][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 495.052125][T12793] FAULT_INJECTION: forcing a failure. [ 495.052125][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 495.056017][T12793] CPU: 3 UID: 0 PID: 12793 Comm: syz.2.1587 Not tainted syzkaller #0 PREEMPT(full) [ 495.056031][T12793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.056037][T12793] Call Trace: [ 495.056041][T12793] [ 495.056045][T12793] dump_stack_lvl+0x16c/0x1f0 [ 495.056062][T12793] should_fail_ex+0x512/0x640 [ 495.056075][T12793] ? fs_reclaim_acquire+0xae/0x150 [ 495.056091][T12793] should_failslab+0xc2/0x120 [ 495.056105][T12793] __kmalloc_noprof+0xdd/0x880 [ 495.056122][T12793] ? tomoyo_encode2+0x100/0x3e0 [ 495.056135][T12793] ? tomoyo_encode2+0x100/0x3e0 [ 495.056145][T12793] tomoyo_encode2+0x100/0x3e0 [ 495.056157][T12793] tomoyo_encode+0x29/0x50 [ 495.056167][T12793] tomoyo_realpath_from_path+0x18f/0x6e0 [ 495.056182][T12793] tomoyo_path_number_perm+0x245/0x580 [ 495.056197][T12793] ? tomoyo_path_number_perm+0x237/0x580 [ 495.056214][T12793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.056244][T12793] ? find_held_lock+0x2b/0x80 [ 495.056255][T12793] ? hook_file_ioctl_common+0x145/0x410 [ 495.056275][T12793] ? __fget_files+0x20e/0x3c0 [ 495.056288][T12793] security_file_ioctl_compat+0x9b/0x240 [ 495.056321][T12793] __ia32_compat_sys_ioctl+0xc3/0x370 [ 495.056338][T12793] __do_fast_syscall_32+0x7c/0x300 [ 495.056353][T12793] do_fast_syscall_32+0x32/0x80 [ 495.056365][T12793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.056379][T12793] RIP: 0023:0xf70ed579 [ 495.056387][T12793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 495.056398][T12793] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 495.056408][T12793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008020640d [ 495.056415][T12793] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.056420][T12793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.056426][T12793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 495.056432][T12793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.056446][T12793] [ 495.056536][T12793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 495.057184][ T6004] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 495.437723][ T1134] usb usb42-port1: unable to enumerate USB device [ 495.440999][T12783] vhci_hcd: connection reset by peer [ 495.443205][ T7597] vhci_hcd: stop threads [ 495.444643][ T7597] vhci_hcd: release socket [ 495.446209][ T7597] vhci_hcd: disconnect device [ 495.705518][T12802] syz.4.1589 (12802): drop_caches: 2 [ 495.708403][T12802] syz.4.1589 (12802): drop_caches: 2 [ 496.020563][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'. [ 496.124554][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 496.342237][T12816] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 496.344360][T12816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.347446][T12816] vhci_hcd vhci_hcd.0: Device attached [ 496.967992][ T1022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 496.981669][T12817] vhci_hcd: connection closed [ 496.981929][ T1146] vhci_hcd: stop threads [ 496.985734][ T1146] vhci_hcd: release socket [ 496.989231][ T1146] vhci_hcd: disconnect device [ 497.288720][T12827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 497.290780][T12827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 497.293566][T12827] vhci_hcd vhci_hcd.0: Device attached [ 497.607359][ T6022] usb 42-1: SetAddress Request (67) to port 0 [ 497.609454][ T6022] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd [ 497.788948][T12833] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.804134][T12835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.908465][T12828] vhci_hcd: connection reset by peer [ 497.910351][ T1146] vhci_hcd: stop threads [ 497.911937][ T1146] vhci_hcd: release socket [ 497.913886][ T1146] vhci_hcd: disconnect device [ 498.762705][T12857] binder: 12855:12857 ioctl c0046209 0 returned -22 [ 500.097061][T12868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 500.098969][T12868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 500.102712][T12868] vhci_hcd vhci_hcd.0: Device attached [ 500.247524][ T6004] vhci_hcd: vhci_device speed not set [ 500.293333][T12869] vhci_hcd: connection closed [ 500.293441][ T7597] vhci_hcd: stop threads [ 500.296652][ T7597] vhci_hcd: release socket [ 500.298363][ T7597] vhci_hcd: disconnect device [ 500.762242][T12875] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 500.783644][T12875] bond11 (unregistering): Released all slaves [ 501.059804][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.327721][T12894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 501.329747][T12894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 501.332402][T12894] vhci_hcd vhci_hcd.0: Device attached [ 501.557881][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 501.609512][ T1134] usb 40-1: SetAddress Request (73) to port 0 [ 501.611606][ T1134] usb 40-1: new SuperSpeed USB device number 73 using vhci_hcd [ 501.827486][T12895] vhci_hcd: connection reset by peer [ 501.830217][ T1168] vhci_hcd: stop threads [ 501.832054][ T1168] vhci_hcd: release socket [ 501.834148][ T1168] vhci_hcd: disconnect device [ 502.659007][ T6022] usb 42-1: device descriptor read/8, error -110 [ 502.839761][T12921] ubi31: detaching mtd0 [ 502.856605][T12921] ubi31: mtd0 is detached [ 503.022049][T12926] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 503.024166][T12926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 503.029080][T12926] vhci_hcd vhci_hcd.0: Device attached [ 503.147331][ T6022] usb 42-1: SetAddress Request (68) to port 0 [ 503.149347][ T6022] usb 42-1: new SuperSpeed USB device number 68 using vhci_hcd [ 503.266464][T12927] vhci_hcd: connection reset by peer [ 503.268770][ T1168] vhci_hcd: stop threads [ 503.270210][ T1168] vhci_hcd: release socket [ 503.271758][ T1168] vhci_hcd: disconnect device [ 503.441048][T12935] sp0: Synchronizing with TNC [ 503.979114][T12954] overlayfs: missing 'lowerdir' [ 504.096504][T12962] tipc: Enabling of bearer rejected, failed to enable media [ 504.487977][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 506.647339][ T1134] usb 40-1: device descriptor read/8, error -110 [ 506.757458][ T1134] usb usb40-port1: attempt power cycle [ 507.318469][ T1134] usb usb40-port1: unable to enumerate USB device [ 508.257227][ T6022] usb 42-1: device descriptor read/8, error -110 [ 508.368156][ T6022] usb usb42-port1: attempt power cycle [ 508.928052][ T6022] usb usb42-port1: unable to enumerate USB device [ 510.766734][T13025] dlm: non-version read from control device 36 [ 510.891690][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 510.891700][ T40] audit: type=1326 audit(1760155001.784:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.901854][ T40] audit: type=1326 audit(1760155001.784:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.908595][ T40] audit: type=1326 audit(1760155001.784:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.924540][ T40] audit: type=1326 audit(1760155001.784:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.932941][ T40] audit: type=1326 audit(1760155001.784:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.940424][ T40] audit: type=1326 audit(1760155001.784:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.951815][ T40] audit: type=1326 audit(1760155001.784:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.958571][ T40] audit: type=1326 audit(1760155001.784:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.965392][ T40] audit: type=1326 audit(1760155001.784:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=11 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.973253][ T40] audit: type=1326 audit(1760155001.784:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13019 comm="syz.4.1639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 510.990352][T13035] devtmpfs: Too few inodes for current use [ 513.417030][T13066] ubi31: attaching mtd0 [ 513.431877][T13066] ubi31: scanning is finished [ 513.433775][T13066] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 513.479792][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1650'. [ 513.726242][T13066] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 513.776459][T13075] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 513.776459][T13075] program syz.3.1653 not setting count and/or reply_len properly [ 513.952931][T13081] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.1655'. [ 513.956211][T13081] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.146901][T13086] FAULT_INJECTION: forcing a failure. [ 514.146901][T13086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.152722][T13086] CPU: 3 UID: 0 PID: 13086 Comm: syz.2.1657 Not tainted syzkaller #0 PREEMPT(full) [ 514.152743][T13086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 514.152753][T13086] Call Trace: [ 514.152759][T13086] [ 514.152765][T13086] dump_stack_lvl+0x16c/0x1f0 [ 514.152801][T13086] should_fail_ex+0x512/0x640 [ 514.152832][T13086] _copy_from_user+0x2e/0xd0 [ 514.152854][T13086] inet_compat_routing_ioctl+0x9e/0x2c0 [ 514.152881][T13086] ? __pfx_inet_compat_routing_ioctl+0x10/0x10 [ 514.152917][T13086] ? do_vfs_ioctl+0x128/0x14f0 [ 514.152944][T13086] inet_compat_ioctl+0xd9/0x110 [ 514.152967][T13086] ? __pfx_inet_compat_ioctl+0x10/0x10 [ 514.152990][T13086] compat_sock_ioctl+0x176/0x730 [ 514.153020][T13086] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 514.153042][T13086] ? hook_file_ioctl_common+0x145/0x410 [ 514.153074][T13086] ? __fget_files+0x20e/0x3c0 [ 514.153098][T13086] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 514.153122][T13086] __ia32_compat_sys_ioctl+0x23f/0x370 [ 514.153150][T13086] __do_fast_syscall_32+0x7c/0x300 [ 514.153171][T13086] do_fast_syscall_32+0x32/0x80 [ 514.153190][T13086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.153211][T13086] RIP: 0023:0xf70ed579 [ 514.153224][T13086] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 514.153240][T13086] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 514.153256][T13086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 514.153267][T13086] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.153277][T13086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.153286][T13086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 514.153295][T13086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.153318][T13086] [ 514.978016][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 515.487613][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 521.808406][T13169] hub 9-0:1.0: USB hub found [ 521.813924][T13169] hub 9-0:1.0: 1 port detected [ 522.147625][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 522.808029][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 522.808040][ T40] audit: type=1326 audit(1760155013.764:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.819820][ T40] audit: type=1326 audit(1760155013.774:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.834002][ T40] audit: type=1326 audit(1760155013.774:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.843349][ T40] audit: type=1326 audit(1760155013.774:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.852939][ T40] audit: type=1326 audit(1760155013.774:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.861323][ T40] audit: type=1326 audit(1760155013.774:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.868506][ T40] audit: type=1326 audit(1760155013.774:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.875175][ T40] audit: type=1326 audit(1760155013.774:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.889555][ T40] audit: type=1326 audit(1760155013.774:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.896185][ T40] audit: type=1326 audit(1760155013.774:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.3.1675" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 522.903281][T13191] bond11 (unregistering): Released all slaves [ 523.003641][T13188] netlink: 'syz.3.1675': attribute type 3 has an invalid length. [ 523.006139][T13188] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 523.146385][T13188] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 523.148505][T13188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.152815][T13188] vhci_hcd vhci_hcd.0: Device attached [ 523.163954][T13188] batman_adv: batadv0: Adding interface: gretap1 [ 523.165986][T13188] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.176069][T13188] batman_adv: batadv0: Interface activated: gretap1 [ 523.397518][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 523.425514][T13217] bond11 (unregistering): Released all slaves [ 523.631591][T13204] vhci_hcd: connection reset by peer [ 523.634091][ T1146] vhci_hcd: stop threads [ 523.635899][ T1146] vhci_hcd: release socket [ 523.637958][ T1146] vhci_hcd: disconnect device [ 528.487603][ T9] vhci_hcd: vhci_device speed not set [ 529.607914][T13234] bond11: option arp_validate: invalid value (18446744073709551615) [ 529.611296][T13234] bond11 (unregistering): Released all slaves [ 529.787856][T13246] bond7 (unregistering): Released all slaves [ 530.756100][T13261] bond7 (unregistering): Released all slaves [ 531.228069][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 531.871799][T13293] Cache volume key already in use (9p,syz,) [ 533.564850][T13333] FAULT_INJECTION: forcing a failure. [ 533.564850][T13333] name failslab, interval 1, probability 0, space 0, times 0 [ 533.570090][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.3.1714 Not tainted syzkaller #0 PREEMPT(full) [ 533.570105][T13333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.570112][T13333] Call Trace: [ 533.570115][T13333] [ 533.570120][T13333] dump_stack_lvl+0x16c/0x1f0 [ 533.570136][T13333] should_fail_ex+0x512/0x640 [ 533.570149][T13333] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 533.570163][T13333] should_failslab+0xc2/0x120 [ 533.570177][T13333] kmem_cache_alloc_node_noprof+0x78/0x770 [ 533.570187][T13333] ? __alloc_skb+0x2b2/0x380 [ 533.570202][T13333] ? __alloc_skb+0x2b2/0x380 [ 533.570211][T13333] __alloc_skb+0x2b2/0x380 [ 533.570221][T13333] ? __pfx___alloc_skb+0x10/0x10 [ 533.570234][T13333] ? find_held_lock+0x2b/0x80 [ 533.570247][T13333] netlink_dump+0x19b/0xd30 [ 533.570261][T13333] ? __pfx_netlink_dump+0x10/0x10 [ 533.570272][T13333] ? ip_set_dump_start+0x2e9/0x460 [ 533.570282][T13333] ? __pfx_ip_set_dump_start+0x10/0x10 [ 533.570291][T13333] ? __pfx___mutex_lock+0x10/0x10 [ 533.570313][T13333] __netlink_dump_start+0x6d6/0x990 [ 533.570328][T13333] ip_set_dump+0x17f/0x210 [ 533.570343][T13333] ? __pfx_ip_set_dump+0x10/0x10 [ 533.570358][T13333] ? __pfx_ip_set_dump_start+0x10/0x10 [ 533.570367][T13333] ? __pfx_ip_set_dump_do+0x10/0x10 [ 533.570377][T13333] ? __pfx_ip_set_dump_done+0x10/0x10 [ 533.570398][T13333] nfnetlink_rcv_msg+0x9f9/0x1200 [ 533.570419][T13333] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 533.570437][T13333] ? stack_trace_save+0x8e/0xc0 [ 533.570463][T13333] ? __lock_acquire+0x62e/0x1ce0 [ 533.570479][T13333] netlink_rcv_skb+0x155/0x420 [ 533.570492][T13333] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 533.570509][T13333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.570541][T13333] ? ns_capable+0xd7/0x110 [ 533.570581][T13333] nfnetlink_rcv+0x1b3/0x430 [ 533.570597][T13333] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 533.570613][T13333] ? netlink_deliver_tap+0x1ae/0xd30 [ 533.570628][T13333] netlink_unicast+0x5aa/0x870 [ 533.570643][T13333] ? __pfx_netlink_unicast+0x10/0x10 [ 533.570661][T13333] netlink_sendmsg+0x8c8/0xdd0 [ 533.570677][T13333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.570692][T13333] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 533.570709][T13333] ____sys_sendmsg+0xa98/0xc70 [ 533.570726][T13333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.570740][T13333] ? get_compat_msghdr+0x11a/0x170 [ 533.570759][T13333] ___sys_sendmsg+0x134/0x1d0 [ 533.570772][T13333] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.570791][T13333] ? find_held_lock+0x2b/0x80 [ 533.570811][T13333] __sys_sendmsg+0x16d/0x220 [ 533.570823][T13333] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.570841][T13333] ? rcu_is_watching+0x12/0xc0 [ 533.570855][T13333] __do_fast_syscall_32+0x7c/0x300 [ 533.570869][T13333] do_fast_syscall_32+0x32/0x80 [ 533.570881][T13333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.570895][T13333] RIP: 0023:0xf7f22579 [ 533.570903][T13333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 533.570913][T13333] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 533.570923][T13333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 533.570930][T13333] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.570935][T13333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.570941][T13333] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 533.570947][T13333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.570960][T13333] [ 533.914231][T13336] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 533.916313][T13336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 533.918891][T13336] vhci_hcd vhci_hcd.0: Device attached [ 534.200501][T13339] vhci_hcd: connection closed [ 534.201057][ T1168] vhci_hcd: stop threads [ 534.203961][ T1168] vhci_hcd: release socket [ 534.205477][ T1168] vhci_hcd: disconnect device [ 534.417562][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 534.534352][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 534.537478][T13345] netlink: 'syz.2.1716': attribute type 7 has an invalid length. [ 534.540019][T13345] netlink: 'syz.2.1716': attribute type 8 has an invalid length. [ 534.542399][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 534.775588][T13347] Cannot find add_set index 0 as target [ 534.915694][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 534.927892][T13366] bond7 (unregistering): Released all slaves [ 535.483446][T13382] FAULT_INJECTION: forcing a failure. [ 535.483446][T13382] name failslab, interval 1, probability 0, space 0, times 0 [ 535.487594][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.3.1728 Not tainted syzkaller #0 PREEMPT(full) [ 535.487608][T13382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 535.487615][T13382] Call Trace: [ 535.487618][T13382] [ 535.487622][T13382] dump_stack_lvl+0x16c/0x1f0 [ 535.487639][T13382] should_fail_ex+0x512/0x640 [ 535.487652][T13382] ? fs_reclaim_acquire+0xae/0x150 [ 535.487667][T13382] should_failslab+0xc2/0x120 [ 535.487682][T13382] __kmalloc_noprof+0xdd/0x880 [ 535.487698][T13382] ? tomoyo_encode2+0x100/0x3e0 [ 535.487712][T13382] ? tomoyo_encode2+0x100/0x3e0 [ 535.487721][T13382] tomoyo_encode2+0x100/0x3e0 [ 535.487734][T13382] tomoyo_encode+0x29/0x50 [ 535.487743][T13382] tomoyo_realpath_from_path+0x18f/0x6e0 [ 535.487758][T13382] tomoyo_path_number_perm+0x245/0x580 [ 535.487773][T13382] ? tomoyo_path_number_perm+0x237/0x580 [ 535.487790][T13382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.487820][T13382] ? find_held_lock+0x2b/0x80 [ 535.487831][T13382] ? hook_file_ioctl_common+0x145/0x410 [ 535.487850][T13382] ? __fget_files+0x20e/0x3c0 [ 535.487863][T13382] security_file_ioctl_compat+0x9b/0x240 [ 535.487881][T13382] __ia32_compat_sys_ioctl+0xc3/0x370 [ 535.487898][T13382] __do_fast_syscall_32+0x7c/0x300 [ 535.487913][T13382] do_fast_syscall_32+0x32/0x80 [ 535.487930][T13382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.487943][T13382] RIP: 0023:0xf7f22579 [ 535.487952][T13382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 535.487962][T13382] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 535.487972][T13382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0bc5351 [ 535.487978][T13382] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.487984][T13382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.487990][T13382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 535.487996][T13382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.488009][T13382] [ 535.488020][T13382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 535.494421][T13385] fuse: Unknown parameter '' [ 535.819495][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 535.833514][T13397] bond15 (unregistering): Released all slaves [ 535.931047][T13403] overlayfs: failed to clone lowerpath [ 536.158580][T13414] FAULT_INJECTION: forcing a failure. [ 536.158580][T13414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.170328][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.2.1736 Not tainted syzkaller #0 PREEMPT(full) [ 536.170343][T13414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 536.170350][T13414] Call Trace: [ 536.170354][T13414] [ 536.170358][T13414] dump_stack_lvl+0x16c/0x1f0 [ 536.170375][T13414] should_fail_ex+0x512/0x640 [ 536.170390][T13414] _copy_from_user+0x2e/0xd0 [ 536.170405][T13414] kstrtouint_from_user+0xd6/0x1d0 [ 536.170415][T13414] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 536.170424][T13414] ? __lock_acquire+0xb97/0x1ce0 [ 536.170459][T13414] proc_fail_nth_write+0x83/0x220 [ 536.170472][T13414] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 536.170487][T13414] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 536.170497][T13414] vfs_write+0x2a0/0x11d0 [ 536.170512][T13414] ? __pfx_vfs_write+0x10/0x10 [ 536.170537][T13414] ? find_held_lock+0x2b/0x80 [ 536.170553][T13414] ? __fget_files+0x20e/0x3c0 [ 536.170568][T13414] ksys_write+0x12a/0x250 [ 536.170579][T13414] ? __pfx_ksys_write+0x10/0x10 [ 536.170591][T13414] ? rcu_is_watching+0x12/0xc0 [ 536.170605][T13414] __do_fast_syscall_32+0x7c/0x300 [ 536.170620][T13414] do_fast_syscall_32+0x32/0x80 [ 536.170633][T13414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.170646][T13414] RIP: 0023:0xf70ed579 [ 536.170654][T13414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 536.170665][T13414] RSP: 002b:00000000f549b590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 536.170675][T13414] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f549b620 [ 536.170681][T13414] RDX: 0000000000000001 RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 536.170687][T13414] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 536.170692][T13414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 536.170698][T13414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.170711][T13414] [ 536.452869][T13421] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 536.633497][T13430] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1742'. [ 536.636299][T13430] netlink: 'syz.3.1742': attribute type 6 has an invalid length. [ 536.639159][T13430] netlink: 'syz.3.1742': attribute type 5 has an invalid length. [ 536.641674][T13430] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 536.674401][T13431] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1739'. [ 536.689153][T13431] batadv1: entered allmulticast mode [ 536.753126][T13434] IPVS: stopping backup sync thread 13421 ... [ 537.379202][T13463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 537.402668][T13463] bond11 (unregistering): Released all slaves [ 537.446666][T13468] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 537.494492][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 537.494502][ T40] audit: type=1326 audit(1760155028.454:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.504133][ T40] audit: type=1326 audit(1760155028.454:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.513188][ T40] audit: type=1326 audit(1760155028.454:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.520182][ T40] audit: type=1326 audit(1760155028.454:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.526868][ T40] audit: type=1326 audit(1760155028.454:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.533862][ T40] audit: type=1326 audit(1760155028.454:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.540485][ T40] audit: type=1326 audit(1760155028.454:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.547047][ T40] audit: type=1326 audit(1760155028.454:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.553686][ T40] audit: type=1326 audit(1760155028.454:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 537.561695][ T40] audit: type=1326 audit(1760155028.454:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.4.1755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 539.102831][T13477] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 539.105056][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 539.107791][T13477] vhci_hcd vhci_hcd.0: Device attached [ 539.404121][T13492] IPVS: set_ctl: invalid protocol: 47 172.20.20.47:20003 [ 539.474252][T13488] vhci_hcd: connection closed [ 539.474746][ T1168] vhci_hcd: stop threads [ 539.477705][ T1168] vhci_hcd: release socket [ 539.479249][ T1168] vhci_hcd: disconnect device [ 539.765868][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 540.057631][ T6004] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 540.059995][ T6004] usb 45-1: enqueue for inactive port 0 [ 540.110704][T13501] bond7 (unregistering): Released all slaves [ 540.137223][ T6004] vhci_hcd: vhci_device speed not set [ 540.392523][T13515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.601119][T13521] fuse: Bad value for 'rootmode' [ 540.967040][T13539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 540.969232][T13539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 540.972773][T13539] vhci_hcd vhci_hcd.0: Device attached [ 541.100033][T13548] overlayfs: failed to resolve './file1': -2 [ 541.247312][ T6022] usb 44-1: SetAddress Request (80) to port 0 [ 541.250629][ T6022] usb 44-1: new SuperSpeed USB device number 80 using vhci_hcd [ 541.724747][T13561] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 541.729793][T13561] comedi comedi3: comedi_config --init_data is deprecated [ 541.842976][T13564] overlayfs: failed to resolve './file1': -2 [ 541.886988][T13540] vhci_hcd: connection reset by peer [ 541.889533][ T1146] vhci_hcd: stop threads [ 541.891297][ T1146] vhci_hcd: release socket [ 541.893339][ T1146] vhci_hcd: disconnect device [ 542.302078][T13573] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 542.498211][T13581] FAULT_INJECTION: forcing a failure. [ 542.498211][T13581] name failslab, interval 1, probability 0, space 0, times 0 [ 542.499670][T13579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 542.503441][T13581] CPU: 3 UID: 0 PID: 13581 Comm: syz.2.1785 Not tainted syzkaller #0 PREEMPT(full) [ 542.503457][T13581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.503464][T13581] Call Trace: [ 542.503468][T13581] [ 542.503472][T13581] dump_stack_lvl+0x16c/0x1f0 [ 542.503490][T13581] should_fail_ex+0x512/0x640 [ 542.503503][T13581] ? fs_reclaim_acquire+0xae/0x150 [ 542.503518][T13581] should_failslab+0xc2/0x120 [ 542.503533][T13581] __kmalloc_noprof+0xdd/0x880 [ 542.503550][T13581] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 542.503565][T13581] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 542.503575][T13581] tomoyo_realpath_from_path+0xc2/0x6e0 [ 542.503587][T13581] ? tomoyo_profile+0x47/0x60 [ 542.503601][T13581] tomoyo_path_perm+0x274/0x460 [ 542.503616][T13581] ? tomoyo_path_perm+0x260/0x460 [ 542.503632][T13581] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 542.503662][T13581] ? __pfx_ima_file_check+0x10/0x10 [ 542.503676][T13581] ? hook_file_truncate+0xc7/0x250 [ 542.503686][T13581] ? vfs_open+0x2e3/0x3f0 [ 542.503702][T13581] security_file_truncate+0x84/0x1e0 [ 542.503713][T13581] path_openat+0xc10/0x2cb0 [ 542.503729][T13581] ? __pfx_path_openat+0x10/0x10 [ 542.503744][T13581] do_filp_open+0x20b/0x470 [ 542.503755][T13581] ? __pfx_do_filp_open+0x10/0x10 [ 542.503776][T13581] ? alloc_fd+0x471/0x7d0 [ 542.503790][T13581] do_sys_openat2+0x11b/0x1d0 [ 542.503805][T13581] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.503820][T13581] ? __pfx___seccomp_filter+0x10/0x10 [ 542.503833][T13581] ? handle_mm_fault+0x2ab/0xd10 [ 542.503857][T13581] __ia32_sys_creat+0xcb/0x120 [ 542.503873][T13581] ? __pfx___ia32_sys_creat+0x10/0x10 [ 542.503889][T13581] ? __secure_computing+0x21c/0x320 [ 542.503903][T13581] ? syscall_trace_enter+0x89/0x240 [ 542.503921][T13581] __do_fast_syscall_32+0x7c/0x300 [ 542.503936][T13581] do_fast_syscall_32+0x32/0x80 [ 542.503948][T13581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.503961][T13581] RIP: 0023:0xf70ed579 [ 542.503969][T13581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.503980][T13581] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000008 [ 542.503989][T13581] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000282 [ 542.503996][T13581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.504001][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.504007][T13581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.504013][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.504026][T13581] [ 542.504030][T13581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 542.506034][T13579] overlayfs: failed to set xattr on upper [ 542.506041][T13579] overlayfs: ...falling back to redirect_dir=nofollow. [ 542.506045][T13579] overlayfs: ...falling back to index=off. [ 542.506049][T13579] overlayfs: ...falling back to uuid=null. [ 542.506058][T13579] overlayfs: maximum fs stacking depth exceeded [ 542.631869][T13585] team_slave_1: entered promiscuous mode [ 542.837868][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 542.837910][ T40] audit: type=1800 audit(1760155033.794:1090): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1786" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 542.876098][T13598] FAULT_INJECTION: forcing a failure. [ 542.876098][T13598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.880395][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.3.1788 Not tainted syzkaller #0 PREEMPT(full) [ 542.880429][T13598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.880436][T13598] Call Trace: [ 542.880441][T13598] [ 542.880445][T13598] dump_stack_lvl+0x16c/0x1f0 [ 542.880461][T13598] should_fail_ex+0x512/0x640 [ 542.880477][T13598] _copy_to_user+0x32/0xd0 [ 542.880491][T13598] simple_read_from_buffer+0xcb/0x170 [ 542.880510][T13598] proc_fail_nth_read+0x197/0x240 [ 542.880522][T13598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.880534][T13598] ? rw_verify_area+0xcf/0x6c0 [ 542.880544][T13598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.880554][T13598] vfs_read+0x1e1/0xcf0 [ 542.880569][T13598] ? __pfx_vfs_read+0x10/0x10 [ 542.880578][T13598] ? find_held_lock+0x2b/0x80 [ 542.880594][T13598] ? __fget_files+0x20e/0x3c0 [ 542.880608][T13598] ksys_read+0x12a/0x250 [ 542.880619][T13598] ? __pfx_ksys_read+0x10/0x10 [ 542.880629][T13598] ? __do_sys_rseq+0x567/0x760 [ 542.880640][T13598] ? rcu_is_watching+0x12/0xc0 [ 542.880654][T13598] __do_fast_syscall_32+0x7c/0x300 [ 542.880668][T13598] do_fast_syscall_32+0x32/0x80 [ 542.880681][T13598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.880694][T13598] RIP: 0023:0xf7f22579 [ 542.880702][T13598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.880712][T13598] RSP: 002b:00000000f53f5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 542.880722][T13598] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53f5620 [ 542.880729][T13598] RDX: 000000000000000f RSI: 00000000f73b5ff4 RDI: 0000000000000000 [ 542.880734][T13598] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 542.880740][T13598] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 542.880746][T13598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.880759][T13598] [ 543.634045][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1799'. [ 544.485105][T13647] FAULT_INJECTION: forcing a failure. [ 544.485105][T13647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.490503][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.4.1807 Not tainted syzkaller #0 PREEMPT(full) [ 544.490518][T13647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.490524][T13647] Call Trace: [ 544.490528][T13647] [ 544.490532][T13647] dump_stack_lvl+0x16c/0x1f0 [ 544.490548][T13647] should_fail_ex+0x512/0x640 [ 544.490564][T13647] _copy_from_user+0x2e/0xd0 [ 544.490578][T13647] get_compat_msghdr+0xa7/0x170 [ 544.490590][T13647] ? __pfx_get_compat_msghdr+0x10/0x10 [ 544.490603][T13647] ? __lock_acquire+0x62e/0x1ce0 [ 544.490620][T13647] ___sys_recvmsg+0x191/0x1a0 [ 544.490633][T13647] ? __pfx____sys_recvmsg+0x10/0x10 [ 544.490647][T13647] ? find_held_lock+0x2b/0x80 [ 544.490662][T13647] ? __pfx___might_resched+0x10/0x10 [ 544.490677][T13647] do_recvmmsg+0x55d/0x750 [ 544.490691][T13647] ? __pfx_do_recvmmsg+0x10/0x10 [ 544.490712][T13647] ? __fget_files+0x20e/0x3c0 [ 544.490722][T13647] ? handle_mm_fault+0x280/0xd10 [ 544.490739][T13647] __sys_recvmmsg+0x21c/0x280 [ 544.490751][T13647] ? __pfx___sys_recvmmsg+0x10/0x10 [ 544.490765][T13647] ? __pfx_ksys_write+0x10/0x10 [ 544.490778][T13647] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 544.490790][T13647] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.490802][T13647] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 544.490816][T13647] __do_fast_syscall_32+0x7c/0x300 [ 544.490830][T13647] do_fast_syscall_32+0x32/0x80 [ 544.490843][T13647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.490856][T13647] RIP: 0023:0xf70cd579 [ 544.490864][T13647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 544.490875][T13647] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 544.490885][T13647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 544.490896][T13647] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 544.490902][T13647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.490908][T13647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 544.490914][T13647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.490927][T13647] [ 544.625930][T13648] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1805'. [ 544.949457][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.994250][T13671] FAULT_INJECTION: forcing a failure. [ 544.994250][T13671] name failslab, interval 1, probability 0, space 0, times 0 [ 544.998398][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.2.1815 Not tainted syzkaller #0 PREEMPT(full) [ 544.998412][T13671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.998419][T13671] Call Trace: [ 544.998423][T13671] [ 544.998428][T13671] dump_stack_lvl+0x16c/0x1f0 [ 544.998467][T13671] should_fail_ex+0x512/0x640 [ 544.998484][T13671] should_failslab+0xc2/0x120 [ 544.998499][T13671] __kmalloc_cache_noprof+0x72/0x780 [ 544.998516][T13671] ? sctp_add_bind_addr+0xae/0x3f0 [ 544.998530][T13671] ? sctp_add_bind_addr+0xae/0x3f0 [ 544.998539][T13671] sctp_add_bind_addr+0xae/0x3f0 [ 544.998551][T13671] sctp_copy_local_addr_list+0x349/0x550 [ 544.998566][T13671] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 544.998581][T13671] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 544.998595][T13671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.998614][T13671] sctp_bind_addr_copy+0xe0/0x530 [ 544.998627][T13671] sctp_connect_new_asoc+0x1c9/0x770 [ 544.998644][T13671] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 544.998662][T13671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.998680][T13671] sctp_sendmsg+0x1557/0x1e00 [ 544.998698][T13671] ? __lock_acquire+0xb97/0x1ce0 [ 544.998713][T13671] ? __pfx_sctp_sendmsg+0x10/0x10 [ 544.998726][T13671] ? __pfx___might_resched+0x10/0x10 [ 544.998741][T13671] ? aa_sk_perm+0x2f4/0xb10 [ 544.998752][T13671] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.998760][T13671] ? find_held_lock+0x2b/0x80 [ 544.998774][T13671] ? __pfx_sctp_sendmsg+0x10/0x10 [ 544.998789][T13671] inet_sendmsg+0x119/0x140 [ 544.998801][T13671] ____sys_sendmsg+0x973/0xc70 [ 544.998818][T13671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.998832][T13671] ? get_compat_msghdr+0x11a/0x170 [ 544.998846][T13671] ? __pfx__kstrtoull+0x10/0x10 [ 544.998873][T13671] ___sys_sendmsg+0x134/0x1d0 [ 544.998895][T13671] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.998944][T13671] __sys_sendmmsg+0x2f9/0x420 [ 544.998968][T13671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 544.998987][T13671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 544.999006][T13671] ? fput+0x9b/0xd0 [ 544.999020][T13671] ? ksys_write+0x1ac/0x250 [ 544.999031][T13671] ? __pfx_ksys_write+0x10/0x10 [ 544.999044][T13671] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 544.999056][T13671] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 544.999070][T13671] __do_fast_syscall_32+0x7c/0x300 [ 544.999084][T13671] do_fast_syscall_32+0x32/0x80 [ 544.999096][T13671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.999110][T13671] RIP: 0023:0xf70ed579 [ 544.999119][T13671] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 544.999129][T13671] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 544.999139][T13671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 544.999145][T13671] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000 [ 544.999151][T13671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.999156][T13671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 544.999162][T13671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.999180][T13671] [ 545.121189][T13668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.588236][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 545.923391][T13722] 8021q: adding VLAN 0 to HW filter on device bond12 [ 545.928892][T13722] bond11: (slave bond12): Enslaving as an active interface with an up link [ 546.327296][ T6022] usb 44-1: device descriptor read/8, error -110 [ 546.717690][ T6022] usb usb44-port1: attempt power cycle [ 547.278753][ T6022] usb usb44-port1: unable to enumerate USB device [ 554.040502][T13761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 554.042343][T13761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 554.045404][T13761] vhci_hcd vhci_hcd.0: Device attached [ 554.050706][T13761] batman_adv: batadv0: Adding interface: dummy0 [ 554.052687][T13761] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.060970][T13761] batman_adv: batadv0: Interface activated: dummy0 [ 554.077817][T13761] batadv0: mtu less than device minimum [ 554.080219][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.084644][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.088520][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.092442][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.096222][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.099974][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.104081][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.109106][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.113475][T13761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.130565][T13769] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 554.135108][T13769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.138539][T13769] batadv0: entered promiscuous mode [ 554.143358][T13769] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 554.307196][ T9] usb 42-1: SetAddress Request (71) to port 0 [ 554.309259][ T9] usb 42-1: new SuperSpeed USB device number 71 using vhci_hcd [ 554.580538][T13765] vhci_hcd: connection reset by peer [ 554.583520][ T1146] vhci_hcd: stop threads [ 554.585359][ T1146] vhci_hcd: release socket [ 554.589451][ T1146] vhci_hcd: disconnect device [ 554.879898][T13785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.884397][T13785] bond1: (slave bond2): Enslaving as an active interface with an up link [ 555.237219][ T6157] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 555.370156][ T40] audit: type=1326 audit(1760155046.334:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.376744][ T40] audit: type=1326 audit(1760155046.334:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.394403][ T40] audit: type=1326 audit(1760155046.334:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.397295][ T6157] usb 9-1: Using ep0 maxpacket: 16 [ 555.402745][ T40] audit: type=1326 audit(1760155046.334:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.415037][ T40] audit: type=1326 audit(1760155046.334:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.428596][ T6157] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 555.429535][ T40] audit: type=1326 audit(1760155046.334:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.431173][ T6157] usb 9-1: config 0 has no interface number 0 [ 555.437922][ T40] audit: type=1326 audit(1760155046.334:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.442223][ T6157] usb 9-1: config 0 interface 48 has no altsetting 0 [ 555.445872][ T40] audit: type=1326 audit(1760155046.334:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.445896][ T40] audit: type=1326 audit(1760155046.334:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.445916][ T40] audit: type=1326 audit(1760155046.344:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 555.456813][ T6157] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 555.479525][ T6157] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.484205][ T6157] usb 9-1: Product: syz [ 555.487233][ T6157] usb 9-1: Manufacturer: syz [ 555.489085][ T6157] usb 9-1: SerialNumber: syz [ 555.494447][ T6157] usb 9-1: config 0 descriptor?? [ 555.731497][T12106] bt_err_ratelimited: 23 callbacks suppressed [ 555.731509][T12106] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 555.733926][T12106] Bluetooth: hci2: adv larger than maximum supported [ 555.736681][T12106] Bluetooth: hci2: Malformed LE Event: 0x0d [ 555.740139][ T6022] usb 9-1: USB disconnect, device number 4 [ 555.968348][T13825] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 555.991468][T13825] 8021q: adding VLAN 0 to HW filter on device bond14 [ 555.994480][T13825] bond13: (slave bond14): Enslaving as an active interface with an up link [ 556.293527][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 556.299050][T13847] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.302296][T13847] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.727771][ T6157] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 557.243379][T13858] ------------[ cut here ]------------ [ 557.245676][T13858] WARNING: CPU: 2 PID: 13858 at fs/nsfs.c:493 nsfs_fh_to_dentry+0x9de/0xe10 [ 557.249735][T13858] Modules linked in: [ 557.251508][T13858] CPU: 2 UID: 0 PID: 13858 Comm: syz.4.1856 Not tainted syzkaller #0 PREEMPT(full) [ 557.256077][T13858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.259857][T13858] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 557.261647][T13858] Code: dc 4f ff e9 63 fe ff ff e8 ef 32 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 e1 32 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 d3 32 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 c5 32 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 557.267929][T13858] RSP: 0018:ffffc900031b7b08 EFLAGS: 00010283 [ 557.269841][T13858] RAX: 0000000000000080 RBX: 0000000000000000 RCX: ffffc9002a5b4000 [ 557.272312][T13858] RDX: 0000000000080000 RSI: ffffffff8247a18d RDI: 0000000000000004 [ 557.274998][T13858] RBP: ffff888066763f08 R08: 0000000000000004 R09: 00000000f0000014 [ 557.277819][T13858] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000636f62 [ 557.280312][T13858] R13: ffff88801c396000 R14: 00000000f0000014 R15: 0000000000001001 [ 557.282786][T13858] FS: 0000000000000000(0000) GS:ffff8880979e4000(0063) knlGS:00000000f54bdb40 [ 557.285898][T13858] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 557.288090][T13858] CR2: 00000000f54bce7c CR3: 000000004f029000 CR4: 0000000000352ef0 [ 557.290630][T13858] Call Trace: [ 557.291727][T13858] [ 557.292696][T13858] ? kasan_save_stack+0x33/0x60 [ 557.294391][T13858] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 557.296153][T13858] ? do_handle_open+0x564/0xc90 [ 557.297806][T13858] ? __do_fast_syscall_32+0x7c/0x300 [ 557.299826][T13858] ? do_fast_syscall_32+0x32/0x80 [ 557.301887][T13858] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.304678][T13858] exportfs_decode_fh_raw+0x164/0x7d0 [ 557.306882][T13858] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 557.309501][T13858] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 557.311830][T13858] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 557.314382][T13858] do_handle_open+0x702/0xc90 [ 557.316397][T13858] ? __pfx_do_handle_open+0x10/0x10 [ 557.318691][T13858] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 557.321210][T13858] ? __do_fast_syscall_32+0x7c/0x300 [ 557.322934][T13858] __do_fast_syscall_32+0x7c/0x300 [ 557.324679][T13858] do_fast_syscall_32+0x32/0x80 [ 557.326706][T13858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.329444][T13858] RIP: 0023:0xf70cd579 [ 557.331186][T13858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.339319][T13858] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 557.342806][T13858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 557.346114][T13858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.349606][T13858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.352152][T13858] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 557.355375][T13858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.358644][T13858] [ 557.359641][T13858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.362017][T13858] CPU: 2 UID: 0 PID: 13858 Comm: syz.4.1856 Not tainted syzkaller #0 PREEMPT(full) [ 557.365123][T13858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.369130][T13858] Call Trace: [ 557.370569][T13858] [ 557.371847][T13858] dump_stack_lvl+0x3d/0x1f0 [ 557.373834][T13858] vpanic+0x640/0x6f0 [ 557.375557][T13858] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 557.377694][T13858] panic+0xca/0xd0 [ 557.379423][T13858] ? __pfx_panic+0x10/0x10 [ 557.381334][T13858] check_panic_on_warn+0xab/0xb0 [ 557.383449][T13858] __warn+0xf6/0x3c0 [ 557.384937][T13858] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 557.386572][T13858] report_bug+0x3c3/0x580 [ 557.387935][T13858] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 557.389534][T13858] handle_bug+0x184/0x210 [ 557.390906][T13858] exc_invalid_op+0x17/0x50 [ 557.392344][T13858] asm_exc_invalid_op+0x1a/0x20 [ 557.393895][T13858] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 557.396108][T13858] Code: dc 4f ff e9 63 fe ff ff e8 ef 32 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 e1 32 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 d3 32 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 c5 32 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 557.403765][T13858] RSP: 0018:ffffc900031b7b08 EFLAGS: 00010283 [ 557.406309][T13858] RAX: 0000000000000080 RBX: 0000000000000000 RCX: ffffc9002a5b4000 [ 557.409577][T13858] RDX: 0000000000080000 RSI: ffffffff8247a18d RDI: 0000000000000004 [ 557.412849][T13858] RBP: ffff888066763f08 R08: 0000000000000004 R09: 00000000f0000014 [ 557.416167][T13858] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000636f62 [ 557.419409][T13858] R13: ffff88801c396000 R14: 00000000f0000014 R15: 0000000000001001 [ 557.421844][T13858] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 557.423496][T13858] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 557.425141][T13858] ? kasan_save_stack+0x33/0x60 [ 557.426707][T13858] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 557.428368][T13858] ? do_handle_open+0x564/0xc90 [ 557.429898][T13858] ? __do_fast_syscall_32+0x7c/0x300 [ 557.431531][T13858] ? do_fast_syscall_32+0x32/0x80 [ 557.433100][T13858] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.435276][T13858] exportfs_decode_fh_raw+0x164/0x7d0 [ 557.437309][T13858] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 557.439165][T13858] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 557.440868][T13858] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 557.442741][T13858] do_handle_open+0x702/0xc90 [ 557.444248][T13858] ? __pfx_do_handle_open+0x10/0x10 [ 557.445924][T13858] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 557.447814][T13858] ? __do_fast_syscall_32+0x7c/0x300 [ 557.449474][T13858] __do_fast_syscall_32+0x7c/0x300 [ 557.451095][T13858] do_fast_syscall_32+0x32/0x80 [ 557.452611][T13858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.455337][T13858] RIP: 0023:0xf70cd579 [ 557.457175][T13858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.464984][T13858] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 557.468482][T13858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 557.471757][T13858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.474319][T13858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.477491][T13858] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 557.480297][T13858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.482804][T13858] [ 557.484494][T13858] Kernel Offset: disabled [ 557.485886][T13858] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:57:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000010a4a31 RBX=0000000000000000 RCX=ffffffff8b6202d9 RDX=0000000000000000 RSI=ffffffff8daffadf RDI=ffffffff8bf1d740 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908365d0 R15=0000000000000000 RIP=ffffffff8b61ed8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005739c99c CR3=0000000063a28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9128123c RBX=ffffffff909f5bc4 RCX=dffffc0000000000 RDX=1ffffffff213eb78 RSI=0000000000000000 RDI=ffffffff909f5bc4 RBP=ffffffff909f5bc4 RSP=ffffc90002dcef18 R8 =ffffffff91281242 R9 =0000000000000000 R10=0000000000000000 R11=0000000000013df6 R12=ffffffff909f5bc4 R13=ffffffff823df668 R14=ffffffff909f5bc4 R15=ffffffff909f5bc4 RIP=ffffffff816b2b90 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000317ecffc CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852cba05 RDI=ffffffff9adeee80 RBP=ffffffff9adeee40 RSP=ffffc900031b7470 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adeee40 R15=ffffffff852cb9a0 RIP=ffffffff852cba2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979e4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f54bce7c CR3=000000004f029000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000006a29a3 RBX=0000000000000003 RCX=ffffffff8b6202d9 RDX=0000000000000000 RSI=ffffffff8daffadf RDI=ffffffff8bf1d740 RBP=ffffed10037e7000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801bf38000 R14=ffffffff908365d0 R15=0000000000000000 RIP=ffffffff8b61ed8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000000 CR3=000000004f029000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000