last executing test programs: 58.43214768s ago: executing program 2 (id=712): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x16, 0xffffffffffffffff, [{0x6, 0x2}, {0x0, 0xe, "47b920ea3bdaab43c4679e7b"}]}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev, @empty, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x2, 0x3, 0x0, [{@empty}]}, @ssrr={0x89, 0xf, 0x83, [@private, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast]}, @ssrr={0x89, 0xf, 0x96, [@dev={0xac, 0x14, 0x14, 0x38}, @local, @loopback]}, @timestamp={0x44, 0x4, 0x0, 0x0, 0xf}]}}, "963b0f0832f9089f"}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000edffffffffffffffb7d552e3e990e6163782000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x5000) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0xf, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) 55.189841646s ago: executing program 2 (id=729): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/171, 0xab}, {&(0x7f0000000180)=""/235, 0xeb}], 0x2, 0x3, 0x0) (fail_nth: 3) 55.009586359s ago: executing program 2 (id=731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xc, 0x1}, {0x4, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xe0, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'veth0_virt_wifi\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000004000000037400061400060069703667726530000000000000000000080007000000000008000400643101010800"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="a5d753ad472d48c3cc0075c054f2946a73dd0edb594cf6d14060d6326ab3ce7f6a11a5156e9c40163ba9c095f774a5d54436b929c4dbee4585e41270434e8b46d81dad2c402e475d", @ANYRES64=0x0], 0x20) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r11, 0x4, 0x70400) readv(r11, &(0x7f0000000380)=[{&(0x7f0000000540)=""/201, 0xc9}], 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c086de8", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007801800018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 54.796583535s ago: executing program 2 (id=732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813cbfba79cae0486c4303d9d8aba8e590094c6a6abac2699434a0b1dba046dbb65b2bef", 0x25, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 54.681163034s ago: executing program 2 (id=733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000004c0)={0xfa00000000000000, 0xeeee0000, 0x1008000009, 0x8, 0x2}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0x1}, 0x8) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x800008, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x3, 0x0, {{0x3e, 0x4, 0x2, 0x9, 0xf8, 0x65, 0x0, 0xff, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x28, 0x3a, 0x0, 0x6, [0x337c, 0x3, 0x0, 0x5, 0x6, 0x8, 0x7b, 0x7, 0x9714]}, @lsrr={0x83, 0xf, 0x9, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x0, 0x2}, {0x6, 0xa, "7d4651f0b86c88e7"}, {0x7, 0x5, "8cde36"}, {0x5, 0xc, "58f80ef74ab501d168f1"}, {0x7, 0x6, "3b40a211"}, {0x2, 0x7, "4e7b1ac008"}, {0x6, 0xd, "e4b639b1800be9c78a253b"}, {0x2, 0x10, "f2d4bf1f12b677ff010baf070f48"}, {0x6, 0x10, "cc671d3817f1ee92497d26119e28"}]}, @ssrr={0x89, 0x27, 0xf7, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @local, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @multicast2]}, @rr={0x7, 0xf, 0x77, [@private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x4, [{@rand_addr=0x64010100}, {@loopback, 0x3}]}]}}}}}) sendmmsg$inet6(r3, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x200, @mcast1, 0x80000000}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="e49c5740ecf896eb25ec91a5ee87fe11f071448d4ed03332a76773aab9d514514009162d94d3cb3b8965084d9823ef178058a7996cdd33fe95ac0d6fbf9cc70624b417dbb93e9252c9ce8c0c2411ae43525b1ad23e82b3447388f0eb9958558c57d59a2be465222cf625c79138f049e645c62cd5c09b4ebe3441811747cf2f3071f330a60348b5f8a31111d08bd72ff56fa9b0245ea1591215fed38aad7e2792696a4f6f1ef2fbda7cbd8615da635d1472017bb096fec716f28628cfee287915d48cc5fe511a231d5603d76ade79ebc23ebb84b399a492afebe422043f257c28bafa7e17a3ea", 0xe6}, {&(0x7f00000002c0)="8d613261119e254280787cac983b7b51279732488ac57741b33387a460b0e9c83f8180", 0x23}], 0x2, &(0x7f0000000340)=[@rthdr_2292={{0x24, 0x29, 0x39, {0x16, 0x2, 0x1, 0x5, 0x0, [@local]}}}, @rthdr={{0x44, 0x29, 0x39, {0x33, 0x6, 0x2, 0x6, 0x0, [@local, @remote, @private2]}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="9d218847d09eb6cd5f2a2bd0725f6e69730b082a63da6c98c97cc81c839fe6921742afcf6ff7cd5f72d1c2030f41d64052e418b18267979aca2b9fb902074aa83a3b1a8628e30f4cbd82a4dbef505d6eb8d9cc95f39d37a370213f4174192ccc023d94ae695d8f9bf29c2cd20032ea59a37493eccb53903a", 0x78}, {&(0x7f0000000440)='V', 0x1}], 0x2, &(0x7f0000000640)=[@hopopts_2292={{0x1c, 0x29, 0x36, {0x29, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfbff}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@empty, r5}}}], 0x3c}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0x4, @local, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000006c0)="70f3d7e584fdb4a0115fe71c8ebef6e594df3082f79ac9f1d74a84ca96a4ea0e2f0d43e94fe145c6fecddca50c80db60a69215e0a18a6af8ea6de94bdd33971e4feecfd1676c50d0a059e6bb16e36fb7f8ab69d8053ceb1f87b1b976462e7446562618d8df4cf072bca2196668aceb6547b13f310c05e5799186c393fe37ba11d9a89652c705a94e3797cf897033dd12b8d388c3ca064a", 0x97}, {&(0x7f0000000780)="29397a7eb7522640d432f9d2e2eaf457881c4c973a96240236c8b8b68141ed4123b87ef97aa91dcecea3516f552e8600e641f634cd75950fac15d989690f7b55a27cac6b79d517bfda5c440b29d9c5672f733f53b1a6a03f51255b66f18f4a25dc56bca37ba7b5c492140311a6eda829504dd0e97debf007459616ca040de41d209a148f7f45e4ed099eee46b55d822f21295a16a68cad64e06174e8f9a747de245b1ff8fd9851a3352da46433847f8dbdbdf2d6edbe970a48fd13a70e4544b1df7a4e210bb61efedae71e562ca38c0f988ef15d9022186fb2f70e64747dfc7d96e8bf61bbe3b0fcb3109afea4aa28a14970", 0xf2}, {&(0x7f0000000880)="5c23276b27b44848957c1ae11e058af4e50b6e98833ad0602f396ba4aa456345417862f44e2239a42b60e72c483c5e4db196250de5cfc8ff712cd19f698fb3c5e1c656e5bf91e4b9d355989f0f0fb348ecd46cab8770142c5add0886b3bbef55daba07f702882177fb11e0950b1053342e423c4c1dcb23", 0x77}], 0x3, &(0x7f0000000940)=[@tclass={{0x10}}, @rthdr_2292={{0x94, 0x29, 0x39, {0x0, 0x10, 0x1, 0x5, 0x0, [@mcast1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast1, @private0, @private0, @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @hopopts_2292={{0x4c, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xff}, @calipso={0x7, 0x10, {0x2, 0x2, 0xdc, 0x1, [0x7fffffffffffffff]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc}, @padn, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}, @dstopts_2292={{0x64, 0x29, 0x4, {0xc, 0x9, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x4, [0x8, 0x5, 0x2, 0x6, 0x4]}}, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x6c, 0x5, '\x00', [@ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0x4, [0x1, 0x3]}}, @enc_lim={0x4, 0x1, 0xd4}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}, r5}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x88, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x94, 0x29, 0x39, {0x73, 0x10, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private0, @remote, @empty, @mcast2, @mcast1, @private1]}}}], 0x268}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @private1, 0x9}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000c00)="ed12e73750d5581bca03a26566f1237f57575e65f7040797ffd52c3dc5c6e2fdb88aec8d9fed6f193645ca340f3a3545d968192410bdcdead1fb71", 0x3b}, {&(0x7f0000000c40)="419b66331205abf282b8ce89761cd6cfdffc9159f0d192f00b7aa24b5d9acedd241a0d2b60eb6b5b65f4ecca7df77a81d3476adc", 0x34}, {&(0x7f0000000c80)="8749380f90a8de64630df5b00b749116e6f1198e5f6932416068", 0x1a}, {&(0x7f0000000cc0)="e8c6f6835df50ecfaf0b4b43279a37d2d16f58e06a46efebd0caf0b1876477b4b9de0fdd5b2a79966c5480e23a40f0fd807f3f5dd5ccd3be922f30aa0aa191ddab8210e08de15a2a63316da0bf2912d387ae835b0f0ecd9483f987a9f2c8f5b87fbae1d73bdfa74534916a037fda4ade7086c8b48088b25a6548e3baf7ac4948653fe381d7372d98ad10e4fb0b612b207de7840fd69e0bab27e769f92ad299e2864107c30c", 0xa5}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="7d19de26a8d5010767ef9c3b40ec423ae6e904dd7d626f6968687d2d8a976a0a70f6973e84e5858f5b320569ac79e44079d371bd3e7cd61b6273863303ef056b1221eecc75959a0041ed168cab4fa82f1007c10b13dfc8", 0x57}, {&(0x7f0000001e00)="7b3b510bf32bda0816d0ee66a42c160b95480760d8edd63cfe7655f0d90aea5962", 0x21}], 0x7, &(0x7f0000001e80)=[@rthdrdstopts={{0xfc, 0x29, 0x37, {0x0, 0x1c, '\x00', [@generic={0x6, 0x70, "cab5ce7e2f1fa9eb47b8ba9227c3ddcb137125d4333cd41cae6e84bcbaa890b272269d0f5dfc3d70d16d2db5d832be1691f4fae20ba2c685442adc1ae9fb1282dc542062ff41441eceed52a38123b3f4248fff6aa03bc768d9f12dd29558cecde5c375b5d5262103552257ad7e660ec9"}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x58, {0x3, 0x14, 0x6, 0x77, [0xa, 0x3, 0x101a, 0x887, 0x7fffffff, 0x2, 0x7, 0x6, 0x8000, 0x3]}}, @pad1]}}}, @rthdr={{0x24, 0x29, 0x39, {0xc, 0x2, 0x2, 0xe, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x120}}], 0x4, 0x4001c04) 54.500033668s ago: executing program 2 (id=734): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002400fc0d7eb3010125bd7000fcffffff05000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008000000000003"], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000028ee79b733eda6cf552528c20fe9e985a09cc04d9f4411ba6be3ad71d68c17dd93fba90071c7aaeebca4a92eaf7b465317555de859c1f10a0a621af40a5c75418ee8d7c4abb67d84840be5cf5c882065f17af3940f0614e09065f798dee7c8740ff98e938c7effbe9766506769434ca659e101445efbe1e99cbc70372c6c0136b5dcc0719c90b0a8314bbabea1b1f2fbd11ec3c19999a61c38c3606b2a53aaeca74eafa9a41ad701f810051a012be0746eb607fd121cfef000000700"/204, @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) accept4$inet(r7, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x180, r8, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c55803e2965caee96252769694"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e7e996fa7b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "df6653ad054e5032420a9ccb22"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "1d4e"}, @NL80211_KEY_SEQ={0x13, 0x4, "95d747f30d442dee919a6948503769"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff2b78}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbba5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/171, 0xab}, {&(0x7f0000000280)=""/233, 0x130}], 0x2, 0x3, 0xa37) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) 39.341397467s ago: executing program 32 (id=734): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002400fc0d7eb3010125bd7000fcffffff05000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008000000000003"], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000028ee79b733eda6cf552528c20fe9e985a09cc04d9f4411ba6be3ad71d68c17dd93fba90071c7aaeebca4a92eaf7b465317555de859c1f10a0a621af40a5c75418ee8d7c4abb67d84840be5cf5c882065f17af3940f0614e09065f798dee7c8740ff98e938c7effbe9766506769434ca659e101445efbe1e99cbc70372c6c0136b5dcc0719c90b0a8314bbabea1b1f2fbd11ec3c19999a61c38c3606b2a53aaeca74eafa9a41ad701f810051a012be0746eb607fd121cfef000000700"/204, @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) accept4$inet(r7, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x180, r8, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c55803e2965caee96252769694"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e7e996fa7b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "df6653ad054e5032420a9ccb22"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "1d4e"}, @NL80211_KEY_SEQ={0x13, 0x4, "95d747f30d442dee919a6948503769"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff2b78}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbba5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/171, 0xab}, {&(0x7f0000000280)=""/233, 0x130}], 0x2, 0x3, 0xa37) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) 9.719586533s ago: executing program 3 (id=984): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) writev(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.652701638s ago: executing program 3 (id=985): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x10000, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 9.571414467s ago: executing program 3 (id=986): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) r4 = syz_open_pts(r3, 0x2000) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0305720, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r8, &(0x7f0000000c00), 0x57, 0x40000060, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000018c0)={r11, 0x0, 0x0, 0x4}, 0x20) name_to_handle_at(r10, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)=@FILEID_INO32_GEN={0x8, 0x1, {0xb, 0xfffffff9}}, 0x0, 0x600) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r12], 0x3c}}, 0x8000) 9.40102484s ago: executing program 3 (id=987): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18ee, 0x40000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa08, 0x20, 0x2, 0x342, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x80, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6f1, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) semctl$SEM_INFO(0x0, 0x2, 0x13, 0xfffffffffffffffe) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000040)='./file0\x00') r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r13, &(0x7f0000001800)={&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f00000017c0)=""/12, 0xc}, 0x23) io_setup(0x1a2c, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) io_submit(r14, 0x4, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x2, r11, &(0x7f0000000100)="f35b1f7903309bfc93e96ed6791fa0ad9eaf5d66259c57f4add4e87b8ae9ee5de6e3599253e1822ed09b10a707150b56", 0x30, 0x2f77, 0x0, 0x1, r6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x2, r10, &(0x7f0000000200)="48e40fe8164b966aa8bb084f9e5f8ab34a9eb034cd582956c12f036db71c9082eb946399a98f5529657ddf5f6616950a13e8f847332f6ea1ebd4a196be68e1d41f7f6da4285f2a92de2565f91ec595a9a11933f17361d1d1555e218007dac9e59e9e75b5367975569d0008f54602c9fbc5fc0d6a5e35c5425a23771aee3847e34fe8aab8ce34bd711be7d76bcb4b6ac0743b580a5c8f86d08b265c5a8aae4243fb85d6694cfd7de7fe7bb0237ebcc5838ee832a361e6", 0xb6, 0x7ff, 0x0, 0x3, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000500)="d4544a766c061ca1f0470f067763adf3d003083420ae0db4902f370b01f1f1564424b29db2660ab3115c1a85d15d120bf4d9fe0bbd8d7efef7042cafcdc03ea4907b64aa1761ed8cf0f44cd7416135a1f7ef7e666f494f275f079d9b9e59927910629b5d2c76a478d9048903512f9c2c9e92c155a3adacfce7a8e55957", 0x7d, 0x8000000000000001, 0x0, 0x0, r15}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xff5c, r7, &(0x7f0000000600), 0x0, 0x7, 0x0, 0x3, r6}]) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.161682673s ago: executing program 4 (id=988): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x6, &(0x7f0000000240)=[{0x0, 0x10, 0x2, 0xe}, {0x11, 0xf9, 0x8, 0x205}, {0x7, 0x40, 0x7, 0x2}, {0x7f, 0xf2, 0x6, 0x3}, {0x1, 0x3, 0x80, 0x3}, {0x8, 0x5, 0x4, 0xb}]}) exit(0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x38414262, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x4, 0xfd58, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 8.416217756s ago: executing program 3 (id=993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$full(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) sendto$packet(r1, &(0x7f0000000040)="7a2ff30792b0a0457bb1c7d9be21ecb30eeebe84cce9041ebd", 0x19, 0x10, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x1, 0x6, @local}, 0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) syz_emit_ethernet(0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffe7ed17579432bbc6ffffff080601108100060c0108000000000000bce236a15ba081ce7bcf44380180c2000003bcd3423457fe935c2223d5d9471f1112a4e7eef2f7d7f6c9b0079e5c1a5f107010839aa0f30a7a9eb9d248caae84c319ed1216b0052fe0d6ce4ac81a8273126557cd0000dd0c68c286a0975b46c0770d1348d1fc1131fdecce6209655a1d69196b9965cf516e651ceac34dc257c503b3f3183007e01d50c5f7ce4f73221dd1178f292b95a94e1c98de11f9b2721364160b5be72d88d9b3de6d9200000000000000"], &(0x7f0000000240)={0x1, 0x1, [0x1f9, 0x3ba, 0x905, 0x850]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000440)={0x7, 0x7b, 0x2}, 0x7) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x2, @loopback, 0x1}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="120002"], 0xc) r5 = signalfd(r4, &(0x7f0000000300)={[0x4, 0x7]}, 0x8) connect$packet(r5, &(0x7f0000000400)={0x11, 0x10, r2, 0x1, 0x2b}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r7}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d0088970d1a02090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000265000/0x3000)=nil, 0x3000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EVIOCGMASK(r9, 0x5b01, 0x0) 8.28133065s ago: executing program 4 (id=994): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x9}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2100}], 0x36, 0x0, 0x0, 0x0) unshare(0x400) unshare(0x8000000) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 8.140745776s ago: executing program 3 (id=995): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x1ff, 0x2, 0x10, 0x2, 0x200, 0x76, 0xfffffff8, 0x80009, 0x0, 0x7, 0x7, 0x7, 0x2a, 0x0, 0x1, 0x0, 0x7, 0x3, 0x7fffffff, 0x489, 0x4, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x2f6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f046}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000248000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000140101800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) close(0x3) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000010}) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000440)=""/147, 0x93}], 0x3, &(0x7f00000006c0)=""/111, 0x6f}, 0x6}], 0x1, 0x10020, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 7.904065385s ago: executing program 33 (id=995): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x1ff, 0x2, 0x10, 0x2, 0x200, 0x76, 0xfffffff8, 0x80009, 0x0, 0x7, 0x7, 0x7, 0x2a, 0x0, 0x1, 0x0, 0x7, 0x3, 0x7fffffff, 0x489, 0x4, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x2f6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) read(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f046}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000248000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000140101800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) close(0x3) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000010}) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000440)=""/147, 0x93}], 0x3, &(0x7f00000006c0)=""/111, 0x6f}, 0x6}], 0x1, 0x10020, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 7.452438089s ago: executing program 4 (id=997): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000400)={{0x0, 0x2, 0xe83d, 0x4, 0x38, 0x9, 0x8000000000000000, 0x7, 0x9, 0x6, 0xfff, 0xe, 0xffff, 0xcb2f, 0x7fff}, 0x8, [0x0]}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0xffe9, 0x0, 0x1, 0xa, 0x4}) rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000003c0)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x10, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) mount$binderfs(0x0, &(0x7f0000000500)='./binderfs\x00', &(0x7f0000000540), 0x3000002, &(0x7f00000005c0)=ANY=[@ANYBLOB="ed61783d3030303030303030303030303149f7ff053737373737372c00"]) socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 6.544476059s ago: executing program 0 (id=1002): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x6, &(0x7f0000000240)=[{0x0, 0x10, 0x2, 0xe}, {0x11, 0xf9, 0x8, 0x205}, {0x7, 0x40, 0x7, 0x2}, {0x7f, 0xf2, 0x6, 0x3}, {0x1, 0x3, 0x80, 0x3}, {0x8, 0x5, 0x4, 0xb}]}) exit(0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x38414262, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 6.44139277s ago: executing program 4 (id=1003): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}}, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xf000, 0x0, 0x9, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 5.429151357s ago: executing program 0 (id=1005): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 5.16141636s ago: executing program 5 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x6, 0x100, 0x6, 0x5, 0x100, 0x40000000001, 0x0, 0x9], 0x1, 0x360200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) capset(&(0x7f0000000180), &(0x7f00000003c0)={0xffffffff, 0x8, 0x8, 0xffffffff, 0x4, 0x3ff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) openat$userio(0xffffff9c, &(0x7f0000000040), 0x300083, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.466337894s ago: executing program 4 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100), 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000504008000080000ef6900000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x9d) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r9, @ANYRESDEC, @ANYRES16=r8, @ANYRESDEC=r6], &(0x7f0000000300)='GPL\x00', 0x299, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x800004}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@empty}, &(0x7f0000000440)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24048001}, 0x8c000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 4.182561335s ago: executing program 5 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000000007fffffff000005"], 0x48) add_key$user(0x0, 0x0, &(0x7f0000000300)="bd4ed4cf3bd02b5f36a482ce2d55e42cf0c30213fffdfb3a3c965718ac2fa155edee72831e4a41e3dfc8995bf0313e6ee5cb4203a80cbf2d9b2c67f7354fc91a7a", 0x41, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)="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", &(0x7f0000000040), 0x803, r0}, 0x38) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0xcc, 0x9, 0x3, 0x234, 0x3c2, 0x0, 0x3e5, 0x9}, "303c9cd574aa4399198a7b1118252dd20aa3d8397e8cc93ed251916cebd7b25098e6a0f3d95b2f9a8863791ecc3b4481a8287a423ed7d5504bb0847198bc435025fb35f70ecec3410062f04b2671f842424bf99797619ba875bd221e0bb10b1d60ee32a8dba0d544f92d89c676557c", ['\x00', '\x00']}, 0x28f) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4c850}, 0x4000005) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x6b725752, 0x3}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20b82, 0x0) r7 = syz_clone(0x6000, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r7, 0x4007) write$sequencer(r6, &(0x7f00000001c0)=ANY=[], 0x51) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.929063439s ago: executing program 5 (id=1012): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000048040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703", 0x44}, {&(0x7f0000000840)='C11O', 0x4}], 0x2}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000010401010000000000000000030000000500010002000000003a341472d3a3bf8dde631809ffac1a06222cacc71ca90bd6cfb193bb73f8c6f4b37c5d7e9373c9953c2a4fa1213d283bbecdd2b186d92ef17ad5a1cbd0b4300fc294"], 0x1c}, 0x1, 0x0, 0x0, 0x2008c016}, 0x94) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="0000000000e5400000000000", 0xfdb8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="06", 0x1}) close(r0) r3 = syz_usb_connect$midi(0x6, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="120101020000004030144740000102030109026000010109f0010904000000010330021524030240070a000203043701937f0488450c0701112403020305060703090904ff0f000103132403010c06014005f8730708002c0705080215240301080700a40509fd0109ffe003190714040500"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES16], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120110013b0000000079673165b44857f4cdaa3e57ecd6000000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) userfaultfd(0x80001) 3.291378565s ago: executing program 0 (id=1013): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000086770000000000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa1fd000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000180100002020702500000000002020207b1a15fe00000000bfa100000000000007010000f8ffffffb702000008000000ce00b703000004000000850000000600000095000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000140)=0x2) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) r4 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) close(0x3) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 3.241149858s ago: executing program 0 (id=1014): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000086770000000000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa1fd000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000180100002020702500000000002020207b1a15fe00000000bfa100000000000007010000f8ffffffb702000008000000ce00b703000004000000850000000600000095000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000140)=0x2) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) r4 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) close(0x3) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 3.201412024s ago: executing program 0 (id=1015): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x1, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) 3.12115182s ago: executing program 0 (id=1016): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x108, 0x1, &(0x7f00000001c0)="17c20000000040000000000000000000", 0x10) r5 = userfaultfd(0x801) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x204, 0x6, 0xcb, 0x6, 0x8, @broadcast}, 0x10) listen(r6, 0xfffffe01) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.789559685s ago: executing program 4 (id=1022): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) syz_usb_disconnect(r0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x5f1, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2c, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x7b, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x61, 0x1, 0xd}}}}}]}}]}}, 0x0) 870.930407ms ago: executing program 5 (id=1023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0xc8081, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)={@private=0xa010100, @local, 0x0, 0x3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}]}, 0x1c) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x30000000}) timerfd_settime(r5, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000180)={0x0, 0x9000, 0x1}) ioctl$RTC_UIE_ON(r3, 0x7003) writev(r6, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000005500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000054c0)={&(0x7f0000004280)={0x121c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x3f, 0x45, "8fe483c0edc29b6d19ba36560a712771d9527a6607eee0b114cd0a6318404f11069ae102e2b89ac209d95ff6401663e0e2571c59d3c6edf968b344"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "f52b813fbbbc9feaa2f9eb30e459964fa6e78c5633653e01e30f8149987fe1d6f22dd13d8120ede7a72a1b6a78a256a0c715039bbbe594de6d5924c1370033c527ddee447eda942184dacc74730afcd32bb232b518742c13042fb441930ddfa5f286"}, @NL80211_ATTR_TESTDATA={0x97, 0x45, "3dc68b2f29420d76a678972af794cdb2fa4c9f1e17b5a71415fdb8fd84cfb0e0a5483b7b8484375a9f80225b709039a97a8c74124f8ce65b8c9c7cf0e3ca34f7ef2c6f1eac1b68050adbc3ad35b3c61b45ad4cca049320dfc8bca57c3017f88d241a49d245f22a87eea5327a79c196d6dcdb58544862251058da4695bbb43f578a1fd5ff49526f43af8fc12ec68e4307ce96ab"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "554a2cf2ae82f56432051e8c26d000c09cd2209da71dd7ef411763eee39209dc7e0fffd45d660548df511ec7eb126d573e810f443deb27ae1d55031117fc1b8e0c62da69126d2730d8e2a112cd475f9eecee536fa9772c1031cac90166cc712f9c24dcb84178309ac815b1a30e826f404967ec8b711d0ecfbb2a6fa3191ceb6b6f70368e933cb4f12e92b3171ec53af078f224e17f942ba09392d453a5ad09654e383615b94f41973d8889f8f46877efd40dc6e6b3"}]}, 0x121c}, 0x1, 0x0, 0x0, 0x4004050}, 0x40000) write$FUSE_INIT(r6, &(0x7f0000002240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1, 0x80, 0x2, 0x7, 0x3, 0x100, 0x0, 0x0, 0x10, 0x2}}, 0x2f) close(r6) r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140), 0x48100, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/216, 0x18000, 0x800, 0x3}, 0x1c) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/13, @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf252100000008000300", @ANYRES32=r11, @ANYBLOB="14002c8008000000b10400000800000010000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x40818) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1d8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0xfffffff4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8bea}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x197e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x80c4) 701.190477ms ago: executing program 1 (id=1024): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x54}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) 700.846896ms ago: executing program 1 (id=1025): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x1c) r1 = openat$sr(0xffffff9c, &(0x7f0000000300), 0x100, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ff070000000008000100000018c600fb", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185a00000a000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000085000000ad000000186e00000000000000000000070000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x5e8, 0x60, &(0x7f0000000680)=""/96, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0x7, 0x18000, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[r2], &(0x7f0000000800)=[{0x1, 0x5, 0x8, 0x6}, {0x2, 0x4, 0xc, 0x4}, {0x4, 0x3, 0xe, 0x7}, {0x1, 0x4, 0x8, 0x3}, {0x3, 0x2, 0xa, 0x8}, {0x2, 0x1, 0xe, 0xc}, {0x1, 0x5, 0xa, 0x8}], 0x10, 0x10}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000000)={{0x8, 0x40}, {0x80, 0x59}, 0x3, 0x4, 0x9}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair(0x2c, 0x5, 0x7, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c0000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="a8540030800400c2771669876b9a4b7900c41ebe35592cb8bbe83a4a3a87743379f6c5b0e36c1b6f7b2f4d2fa88535e038969b98db1e0e668133d7c6c8bbd293534fb787320b8058358a2a8c21ac7d81303642e00b9eb830bf5b2eb0a422302cf49ad6ce0347f6edb6e227aef35657c9eb1df22d711d1d89e2"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0xc0) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f00000003c0)={0xffffffff, 0x7}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0, 0x0, 0x0, 0x0, r10}) 619.68406ms ago: executing program 1 (id=1026): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x34b5, 0x100, 0x2, 0xac}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3400}, [@RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0xa}}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 611.334728ms ago: executing program 5 (id=1027): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x18}}, 0x4804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="5b810eb3ed232c2d", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) setgid(0xee00) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$COMEDI_RANGEINFO(r6, 0x80086408, &(0x7f0000000180)={0xfffff800, &(0x7f0000000140)=[{}]}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e800000012000100000000000000000073686133383400000000000000000000000000000000f2000004000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000003adfbc000000200000000800010000"], 0xe8}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xb05, 0xec000000, 0xcd}]}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x2, 0x7, 0x0, 0x96a7, 0x8, 0x6, 0x27, 0x4, 0x3, '\x00', 0x8, 0x5}) socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 609.436342ms ago: executing program 1 (id=1028): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x28c9c1, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x71}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x109, 0x0, @buffer={0x0, 0xf5ff, 0x0}, &(0x7f00000001c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f00000000c0)={'full', 0x20, 0x17e, 0x20, 0x800000000104002}, 0x2f) close_range(r0, 0xffffffffffffffff, 0x0) 391.159276ms ago: executing program 5 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x6, 0x100, 0x6, 0x5, 0x100, 0x40000000001, 0x0, 0x9], 0x1, 0x360200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) capset(&(0x7f0000000180), &(0x7f00000003c0)={0xffffffff, 0x8, 0x8, 0xffffffff, 0x4, 0x3ff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(0x0, 0x0, 0x2042) openat$userio(0xffffff9c, &(0x7f0000000040), 0x300083, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) ioctl$KVM_RUN(r2, 0xae80, 0x0) 341.54µs ago: executing program 1 (id=1030): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x52b00) ioctl$I2C_PEC(r1, 0x708, 0x8000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x9, 0x9, 0x2) 0s ago: executing program 1 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x4000058) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x800, 0x0, 0x103, 0x0, 0x0, 0x1}, 0x20) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf250300000510"], 0x18}}, 0x840) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x40, 0x2, 0xfffffffc, 0x0, 0x0}) r6 = socket$kcm(0x23, 0x5, 0x0) listen(r6, 0x800) listen(r6, 0x10000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x9743c5e338804fef) kernel console output (not intermixed with test programs): +0x10/0x10 [ 172.647169][ T7197] ? __pfx_ksys_write+0x10/0x10 [ 172.647188][ T7197] __do_fast_syscall_32+0xe7/0x970 [ 172.647201][ T7197] ? lockdep_hardirqs_on+0x78/0x100 [ 172.647219][ T7197] do_fast_syscall_32+0x32/0x70 [ 172.647230][ T7197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.647245][ T7197] RIP: 0023:0xf6feefec [ 172.647258][ T7197] Code: Unable to access opcode bytes at 0xf6feefc2. [ 172.647262][ T7197] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 172.647273][ T7197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 172.647280][ T7197] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.647286][ T7197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.647291][ T7197] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.647297][ T7197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.647310][ T7197] [ 172.849187][ T7203] Cannot find del_set index 0 as target [ 172.886629][ T7205] __nla_validate_parse: 1 callbacks suppressed [ 172.886643][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 173.320601][ T7229] Cannot find del_set index 0 as target [ 173.976579][ T7244] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 173.986135][ T7244] dummy0: entered promiscuous mode [ 173.988897][ T7244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.434722][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.359'. [ 174.447258][ T7251] Invalid ELF header len 9 [ 174.518093][ T7255] Cannot find del_set index 0 as target [ 174.810321][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 174.898267][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 174.982742][ T60] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.993480][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.002677][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.007993][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.018905][ T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.024028][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.038867][ T60] usb 7-1: config 0 descriptor?? [ 175.048603][ T7281] Cannot find del_set index 0 as target [ 175.082564][ T7283] No source specified [ 175.288821][ T5851] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 175.451605][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.455743][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 175.457726][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.459611][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 175.467216][ T5851] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 175.470622][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.472319][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.473694][ T5851] usb 8-1: Product: syz [ 175.473708][ T5851] usb 8-1: Manufacturer: syz [ 175.473720][ T5851] usb 8-1: SerialNumber: syz [ 175.479174][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 175.480964][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.490585][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.496909][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.501696][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.506234][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.513771][ T5851] usb 8-1: config 0 descriptor?? [ 175.515954][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.518870][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.519723][ T7279] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.521325][ T60] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.560525][ T60] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 175.609419][ T5851] rc_core: IR keymap rc-streamzap not found [ 175.611340][ T5851] Registered IR keymap rc-empty [ 175.616180][ T5851] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 175.621023][ T5851] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 175.664092][ T60] usb 7-1: USB disconnect, device number 5 [ 176.044790][ T41] usb 8-1: USB disconnect, device number 3 [ 176.478253][ T7303] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 176.483379][ T7303] syz_tun: entered promiscuous mode [ 176.489865][ T7303] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.652858][ T7307] capability: warning: `syz.2.378' uses deprecated v2 capabilities in a way that may be insecure [ 176.688091][ T7309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.695558][ T7311] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 176.746502][ T7311] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 176.759010][ T7311] bond2 (unregistering): Released all slaves [ 176.951560][ T7318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.138762][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.288799][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 178.414645][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.417935][ T60] usb 5-1: no configurations [ 178.422517][ T60] usb 5-1: can't read configurations, error -22 [ 178.771104][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 178.799154][ T42] audit: type=1326 audit(1784254030.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.808951][ T42] audit: type=1326 audit(1784254030.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.815641][ T42] audit: type=1326 audit(1784254030.319:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.824194][ T42] audit: type=1326 audit(1784254030.319:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.830750][ T42] audit: type=1326 audit(1784254030.319:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.837251][ T42] audit: type=1326 audit(1784254030.319:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.844428][ T42] audit: type=1326 audit(1784254030.319:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.851190][ T42] audit: type=1326 audit(1784254030.319:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.857668][ T42] audit: type=1326 audit(1784254030.319:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 178.865141][ T42] audit: type=1326 audit(1784254030.319:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.394" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6fef008 code=0x7ffc0000 [ 179.038790][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 179.198744][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 179.353735][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 179.364008][ T41] usb 7-1: no configurations [ 179.366058][ T41] usb 7-1: can't read configurations, error -22 [ 179.739553][ T7353] 9p: Bad value for 'rfdno' [ 179.943567][ T7374] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 182.101978][ T7406] comedi comedi3: comedi_config --init_data is deprecated [ 183.198800][ T61] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 183.360074][ T61] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 183.364052][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.367932][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.373244][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.377307][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.384446][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.389346][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.398814][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.402791][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.418839][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.422848][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.427542][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.432416][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.437085][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.443411][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.444652][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 183.448919][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.455291][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.459277][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.463856][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.467875][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.472048][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.476593][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.481870][ T61] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.485748][ T61] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.490816][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 183.496558][ T61] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.500720][ T61] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.504132][ T61] usb 7-1: Product: syz [ 183.505912][ T61] usb 7-1: Manufacturer: syz [ 183.507994][ T61] usb 7-1: SerialNumber: syz [ 183.529406][ T61] usb 7-1: config 0 descriptor?? [ 183.543609][ T61] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 183.718834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 183.830838][ T7429] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 183.835319][ T7429] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 184.317065][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 185.810830][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 185.968800][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.974752][ T7429] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 186.909131][ T7429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.918750][ T7429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.921979][ T7429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.925455][ T7429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.927293][ T7429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.930726][ T7429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.934482][ T7429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.953796][ T60] usb 7-1: USB disconnect, device number 8 [ 186.959857][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 187.179227][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.328703][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 187.331754][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 187.334612][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.337989][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.343827][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.348277][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.353335][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.356606][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.446195][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 187.616823][ T24] usb 5-1: usb_control_msg returned -32 [ 187.628958][ T24] usbtmc 5-1:16.0: can't read capabilities [ 187.658204][ T24] usb 5-1: USB disconnect, device number 11 [ 188.208756][ T5105] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.018952][ T5105] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.985516][ T7477] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 189.988065][ T7477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.998028][ T7477] vhci_hcd vhci_hcd.0: Device attached [ 190.302340][ T5105] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.938885][ T5757] usb 42-1: SetAddress Request (10) to port 0 [ 190.941636][ T5757] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 191.091449][ T5105] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.232366][ T7485] vhci_hcd: connection reset by peer [ 191.235949][ T12] vhci_hcd vhci_hcd.2: stop threads [ 191.237727][ T12] vhci_hcd vhci_hcd.2: release socket [ 191.239543][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 191.574346][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 192.368903][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.168779][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.737991][ T5457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.970068][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.972937][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.180375][ T7540] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 194.182488][ T7540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.191209][ T7540] vhci_hcd vhci_hcd.0: Device attached [ 194.243808][ T7541] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 194.367781][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 194.373713][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 194.608882][ T29] usb 38-1: SetAddress Request (18) to port 0 [ 194.611417][ T29] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 194.902465][ T7542] vhci_hcd: connection reset by peer [ 194.910831][ T12] vhci_hcd vhci_hcd.0: stop threads [ 194.912548][ T12] vhci_hcd vhci_hcd.0: release socket [ 194.916896][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 194.932806][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 194.936479][ T7561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 194.939190][ T7561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.949154][ T7561] vhci_hcd vhci_hcd.0: Device attached [ 194.954902][ T7564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.238842][ T5863] usb 40-1: SetAddress Request (10) to port 0 [ 195.451327][ T5863] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 196.758881][ T5757] usb 42-1: device descriptor read/8, error -110 [ 196.820308][ T7562] vhci_hcd: connection reset by peer [ 196.826247][ T12] vhci_hcd vhci_hcd.1: stop threads [ 196.827954][ T12] vhci_hcd vhci_hcd.1: release socket [ 196.835925][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 197.638358][ T5757] usb usb42-port1: attempt power cycle [ 197.924021][ T7607] FAULT_INJECTION: forcing a failure. [ 197.924021][ T7607] name failslab, interval 1, probability 0, space 0, times 0 [ 197.929401][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.0.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.929425][ T7607] Tainted: [L]=SOFTLOCKUP [ 197.929431][ T7607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.929439][ T7607] Call Trace: [ 197.929446][ T7607] [ 197.929452][ T7607] dump_stack_lvl+0x100/0x190 [ 197.929476][ T7607] should_fail_ex.cold+0x5/0xa [ 197.929494][ T7607] should_failslab+0xc2/0x120 [ 197.929515][ T7607] __kmalloc_noprof+0xfc/0x820 [ 197.929542][ T7607] ? trace_kmalloc+0xeb/0x110 [ 197.929562][ T7607] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 197.929583][ T7607] kernfs_fop_write_iter+0x26a/0x5f0 [ 197.929602][ T7607] iter_file_splice_write+0x830/0x10b0 [ 197.929639][ T7607] ? __pfx_iter_file_splice_write+0x10/0x10 [ 197.929667][ T7607] ? __pfx_copy_splice_read+0x10/0x10 [ 197.929702][ T7607] ? __pfx_iter_file_splice_write+0x10/0x10 [ 197.929728][ T7607] direct_splice_actor+0x192/0x690 [ 197.929754][ T7607] splice_direct_to_actor+0x345/0xa30 [ 197.929780][ T7607] ? __pfx_direct_splice_actor+0x10/0x10 [ 197.929808][ T7607] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 197.929833][ T7607] ? __lock_acquire+0x49f/0x1a40 [ 197.929865][ T7607] do_splice_direct+0x174/0x240 [ 197.929890][ T7607] ? __pfx_do_splice_direct+0x10/0x10 [ 197.929915][ T7607] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 197.929946][ T7607] vfs_copy_file_range+0xc1b/0x1840 [ 197.929969][ T7607] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 197.929984][ T7607] ? __might_fault+0xc5/0x140 [ 197.929998][ T7607] ? __might_fault+0xc5/0x140 [ 197.930021][ T7607] __do_sys_copy_file_range+0x1a1/0x460 [ 197.930040][ T7607] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 197.930056][ T7607] ? fput+0x79/0x100 [ 197.930071][ T7607] ? ksys_write+0x1ac/0x250 [ 197.930093][ T7607] ? __pfx_ksys_write+0x10/0x10 [ 197.930119][ T7607] __do_fast_syscall_32+0xe7/0x970 [ 197.930136][ T7607] ? lockdep_hardirqs_on+0x78/0x100 [ 197.930161][ T7607] do_fast_syscall_32+0x32/0x70 [ 197.930177][ T7607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.930197][ T7607] RIP: 0023:0xf7ff5fec [ 197.930216][ T7607] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 197.930239][ T7607] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000179 [ 197.930255][ T7607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 197.930264][ T7607] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000000000002 [ 197.930273][ T7607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.930282][ T7607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.930291][ T7607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.930325][ T7607] [ 198.233561][ T7613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.241299][ T5757] usb usb42-port1: unable to enumerate USB device [ 198.568969][ T7626] fuse: Bad value for 'fd' [ 198.669804][ T7629] tipc: Started in network mode [ 198.671995][ T7629] tipc: Node identity 2007ff, cluster identity 4711 [ 198.674130][ T7629] tipc: Node number set to 2099199 [ 199.141413][ T7637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 199.143502][ T7637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.155844][ T7637] vhci_hcd vhci_hcd.0: Device attached [ 199.315854][ T7646] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.401520][ T7654] fuse: Bad value for 'fd' [ 199.534693][ T7638] vhci_hcd: connection closed [ 199.534971][ T12] vhci_hcd vhci_hcd.0: stop threads [ 199.538400][ T12] vhci_hcd vhci_hcd.0: release socket [ 199.540307][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 199.589980][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 199.649610][ T29] usb 38-1: device descriptor read/8, error -110 [ 199.668368][ T5105] Bluetooth: hci1: unexpected cc 0x1405 length: 8 > 4 [ 199.670919][ T5105] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 199.672156][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 200.099250][ T29] usb usb38-port1: attempt power cycle [ 200.528860][ T5863] usb 40-1: device descriptor read/8, error -110 [ 200.671606][ T29] usb usb38-port1: unable to enumerate USB device [ 200.921047][ T5863] usb usb40-port1: attempt power cycle [ 200.962752][ T7681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.503973][ T5863] usb usb40-port1: unable to enumerate USB device [ 201.673222][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 201.868774][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 201.920571][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 201.936570][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 201.987717][ T7711] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.038783][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 202.063178][ T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 202.080493][ T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 202.099491][ T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 202.120190][ T29] usb 8-1: config 250 has no interface number 0 [ 202.144487][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 202.167962][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 202.190894][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.411666][ T29] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 202.416355][ T29] usb 8-1: config 250 interface 228 has no altsetting 0 [ 202.420202][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 202.423076][ T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 202.425662][ T29] usb 8-1: Product: syz [ 202.426973][ T29] usb 8-1: SerialNumber: syz [ 202.432178][ T29] hub 8-1:250.228: bad descriptor, ignoring hub [ 202.434309][ T29] hub 8-1:250.228: probe with driver hub failed with error -5 [ 202.749009][ T29] usb 8-1: USB disconnect, device number 4 [ 202.985071][ T7720] fuse: Unknown parameter 'grou00000000000000000000' [ 203.098779][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 203.248810][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 203.254338][ T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 203.261886][ T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 203.266573][ T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 203.270771][ T29] usb 8-1: config 250 has no interface number 0 [ 203.273466][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 203.277923][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 203.282493][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.286008][ T29] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 203.292574][ T29] usb 8-1: config 250 interface 228 has no altsetting 0 [ 203.297728][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 203.302139][ T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 203.305659][ T29] usb 8-1: Product: syz [ 203.307423][ T29] usb 8-1: SerialNumber: syz [ 203.314726][ T29] hub 8-1:250.228: bad descriptor, ignoring hub [ 203.316969][ T29] hub 8-1:250.228: probe with driver hub failed with error -5 [ 203.318680][ T7729] netlink: 163868 bytes leftover after parsing attributes in process `syz.2.495'. [ 203.323805][ T7729] openvswitch: netlink: ufid size 48534 bytes exceeds the range (1, 16) [ 203.327125][ T7729] openvswitch: netlink: Message has 512 unknown bytes. [ 203.558005][ T7742] FAULT_INJECTION: forcing a failure. [ 203.558005][ T7742] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.564398][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.1.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.564425][ T7742] Tainted: [L]=SOFTLOCKUP [ 203.564430][ T7742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.564439][ T7742] Call Trace: [ 203.564445][ T7742] [ 203.564451][ T7742] dump_stack_lvl+0x100/0x190 [ 203.564476][ T7742] should_fail_ex.cold+0x5/0xa [ 203.564495][ T7742] _copy_to_user+0x32/0xd0 [ 203.564517][ T7742] simple_read_from_buffer+0xcb/0x170 [ 203.564542][ T7742] proc_fail_nth_read+0x1af/0x230 [ 203.564562][ T7742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.564581][ T7742] ? rw_verify_area+0xce/0x6d0 [ 203.564627][ T7742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.564647][ T7742] vfs_read+0x1e4/0xb40 [ 203.564671][ T7742] ? __pfx_vfs_read+0x10/0x10 [ 203.564691][ T7742] ? find_held_lock+0x2b/0x80 [ 203.564709][ T7742] ? __fget_files+0x215/0x3d0 [ 203.564734][ T7742] ? __fget_files+0x21f/0x3d0 [ 203.564762][ T7742] ksys_read+0x12a/0x250 [ 203.564800][ T7742] ? __pfx_ksys_read+0x10/0x10 [ 203.564828][ T7742] do_int80_emulation+0x14b/0x720 [ 203.564847][ T7742] asm_int80_emulation+0x1a/0x20 [ 203.564863][ T7742] RIP: 0023:0xf71b72eb [ 203.564876][ T7742] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 203.564891][ T7742] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 203.564907][ T7742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 203.564917][ T7742] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 203.564926][ T7742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.564934][ T7742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.564943][ T7742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.564963][ T7742] [ 203.636630][ T5863] usb 8-1: USB disconnect, device number 5 [ 203.663615][ T7744] fuse: Bad value for 'fd' [ 204.293912][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 204.306742][ T7764] netlink: 5 bytes leftover after parsing attributes in process `syz.0.507'. [ 204.313913][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.370079][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.377914][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.650070][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 205.499424][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 205.923400][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 205.931701][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 205.938867][ T7802] bond0: left promiscuous mode [ 205.944955][ T7802] bond_slave_0: left promiscuous mode [ 205.949173][ T7802] bond_slave_1: left promiscuous mode [ 205.955532][ T7802] dummy0: left promiscuous mode [ 205.967165][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.974842][ T7802] bond2: (slave bond0): making interface the new active one [ 205.981538][ T7802] bond2: (slave bond0): Enslaving as an active interface with an up link [ 206.015966][ T7802] netlink: 'syz.3.517': attribute type 11 has an invalid length. [ 206.021279][ T7802] netlink: 'syz.3.517': attribute type 4 has an invalid length. [ 206.024495][ T7802] netlink: 152 bytes leftover after parsing attributes in process `syz.3.517'. [ 206.040325][ T7802] .`: renamed from bond0 (while UP) [ 207.021933][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.965613][ T7825] FAULT_INJECTION: forcing a failure. [ 207.965613][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.970412][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.3.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.970430][ T7825] Tainted: [L]=SOFTLOCKUP [ 207.970434][ T7825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.970440][ T7825] Call Trace: [ 207.970445][ T7825] [ 207.970450][ T7825] dump_stack_lvl+0x100/0x190 [ 207.970468][ T7825] should_fail_ex.cold+0x5/0xa [ 207.970481][ T7825] _copy_to_user+0x32/0xd0 [ 207.970498][ T7825] simple_read_from_buffer+0xcb/0x170 [ 207.970517][ T7825] proc_fail_nth_read+0x1af/0x230 [ 207.970531][ T7825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.970545][ T7825] ? rw_verify_area+0xce/0x6d0 [ 207.970560][ T7825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.970573][ T7825] vfs_read+0x1e4/0xb40 [ 207.970591][ T7825] ? __pfx_vfs_read+0x10/0x10 [ 207.970606][ T7825] ? find_held_lock+0x2b/0x80 [ 207.970619][ T7825] ? __fget_files+0x215/0x3d0 [ 207.970637][ T7825] ? __fget_files+0x21f/0x3d0 [ 207.970657][ T7825] ksys_read+0x12a/0x250 [ 207.970673][ T7825] ? __pfx_ksys_read+0x10/0x10 [ 207.970693][ T7825] do_int80_emulation+0x14b/0x720 [ 207.970707][ T7825] asm_int80_emulation+0x1a/0x20 [ 207.970718][ T7825] RIP: 0023:0xf71272eb [ 207.970730][ T7825] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 207.970740][ T7825] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 207.970752][ T7825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dd5d0 [ 207.970758][ T7825] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 207.970764][ T7825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.970770][ T7825] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.970776][ T7825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.970789][ T7825] [ 209.252110][ T7848] PM: Enabling pm_trace changes system date and time during resume. [ 209.252110][ T7848] PM: Correct system time has to be restored manually after resume. [ 209.296047][ T7846] kAFS: No cell specified [ 211.164178][ T7886] netlink: 'syz.2.541': attribute type 19 has an invalid length. [ 211.244113][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888070923800: rx timeout, send abort [ 211.744284][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888070923400: rx timeout, send abort [ 211.747860][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888070923800: abort rx timeout. Force session deactivation [ 211.843423][ T7890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.542'. [ 211.856628][ T7890] Invalid ELF header len 9 [ 211.867214][ T7890] overlayfs: failed to clone upperpath [ 211.921590][ T7891] /dev/sr0: Can't lookup blockdev [ 212.247855][ C2] vxcan1: j1939_tp_rxtimer: 0xffff888070923400: abort rx timeout. Force session deactivation [ 213.339461][ T29] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 213.501063][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.505240][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.508816][ T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 213.512264][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.519156][ T29] usb 5-1: config 0 descriptor?? [ 213.528208][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 213.531225][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 213.539572][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 213.543386][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 213.546658][ T29] usb 5-1: media controller created [ 213.550356][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.562460][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 213.565772][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 213.571584][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input8 [ 213.577408][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 213.580341][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 213.731936][ T42] kauditd_printk_skb: 10270 callbacks suppressed [ 213.731949][ T42] audit: type=1326 audit(1784254065.249:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.543" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x0 [ 213.750875][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 213.753644][ T29] dvb-usb: error while querying for an remote control event. [ 213.908851][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 213.911289][ T5863] dvb-usb: error while querying for an remote control event. [ 214.080155][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 214.083217][ T5863] dvb-usb: error while querying for an remote control event. [ 214.170402][ T5863] usb 5-1: USB disconnect, device number 12 [ 214.232976][ T5863] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 216.282315][ T7934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.369940][ T7936] netlink: 'syz.1.555': attribute type 2 has an invalid length. [ 216.559298][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 216.877775][ T7945] syzkaller0: entered promiscuous mode [ 216.880450][ T7945] syzkaller0: entered allmulticast mode [ 217.386241][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 218.131177][ T7953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.148566][ T7953] block device autoloading is deprecated and will be removed. [ 219.159421][ T7977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 219.161899][ T7977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.169419][ T7977] vhci_hcd vhci_hcd.0: Device attached [ 219.459257][ T5863] usb 44-1: SetAddress Request (6) to port 0 [ 219.474298][ T5863] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 219.935715][ T7978] vhci_hcd: connection reset by peer [ 219.942062][ T12] vhci_hcd vhci_hcd.3: stop threads [ 219.944953][ T12] vhci_hcd vhci_hcd.3: release socket [ 219.947419][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 220.625261][ T8007] overlayfs: failed to clone upperpath [ 221.046318][ T8011] nbd: must specify at least one socket [ 222.474235][ T8026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 222.476362][ T8026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.480246][ T8026] vhci_hcd vhci_hcd.0: Device attached [ 222.488966][ T5869] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 222.652312][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.657863][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.661613][ T5869] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.666299][ T5869] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.670463][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.676907][ T5869] usb 8-1: config 0 descriptor?? [ 222.759889][ T41] usb 40-1: SetAddress Request (14) to port 0 [ 222.777456][ T41] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 223.099690][ T5869] hid_parser_main: 5 callbacks suppressed [ 223.099712][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.106007][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.112732][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.116441][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.120123][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.123373][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.126848][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.130683][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.133883][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.136922][ T5869] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 223.160118][ T5869] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 223.366014][ T8027] vhci_hcd: connection reset by peer [ 223.368235][ T12] vhci_hcd vhci_hcd.1: stop threads [ 223.370136][ T12] vhci_hcd vhci_hcd.1: release socket [ 223.372825][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 223.378876][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.384104][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.397941][ T847] usb 8-1: USB disconnect, device number 6 [ 223.515509][ T8032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.582'. [ 223.550275][ T8032] Invalid ELF header len 9 [ 224.062096][ T8047] netlink: 27 bytes leftover after parsing attributes in process `syz.1.587'. [ 224.206343][ T8045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.346709][ T8056] syzkaller0: entered promiscuous mode [ 224.350722][ T8056] syzkaller0: entered allmulticast mode [ 224.357648][ T8058] sch_fq: defrate 0 ignored. [ 224.562122][ T5863] usb 44-1: device descriptor read/8, error -110 [ 224.834721][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'. [ 225.152334][ T8073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 225.154874][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.234484][ T5863] usb 44-1: SetAddress Request (7) to port 0 [ 225.275312][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 225.283241][ T5863] usb 44-1: new SuperSpeed USB device number 7 using vhci_hcd [ 226.558385][ T8074] vhci_hcd: connection reset by peer [ 226.569329][ T12] vhci_hcd vhci_hcd.3: stop threads [ 226.571676][ T12] vhci_hcd vhci_hcd.3: release socket [ 226.578955][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 226.985367][ T8086] syzkaller0: entered promiscuous mode [ 226.987681][ T8086] syzkaller0: entered allmulticast mode [ 227.898794][ T41] usb 40-1: device descriptor read/8, error -110 [ 228.311831][ T41] usb usb40-port1: attempt power cycle [ 228.534077][ T8104] 9p: Bad value for 'wfdno' [ 228.934389][ T41] usb usb40-port1: unable to enumerate USB device [ 229.073841][ T8119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 229.076281][ T8119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.080111][ T8119] vhci_hcd vhci_hcd.0: Device attached [ 229.082777][ T8121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 229.085196][ T8121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.092442][ T8121] vhci_hcd vhci_hcd.0: Device attached [ 229.378833][ T7588] usb 40-1: SetAddress Request (18) to port 0 [ 229.381818][ T41] usb 38-1: SetAddress Request (22) to port 0 [ 229.388269][ T7588] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 229.398829][ T41] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 229.850941][ T8128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.890955][ T8120] vhci_hcd: connection reset by peer [ 229.897091][ T12] vhci_hcd vhci_hcd.0: stop threads [ 229.899022][ T12] vhci_hcd vhci_hcd.0: release socket [ 229.909214][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 230.187235][ T8123] vhci_hcd: connection reset by peer [ 230.191660][ T12] vhci_hcd vhci_hcd.1: stop threads [ 230.193390][ T12] vhci_hcd vhci_hcd.1: release socket [ 230.195162][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 230.368872][ T5863] usb 44-1: device descriptor read/8, error -110 [ 230.481314][ T5863] usb usb44-port1: attempt power cycle [ 231.081654][ T5863] usb usb44-port1: unable to enumerate USB device [ 232.158036][ T8176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.000103][ T8179] netlink: 256 bytes leftover after parsing attributes in process `syz.0.623'. [ 233.679735][ T8190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.893708][ T5105] Bluetooth: hci1: ISO packet too small [ 234.448776][ T7588] usb 40-1: device descriptor read/8, error -110 [ 234.451258][ T41] usb 38-1: device descriptor read/8, error -110 [ 234.497864][ T8211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.840313][ T7588] usb usb40-port1: attempt power cycle [ 234.842957][ T41] usb usb38-port1: attempt power cycle [ 235.348297][ T8242] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 235.351131][ T8242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.355754][ T8242] vhci_hcd vhci_hcd.0: Device attached [ 235.399865][ T7588] usb usb40-port1: unable to enumerate USB device [ 235.458810][ T41] usb 38-1: SetAddress Request (25) to port 0 [ 235.460870][ T41] usb 38-1: new SuperSpeed USB device number 25 using vhci_hcd [ 235.538087][ T8247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.566570][ T8249] FAULT_INJECTION: forcing a failure. [ 235.566570][ T8249] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 235.572923][ T8249] CPU: 1 UID: 0 PID: 8249 Comm: syz.2.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.572954][ T8249] Tainted: [L]=SOFTLOCKUP [ 235.572960][ T8249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.572971][ T8249] Call Trace: [ 235.572979][ T8249] [ 235.572986][ T8249] dump_stack_lvl+0x100/0x190 [ 235.573016][ T8249] should_fail_ex.cold+0x5/0xa [ 235.573050][ T8249] ? prepare_alloc_pages+0x16d/0x5f0 [ 235.573079][ T8249] should_fail_alloc_page+0xeb/0x140 [ 235.573103][ T8249] prepare_alloc_pages+0x1f0/0x5f0 [ 235.573128][ T8249] ? __lock_acquire+0x49f/0x1a40 [ 235.573158][ T8249] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 235.573183][ T8249] ? __lock_acquire+0x49f/0x1a40 [ 235.573222][ T8249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.573241][ T8249] ? find_held_lock+0x2b/0x80 [ 235.573261][ T8249] ? is_bpf_text_address+0x8a/0x1a0 [ 235.573294][ T8249] ? is_bpf_text_address+0x8a/0x1a0 [ 235.573318][ T8249] ? bpf_ksym_find+0x124/0x1c0 [ 235.573338][ T8249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.573364][ T8249] ? is_bpf_text_address+0x94/0x1a0 [ 235.573387][ T8249] ? kernel_text_address+0x8d/0x100 [ 235.573413][ T8249] ? __kernel_text_address+0xd/0x30 [ 235.573447][ T8249] ? __lock_acquire+0x49f/0x1a40 [ 235.573474][ T8249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.573502][ T8249] ? policy_nodemask+0xed/0x4f0 [ 235.573529][ T8249] alloc_pages_mpol+0x1fb/0x540 [ 235.573555][ T8249] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.573584][ T8249] folio_alloc_mpol_noprof+0x36/0x260 [ 235.573614][ T8249] vma_alloc_folio_noprof+0xed/0x1d0 [ 235.573640][ T8249] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 235.573676][ T8249] do_anonymous_page+0xb2b/0x2080 [ 235.573705][ T8249] ? rcu_read_unlock+0x2d/0xb0 [ 235.573727][ T8249] __handle_mm_fault+0x1d2c/0x2a00 [ 235.573760][ T8249] ? reacquire_held_locks+0xce/0x1e0 [ 235.573789][ T8249] ? __pfx___handle_mm_fault+0x10/0x10 [ 235.573820][ T8249] ? lock_vma_under_rcu+0x17c/0x590 [ 235.573862][ T8249] handle_mm_fault+0x37b/0xa30 [ 235.573896][ T8249] do_user_addr_fault+0x5a3/0x12f0 [ 235.573929][ T8249] exc_page_fault+0x6f/0xd0 [ 235.573960][ T8249] asm_exc_page_fault+0x26/0x30 [ 235.573979][ T8249] RIP: 0023:0xf7042365 [ 235.573997][ T8249] Code: ff 0f b7 44 16 fe 66 89 44 14 1e e9 b5 fe ff ff 2e 8d 74 26 00 55 e8 8c be 01 00 81 c5 9e 4c 39 00 57 56 53 81 ec 94 20 00 00 <89> 44 24 24 8b 84 24 a8 20 00 00 8b b4 24 b0 20 00 00 89 44 24 14 [ 235.574015][ T8249] RSP: 002b:00000000f5404448 EFLAGS: 00010286 [ 235.574033][ T8249] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000002d [ 235.574044][ T8249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7031350 [ 235.574055][ T8249] RBP: 00000000f73d6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 235.574066][ T8249] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 235.574077][ T8249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.574101][ T8249] [ 235.575964][ T8249] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 235.780929][ T8243] vhci_hcd: connection reset by peer [ 235.783707][ T13] vhci_hcd vhci_hcd.0: stop threads [ 235.786235][ T13] vhci_hcd vhci_hcd.0: release socket [ 235.788810][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 235.839815][ T5869] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 235.938775][ T7588] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 235.990046][ T5869] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 235.994554][ T5869] usb 8-1: config 0 has no interfaces? [ 235.997493][ T5869] usb 8-1: config 0 has no interfaces? [ 236.001183][ T5869] usb 8-1: config 0 has no interfaces? [ 236.005363][ T5869] usb 8-1: config 0 has no interfaces? [ 236.008482][ T5869] usb 8-1: config 0 has no interfaces? [ 236.011853][ T5869] usb 8-1: config 0 has no interfaces? [ 236.014860][ T5869] usb 8-1: config 0 has no interfaces? [ 236.018016][ T5869] usb 8-1: config 0 has no interfaces? [ 236.021957][ T5869] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 236.025638][ T5869] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 236.028301][ T5869] usb 8-1: Product: syz [ 236.030304][ T5869] usb 8-1: Manufacturer: syz [ 236.032401][ T5869] usb 8-1: SerialNumber: syz [ 236.038527][ T5869] usb 8-1: config 0 descriptor?? [ 236.064767][ T8255] fuse: Bad value for 'fd' [ 236.109640][ T7588] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 236.116015][ T7588] usb 7-1: config 0 has no interfaces? [ 236.120895][ T7588] usb 7-1: config 0 has no interfaces? [ 236.130272][ T7588] usb 7-1: config 0 has no interfaces? [ 236.133451][ T7588] usb 7-1: config 0 has no interfaces? [ 236.143510][ T7588] usb 7-1: config 0 has no interfaces? [ 236.146288][ T7588] usb 7-1: config 0 has no interfaces? [ 236.151440][ T7588] usb 7-1: config 0 has no interfaces? [ 236.154158][ T7588] usb 7-1: config 0 has no interfaces? [ 236.157901][ T7588] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 236.161850][ T7588] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 236.164481][ T7588] usb 7-1: Product: syz [ 236.165782][ T7588] usb 7-1: Manufacturer: syz [ 236.167219][ T7588] usb 7-1: SerialNumber: syz [ 236.170112][ T7588] usb 7-1: config 0 descriptor?? [ 236.247313][ T5869] usb 8-1: USB disconnect, device number 7 [ 236.373997][ T5834] usb 7-1: USB disconnect, device number 9 [ 236.738469][ T8269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.654'. [ 236.763650][ T8269] Invalid ELF header len 9 [ 236.772261][ T8269] overlayfs: failed to clone upperpath [ 236.790941][ T8269] /dev/sr0: Can't lookup blockdev [ 241.055190][ T41] usb 38-1: device descriptor read/8, error -110 [ 241.377537][ T41] usb usb38-port1: unable to enumerate USB device [ 241.650723][ T8329] FAULT_INJECTION: forcing a failure. [ 241.650723][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.658784][ T8329] CPU: 3 UID: 0 PID: 8329 Comm: syz.1.666 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.658810][ T8329] Tainted: [L]=SOFTLOCKUP [ 241.658816][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.658825][ T8329] Call Trace: [ 241.658831][ T8329] [ 241.658837][ T8329] dump_stack_lvl+0x100/0x190 [ 241.658861][ T8329] should_fail_ex.cold+0x5/0xa [ 241.658880][ T8329] _copy_from_user+0x2e/0xd0 [ 241.658919][ T8329] get_compat_msghdr+0xb3/0x480 [ 241.658945][ T8329] ? __pfx_get_compat_msghdr+0x10/0x10 [ 241.658973][ T8329] ___sys_sendmsg+0x1b6/0x1e0 [ 241.658998][ T8329] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.659031][ T8329] ? find_held_lock+0x2b/0x80 [ 241.659064][ T8329] __sys_sendmsg+0x160/0x210 [ 241.659082][ T8329] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.659106][ T8329] ? __pfx_ksys_write+0x10/0x10 [ 241.659137][ T8329] __do_fast_syscall_32+0xe7/0x970 [ 241.659155][ T8329] ? lockdep_hardirqs_on+0x78/0x100 [ 241.659181][ T8329] do_fast_syscall_32+0x32/0x70 [ 241.659196][ T8329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.659216][ T8329] RIP: 0023:0xf707efec [ 241.659234][ T8329] Code: Unable to access opcode bytes at 0xf707efc2. [ 241.659241][ T8329] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 241.659257][ T8329] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 241.659266][ T8329] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.659275][ T8329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.659284][ T8329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.659292][ T8329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.659313][ T8329] [ 242.445774][ T8364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.514446][ T8366] fuse: Bad value for 'fd' [ 243.116627][ T8376] sch_fq: defrate 0 ignored. [ 243.161753][ T8379] nbd: must specify a size in bytes for the device [ 243.176206][ T8380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.677'. [ 243.226036][ T8380] Invalid ELF header len 9 [ 243.377730][ T8386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.436376][ T8392] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.467878][ T8394] fuse: Bad value for 'fd' [ 243.831800][ T8407] nbd: must specify a size in bytes for the device [ 243.874112][ T8409] syzkaller0: entered promiscuous mode [ 243.875955][ T8409] syzkaller0: entered allmulticast mode [ 244.133610][ T8417] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.462663][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.467725][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.683043][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.707588][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.951073][ T8439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 244.953172][ T8439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.961256][ T8430] veth3: left promiscuous mode [ 244.963015][ T8430] veth3: left allmulticast mode [ 244.964928][ T8439] vhci_hcd vhci_hcd.0: Device attached [ 244.988258][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.992447][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.002625][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.005878][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.198502][ T8440] vhci_hcd: connection closed [ 245.203758][ T12] vhci_hcd vhci_hcd.0: stop threads [ 245.208039][ T12] vhci_hcd vhci_hcd.0: release socket [ 245.213116][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 245.228894][ T7588] usb 38-1: enqueue for inactive port 0 [ 245.419370][ T8458] nbd1: detected capacity change from 0 to 63 [ 245.423280][ T8459] fuse: Unknown parameter 'à®m$!ã :t†"†ÂÊë9Áxèñ³Vò;w5о—Çx….áÀtðˆ'à.@P~²“Q{€¦ÒqÜÆVæŸQzíudÓðfn:cÒð(v©Ô4' [ 245.426020][ T66] block nbd1: Receive control failed (result -104) [ 245.432779][ T8459] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.700'. [ 245.436095][ T8459] openvswitch: netlink: Message has 512 unknown bytes. [ 245.731713][ T7588] usb usb38-port1: attempt power cycle [ 245.744364][ T8465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.409785][ T7588] usb usb38-port1: unable to enumerate USB device [ 246.988504][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 247.019096][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.023176][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.025995][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.028308][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.031066][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.034642][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.038152][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.040615][ T5869] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 247.050056][ T5869] hid-generic 0006:0008:0001.0004: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 247.078039][ T8495] fido_id[8495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.338771][ T7588] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 247.491773][ T7588] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.495443][ T7588] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.498765][ T7588] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.502931][ T7588] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.505872][ T7588] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.524814][ T7588] usb 8-1: config 0 descriptor?? [ 248.415339][ T7588] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.419001][ T7588] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 248.433730][ T7588] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 248.591214][ T7588] usb 8-1: USB disconnect, device number 8 [ 248.698840][ T8506] nbd2: detected capacity change from 0 to 63 [ 248.707567][ T66] block nbd2: Receive control failed (result -104) [ 248.707791][ T1305] block nbd2: Send control failed (result -32) [ 248.714479][ T1305] block nbd2: Request send failed, requeueing [ 248.719436][ T1305] block nbd2: Dead connection, failed to find a fallback [ 248.724114][ T30] blk_print_req_error: 111 callbacks suppressed [ 248.724128][ T30] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.730141][ T30] buffer_io_error: 138 callbacks suppressed [ 248.730156][ T30] Buffer I/O error on dev nbd2, logical block 2, async page read [ 248.738532][ T1305] block nbd2: shutting down sockets [ 248.740966][ T1305] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.744127][ T1305] Buffer I/O error on dev nbd2, logical block 1, async page read [ 248.749338][ T1305] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.752654][ T1305] Buffer I/O error on dev nbd2, logical block 3, async page read [ 249.537816][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 249.542886][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 249.624881][ T8538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.721'. [ 249.683444][ T8538] Invalid ELF header len 9 [ 250.178238][ T8551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.278726][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.327626][ T8557] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 250.388464][ T8561] FAULT_INJECTION: forcing a failure. [ 250.388464][ T8561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.394337][ T8561] CPU: 3 UID: 0 PID: 8561 Comm: syz.2.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.394367][ T8561] Tainted: [L]=SOFTLOCKUP [ 250.394374][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.394384][ T8561] Call Trace: [ 250.394391][ T8561] [ 250.394398][ T8561] dump_stack_lvl+0x100/0x190 [ 250.394424][ T8561] should_fail_ex.cold+0x5/0xa [ 250.394446][ T8561] _copy_to_iter+0x5a4/0x1720 [ 250.394476][ T8561] ? __pfx__copy_to_iter+0x10/0x10 [ 250.394503][ T8561] ? __local_bh_enable_ip+0x9e/0x120 [ 250.394523][ T8561] ? lockdep_hardirqs_on+0x78/0x100 [ 250.394549][ T8561] ? tcp_seq_stop+0x177/0x260 [ 250.394575][ T8561] ? __local_bh_enable_ip+0x9e/0x120 [ 250.394595][ T8561] seq_read_iter+0xdab/0x1270 [ 250.394630][ T8561] seq_read+0x344/0x4d0 [ 250.394658][ T8561] ? __pfx_seq_read+0x10/0x10 [ 250.394687][ T8561] ? iovec_from_user+0xda/0x140 [ 250.394721][ T8561] ? __pfx_seq_read+0x10/0x10 [ 250.394743][ T8561] proc_reg_read+0x240/0x330 [ 250.394770][ T8561] ? __pfx_proc_reg_read+0x10/0x10 [ 250.394796][ T8561] vfs_readv+0x5d8/0x8d0 [ 250.394826][ T8561] ? __pfx_vfs_readv+0x10/0x10 [ 250.394880][ T8561] ? __fget_files+0x21f/0x3d0 [ 250.394910][ T8561] ? do_preadv+0x1ac/0x270 [ 250.394934][ T8561] do_preadv+0x1ac/0x270 [ 250.394957][ T8561] ? __pfx_do_preadv+0x10/0x10 [ 250.394979][ T8561] ? ksys_write+0x1ac/0x250 [ 250.395005][ T8561] ? __pfx_ksys_write+0x10/0x10 [ 250.395029][ T8561] __do_fast_syscall_32+0xe7/0x970 [ 250.395048][ T8561] ? lockdep_hardirqs_on+0x78/0x100 [ 250.395075][ T8561] do_fast_syscall_32+0x32/0x70 [ 250.395092][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.395114][ T8561] RIP: 0023:0xf7f48fec [ 250.395135][ T8561] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 250.395142][ T8561] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 250.395162][ T8561] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 250.395174][ T8561] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000000 [ 250.395183][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.395190][ T8561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 250.395201][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.395225][ T8561] [ 250.450191][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.507542][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.511184][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.515347][ T5869] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.518500][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.531145][ T8565] veth0_virt_wifi: entered promiscuous mode [ 250.533253][ T8565] veth0_virt_wifi: entered allmulticast mode [ 250.564286][ T5869] usb 5-1: config 0 descriptor?? [ 251.163320][ T5869] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 251.250964][ T60] usb 5-1: USB disconnect, device number 13 [ 251.329450][ T8579] fido_id[8579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 251.597285][ T8588] FAULT_INJECTION: forcing a failure. [ 251.597285][ T8588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.602428][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.1.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.602447][ T8588] Tainted: [L]=SOFTLOCKUP [ 251.602451][ T8588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.602457][ T8588] Call Trace: [ 251.602462][ T8588] [ 251.602467][ T8588] dump_stack_lvl+0x100/0x190 [ 251.602484][ T8588] should_fail_ex.cold+0x5/0xa [ 251.602497][ T8588] _copy_from_user+0x2e/0xd0 [ 251.602514][ T8588] get_compat_msghdr+0xb3/0x480 [ 251.602531][ T8588] ? __pfx_get_compat_msghdr+0x10/0x10 [ 251.602551][ T8588] ___sys_sendmsg+0x1b6/0x1e0 [ 251.602570][ T8588] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.602593][ T8588] ? find_held_lock+0x2b/0x80 [ 251.602615][ T8588] __sys_sendmsg+0x160/0x210 [ 251.602629][ T8588] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.602645][ T8588] ? __pfx_ksys_write+0x10/0x10 [ 251.602666][ T8588] __do_fast_syscall_32+0xe7/0x970 [ 251.602679][ T8588] ? lockdep_hardirqs_on+0x78/0x100 [ 251.602698][ T8588] do_fast_syscall_32+0x32/0x70 [ 251.602709][ T8588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.602724][ T8588] RIP: 0023:0xf707efec [ 251.602738][ T8588] Code: Unable to access opcode bytes at 0xf707efc2. [ 251.602743][ T8588] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 251.602754][ T8588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 251.602761][ T8588] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.602767][ T8588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.602773][ T8588] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.602779][ T8588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.602793][ T8588] [ 252.003885][ T8603] netlink: 156 bytes leftover after parsing attributes in process `syz.0.742'. [ 253.388782][ T847] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 253.550221][ T847] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.554418][ T847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.557404][ T847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 253.561362][ T847] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.564698][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.572459][ T8619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.577582][ T847] hub 5-1:1.0: bad descriptor, ignoring hub [ 253.579864][ T847] hub 5-1:1.0: probe with driver hub failed with error -5 [ 253.582810][ T847] cdc_wdm 5-1:1.0: skipping garbage [ 253.584715][ T847] cdc_wdm 5-1:1.0: skipping garbage [ 253.587669][ T847] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 253.591227][ T847] cdc_wdm 5-1:1.0: Unknown control protocol [ 253.858099][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 253.860812][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 253.863234][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 253.968053][ T7588] usb 5-1: USB disconnect, device number 14 [ 254.528811][ T8627] overlayfs: failed to resolve './file1/file0': -2 [ 254.917003][ T8633] 9p: Bad value for 'rfdno' [ 255.409972][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.412585][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.673684][ T8651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 256.676535][ T8651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.680434][ T8651] vhci_hcd vhci_hcd.0: Device attached [ 256.828856][ T61] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 256.893803][ T8652] vhci_hcd: connection closed [ 256.894971][ T12] vhci_hcd vhci_hcd.0: stop threads [ 256.898874][ T12] vhci_hcd vhci_hcd.0: release socket [ 256.901138][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 256.952509][ T7588] usb 38-1: enqueue for inactive port 0 [ 256.990692][ T61] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.994921][ T61] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.998886][ T61] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 257.003344][ T61] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 257.006999][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.017129][ T8650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.026203][ T61] hub 8-1:1.0: bad descriptor, ignoring hub [ 257.031641][ T61] hub 8-1:1.0: probe with driver hub failed with error -5 [ 257.039819][ T61] cdc_wdm 8-1:1.0: skipping garbage [ 257.042126][ T61] cdc_wdm 8-1:1.0: skipping garbage [ 257.045895][ T61] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 257.051669][ T61] cdc_wdm 8-1:1.0: Unknown control protocol [ 257.391517][ T29] usb 8-1: USB disconnect, device number 9 [ 257.439990][ T7588] usb usb38-port1: attempt power cycle [ 257.918894][ T8666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.980112][ T8673] fuse: Unknown parameter 'use00000000000000000000' [ 258.002513][ T7588] usb usb38-port1: unable to enumerate USB device [ 258.012987][ T5105] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 258.278610][ T5105] Bluetooth: hci1: unexpected event for opcode 0x072f [ 258.507723][ T8692] fuse: Bad value for 'fd' [ 258.552804][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.776'. [ 258.728904][ T61] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 258.881256][ T61] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.885414][ T61] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.889454][ T61] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 258.894535][ T61] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.897728][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.902824][ T8694] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 258.907488][ T61] hub 5-1:1.0: bad descriptor, ignoring hub [ 258.909922][ T61] hub 5-1:1.0: probe with driver hub failed with error -5 [ 258.913037][ T61] cdc_wdm 5-1:1.0: skipping garbage [ 258.915043][ T61] cdc_wdm 5-1:1.0: skipping garbage [ 258.919860][ T61] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 258.922046][ T61] cdc_wdm 5-1:1.0: Unknown control protocol [ 259.074741][ T8701] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 259.080775][ T8701] bond1 (unregistering): Released all slaves [ 259.300475][ T5834] usb 5-1: USB disconnect, device number 15 [ 259.476426][ T8705] fuse: Unknown parameter 'user_i00000000000000000000' [ 259.526417][ T8707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.780'. [ 259.540384][ T8707] Invalid ELF header len 9 [ 259.995147][ T8727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 259.997804][ T8727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 260.003221][ T8727] vhci_hcd vhci_hcd.0: Device attached [ 260.054096][ T8723] netlink: 156 bytes leftover after parsing attributes in process `syz.1.785'. [ 260.058468][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 260.133756][ T42] audit: type=1326 audit(1784254111.649:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.152106][ T42] audit: type=1326 audit(1784254111.659:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.161723][ T42] audit: type=1326 audit(1784254111.659:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.170259][ T42] audit: type=1326 audit(1784254111.659:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.178054][ T42] audit: type=1326 audit(1784254111.659:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.187073][ T42] audit: type=1326 audit(1784254111.659:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.197226][ T42] audit: type=1326 audit(1784254111.669:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.206151][ T42] audit: type=1326 audit(1784254111.669:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.214464][ T42] audit: type=1326 audit(1784254111.669:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.222202][ T42] audit: type=1326 audit(1784254111.729:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fec code=0x7ffc0000 [ 260.289295][ T29] usb 44-1: SetAddress Request (10) to port 0 [ 260.292030][ T29] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 260.734588][ T8739] fuse: Bad value for 'fd' [ 260.905101][ T8728] vhci_hcd: connection reset by peer [ 260.908241][ T12] vhci_hcd vhci_hcd.3: stop threads [ 260.911265][ T12] vhci_hcd vhci_hcd.3: release socket [ 260.913864][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 262.245471][ T8754] overlayfs: failed to clone upperpath [ 262.773040][ T8761] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.294630][ T5105] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 264.457377][ T8801] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 264.465468][ T8801] netlink: 244 bytes leftover after parsing attributes in process `syz.1.808'. [ 264.469670][ T8801] NCSI netlink: No device for ifindex 0 [ 264.692063][ T8806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.777006][ T8814] trusted_key: encrypted_key: insufficient parameters specified [ 265.329343][ T29] usb 44-1: device descriptor read/8, error -110 [ 265.733232][ T29] usb usb44-port1: attempt power cycle [ 266.332237][ T29] usb usb44-port1: unable to enumerate USB device [ 266.412985][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.423837][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.430392][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.439520][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.444584][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.600770][ T8869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 266.603509][ T8869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.613342][ T8869] vhci_hcd vhci_hcd.0: Device attached [ 266.671165][ T8870] vhci_hcd: connection closed [ 266.671804][ T12] vhci_hcd vhci_hcd.1: stop threads [ 266.676799][ T12] vhci_hcd vhci_hcd.1: release socket [ 266.679541][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 267.072821][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.077211][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.080969][ T8858] bridge_slave_0: entered allmulticast mode [ 267.088143][ T8858] bridge_slave_0: entered promiscuous mode [ 267.098247][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.101513][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.105960][ T8858] bridge_slave_1: entered allmulticast mode [ 267.111524][ T8858] bridge_slave_1: entered promiscuous mode [ 267.306088][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.337264][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.383879][ T8858] team0: Port device team_slave_0 added [ 267.387335][ T8858] team0: Port device team_slave_1 added [ 267.421146][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.423378][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.440938][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.449785][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.454208][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.471018][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.512941][ T8858] hsr_slave_0: entered promiscuous mode [ 267.515823][ T8858] hsr_slave_1: entered promiscuous mode [ 267.518609][ T8858] debugfs: 'hsr0' already exists in 'hsr' [ 267.521168][ T8858] Cannot create hsr debugfs directory [ 267.751178][ T8898] fuse: Bad value for 'group_id' [ 267.753269][ T8898] fuse: Bad value for 'group_id' [ 267.906382][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.911790][ T8858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.924849][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.937439][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.937981][ T8858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.938043][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.955392][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.956667][ T8858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.976845][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.977791][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.978025][ T8858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.980343][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.985458][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.987136][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.990775][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 267.993216][ T8910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.995719][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 268.001976][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 268.084449][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.098480][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.102547][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.102620][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.106635][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.106680][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.326309][ T8925] syzkaller0: entered promiscuous mode [ 268.328096][ T8925] syzkaller0: entered allmulticast mode [ 268.521358][ T8935] syzkaller0: entered promiscuous mode [ 268.523695][ T8935] syzkaller0: entered allmulticast mode [ 268.529601][ T5750] Bluetooth: hci4: command tx timeout [ 268.582856][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.771098][ T8858] veth0_vlan: entered promiscuous mode [ 268.784883][ T8858] veth1_vlan: entered promiscuous mode [ 268.811176][ T8858] veth0_macvtap: entered promiscuous mode [ 268.815868][ T8858] veth1_macvtap: entered promiscuous mode [ 268.827517][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.835692][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.842449][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.845447][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.849843][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.853182][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.928461][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.932553][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.954480][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.957139][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.054877][ T8966] syzkaller0: entered promiscuous mode [ 269.056746][ T8966] syzkaller0: entered allmulticast mode [ 269.754258][ T8971] __nla_validate_parse: 26 callbacks suppressed [ 269.754278][ T8971] netlink: 56 bytes leftover after parsing attributes in process `syz.1.847'. [ 270.611620][ T5750] Bluetooth: hci4: command tx timeout [ 271.010627][ T5869] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 271.110980][ T8996] fuse: Unknown parameter '0x0000000000000004' [ 271.131906][ T8996] lo: entered promiscuous mode [ 271.134005][ T8996] lo: entered allmulticast mode [ 271.136974][ T8996] tunl0: entered promiscuous mode [ 271.139125][ T8996] tunl0: entered allmulticast mode [ 271.141685][ T8996] gre0: entered promiscuous mode [ 271.146113][ T8996] gre0: entered allmulticast mode [ 271.150996][ T8996] gretap0: entered promiscuous mode [ 271.155326][ T8996] gretap0: entered allmulticast mode [ 271.159168][ T8996] erspan0: entered promiscuous mode [ 271.160925][ T8996] erspan0: entered allmulticast mode [ 271.164553][ T8996] ip_vti0: entered promiscuous mode [ 271.166317][ T8996] ip_vti0: entered allmulticast mode [ 271.168457][ T8996] ip6_vti0: entered promiscuous mode [ 271.170625][ T8996] ip6_vti0: entered allmulticast mode [ 271.174543][ T5869] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.179090][ T8996] sit0: entered promiscuous mode [ 271.181124][ T8996] sit0: entered allmulticast mode [ 271.183812][ T5869] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.188069][ T8996] ip6tnl0: entered promiscuous mode [ 271.190444][ T5869] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.193392][ T8996] ip6tnl0: entered allmulticast mode [ 271.195450][ T8996] ip6gre0: entered promiscuous mode [ 271.197236][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.199931][ T8996] ip6gre0: entered allmulticast mode [ 271.202036][ T8996] syz_tun: entered allmulticast mode [ 271.207816][ T8996] ip6gretap0: entered promiscuous mode [ 271.214296][ T8996] ip6gretap0: entered allmulticast mode [ 271.217274][ T8990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.220846][ T8996] bridge0: entered promiscuous mode [ 271.223128][ T8996] bridge0: entered allmulticast mode [ 271.225825][ T8996] vcan0: entered promiscuous mode [ 271.229378][ T5869] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.231718][ T8996] vcan0: entered allmulticast mode [ 271.236642][ T8996] .`: entered promiscuous mode [ 271.238188][ T8996] bond_slave_0: entered promiscuous mode [ 271.245392][ T8996] bond_slave_1: entered promiscuous mode [ 271.247423][ T8996] dummy0: entered promiscuous mode [ 271.250491][ T8996] .`: entered allmulticast mode [ 271.252102][ T8996] bond_slave_0: entered allmulticast mode [ 271.253937][ T8996] bond_slave_1: entered allmulticast mode [ 271.255686][ T8996] dummy0: entered allmulticast mode [ 271.258222][ T8996] 8021q: adding VLAN 0 to HW filter on device .` [ 271.261251][ T8996] team0: entered promiscuous mode [ 271.262968][ T8996] team_slave_0: entered promiscuous mode [ 271.264844][ T8996] team_slave_1: entered promiscuous mode [ 271.266647][ T8996] team0: entered allmulticast mode [ 271.268431][ T8996] team_slave_0: entered allmulticast mode [ 271.270394][ T8996] team_slave_1: entered allmulticast mode [ 271.272739][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.275623][ T8996] nlmon0: entered promiscuous mode [ 271.277630][ T8996] nlmon0: entered allmulticast mode [ 271.280379][ T8996] batadv0: entered promiscuous mode [ 271.284106][ T8996] batadv0: entered allmulticast mode [ 271.291332][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.299087][ T8996] vxcan0: entered promiscuous mode [ 271.303578][ T8996] vxcan0: entered allmulticast mode [ 271.306353][ T8996] vxcan1: entered promiscuous mode [ 271.308300][ T8996] vxcan1: entered allmulticast mode [ 271.311407][ T8996] veth0: entered promiscuous mode [ 271.313457][ T8996] veth0: entered allmulticast mode [ 271.316380][ T8996] veth1: entered promiscuous mode [ 271.318359][ T8996] veth1: entered allmulticast mode [ 271.323548][ T8996] wg0: entered promiscuous mode [ 271.325907][ T8996] wg0: entered allmulticast mode [ 271.329796][ T8996] wg1: entered promiscuous mode [ 271.331455][ T8996] wg1: entered allmulticast mode [ 271.341418][ T8996] wg2: entered promiscuous mode [ 271.343679][ T8996] wg2: entered allmulticast mode [ 271.346340][ T8996] veth0_to_bridge: entered promiscuous mode [ 271.348462][ T8996] veth0_to_bridge: entered allmulticast mode [ 271.352616][ T8996] veth1_to_bridge: entered promiscuous mode [ 271.354719][ T8996] veth1_to_bridge: entered allmulticast mode [ 271.358199][ T8996] veth0_to_bond: entered promiscuous mode [ 271.360264][ T8996] veth0_to_bond: entered allmulticast mode [ 271.363993][ T8996] veth1_to_bond: entered promiscuous mode [ 271.366488][ T8996] veth1_to_bond: entered allmulticast mode [ 271.371226][ T8996] veth0_to_team: entered promiscuous mode [ 271.373815][ T8996] veth0_to_team: entered allmulticast mode [ 271.378291][ T8996] veth1_to_team: entered promiscuous mode [ 271.380762][ T8996] veth1_to_team: entered allmulticast mode [ 271.384663][ T8996] veth0_to_batadv: entered promiscuous mode [ 271.387760][ T8996] veth0_to_batadv: entered allmulticast mode [ 271.390618][ T8996] batadv_slave_0: entered promiscuous mode [ 271.392917][ T8996] batadv_slave_0: entered allmulticast mode [ 271.395410][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.398243][ T8996] veth1_to_batadv: entered promiscuous mode [ 271.400909][ T8996] veth1_to_batadv: entered allmulticast mode [ 271.411354][ T8996] batadv_slave_1: entered promiscuous mode [ 271.416106][ T8996] batadv_slave_1: entered allmulticast mode [ 271.423300][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.431309][ T847] usb 9-1: USB disconnect, device number 2 [ 271.436648][ T8996] xfrm0: entered promiscuous mode [ 271.443247][ T8996] xfrm0: entered allmulticast mode [ 271.451963][ T8996] veth0_to_hsr: entered promiscuous mode [ 271.455689][ T8996] veth0_to_hsr: entered allmulticast mode [ 271.460709][ T8996] hsr_slave_0: entered allmulticast mode [ 271.464603][ T8996] veth1_to_hsr: entered promiscuous mode [ 271.469316][ T8996] veth1_to_hsr: entered allmulticast mode [ 271.475744][ T8996] hsr_slave_1: entered allmulticast mode [ 271.499128][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.502533][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.536097][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.539199][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.642279][ T9004] fuse: Bad value for 'fd' [ 271.891985][ T9008] kAFS: unable to lookup cell '/,c¾ûL' [ 271.903748][ T9008] FAULT_INJECTION: forcing a failure. [ 271.903748][ T9008] name failslab, interval 1, probability 0, space 0, times 0 [ 271.910095][ T9008] CPU: 3 UID: 0 PID: 9008 Comm: syz.3.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.910126][ T9008] Tainted: [L]=SOFTLOCKUP [ 271.910133][ T9008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.910145][ T9008] Call Trace: [ 271.910201][ T9008] [ 271.910209][ T9008] dump_stack_lvl+0x100/0x190 [ 271.910311][ T9008] should_fail_ex.cold+0x5/0xa [ 271.910350][ T9008] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 271.910412][ T9008] should_failslab+0xc2/0x120 [ 271.910463][ T9008] kmem_cache_alloc_noprof+0x91/0x6a0 [ 271.910485][ T9008] ? skb_clone+0x190/0x400 [ 271.910511][ T9008] skb_clone+0x190/0x400 [ 271.910533][ T9008] netlink_deliver_tap+0xaed/0xcc0 [ 271.910566][ T9008] netlink_unicast+0x6a5/0x850 [ 271.910598][ T9008] ? __pfx_netlink_unicast+0x10/0x10 [ 271.910623][ T9008] ? genl_rcv_msg+0x4be/0x800 [ 271.910648][ T9008] netlink_ack+0x655/0xb80 [ 271.910682][ T9008] netlink_rcv_skb+0x333/0x420 [ 271.910709][ T9008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.910729][ T9008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.910764][ T9008] ? netlink_deliver_tap+0x1ae/0xcc0 [ 271.910800][ T9008] genl_rcv+0x28/0x40 [ 271.910817][ T9008] netlink_unicast+0x585/0x850 [ 271.910847][ T9008] ? __pfx_netlink_unicast+0x10/0x10 [ 271.910881][ T9008] netlink_sendmsg+0x8b0/0xda0 [ 271.910910][ T9008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.910939][ T9008] ? apparmor_socket_sendmsg+0x15b/0x270 [ 271.910997][ T9008] ____sys_sendmsg+0xa4d/0xbe0 [ 271.911021][ T9008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.911047][ T9008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.911081][ T9008] ___sys_sendmsg+0x190/0x1e0 [ 271.911108][ T9008] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.911159][ T9008] ? find_held_lock+0x2b/0x80 [ 271.911220][ T9008] __sys_sendmsg+0x160/0x210 [ 271.911240][ T9008] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.911267][ T9008] ? __pfx_ksys_write+0x10/0x10 [ 271.911298][ T9008] __do_fast_syscall_32+0xe7/0x970 [ 271.911338][ T9008] ? lockdep_hardirqs_on+0x78/0x100 [ 271.911366][ T9008] do_fast_syscall_32+0x32/0x70 [ 271.911384][ T9008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.911406][ T9008] RIP: 0023:0xf6feefec [ 271.911427][ T9008] Code: Unable to access opcode bytes at 0xf6feefc2. [ 271.911462][ T9008] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 271.911482][ T9008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 271.911491][ T9008] RDX: 0000000000008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.911500][ T9008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.911509][ T9008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.911518][ T9008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.911536][ T9008] [ 271.950997][ T9012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.857'. [ 272.073988][ T9012] Invalid ELF header len 9 [ 272.156952][ T9023] overlayfs: missing 'workdir' [ 272.386987][ T9038] fuse: Bad value for 'fd' [ 272.471174][ T9004] orangefs_mount: mount request failed with -4 [ 272.523253][ T9047] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.528970][ T9047] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 272.688956][ T5750] Bluetooth: hci4: command tx timeout [ 272.808434][ T9066] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 272.811013][ T9066] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.816508][ T9066] vhci_hcd vhci_hcd.0: Device attached [ 272.962930][ T9072] fuse: Bad value for 'fd' [ 273.108772][ T5863] usb 44-1: SetAddress Request (14) to port 0 [ 273.111034][ T5863] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 273.133314][ T9074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.875'. [ 273.432684][ T9067] vhci_hcd: connection reset by peer [ 273.436662][ T12] vhci_hcd vhci_hcd.3: stop threads [ 273.439281][ T12] vhci_hcd vhci_hcd.3: release socket [ 273.441479][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 273.682219][ T9093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 273.684703][ T9093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.693764][ T9093] vhci_hcd vhci_hcd.0: Device attached [ 273.777250][ T9100] fuse: Bad value for 'fd' [ 274.730875][ T9094] vhci_hcd: connection closed [ 274.731054][ T12] vhci_hcd vhci_hcd.1: stop threads [ 274.735609][ T12] vhci_hcd vhci_hcd.1: release socket [ 274.738218][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 274.758844][ T62] usb 40-1: enqueue for inactive port 0 [ 274.769139][ T5750] Bluetooth: hci4: command tx timeout [ 274.883869][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 275.128857][ T5836] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 275.253105][ T62] usb usb40-port1: attempt power cycle [ 275.278763][ T5836] usb 9-1: Using ep0 maxpacket: 8 [ 275.292850][ T5836] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 275.306807][ T5836] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.319396][ T5836] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.329567][ T5836] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.334144][ T5836] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.350000][ T5836] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.358263][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.595329][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 275.600663][ T5836] usb 9-1: usb_control_msg returned -32 [ 275.605384][ T5836] usbtmc 9-1:16.0: can't read capabilities [ 275.618021][ T9122] macsec1: entered promiscuous mode [ 275.620134][ T9122] batadv0: entered promiscuous mode [ 275.629476][ T9122] macsec1: entered allmulticast mode [ 275.632306][ T9122] batadv0: entered allmulticast mode [ 275.643602][ T9122] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 275.657701][ T9122] batadv0: left allmulticast mode [ 275.660788][ T9122] batadv0: left promiscuous mode [ 275.821286][ T62] usb usb40-port1: unable to enumerate USB device [ 275.899396][ T35] block nbd1: Possible stuck request ffff888027fd0000: control (read@0,1024B). Runtime 30 seconds [ 275.908886][ T35] block nbd1: Possible stuck request ffff888027fd01c0: control (read@1024,1024B). Runtime 30 seconds [ 275.913165][ T35] block nbd1: Possible stuck request ffff888027fd0380: control (read@2048,1024B). Runtime 30 seconds [ 275.917286][ T35] block nbd1: Possible stuck request ffff888027fd0540: control (read@3072,1024B). Runtime 30 seconds [ 276.275478][ T9129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.893'. [ 276.894546][ T9147] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 277.334092][ T9155] fuse: Unknown parameter '0x0000000000000003' [ 277.393938][ T9157] Cannot find del_set index 0 as target [ 277.553511][ T9159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.842247][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 277.842292][ T42] audit: type=1326 audit(1784254129.359:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 277.854591][ T42] audit: type=1326 audit(1784254129.369:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707efec code=0x7ffc0000 [ 277.861778][ T42] audit: type=1326 audit(1784254129.369:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 277.869732][ T42] audit: type=1326 audit(1784254129.389:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707efec code=0x7ffc0000 [ 278.053699][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 278.211320][ T9173] 9pnet_virtio: no channels available for device syz [ 278.221798][ T5863] usb 44-1: device descriptor read/8, error -110 [ 278.344975][ T42] audit: type=1326 audit(1784254129.859:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 278.352583][ T42] audit: type=1326 audit(1784254129.869:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 278.630994][ T5863] usb usb44-port1: attempt power cycle [ 278.749052][ T42] audit: type=1107 audit(1784254130.239:10326): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 279.733662][ T1305] block nbd2: Possible stuck request ffff888028035080: control (read@0,1024B). Runtime 30 seconds [ 280.019468][ T5863] usb usb44-port1: unable to enumerate USB device [ 280.046125][ T9195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.758368][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 281.349176][ T9130] usbtmc 9-1:16.0: usb_control_msg returned -110 [ 281.819599][ T5869] usb 9-1: USB disconnect, device number 3 [ 282.178907][ T5836] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 282.338801][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 282.342441][ T5836] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 282.346221][ T5836] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 282.350835][ T5836] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.355621][ T5836] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.365635][ T5836] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 282.369251][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.375987][ T5836] usb 8-1: Product: syz [ 282.377361][ T5836] usb 8-1: Manufacturer: syz [ 282.384370][ T5836] usb 8-1: SerialNumber: syz [ 282.397561][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 282.417580][ T5836] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input10 [ 282.479060][ T847] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 282.619550][ T5836] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 282.625052][ T5836] (id 0x00) [ 282.644563][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.650544][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.658753][ T847] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.665084][ T847] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.668365][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.675159][ T847] usb 9-1: config 0 descriptor?? [ 282.689060][ T5836] rc_core: IR keymap rc-imon-pad not found [ 282.692261][ T5836] Registered IR keymap rc-empty [ 282.695164][ T5836] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 282.700451][ T5836] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 282.819932][ T5836] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 282.825343][ T5836] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input11 [ 282.832008][ T5836] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:10> initialized [ 283.083654][ T9221] imon:vfd_write: invalid payload size [ 283.096647][ T847] usbhid 9-1:0.0: can't add hid device: -71 [ 283.103023][ T847] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 283.112714][ T847] usb 9-1: USB disconnect, device number 4 [ 283.238851][ T5869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 283.378814][ T5869] usb 5-1: device descriptor read/64, error -71 [ 283.621192][ T5869] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.748937][ T5869] usb 5-1: device descriptor read/64, error -71 [ 283.859233][ T5869] usb usb5-port1: attempt power cycle [ 284.209444][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 284.229915][ T5869] usb 5-1: device descriptor read/8, error -71 [ 284.295812][ T9245] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 284.298623][ T9245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.302618][ T9245] vhci_hcd vhci_hcd.0: Device attached [ 284.468775][ T5869] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 284.491199][ T5869] usb 5-1: device descriptor read/8, error -71 [ 284.525009][ T9248] vhci_hcd: connection closed [ 284.525401][ T12] vhci_hcd vhci_hcd.4: stop threads [ 284.528875][ T12] vhci_hcd vhci_hcd.4: release socket [ 284.530859][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 284.569418][ T24] usb 46-1: enqueue for inactive port 0 [ 284.600829][ T5869] usb usb5-port1: unable to enumerate USB device [ 285.051072][ T9252] FAULT_INJECTION: forcing a failure. [ 285.051072][ T9252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.056762][ T9252] CPU: 1 UID: 0 PID: 9252 Comm: syz.1.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.056791][ T9252] Tainted: [L]=SOFTLOCKUP [ 285.056797][ T9252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.056807][ T9252] Call Trace: [ 285.056815][ T9252] [ 285.056822][ T9252] dump_stack_lvl+0x100/0x190 [ 285.056847][ T9252] should_fail_ex.cold+0x5/0xa [ 285.056868][ T9252] _copy_from_user+0x2e/0xd0 [ 285.056894][ T9252] move_addr_to_kernel+0x65/0x170 [ 285.056923][ T9252] get_compat_msghdr+0x3c7/0x480 [ 285.056948][ T9252] ? __pfx_get_compat_msghdr+0x10/0x10 [ 285.056980][ T9252] ___sys_sendmsg+0x1b6/0x1e0 [ 285.057008][ T9252] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.057045][ T9252] ? find_held_lock+0x2b/0x80 [ 285.057081][ T9252] __sys_sendmsg+0x160/0x210 [ 285.057102][ T9252] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.057129][ T9252] ? __pfx_ksys_write+0x10/0x10 [ 285.057160][ T9252] __do_fast_syscall_32+0xe7/0x970 [ 285.057179][ T9252] ? lockdep_hardirqs_on+0x78/0x100 [ 285.057208][ T9252] do_fast_syscall_32+0x32/0x70 [ 285.057226][ T9252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.057249][ T9252] RIP: 0023:0xf707efec [ 285.057270][ T9252] Code: Unable to access opcode bytes at 0xf707efc2. [ 285.057278][ T9252] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 285.057296][ T9252] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 285.057307][ T9252] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.057317][ T9252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.057326][ T9252] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 285.057336][ T9252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.057360][ T9252] [ 285.071207][ T24] usb usb46-port1: attempt power cycle [ 285.204733][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 285.563621][ T9246] imon:send_packet: task interrupted [ 285.566256][ T9246] imon:send_packet: packet tx failed (-512) [ 285.569679][ T9246] imon:vfd_write: send packet #5 failed [ 285.655815][ T5869] usb 8-1: USB disconnect, device number 10 [ 285.692444][ T24] usb usb46-port1: unable to enumerate USB device [ 286.172819][ T5869] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 286.207720][ T9279] nbd: nbd1 already in use [ 286.340690][ T5869] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.345414][ T5869] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.349979][ T5869] usb 8-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 286.355921][ T5869] usb 8-1: config 0 interface 0 has no altsetting 0 [ 286.358833][ T5869] usb 8-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 286.365439][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.372316][ T5869] usb 8-1: config 0 descriptor?? [ 286.764090][ T5869] usb 8-1: string descriptor 0 read error: -71 [ 286.780392][ T5869] usbhid 8-1:0.0: can't add hid device: -71 [ 286.782767][ T5869] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 286.798578][ T5869] usb 8-1: USB disconnect, device number 11 [ 287.408969][ T5869] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 287.432403][ T9309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.946'. [ 287.570041][ T5869] usb 5-1: config 1 interface 0 has no altsetting 0 [ 287.577013][ T5869] usb 5-1: string descriptor 0 read error: -22 [ 287.582627][ T5869] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 287.586835][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.008606][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.013506][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.019182][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.022983][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.228443][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.231610][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.238330][ T5869] usbhid 5-1:1.0: can't add hid device: -71 [ 288.240573][ T5869] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 288.246790][ T5869] usb 5-1: USB disconnect, device number 20 [ 288.623275][ T9332] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 289.571786][ T9352] ./bus: Can't lookup blockdev [ 289.731437][ T5827] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 289.945472][ T5827] usb 5-1: config 1 interface 0 has no altsetting 0 [ 289.987884][ T5827] usb 5-1: language id specifier not provided by device, defaulting to English [ 290.002197][ T5827] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 290.006795][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.011602][ T5827] usb 5-1: Product: syz [ 290.014042][ T5827] usb 5-1: Manufacturer: syz [ 290.016196][ T5827] usb 5-1: SerialNumber: syz [ 290.151574][ T9369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 290.153513][ T9369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.156097][ T9369] vhci_hcd vhci_hcd.0: Device attached [ 290.394420][ T9370] vhci_hcd: connection closed [ 290.405417][ T13] vhci_hcd vhci_hcd.1: stop threads [ 290.418793][ T5863] usb 40-1: SetAddress Request (26) to port 0 [ 290.420829][ T5863] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 290.437252][ T13] vhci_hcd vhci_hcd.1: release socket [ 290.468954][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 290.504910][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.508369][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.512887][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.516173][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.737443][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.752210][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.773269][ T5827] usbhid 5-1:1.0: can't add hid device: -71 [ 290.775409][ T5827] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 290.781430][ T5827] usb 5-1: USB disconnect, device number 21 [ 291.373465][ T9387] syzkaller0: entered promiscuous mode [ 291.375173][ T9387] syzkaller0: entered allmulticast mode [ 291.577578][ C0] sd 0:0:0:0: [sda] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 291.581668][ C0] sd 0:0:0:0: [sda] tag#3 CDB: Test Unit Ready [ 292.055391][ T9396] fuse: Bad value for 'fd' [ 293.448789][ T847] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 293.600568][ T847] usb 9-1: config 1 interface 0 has no altsetting 0 [ 293.610118][ T847] usb 9-1: string descriptor 0 read error: -22 [ 293.614362][ T847] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 293.620926][ T847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.038719][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.041699][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.045561][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.050333][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.255480][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.258603][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.271774][ T847] usbhid 9-1:1.0: can't add hid device: -71 [ 294.276244][ T847] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 294.283923][ T847] usb 9-1: USB disconnect, device number 5 [ 294.561690][ T9469] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 294.564555][ T9469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.569597][ T9469] vhci_hcd vhci_hcd.0: Device attached [ 294.868921][ T7588] usb 44-1: SetAddress Request (18) to port 0 [ 294.873761][ T7588] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 295.190777][ T9470] vhci_hcd: connection reset by peer [ 295.195197][ T13] vhci_hcd vhci_hcd.3: stop threads [ 295.198954][ T13] vhci_hcd vhci_hcd.3: release socket [ 295.201668][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 295.488849][ T5863] usb 40-1: device descriptor read/8, error -110 [ 295.880133][ T5863] usb usb40-port1: attempt power cycle [ 295.883180][ T42] audit: type=1326 audit(1784254147.399:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.892119][ T42] audit: type=1326 audit(1784254147.399:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.910892][ T42] audit: type=1326 audit(1784254147.409:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.919385][ T42] audit: type=1326 audit(1784254147.409:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.925903][ T42] audit: type=1326 audit(1784254147.409:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.933718][ T42] audit: type=1326 audit(1784254147.419:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.954256][ T42] audit: type=1326 audit(1784254147.419:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.971129][ T42] audit: type=1326 audit(1784254147.419:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.981088][ T42] audit: type=1326 audit(1784254147.419:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707efec code=0x7ffc0000 [ 295.989585][ T42] audit: type=1326 audit(1784254147.419:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.003322][ T9508] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 296.011317][ T9508] .`: (slave syz_tun): Releasing backup interface [ 296.015304][ T9508] syz_tun: left promiscuous mode [ 296.017592][ T9508] syz_tun: left allmulticast mode qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 296.452510][ T5863] usb usb40-port1: unable to enumerate USB device [ 296.848812][ T5869] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 297.001656][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.006415][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.012692][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 297.017782][ T5869] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.025245][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.045462][ T9521] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.054293][ T5869] hub 5-1:1.0: bad descriptor, ignoring hub [ 297.060292][ T5869] hub 5-1:1.0: probe with driver hub failed with error -5 [ 297.067630][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 297.074989][ T5869] cdc_wdm 5-1:1.0: skipping garbage [ 297.082819][ T5869] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 297.087553][ T5869] cdc_wdm 5-1:1.0: Unknown control protocol [ 297.307789][ T9533] batadv_slave_1: entered promiscuous mode [ 297.362175][ T9535] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 297.364838][ T9535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.373204][ T9535] vhci_hcd vhci_hcd.0: Device attached [ 297.650099][ T5863] usb 40-1: SetAddress Request (30) to port 0 [ 297.652058][ T5863] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 297.763317][ T9536] vhci_hcd: connection reset by peer [ 297.768999][ T13] vhci_hcd vhci_hcd.1: stop threads [ 297.770639][ T13] vhci_hcd vhci_hcd.1: release socket [ 297.773028][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 297.778441][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.783932][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.786888][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.790650][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.793786][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.818493][ T9521] usb 5-1: reset low-speed USB device number 22 using dummy_hcd [ 298.136225][ T9533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.154676][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 298.157266][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 298.160092][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 298.162656][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 298.165238][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 298.167966][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 298.170531][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 298.231951][ T9556] binder: Unknown parameter 'íax' [ 298.384231][ T9520] batadv_slave_1: left promiscuous mode [ 298.394911][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.404335][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.407318][ T9540] bridge_slave_0: entered allmulticast mode [ 298.411564][ T9540] bridge_slave_0: entered promiscuous mode [ 298.416156][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.419005][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.422131][ T9540] bridge_slave_1: entered allmulticast mode [ 298.425700][ T9540] bridge_slave_1: entered promiscuous mode [ 298.452733][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.458989][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.485405][ T9540] team0: Port device team_slave_0 added [ 298.489926][ T9540] team0: Port device team_slave_1 added [ 298.490749][ T29] usb 5-1: USB disconnect, device number 22 [ 298.550505][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.554601][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.563690][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.567042][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1000'. [ 298.568429][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.572882][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.581413][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.606620][ T9540] hsr_slave_0: entered promiscuous mode [ 298.610333][ T9540] hsr_slave_1: entered promiscuous mode [ 298.612527][ T9540] debugfs: 'hsr0' already exists in 'hsr' [ 298.614360][ T9540] Cannot create hsr debugfs directory [ 298.723435][ T9540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.730077][ T9540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.732825][ T9540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.737917][ T9540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.741257][ T9540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.746269][ T9540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.749264][ T9540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.753344][ T9540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.773166][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.775487][ T9540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.777843][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.780565][ T9540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.814435][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.830241][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.834107][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.844189][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.854588][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.857667][ T9461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.866412][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.869453][ T9461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.225755][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.395311][ T9540] veth0_vlan: entered promiscuous mode [ 299.405503][ T9540] veth1_vlan: entered promiscuous mode [ 299.427806][ T9540] veth0_macvtap: entered promiscuous mode [ 299.433342][ T9540] veth1_macvtap: entered promiscuous mode [ 299.444879][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.452884][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.462369][ T5842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.472263][ T5842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.475510][ T5842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.495389][ T5842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.553497][ T9434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.557039][ T9434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.580952][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.583617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.087917][ T5105] Bluetooth: hci2: command tx timeout [ 300.090560][ T7588] usb 44-1: device descriptor read/8, error -110 [ 300.515331][ T9616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.537201][ T7588] usb usb44-port1: attempt power cycle [ 300.821214][ T9621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 300.842683][ T9621] netlink: 'syz.1.1008': attribute type 2 has an invalid length. [ 300.922569][ T9623] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 300.924673][ T9623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.932678][ T9623] vhci_hcd vhci_hcd.0: Device attached [ 300.998429][ T9621] : entered promiscuous mode [ 301.120582][ T7588] usb usb44-port1: unable to enumerate USB device [ 301.208784][ T41] usb 38-1: SetAddress Request (34) to port 0 [ 301.211995][ T41] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 301.265316][ T9624] vhci_hcd: connection reset by peer [ 301.268075][ T13] vhci_hcd vhci_hcd.0: stop threads [ 301.271727][ T13] vhci_hcd vhci_hcd.0: release socket [ 301.275651][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 301.470622][ T9461] Bluetooth: hci5: Frame reassembly failed (-84) [ 301.521793][ T9634] tipc: Started in network mode [ 301.523469][ T9634] tipc: Node identity 2007ff, cluster identity 4711 [ 301.526010][ T9634] tipc: Node number set to 2099199 [ 301.703794][ T9639] random: crng reseeded on system resumption [ 302.108899][ T9577] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 302.128731][ T5105] Bluetooth: hci2: command tx timeout [ 302.129157][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.262158][ T9641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.279967][ T9577] usb 10-1: Invalid ep0 maxpacket: 64 [ 302.319055][ T9643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.368979][ T9645] overlayfs: failed to resolve './cgroup': -2 [ 302.410703][ T9577] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 302.558994][ T9577] usb 10-1: Invalid ep0 maxpacket: 64 [ 302.561086][ T9577] usb usb10-port1: attempt power cycle [ 302.638781][ T7588] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 302.688969][ T5863] usb 40-1: device descriptor read/8, error -110 [ 302.788897][ T7588] usb 5-1: Using ep0 maxpacket: 8 [ 302.793201][ T7588] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 302.796822][ T7588] usb 5-1: config 179 has no interface number 0 [ 302.799861][ T7588] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 302.805038][ T7588] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 302.809823][ T7588] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.814383][ T7588] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 302.819123][ T7588] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 302.824670][ T7588] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 302.827493][ T7588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.835832][ T9647] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.898788][ T9577] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 302.919599][ T9577] usb 10-1: Invalid ep0 maxpacket: 64 [ 303.049042][ T9577] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 303.069613][ T9577] usb 10-1: Invalid ep0 maxpacket: 64 [ 303.072229][ T9577] usb usb10-port1: unable to enumerate USB device [ 303.079614][ T5863] usb usb40-port1: attempt power cycle [ 303.488843][ T5758] Bluetooth: hci5: command 0x1003 tx timeout [ 303.493124][ T5750] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.712228][ T5863] usb usb40-port1: unable to enumerate USB device [ 303.888042][ T9667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 303.890730][ T9667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.895585][ T9667] vhci_hcd vhci_hcd.0: Device attached [ 304.009080][ T5863] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 304.158800][ T62] usb 40-1: SetAddress Request (34) to port 0 [ 304.161525][ T62] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 304.164847][ T5863] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.168166][ T5863] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.171142][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 304.174630][ T5863] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.177367][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.183930][ T9666] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 304.191874][ T5863] hub 9-1:1.0: bad descriptor, ignoring hub [ 304.197138][ T5863] hub 9-1:1.0: probe with driver hub failed with error -5 [ 304.200964][ T9668] vhci_hcd: connection reset by peer [ 304.204017][ T12] vhci_hcd vhci_hcd.1: stop threads [ 304.204318][ T5863] cdc_wdm 9-1:1.0: skipping garbage [ 304.205723][ T12] vhci_hcd vhci_hcd.1: release socket [ 304.205769][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 304.211083][ T5863] cdc_wdm 9-1:1.0: skipping garbage [ 304.215242][ T5863] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 304.217132][ T5863] cdc_wdm 9-1:1.0: Unknown control protocol [ 304.218815][ T5750] Bluetooth: hci2: command tx timeout [ 304.451701][ T9671] batadv_slave_1: entered promiscuous mode [ 304.454268][ T9671] batadv_slave_1: left promiscuous mode [ 304.973410][ T9666] usb 9-1: reset low-speed USB device number 6 using dummy_hcd [ 305.022136][ T9685] dvmrp8: entered allmulticast mode [ 305.027521][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1027'. [ 305.283659][ T9666] usb 9-1: device firmware changed [ 305.287585][ T9666] cdc_wdm 9-1:1.0: Error autopm - -16 [ 305.287794][ T5863] usb 9-1: USB disconnect, device number 6 [ 305.315888][ T9690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.651974][ T5836] usb 5-1: USB disconnect, device number 23 [ 305.652111][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.657635][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.662675][ C1] ================================================================== [ 305.665617][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 305.668966][ C1] Read of size 4 at addr ffff88804c19905c by task kworker/1:1H/1305 [ 305.672868][ C1] [ 305.674027][ C1] CPU: 1 UID: 0 PID: 1305 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 305.674045][ C1] Tainted: [L]=SOFTLOCKUP [ 305.674049][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.674057][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 305.674121][ C1] Call Trace: [ 305.674144][ C1] [ 305.674149][ C1] dump_stack_lvl+0x100/0x190 [ 305.674182][ C1] print_report+0x13d/0x4b0 [ 305.674236][ C1] ? __virt_addr_valid+0x239/0x430 [ 305.674248][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 305.674258][ C1] kasan_report+0xdf/0x1c0 [ 305.674293][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 305.674304][ C1] do_raw_spin_lock+0x23b/0x260 [ 305.674316][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.674326][ C1] ? kcov_remote_stop+0x18d/0x540 [ 305.674341][ C1] ? kcov_remote_stop+0x18d/0x540 [ 305.674356][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 305.674427][ C1] ? __wake_up+0x1c/0x60 [ 305.674440][ C1] __wake_up+0x1c/0x60 [ 305.674453][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 305.674504][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 305.674520][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 305.674536][ C1] dummy_timer+0xda1/0x36c0 [ 305.674576][ C1] ? find_held_lock+0x2b/0x80 [ 305.674590][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 305.674606][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 305.674647][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 305.674663][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 305.674679][ C1] ? mark_held_locks+0x40/0x70 [ 305.674694][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 305.674710][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 305.674726][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 305.674740][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 305.674753][ C1] handle_softirqs+0x1ea/0x9b0 [ 305.674765][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 305.674776][ C1] ? _raw_spin_unlock+0x28/0x50 [ 305.674790][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 305.674804][ C1] __irq_exit_rcu+0x162/0x210 [ 305.674814][ C1] irq_exit_rcu+0x9/0x30 [ 305.674825][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 305.674843][ C1] [ 305.674846][ C1] [ 305.674850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.674863][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 305.674876][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 60 bb e4 09 e8 bb 8b 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 305.674889][ C1] RSP: 0018:ffffc90006f0f8f0 EFLAGS: 00000206 [ 305.674920][ C1] RAX: 000000000057222d RBX: ffff888029a98000 RCX: 0000000000000040 [ 305.674928][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a697a RDI: ffff888029a996f8 [ 305.674935][ C1] RBP: ffffc90006f0f948 R08: 0000000000000001 R09: 0000000000000000 [ 305.674942][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888024e90000 [ 305.674949][ C1] R13: 0000000000000001 R14: ffffffff91229c44 R15: ffff88802b33b600 [ 305.674961][ C1] __schedule+0x1264/0x6730 [ 305.674981][ C1] ? __pfx___schedule+0x10/0x10 [ 305.674997][ C1] ? __wake_up+0x3f/0x60 [ 305.675010][ C1] ? __wake_up+0x3f/0x60 [ 305.675023][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 305.675041][ C1] preempt_schedule_common+0x42/0xc0 [ 305.675058][ C1] preempt_schedule_thunk+0x16/0x40 [ 305.675077][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 305.675093][ C1] snd_rawmidi_transmit+0xf1/0x130 [ 305.675112][ C1] snd_vmidi_output_work+0x111/0x390 [ 305.675128][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 305.675172][ C1] ? rcu_is_watching+0x12/0xc0 [ 305.675191][ C1] process_one_work+0xa23/0x1940 [ 305.675216][ C1] ? __pfx_process_one_work+0x10/0x10 [ 305.675232][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 305.675248][ C1] worker_thread+0x5ef/0xe50 [ 305.675264][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.675278][ C1] ? kthread+0x13a/0x450 [ 305.675290][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.675304][ C1] kthread+0x370/0x450 [ 305.675317][ C1] ? __pfx_kthread+0x10/0x10 [ 305.675330][ C1] ret_from_fork+0x72b/0xd50 [ 305.675343][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 305.675355][ C1] ? __switch_to+0x800/0x10f0 [ 305.675371][ C1] ? __pfx_kthread+0x10/0x10 [ 305.675389][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.675406][ C1] [ 305.675410][ C1] [ 305.829227][ C1] Allocated by task 7588: [ 305.830913][ C1] kasan_save_stack+0x30/0x50 [ 305.832768][ C1] kasan_save_track+0x14/0x30 [ 305.834564][ C1] __kasan_kmalloc+0xaa/0xb0 [ 305.836273][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 305.838282][ C1] xpad_probe+0x28e/0x1f60 [ 305.840031][ C1] usb_probe_interface+0x303/0x8f0 [ 305.842022][ C1] really_probe+0x241/0xa60 [ 305.843825][ C1] __driver_probe_device+0x20e/0x450 [ 305.845852][ C1] driver_probe_device+0x4a/0x140 [ 305.847740][ C1] __device_attach_driver+0x1df/0x320 [ 305.849845][ C1] bus_for_each_drv+0x159/0x1e0 [ 305.851763][ C1] __device_attach+0x1e4/0x4d0 [ 305.853623][ C1] device_initial_probe+0xaf/0xd0 [ 305.855605][ C1] bus_probe_device+0x64/0x160 [ 305.857456][ C1] device_add+0x121d/0x1970 [ 305.859186][ C1] usb_set_configuration+0xd97/0x1c60 [ 305.861247][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 305.863300][ C1] usb_probe_device+0xef/0x400 [ 305.865107][ C1] really_probe+0x241/0xa60 [ 305.866872][ C1] __driver_probe_device+0x20e/0x450 [ 305.868964][ C1] driver_probe_device+0x4a/0x140 [ 305.870906][ C1] __device_attach_driver+0x1df/0x320 [ 305.872952][ C1] bus_for_each_drv+0x159/0x1e0 [ 305.874783][ C1] __device_attach+0x1e4/0x4d0 [ 305.876645][ C1] device_initial_probe+0xaf/0xd0 [ 305.878571][ C1] bus_probe_device+0x64/0x160 [ 305.880410][ C1] device_add+0x121d/0x1970 [ 305.882174][ C1] usb_new_device.cold+0x685/0x115c [ 305.884214][ C1] hub_event+0x30a3/0x4a60 [ 305.885925][ C1] process_one_work+0xa23/0x1940 [ 305.887870][ C1] worker_thread+0x5ef/0xe50 [ 305.889691][ C1] kthread+0x370/0x450 [ 305.891287][ C1] ret_from_fork+0x72b/0xd50 [ 305.893095][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.894915][ C1] [ 305.895859][ C1] Freed by task 5836: [ 305.897421][ C1] kasan_save_stack+0x30/0x50 [ 305.899260][ C1] kasan_save_track+0x14/0x30 [ 305.901086][ C1] kasan_save_free_info+0x3b/0x70 [ 305.903064][ C1] __kasan_slab_free+0x5f/0x80 [ 305.904885][ C1] kfree+0x22b/0x6c0 [ 305.906430][ C1] xpad_disconnect+0x1cf/0x530 [ 305.908312][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 305.910334][ C1] device_remove+0x12a/0x180 [ 305.912150][ C1] device_release_driver_internal+0x44e/0x620 [ 305.914476][ C1] bus_remove_device+0x2bc/0x560 [ 305.916431][ C1] device_del+0x376/0x9b0 [ 305.918127][ C1] usb_disable_device+0x367/0x810 [ 305.920118][ C1] usb_disconnect+0x2e2/0x9a0 [ 305.921833][ C1] hub_event+0x1c4f/0x4a60 [ 305.923595][ C1] process_one_work+0xa23/0x1940 [ 305.925463][ C1] worker_thread+0x5ef/0xe50 [ 305.927214][ C1] kthread+0x370/0x450 [ 305.928801][ C1] ret_from_fork+0x72b/0xd50 [ 305.930533][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.932371][ C1] [ 305.933276][ C1] The buggy address belongs to the object at ffff88804c199000 [ 305.933276][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 305.938603][ C1] The buggy address is located 92 bytes inside of [ 305.938603][ C1] freed 1024-byte region [ffff88804c199000, ffff88804c199400) [ 305.943731][ C1] [ 305.944676][ C1] The buggy address belongs to the physical page: [ 305.947170][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c19a800 pfn:0x4c198 [ 305.950991][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 305.954137][ C1] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 305.957457][ C1] page_type: f5(slab) [ 305.959072][ C1] raw: 04fff00000000240 ffff88801bc42dc0 ffffea0001301c10 ffffea00012dae10 [ 305.962302][ C1] raw: ffff88804c19a800 000000080010000f 00000000f5000000 0000000000000000 [ 305.965621][ C1] head: 04fff00000000240 ffff88801bc42dc0 ffffea0001301c10 ffffea00012dae10 [ 305.968732][ C1] head: ffff88804c19a800 000000080010000f 00000000f5000000 0000000000000000 [ 305.971975][ C1] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 305.975281][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 305.978598][ C1] page dumped because: kasan: bad access detected [ 305.981069][ C1] page_owner tracks the page as allocated [ 305.983252][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5891, tgid 5891 (kworker/u33:12), ts 80884518958, free_ts 80856812252 [ 305.991323][ C1] post_alloc_hook+0xfd/0x120 [ 305.993127][ C1] get_page_from_freelist+0xf48/0x3530 [ 305.995254][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 305.997549][ C1] new_slab+0xa2/0x650 [ 305.999114][ C1] refill_objects+0xe3/0x410 [ 306.000897][ C1] __pcs_replace_empty_main+0x376/0x680 [ 306.003034][ C1] __kmalloc_noprof+0x66d/0x820 [ 306.004923][ C1] load_elf_phdrs+0x102/0x210 [ 306.006739][ C1] load_elf_binary+0x29e/0x51c0 [ 306.008666][ C1] bprm_execve+0x8fb/0x1730 [ 306.010394][ C1] kernel_execve+0x31e/0x3a0 [ 306.012154][ C1] call_usermodehelper_exec_async+0x239/0x4b0 [ 306.014545][ C1] ret_from_fork+0x72b/0xd50 [ 306.016354][ C1] ret_from_fork_asm+0x1a/0x30 [ 306.018135][ C1] page last free pid 5827 tgid 5827 stack trace: [ 306.020654][ C1] free_pages_prepare+0x586/0xd80 [ 306.022699][ C1] __free_contig_range_common+0x14f/0x250 [ 306.024931][ C1] free_pages_bulk+0x12a/0x200 [ 306.026745][ C1] vm_area_free_pages+0xad/0x2b0 [ 306.028509][ C1] vfree+0x107/0x750 [ 306.030014][ C1] delayed_vfree_work+0x56/0x80 [ 306.031868][ C1] process_one_work+0xa23/0x1940 [ 306.033778][ C1] worker_thread+0x5ef/0xe50 [ 306.035517][ C1] kthread+0x370/0x450 [ 306.037109][ C1] ret_from_fork+0x72b/0xd50 [ 306.038920][ C1] ret_from_fork_asm+0x1a/0x30 [ 306.040799][ C1] [ 306.041748][ C1] Memory state around the buggy address: [ 306.043940][ C1] ffff88804c198f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.046994][ C1] ffff88804c198f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.050004][ C1] >ffff88804c199000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.053099][ C1] ^ [ 306.055795][ C1] ffff88804c199080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.058709][ C1] ffff88804c199100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.061665][ C1] ================================================================== [ 306.064737][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.067551][ C1] CPU: 1 UID: 0 PID: 1305 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 306.071725][ C1] Tainted: [L]=SOFTLOCKUP [ 306.073386][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.077230][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 306.079696][ C1] Call Trace: [ 306.080991][ C1] [ 306.082092][ C1] dump_stack_lvl+0x100/0x190 [ 306.083942][ C1] vpanic+0x552/0x970 [ 306.085495][ C1] ? __pfx_vpanic+0x10/0x10 [ 306.087230][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 306.089195][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 306.091180][ C1] panic+0xd1/0xe0 [ 306.092659][ C1] ? __pfx_panic+0x10/0x10 [ 306.094397][ C1] ? end_report.part.0+0x23/0x90 [ 306.096329][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.098136][ C1] ? end_report.part.0+0x23/0x90 [ 306.100088][ C1] ? check_panic_on_warn+0x1f/0x90 [ 306.102085][ C1] check_panic_on_warn.cold+0x19/0x34 [ 306.104182][ C1] end_report.part.0+0x3a/0x90 [ 306.105994][ C1] kasan_report.cold+0xe/0x18 [ 306.107656][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 306.109270][ C1] do_raw_spin_lock+0x23b/0x260 [ 306.110810][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.112494][ C1] ? kcov_remote_stop+0x18d/0x540 [ 306.114033][ C1] ? kcov_remote_stop+0x18d/0x540 [ 306.115655][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 306.117299][ C1] ? __wake_up+0x1c/0x60 [ 306.118656][ C1] __wake_up+0x1c/0x60 [ 306.119964][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 306.121690][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 306.123390][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 306.125002][ C1] dummy_timer+0xda1/0x36c0 [ 306.126403][ C1] ? find_held_lock+0x2b/0x80 [ 306.127915][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 306.129747][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 306.131502][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 306.133394][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 306.134937][ C1] ? mark_held_locks+0x40/0x70 [ 306.136434][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 306.138134][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 306.139658][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 306.141320][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 306.142932][ C1] handle_softirqs+0x1ea/0x9b0 [ 306.144475][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 306.146121][ C1] ? _raw_spin_unlock+0x28/0x50 [ 306.147701][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 306.149403][ C1] __irq_exit_rcu+0x162/0x210 [ 306.150855][ C1] irq_exit_rcu+0x9/0x30 [ 306.152298][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 306.154214][ C1] [ 306.155177][ C1] [ 306.156084][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.157889][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 306.159916][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 60 bb e4 09 e8 bb 8b 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 306.165814][ C1] RSP: 0018:ffffc90006f0f8f0 EFLAGS: 00000206 [ 306.167739][ C1] RAX: 000000000057222d RBX: ffff888029a98000 RCX: 0000000000000040 [ 306.170242][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a697a RDI: ffff888029a996f8 [ 306.172605][ C1] RBP: ffffc90006f0f948 R08: 0000000000000001 R09: 0000000000000000 [ 306.175081][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888024e90000 [ 306.177565][ C1] R13: 0000000000000001 R14: ffffffff91229c44 R15: ffff88802b33b600 [ 306.180031][ C1] __schedule+0x1264/0x6730 [ 306.181474][ C1] ? __pfx___schedule+0x10/0x10 [ 306.183017][ C1] ? __wake_up+0x3f/0x60 [ 306.184375][ C1] ? __wake_up+0x3f/0x60 [ 306.185705][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 306.187357][ C1] preempt_schedule_common+0x42/0xc0 [ 306.188984][ C1] preempt_schedule_thunk+0x16/0x40 [ 306.190591][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 306.192359][ C1] snd_rawmidi_transmit+0xf1/0x130 [ 306.193995][ C1] snd_vmidi_output_work+0x111/0x390 [ 306.195639][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 306.197405][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.198895][ C1] process_one_work+0xa23/0x1940 [ 306.200480][ C1] ? __pfx_process_one_work+0x10/0x10 [ 306.202175][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 306.204001][ C1] worker_thread+0x5ef/0xe50 [ 306.205418][ C1] ? __pfx_worker_thread+0x10/0x10 [ 306.207021][ C1] ? kthread+0x13a/0x450 [ 306.208369][ C1] ? __pfx_worker_thread+0x10/0x10 [ 306.209899][ C1] kthread+0x370/0x450 [ 306.211164][ C1] ? __pfx_kthread+0x10/0x10 [ 306.212637][ C1] ret_from_fork+0x72b/0xd50 [ 306.214104][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 306.215796][ C1] ? __switch_to+0x800/0x10f0 [ 306.217394][ C1] ? __pfx_kthread+0x10/0x10 [ 306.218953][ C1] ret_from_fork_asm+0x1a/0x30 [ 306.220497][ C1] [ 306.222356][ C1] Kernel Offset: disabled [ 306.223699][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:09:17 Registers: info registers vcpu 0 CPU#0 RAX=00000000006707cd RBX=ffffffff8e891480 RCX=ffffffff8bb6c2d5 RDX=0000000000000000 RSI=ffffffff8e1a697a RDI=ffffffff8c400680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb6a89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7188950 CR3=0000000074c7f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000020400004 Opmask04=00000000fffbfffd Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562e153d2d00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562e153e38e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d2eb15b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 7373460773434943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494349415c434943 4941071614011207 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31346e6931387069 4435637369464663 6931327064414463 7364343163644245 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 601f3612f5376019 0000562b77dffb52 0000000000000251 00000035362e3937 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a313d415441535f 4154415f44490a35 303030304d513d54 524f48535f4c4149 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5845425955464b43 584f59554e43003f 3a3a3a3a475b5547 4558274e5c4e555f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 003b374b5e4b5955 4b5e4b554e43003f 3a3a3a3a475b375e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32785c3032785c30 32785c3032785c30 32785c3032785c30 32785c3032785c30 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a04b25 RDI=ffffffff9b9e51a0 RBP=ffffffff9b9e5160 RSP=ffffc900005904f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6334303838386652 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6e522c R15=ffffffff85a04ac0 RIP=ffffffff85a04b4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=000000002ac99000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff8a5c3ae5 RBX=ffff888043718ba0 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888014360e70 RBP=ffff888043718000 RSP=ffffc90003bc7550 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff888014360e70 R12=0000000000000677 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e4c1c2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7488630 CR3=000000006c5cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00e000bc00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000459473 RBX=ffff88801cf12540 RCX=ffffffff8bb6c2d5 RDX=0000000000000000 RSI=ffffffff8e1a697a RDI=ffffffff8c400680 RBP=ffffed10039e24a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb6a89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f544cda4 CR3=000000005075d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000