last executing test programs: 26.378585829s ago: executing program 3 (id=3682): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x32) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x2040c0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4002080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 25.386337428s ago: executing program 3 (id=3685): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x1000000, 0x0, 0x8fc0, 0x65f40}) 25.184573085s ago: executing program 3 (id=3687): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb000000"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}}, 0x0) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0xc0045103, &(0x7f0000000040)) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) 23.528471491s ago: executing program 3 (id=3691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x70d}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x2}], 0x1, 0x5, 0xa, 0x20) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0109054a03000053000000f1ffffff4c0200009b00000000000000000000006fd260d8e2da359044ef73e33a7a75b59ff2bcbec6c3dfe5"], 0x20) kexec_load(0x0, 0x0, 0x0, 0x3e0000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2s-160-arm\x00'}}, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8c6ec71dae93551e", "756b238afa308a905ef370064bc1a6f8", "5c46ce61", "086f2fde9e315593"}, 0x28) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000300)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x70d}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x2}], 0x1, 0x5, 0xa, 0x20) (async) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x0) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0109054a03000053000000f1ffffff4c0200009b00000000000000000000006fd260d8e2da359044ef73e33a7a75b59ff2bcbec6c3dfe5"], 0x20) (async) kexec_load(0x0, 0x0, 0x0, 0x3e0000) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2s-160-arm\x00'}}, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8c6ec71dae93551e", "756b238afa308a905ef370064bc1a6f8", "5c46ce61", "086f2fde9e315593"}, 0x28) (async) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000300)=0x3, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) 23.528064514s ago: executing program 3 (id=3692): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x100) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r3 = timerfd_create(0x8, 0x80000) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x6, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r7, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x10) 23.495783622s ago: executing program 3 (id=3693): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xbb1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @mcast1, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setuid(0xee00) 23.313819894s ago: executing program 32 (id=3693): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xbb1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @mcast1, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setuid(0xee00) 5.670989627s ago: executing program 0 (id=3793): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x10000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e045f696e6764e020226700"]) chdir(&(0x7f0000000200)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file2\x00', r1, &(0x7f0000000100)='./file2\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000900020d75b8a1360e414073cd74a00073797a3200000000050004050005000200000016000300686173683a6e65742c706f72742c6e65741340fffffffc050001000700000000004f0ca61f30234dc16f8981e7144c30130000000000"], 0x5c}}, 0x20000000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4070, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="bbbbbbbbbbb9aaaaaaaaaabb86dd602e2caa00003200fe800000000000000000000000000000010000000000"], 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000380)={0x1, 0x0, '\x00', {0x0, @bt={0x9, 0x6, 0x0, 0x1, 0x9261, 0x1, 0x1, 0x3, 0x1, 0xffffffff, 0x8, 0x3, 0x8, 0x4, 0x0, 0x2, {0xffff, 0x9}, 0x1, 0x4}}}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) getpeername(r5, 0x0, &(0x7f00000002c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000420000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000300)=0xe, 0x9, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6) 5.624854077s ago: executing program 0 (id=3794): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000240)="3d3bc1cb03a255f8d1760c8326d9fbc32232daadf9fd574ca3134bc434c5a6c6d3fc8b67dcfe6e366ff1d927c164fd2543a3dc5c5a9dbbbdbf18a46fb38f5d713dd72c5da0630557256a2e99c0aa5af92cdcc23f8eb317bbae55e882fe2a53ea1aace471cc983691ef9495c2e7d7e4e2bfbd6da201dcb064a6c1184abf7cb9fd35f08a9db465011e01902a66e23befea3d9731d6fa48dfab1d281ce6a48d4502bbb1c5b356fd") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast1, 0x7f}}, 0x3, 0x0, 0x0, 0x5, 0x7a880bb668777deb, 0x1}, 0x9c) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x60000005}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x103fe, 0x0, 0x1, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r10, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r9, {0x7, 0x26, 0x2d, 0xfffffffff323ca46, 0x0, 0x100, 0x6, 0x6b, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x80000001, {{0x4000001, 0x0, 0x100000005, 0x0, 0xfff, 0x3, {0x1, 0x100000000, 0x1137, 0xffff, 0x1, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x2, 0xee00, r11, 0xfffffff9, 0x1}}, {0x0, 0xd}}}, 0x0, 0x0}) 3.814763126s ago: executing program 1 (id=3806): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x0, 0x20006, 0x1830, 0x6}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 3.741322723s ago: executing program 4 (id=3807): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x481e) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x192) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) chdir(&(0x7f0000000300)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x4) 3.605530628s ago: executing program 1 (id=3808): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r1, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, &(0x7f00000047c0), 0x1200) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="e4cdd0ce31c3964ffa97ad32b92a7d2a216ffc0f83799fa1b73b3ed9c8ae8c93e390a28de08422f31912", 0x2a}, {&(0x7f0000000140)="640b705f7492299b567411bdd97b3c084b459585fb334ce2c09f80dd3bb4a97a018549942ca51eb5adb809d35a348b0722e7692e0d0d6edbb80f8349148d0b74eb07cd0015442f1ea101c55d9b4651b3e18eeb6aacf09a79c983b6ab9616beedbcb0816fd60bcaa4ce86d940109f2bd5a131ddf6b0e6968470352e42c5a423990373b423da621ec8", 0x88}, {&(0x7f0000000200)="23f2b6672237268a3c3a198320703d42829ee53e3fa0cd5a130bb7cbade50df3a5b861fbb3f4766aab1ae0c2a8828ce90690d8158214da4e3694e45aa5b6b3dcafd315a07d8c5ec6df081de662eaca0e98fa5edf4ac73d6aece59bd65e2123501c48f4ee5e96243e0087e8b65ff344fbb170163f85bf4a6fc1f07c1a684dcc8ebf2b05229489d5dc0f3caaac25ce4f3899f7f2c23e8bf0ec003b0c0fe0feb326ee9b46fa3ee1413ad66c650454e5d80aa1e238b6e6ef222dd7ef7cd481b792658d4052b5e301192475103cf746a7dac48797be46d14dbb08933f42d3eb3ff4c45cf59bc9a2a755db8d20ce7d6ae8af03440234", 0xf3}], 0x3, &(0x7f0000000300)=[{0x7c, 0x117, 0x38, "18a625ab1fea17db896d48d4d8f59fd48facd03872691784bd7bbae1cd86e8f877417073d12a1d82389dfa110e49e15b3c598a7f472e660f0f94e674dbdde57380cf089f30ca2bd76f61f60e4521bb46554e3d4b302fe927c2e51a68f16808bb8e4a997cb8a6cfaa379f1aa9298989"}, {0x44, 0x10f, 0x10000, "b10e97773006aed71b2a49c7f40acd2032f11f74a8a19bb8de2110ce3189314018ee0657dac00b1a6fb6d4bad0093dd3774daebd9ccd00"}], 0xc0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r0) pread64(r4, &(0x7f00000012c0)=""/96, 0x60, 0x40a) lseek(r4, 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 3.572518463s ago: executing program 1 (id=3809): syz_80211_inject_frame(0x0, 0x0, 0x32) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newae={0x2b8, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@mcast2, 0x4d6, 0xa, 0x2b}, @in6=@mcast2, 0x2000, 0x3506}, [@migrate={0x180, 0x11, [{@in=@loopback, @in=@local, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x33, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010100, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x33, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in=@empty, @in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x2, 0x0, 0x34ff, 0xa, 0xa}]}, @sa={0xe0, 0x6, {{@in=@remote, @in=@loopback, 0x4e22, 0x0, 0x4e21, 0x2c73, 0xa, 0x20, 0x60, 0x21}, {@in=@broadcast, 0x4d2, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0xb}, {0x4, 0xa, 0x8000000000000000, 0xfffffffffffffffc, 0x8, 0x800007f, 0xfffffffffffffff8, 0x280000000000}, {0x0, 0xfffffffffffffffd, 0xf, 0x8000000000000001}, {0x8001, 0x1, 0xfffffaa6}, 0x70bd25, 0x3501, 0xa, 0x2, 0x5}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @proto={0x5, 0x19, 0x6c}]}, 0x2b8}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.87602436s ago: executing program 4 (id=3810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) shutdown(0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$int_in(r3, 0x5452, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) r5 = open(0x0, 0x60840, 0x14) (async) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) io_uring_enter(r6, 0x7cc9, 0x0, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x10, r4, 0xca7cf000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, 0x0) (async) dup(r0) (async) r11 = fcntl$dupfd(r4, 0x406, r10) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x100000}) 2.338539372s ago: executing program 0 (id=3812): r0 = open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x6940, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x692c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e61e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_pedit={0x68e4, 0xe, 0x0, 0x0, {{0xa}, {0x58b8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x3, 0xe, 0x7, 0x101, 0x8}, 0x4, 0x6, [{0x4, 0x9b, 0x9, 0x4, 0x5, 0x8}, {0x401, 0x7, 0x8, 0x7fffffff, 0xfffffffc, 0x83}, {0xfff, 0x8, 0x5, 0x0, 0x7, 0x7}, {0x2, 0x4, 0x2, 0x7fffffff, 0x8, 0x5}, {0x8, 0xfcb, 0x200, 0xf, 0x9, 0x74}, {0x37, 0x71, 0xfffffff9, 0xf7c, 0x6, 0x2}]}, [{0x100, 0x3, 0xa, 0x3, 0x2, 0x3}, {0x5, 0x6, 0xfffffffd, 0x80000000, 0x4, 0x6}, {0x10001, 0xbc1, 0x3, 0xad, 0x0, 0xc05}, {0x2, 0x9, 0x7, 0x9, 0x401, 0x800}, {0x2, 0x7, 0x3, 0x9, 0x200, 0x7}, {0x9178, 0xfffffffc, 0xc6, 0x5, 0x8, 0x209}, {0x6, 0x0, 0x3, 0x6, 0xff, 0x7d3e0000}, {0xfffffffc, 0x9, 0x6, 0x3, 0x80000000, 0x2a}, {0x40, 0x0, 0x8, 0x3, 0x1000, 0xffff}, {0x8f, 0x6ed, 0x3, 0x5, 0x0, 0x5}, {0x80000000, 0x1, 0xab2, 0xfa, 0x7, 0x6}, {0x7fffffff, 0x0, 0x506, 0x0, 0xd37, 0x2}, {0x0, 0xfffffff9, 0x347d, 0x101, 0x0, 0x14de}, {0xa4, 0x1, 0x6, 0x1, 0xfff, 0x1ff}, {0x0, 0x3, 0xb, 0x1, 0x7}, {0x3, 0x7fff, 0xff, 0x3, 0x10}, {0x100, 0x3, 0x4, 0x1, 0x7fff, 0x8}, {0x1, 0xc, 0x3, 0x5, 0x0, 0x2}, {0x10001, 0x3, 0x800, 0xffffff92, 0x0, 0x7}, {0x8, 0xfff, 0x12, 0x7fff, 0x5, 0x1}, {0x7, 0x69, 0x4, 0x7f, 0x1000, 0x101}, {0xfffffffd, 0xdb92, 0x7, 0x46c9, 0xffffffff, 0x1}, {0xfe, 0xa, 0x800, 0xffff7fff, 0x2, 0x800}, {0x8, 0x5, 0x2, 0x6, 0x5, 0xf}, {0x80000000, 0x58f1, 0x3, 0x9, 0x0, 0x4}, {0x1, 0x6, 0x4, 0x6, 0x7, 0x4}, {0x0, 0x735, 0xd, 0x8, 0x5, 0x80}, {0x7, 0x2, 0x4, 0x10000, 0x7, 0x7}, {0x6, 0x0, 0x5, 0x80, 0xff, 0xfffffff9}, {0x10, 0xff, 0x4, 0xd3, 0x7fff, 0x7}, {0xffffffff, 0x800, 0x4f, 0x401, 0xa}, {0x3, 0x6, 0x16, 0x1, 0x1b55, 0x4}, {0x0, 0x3, 0x5, 0x2, 0x2, 0x3}, {0x7, 0x7, 0x14, 0x100, 0x0, 0xfffffffb}, {0x5, 0x0, 0xbc, 0x81, 0x100, 0x80000000}, {0x10000, 0x4, 0x4, 0x80000000, 0x9, 0xd9}, {0x3, 0x1ff, 0x0, 0x1, 0x4, 0x2}, {0x3, 0x6, 0x7f2, 0x40, 0x1, 0x9}, {0x200, 0xa24, 0x0, 0x4, 0x8, 0x3}, {0x4, 0x92, 0xe, 0x3, 0x10, 0x7}, {0x1, 0x9650, 0x1, 0x2, 0xc78}, {0x7ff, 0x3, 0x66a8, 0xc, 0x8, 0x3ff}, {0x1000, 0xc, 0x4, 0x48000, 0xfffffffa, 0x3}, {0x8, 0xe, 0x800, 0x723f, 0x7, 0x1}, {0x9, 0x7f, 0x568fa8c, 0x7, 0x100, 0x46f}, {0x1000, 0x5, 0x1, 0x5, 0x9, 0x2}, {0x9, 0x4, 0xf, 0x81, 0x7, 0x4}, {0x3e34, 0xb, 0x779342b2, 0x7, 0x100, 0x6}, {0xfffffff9, 0x6a, 0x551d, 0x1000, 0x2, 0x7}, {0x5, 0x7, 0x9ac, 0x30000000, 0x8, 0xf}, {0x9, 0x5abb08e0, 0x9, 0x1, 0x26, 0x3}, {0x3, 0x8, 0xf28f, 0x100, 0x3, 0x3}, {0x9037, 0x9, 0x1ce, 0xff, 0x9, 0x2}, {0x0, 0x8000, 0xc, 0x8, 0x94, 0x1}, {0x5, 0x5, 0xf, 0x3, 0x4, 0xff}, {0x80000001, 0x7, 0x40, 0x10000, 0xfff, 0x9}, {0xd, 0xfffffffc, 0x7, 0x6a9, 0x1, 0x80000001}, {0x8, 0x7, 0x1, 0x7, 0xfffffff7, 0x4}, {0xa, 0x1, 0x3ff, 0x8, 0x8, 0x7}, {0x5, 0x4, 0xc1f7, 0x6, 0x826, 0x6}, {0x3, 0xffff, 0x8000000, 0xdf, 0x9, 0xb6a}, {0x3, 0x4, 0xfc, 0x32d7, 0x3, 0x101}, {0x7, 0x45d, 0x0, 0x4ae563b3, 0x35, 0x10}, {0x400, 0xfffffff9, 0x8692, 0x80000001, 0x8, 0x2}, {0x800, 0x6, 0x6, 0x8, 0x6, 0x5}, {0x0, 0x10000, 0x5beb, 0x1, 0x40, 0x3}, {0x481, 0x3ff, 0x7ff, 0x8000, 0x1, 0xffff}, {0x1, 0x8, 0x2, 0x5, 0x1e000}, {0x0, 0x1b0, 0x4, 0x3, 0x9, 0x1000}, {0xffffffff, 0x6, 0xed, 0x6b, 0x0, 0xc0f}, {0x401, 0x9, 0x8, 0x4, 0x8, 0x584}, {0x5, 0x7, 0x0, 0x5, 0x7, 0xa}, {0x8, 0x1, 0x3, 0x0, 0x8, 0xb8c}, {0x1, 0xffffffff, 0x9, 0x9, 0x8734, 0x7}, {0x8, 0x1, 0x1, 0x7, 0x8, 0x9}, {0xfffffffb, 0xfffff000, 0x3, 0x8, 0x2, 0xfff}, {0x5, 0x4, 0x4cc, 0x2, 0x6, 0x37}, {0x9, 0x8000, 0xf3e7, 0xfffffffa, 0x4, 0x7}, {0x8, 0x90, 0x6009, 0x40704b27, 0x0, 0x35}, {0x0, 0x5fd5f45f, 0x116d, 0x0, 0x5, 0x8}, {0x582, 0x9f9, 0x10, 0x7, 0x10001, 0x5}, {0x5f8, 0x800, 0x7fff, 0x7f62, 0x4, 0x1}, {0xfffffffe, 0x81, 0x9b98, 0x9, 0xb, 0x9}, {0x9, 0x9, 0x4, 0x837, 0x1, 0x2}, {0x28, 0x401, 0x9, 0x1, 0xb, 0x5}, {0x9, 0x2, 0x400, 0x3, 0xc65b, 0x1}, {0x8000, 0x3, 0x8, 0x2, 0xde, 0x5}, {0x8, 0xa, 0xfffff000, 0x4, 0x6, 0xf5}, {0x3, 0x6d, 0x5, 0x7fffffff, 0x2, 0x8}, {0x8, 0x4, 0x53, 0x10, 0xfffff442, 0x400}, {0x2, 0x4, 0x100, 0x2, 0x8, 0x5}, {0x7ff, 0x400, 0x80e4, 0x3, 0x3, 0x2}, {0xfffffff1, 0x0, 0x7, 0x3ff, 0x5, 0x18}, {0x9, 0x6, 0x2, 0x1dec, 0x693dfe32, 0x9}, {0xd9c0, 0x400, 0x6, 0x8000, 0x3, 0x7}, {0x3, 0xfffffff8, 0x9, 0x1}, {0x5, 0x8, 0x484, 0x682, 0x3, 0x7ff}, {0x649f, 0x8, 0x1d3f6, 0x5, 0x9, 0x64}, {0x653a, 0x7ff, 0x80, 0x1, 0x389, 0x3}, {0xfffffffc, 0x0, 0x5, 0x6, 0x8, 0xfffffffc}, {0x7, 0x2, 0x9, 0xf, 0x9}, {0x1, 0x8001, 0x66e, 0x1, 0xe, 0x2}, {0x81, 0x5, 0x9d, 0xffff6da0, 0x1ff, 0xffffff6d}, {0x6, 0x0, 0x0, 0x100, 0x8678, 0x1000}, {0x0, 0x100, 0x3, 0x0, 0x7, 0x2}, {0x1, 0x101, 0x6, 0x1ff, 0x9, 0x728}, {0x8, 0x0, 0x5, 0x3, 0x6, 0x101}, {0xd, 0x8, 0x9, 0x8, 0x5, 0x5}, {0xe77f, 0x7fff, 0x1075ff30, 0x2, 0x0, 0xe7ec}, {0x1ff, 0x100, 0x5, 0x5, 0x7, 0x5}, {0xfff, 0x2, 0x80, 0x7, 0x0, 0xf231}, {0xffffffff, 0x7, 0x7, 0x81, 0x1, 0xf}, {0x80000000, 0x9, 0x3, 0x5, 0x9, 0x2}, {0x61bc, 0x9, 0x3, 0x6, 0x1, 0x7}, {0x8, 0x4, 0x0, 0x0, 0xf, 0x6}, {0x3, 0x3, 0xfffffffb, 0x3, 0x4, 0x80000001}, {0x7, 0x1, 0x9be, 0xf6, 0x9, 0x2}, {0x400, 0x4, 0x2, 0x4, 0x0, 0x401}, {0x3, 0x3, 0x19, 0x7, 0x5, 0x8}, {0x4, 0x101, 0x2, 0x4, 0x8001, 0x200}, {0x7, 0x3, 0x2, 0x9bf3, 0x810, 0x1}, {0x6, 0x7ff, 0x8, 0x0, 0x2c, 0x6}, {0x5, 0x4, 0xf54, 0x6, 0xcc, 0x1000}, {0x731, 0xfe2, 0x6, 0x3, 0x1ff, 0x7fff}, {0xc, 0x1ff, 0x0, 0x5, 0x0, 0x98}, {0x8, 0x8, 0x1, 0x4, 0x6, 0x100000}, {0x6, 0x5, 0x7, 0x84f, 0x3, 0x7}, {0x2, 0xd581, 0x401, 0x3, 0x6, 0x81}], [{0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x3}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x7, 0x1}, {0x2}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1}]}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0xfffffffb, 0x6, 0x3, 0x6, 0x10000000}, 0x9, 0xf0, [{0x2b, 0x8, 0x1, 0x7ff, 0x8a, 0x3}, {0x4, 0x6, 0x3, 0x9, 0x621, 0x8}, {0x7, 0x3, 0x3, 0x6, 0x5c, 0x6}, {0x7, 0x80000001, 0x3c5d, 0x1c0, 0x1, 0xfffffff7}, {0x3, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x800}, {0x9, 0x4, 0x7, 0x7, 0x3, 0x4b}]}, [{0x3, 0x3, 0x9, 0x200, 0x7ff, 0x6}, {0x9, 0x9, 0x5, 0x4, 0x4808, 0xfffffff8}, {0x731, 0x5, 0x7fffffff, 0x8, 0x9, 0x4}, {0x3, 0x8, 0x6365, 0x6, 0xffffffff, 0x4}, {0x3, 0xdd5b, 0x1, 0x4, 0x10000, 0x7}, {0x9, 0xff, 0xfffffffa, 0x5, 0x7, 0x101}, {0x6, 0xd43, 0xa, 0x4, 0x400, 0x1}, {0x5, 0x1000, 0x4, 0x103d, 0x8, 0x5}, {0x3, 0x4, 0x3f78d11a, 0x4, 0xf, 0x2}, {0x5, 0xcb14, 0x3, 0x10000, 0x0, 0xfc000000}, {0x7, 0x7ff, 0xb1, 0x3fe00000, 0x100, 0x7ff}, {0x2, 0x40, 0x7, 0x6, 0x1, 0xfffff4e8}, {0x2, 0xfff, 0x0, 0x7, 0xb57e, 0x7f}, {0x5, 0x6b, 0x3, 0xaf, 0x1, 0x3}, {0x2, 0xd, 0xffffffff, 0x1, 0x7}, {0x80, 0x7, 0x8001, 0x0, 0x10000, 0x10000}, {0xa0, 0x8, 0x1, 0x202d77a3, 0x40, 0x4}, {0x6, 0x2, 0x97, 0x800000, 0x6, 0xffff}, {0x8, 0x2, 0x8, 0x6, 0x7, 0xffff5334}, {0x5, 0x4000000, 0xd43, 0x8, 0x7b5, 0xe0000000}, {0x8, 0xf, 0x1, 0x9, 0x6, 0x1}, {0x3, 0xffffff4a, 0xfff, 0x9, 0xfffffff7, 0xffffffff}, {0xe436, 0x800, 0xe04c, 0x5, 0x40, 0x2}, {0x2, 0x5, 0xffff, 0x200, 0x7ff, 0x7}, {0x7fff, 0xe1a0, 0x4, 0x2, 0x8d, 0x9}, {0x0, 0x6, 0xff, 0x0, 0xffff203b, 0x93}, {0x800, 0x5, 0x3, 0x5c8, 0x8, 0x38}, {0x1, 0xf0000000, 0x4, 0x7, 0x0, 0xf5c}, {0x9, 0xc1, 0x7d4, 0x1ff, 0x7, 0x10000}, {0x3, 0x3, 0x2, 0x6, 0x63, 0x1}, {0x3, 0x9, 0xe, 0x610c, 0x43ce, 0xfffffffa}, {0x3ff, 0xc98, 0x96, 0x6, 0x1, 0xf}, {0xa, 0x3, 0x0, 0xec, 0x4, 0xd5aa}, {0x3, 0x4, 0x9, 0x7, 0x3, 0x2}, {0x5, 0x1, 0x7fff, 0x5e, 0x1ff, 0x7}, {0x7, 0x57244f5a, 0x10fe, 0x4, 0x5, 0x1ffc0000}, {0x82, 0x8, 0x2, 0x6c, 0x9}, {0x6, 0xfffffffc, 0x7f, 0x7, 0xfffffff8, 0x5}, {0x4, 0x7f, 0x0, 0x1, 0x1, 0x6}, {0x6, 0x80000000, 0x1, 0x9, 0x4, 0x6}, {0x7, 0xd, 0x725, 0x8, 0x3, 0x7}, {0x4, 0x2a4, 0xe2bd, 0x1, 0x1000, 0x95d}, {0x1800, 0x100, 0xb, 0x4, 0x6, 0x4}, {0xac1, 0x3, 0x0, 0x0, 0x40000000, 0x2}, {0x8, 0x4, 0xfffffffa, 0xff, 0x0, 0x6}, {0x9, 0x800, 0x8, 0x8000, 0x98, 0x9}, {0x0, 0x8, 0x6, 0x3, 0xffffffff, 0x9}, {0x4, 0x3, 0x1, 0x80000001, 0x1ff, 0x3}, {0x75d, 0x55, 0xfffffffa, 0x4, 0x3, 0x3ff}, {0x6, 0x7, 0xa, 0x7, 0xd, 0xd7}, {0x80, 0x200, 0x2, 0x7, 0xfffffffa, 0x9}, {0x6, 0x9, 0x638b255, 0xfff, 0x1, 0x3}, {0x8, 0x7f, 0x5, 0x9, 0xb4, 0x1}, {0x1, 0x10001, 0xb5, 0x5, 0x8, 0x7}, {0x258507cb, 0xfffffff8, 0x4, 0x7fff, 0x1, 0x6}, {0x42, 0xf9b, 0x3, 0xfffff001, 0x8, 0x80000001}, {0x9, 0x7, 0x4, 0x9, 0x5, 0x1}, {0x139, 0x3, 0x9a1, 0xfff, 0x36b5, 0x5}, {0x6, 0x2, 0x54d, 0x9, 0x8, 0x9}, {0x7, 0x9, 0xfffff001, 0x1, 0x80000001, 0x4}, {0x6, 0x3, 0x8, 0x400, 0x2, 0x1c000000}, {0xe7e, 0xe6, 0x10000, 0x9, 0x0, 0x6}, {0x8001, 0x10000, 0xc3, 0x326d, 0x6, 0x7}, {0xce, 0x9, 0x1, 0x8, 0x2, 0x4}, {0x2, 0x3, 0x7, 0x3, 0x7}, {0x6, 0x8, 0x2, 0x800, 0xd5580000, 0x5}, {0x825c0b8, 0x6, 0x2, 0x4, 0x0, 0xfffffbff}, {0x8, 0x2, 0x8000, 0x2, 0x7fff, 0x4}, {0x5, 0x0, 0x8, 0x800, 0x3, 0x3ff}, {0x9, 0x1ff, 0x4, 0x1, 0xa, 0x9}, {0x7, 0xfffffffc, 0x10001, 0x1, 0x7fffffff, 0x8}, {0x7, 0x3, 0x6, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x8, 0xd8a, 0x7cff, 0x10000}, {0x2, 0xadf, 0x5, 0x5, 0x9, 0x9}, {0x2, 0x7, 0xffffffff, 0x7ff, 0x7, 0x800}, {0xf, 0xc95, 0x8b78, 0x18000000, 0x9, 0x8}, {0x3, 0xfffffffd, 0x3, 0x0, 0x8001, 0x6}, {0x6, 0x2, 0x2, 0x33a, 0xb550, 0x1}, {0x3, 0x399, 0x0, 0xff, 0x4, 0x8}, {0x611, 0x40, 0x0, 0x6, 0x3, 0x1f9}, {0x896, 0xc, 0xdaa8, 0x1000, 0x2}, {0x1c, 0x9, 0x5, 0x0, 0xfffffff9, 0x1ff}, {0x3da, 0x7, 0x5, 0x5, 0x5, 0x401}, {0xfffffc01, 0x2, 0x3, 0xa78, 0x5, 0xe2b4}, {0x7, 0x7f, 0x80000000, 0x2, 0x6, 0x6}, {0xb71c, 0x1, 0xe, 0x2, 0xfffffffb, 0x7}, {0xed6, 0x9, 0x3, 0x5, 0x4c16, 0x4000000}, {0x5, 0x8, 0x5, 0x800, 0x7, 0x8}, {0x10, 0xfffffff0, 0x59, 0xb34a, 0x800, 0x5}, {0x3, 0x40, 0x2, 0x8, 0x7, 0x10000}, {0x9, 0x8001, 0x6, 0x9, 0x3, 0x8}, {0x3, 0x9, 0x7f, 0xfffffc00, 0x3, 0xa}, {0x4, 0x7c1f4ba3, 0x0, 0x0, 0x4, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfff, 0x5}, {0x29, 0x6, 0x5, 0x1, 0x8, 0x7fff}, {0x6e89, 0x400, 0x34c1c, 0x42e, 0x4, 0x1}, {0x9, 0x3, 0x100, 0x0, 0x2ace, 0x7}, {0x9, 0x8, 0x44, 0x4, 0x1, 0x3}, {0x10000, 0xe7d3, 0x1ff, 0xb, 0x5}, {0x7fff, 0xae4, 0x2, 0x4, 0x7f, 0x6a36}, {0x3b2, 0xe, 0x1, 0x10000, 0x6, 0xfffeffff}, {0x2, 0x7fff, 0xfd, 0x0, 0x400, 0x8}, {0x3, 0x1, 0xe520, 0x7fffffff, 0xd, 0x80000001}, {0xba, 0x1, 0x4, 0x4, 0x7, 0x80}, {0x3, 0xd6, 0x2, 0x5, 0x7, 0x7}, {0x4, 0x3, 0x8, 0x1, 0x7, 0x9797}, {0x8, 0x7, 0x9, 0xfffffff7, 0xa, 0x31a}, {0x8, 0x4, 0x6, 0x200000, 0xfffffc00, 0x8}, {0xfffffff7, 0x3ff, 0x54a, 0xfffffffc, 0x99c, 0x33e39e2e}, {0xfffffffc, 0x2, 0x100, 0x10001, 0x8, 0x5}, {0x10000, 0x3, 0x7fffffff, 0x8, 0xe, 0x5a3}, {0x2, 0x5, 0x0, 0x3, 0x6, 0x5}, {0x1, 0x7, 0x4, 0x9, 0x6, 0x80000001}, {0x2, 0xffff, 0x2, 0x0, 0x8, 0x5000}, {0x6, 0xba4c, 0xf1e6, 0x9, 0x7fff, 0x8001}, {0x5, 0x8, 0x7, 0x3, 0x6, 0x7}, {0x800, 0x3, 0x80, 0x5, 0x7fffffff, 0x7}, {0x6, 0x3, 0x7, 0x1ff, 0xde9, 0xa6}, {0x8, 0x1ff, 0x4, 0x62e, 0x7, 0x2}, {0x2, 0x32, 0x4fb3, 0x9, 0x0, 0xffffffff}, {0x3, 0x10, 0x1, 0x3, 0xf34, 0xfffffff9}, {0xc73, 0x5, 0x0, 0x1, 0x1, 0x716}, {0x3, 0x8, 0x300, 0x3, 0xfffffffd, 0xff}, {0x2, 0x3, 0xffffffff, 0xe8, 0x9, 0x2}, {0x3, 0x6, 0xff, 0x0, 0x8, 0x194}, {0x8, 0xec00270, 0x7, 0x6, 0x6, 0x7}, {0x7, 0xf, 0x1, 0x82, 0x800}, {0x5, 0xa4b, 0xff, 0x8, 0xc7e, 0x28}], [{0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x5}, {0x2}, {0x0, 0x1}, {0x4}, {0x604101e592bbaa2c}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x8da829bb7d2df22f}, {0x5}, {0x4}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {0x22a354bdc39ec7cd}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0xbe133c61cf1de902, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x44c0fa379382ddf9}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x2, 0x4, 0x2, 0xfffffff8, 0x101}, 0x8, 0x2, [{0x5, 0x5, 0x6, 0x7ff, 0x49, 0x1da1}, {0x2, 0x2, 0xfffffffa, 0x3}, {0xf38d, 0x1fb, 0x7ff, 0x2, 0x72eb0340, 0x8}, {0x2, 0x6, 0x2, 0x8001, 0x5, 0x3}, {0x0, 0xffffffff, 0x6, 0x3, 0x2, 0xe}, {0x0, 0x3, 0x8, 0x4, 0xfffffff9, 0xfffffffc}, {0x3, 0x2, 0x5, 0x7, 0x1, 0x1}]}, [{0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x9}, {0x2, 0x4, 0x3347, 0x0, 0x8, 0x4}, {0x3692, 0xfff, 0x5, 0x596, 0x7, 0x6}, {0x3, 0xab3, 0x6, 0x0, 0x4, 0x8}, {0x7, 0x0, 0x6d, 0x4, 0x6, 0x9}, {0x7, 0xb2, 0x7, 0x8001, 0x8, 0x80000001}, {0xfe000000, 0xb76, 0x3, 0xf3, 0x8, 0x3}, {0x1, 0xf, 0x9, 0x1, 0x80000001, 0x8}, {0xffffffff, 0x9, 0x986, 0x0, 0x7, 0x238}, {0x38, 0x6, 0x6, 0x2558857a, 0xfffffff9, 0x2}, {0xf, 0x8, 0x1, 0xc, 0x0, 0x4}, {0x7, 0xfffffffb, 0xb, 0xb65, 0x7fff, 0x6}, {0x3, 0x3, 0x0, 0x2, 0x3f00, 0x3}, {0x6, 0x41f, 0x81, 0xdb, 0x10000}, {0x8, 0xc6e3, 0x0, 0x7, 0x9, 0x1000}, {0x7, 0x7fffffff, 0x8000, 0x1000, 0x200, 0x8}, {0x4, 0x8000, 0x7, 0x0, 0x447, 0x5}, {0x3, 0x5, 0x3ff, 0x10, 0x8, 0x1ff}, {0x80, 0x1, 0x7ff, 0x9, 0x4, 0x200}, {0x0, 0xf, 0x7, 0x5, 0x40, 0x4}, {0x10, 0x5, 0x4, 0x100, 0x1db, 0x5}, {0x3, 0x7fffffff, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x3ff, 0x1, 0xfffffffe, 0x9}, {0x9, 0x9, 0x7, 0x6, 0x0, 0x5260248a}, {0x6, 0xfa, 0x2, 0x9, 0x0, 0x7}, {0x1, 0x1, 0x2, 0x0, 0x80000000, 0x31}, {0x9, 0x7, 0x3ff, 0x0, 0x1}, {0x401, 0x200, 0x4, 0x1, 0x8, 0x1}, {0x3, 0x5c77, 0x2, 0x1ff, 0x5, 0x1}, {0x58, 0x1e3, 0x1, 0x3, 0xfffffe00, 0x2}, {0x1, 0x9, 0xb6, 0x2, 0xfffffff9, 0x80000001}, {0x80000001, 0x67be, 0x6, 0x81, 0x40, 0xfffffffe}, {0x9, 0x7, 0x401, 0x9, 0x2fe56818, 0x7ff}, {0x8001, 0x410, 0x9, 0x4, 0x10001, 0x7}, {0x1ff, 0x2e, 0x9, 0x9, 0x3, 0x9e}, {0xffff, 0x8001, 0xf86, 0x8, 0x9}, {0x27e8, 0x101, 0x8, 0xfffffffd, 0xfffffffb, 0x7}, {0x1, 0x1ff, 0x1, 0xcf4, 0x8, 0x7}, {0xb0e, 0x3ff, 0x6, 0x8, 0x9, 0x8}, {0x8000, 0x80, 0x9, 0xe, 0x8001, 0x3}, {0x1, 0x9, 0x4, 0x2ef6, 0xcc70, 0x6}, {0x7f8, 0xffffffff, 0xe, 0x5, 0x3, 0x81}, {0x10000, 0x1, 0x80000001, 0x7, 0x9, 0x101}, {0x3, 0xffff, 0x6e0ed7fd, 0xfff, 0x0, 0x80000000}, {0x6, 0xa2, 0xfffff801, 0x5, 0x6, 0x1}, {0x8, 0x4, 0x0, 0x1000, 0xffffffff, 0x6}, {0x400, 0xff, 0x1, 0xf, 0x77d, 0x9}, {0x9ff, 0xb, 0x4, 0x13c, 0x6, 0xff}, {0x3, 0x9, 0x4, 0x2, 0x3, 0x1}, {0x2, 0x7, 0x2000000, 0x5, 0x3}, {0x4, 0x0, 0x401, 0x10, 0x0, 0xffffffff}, {0xbb, 0xf1c, 0x400, 0x3, 0xfa2, 0x9}, {0x9, 0x80000000, 0x3, 0xbda4, 0xc, 0x8000}, {0x360c, 0x705, 0x96, 0xfffffffa, 0x9, 0x6}, {0x2, 0x2a, 0x6, 0x4, 0x30, 0x3}, {0xb, 0x2, 0x400, 0x1, 0xde8, 0x8}, {0x0, 0x6, 0x4, 0x5, 0x5, 0x7}, {0xfff, 0x7, 0xe78, 0x8, 0x1, 0x8}, {0x6, 0x9, 0x2, 0x71c2fc2e, 0x8, 0x4}, {0x8, 0x9, 0xfff, 0x5, 0x3a, 0x5}, {0xa, 0xe0fe, 0xf, 0x10000, 0xffffffb3, 0x10001}, {0x7d94, 0x0, 0xd, 0x6173, 0x7, 0xa}, {0x1, 0xdeaa, 0x7, 0x7, 0x509, 0x4}, {0x1, 0x9, 0x80, 0x3, 0x7, 0x8}, {0xf9fa, 0x4, 0x4, 0x4, 0xc78a, 0x6}, {0x7fffffff, 0xf67, 0x80, 0x4, 0x8, 0x7}, {0x4, 0x3, 0xfffffff5, 0x5ff, 0x80000000, 0x6}, {0x400, 0x6, 0x4, 0xff, 0x7, 0xd}, {0xd79, 0x725, 0x6, 0x5, 0xf5, 0xd}, {0x8, 0x60000000, 0xa71, 0x4, 0x3, 0xf35}, {0x2, 0x30, 0x9, 0x6, 0x80000001, 0x101}, {0x2, 0x3, 0x6cf715de, 0xe5, 0x80000001, 0x1ff}, {0xa, 0x3, 0x6, 0x4, 0x9, 0x8122}, {0x2, 0x804, 0x7, 0x81, 0xfffffff9, 0xeb}, {0x5, 0x6, 0x7, 0x9, 0x5}, {0x3, 0x2, 0x81, 0xffff8001, 0x3ff, 0x7}, {0x0, 0x4, 0x8, 0x4, 0x1}, {0x9, 0x0, 0x5a65, 0x3, 0x9, 0x7057}, {0x1, 0x3ff, 0x3, 0xfffffffd, 0x4, 0xf1c}, {0x0, 0x3, 0x3, 0x8, 0x9, 0xa}, {0x3, 0x0, 0x3, 0x7, 0x2, 0x7}, {0xd, 0xee8c, 0x4, 0xfffffff7, 0x6, 0x2}, {0x9, 0x1, 0x6, 0x9, 0x7, 0x3}, {0x1, 0x1, 0x9, 0x5, 0x7, 0x6}, {0xfa, 0x5, 0x7, 0x7, 0x94f, 0x8000}, {0x163c, 0x7fffffff, 0x82, 0xfff, 0x4, 0x7fffffff}, {0x8, 0xfffffff8, 0x348e, 0x100, 0x0, 0x81}, {0x0, 0x0, 0x1, 0x1d, 0x6441, 0xb}, {0x7, 0x6, 0x8, 0x9, 0xfffffff9, 0x9}, {0xc5, 0xfffffff7, 0x0, 0x9, 0x8001, 0x4}, {0x1, 0x3, 0x0, 0xfffffffb, 0x10001, 0x800}, {0x8c7e, 0x6, 0x3, 0x3, 0x1, 0xffffffff}, {0x1, 0x5, 0x4, 0x2686cba1, 0x3, 0xc}, {0x3, 0x3, 0x4, 0xfffffffa, 0x480, 0xf}, {0x0, 0x7fff, 0x8, 0x8000, 0x8, 0xfffffff7}, {0x10000, 0x7, 0x8, 0x80, 0x8, 0x3}, {0x0, 0x1, 0xbd, 0x2, 0x1, 0x6782768d}, {0x8, 0x8, 0x8b, 0x9, 0x3ff, 0xfffffff9}, {0x4, 0x1, 0x8, 0xfffffffb, 0x10, 0x110e}, {0xc, 0x750, 0x8, 0xc6f, 0x6, 0xff}, {0xb1bd, 0x5, 0x7fff, 0x784, 0x5, 0x10001}, {0x0, 0x10000, 0xc25, 0x4, 0x1ff, 0x2}, {0x9, 0x101, 0x0, 0x0, 0x6, 0x800}, {0x6, 0x0, 0x33f0e87d, 0x6, 0x5, 0x2}, {0xffffffff, 0x13, 0x0, 0x8, 0x0, 0x1}, {0x2, 0xffffff00, 0x20, 0x180000, 0x10, 0xc}, {0x10001, 0x8001, 0x9, 0x7, 0x5, 0x5}, {0x0, 0x4, 0x10001, 0x4a, 0x4, 0x1}, {0x829, 0x7, 0x8, 0x3, 0x7ff}, {0x1, 0x3, 0x80000001, 0x1000, 0x8000, 0x8}, {0x870, 0x80000001, 0xf3, 0xd68a, 0x200000, 0xff}, {0x7, 0x0, 0x7fff, 0x1, 0x2}, {0xddd5, 0x5, 0x5, 0xc, 0x6, 0x3}, {0x366, 0x5, 0x9, 0x4, 0x7, 0x1}, {0x3, 0x200, 0x2, 0x7f, 0x609, 0x7}, {0x2, 0xce6c, 0x9, 0x3, 0x81, 0x4}, {0x800, 0x80, 0x276f00, 0x1000, 0x1, 0xc3b2}, {0x5, 0x4, 0x5, 0x1, 0x4, 0xc}, {0x10000, 0x8, 0x1, 0x8, 0x1000, 0x200}, {0xe, 0x76, 0x200, 0x3a9b, 0x4, 0x3}, {0x22, 0xffffffff, 0x5, 0x8, 0x7, 0x100}, {0xfffffffa, 0x2bf0c39d, 0x5f, 0xf3, 0x8, 0xcf5f}, {0x3, 0x3, 0xcb2c, 0x6, 0xaacd, 0xd4}, {0x1, 0x2, 0xffff, 0x8, 0x1, 0x10000}, {0x4, 0x1, 0x8, 0x8, 0x2, 0x4a}, {0x5, 0x2, 0x6, 0x1ff, 0x0, 0x8}, {0xb, 0x6ca2, 0xd37, 0x4, 0x6, 0x1}, {0x401, 0x6, 0x8, 0x8, 0xd2dc, 0x80000001}], [{0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {}, {0x5}, {0x2}, {0x1}, {}, {0x4, 0x1}, {0x8a1f7194bbbd94ee}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x6}, {}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {}, {}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x101b94ebb333901d}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x94, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x81e9b62f9653d424}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x7f, 0x819, 0x4, 0x10000, 0x14abfd5}, 0x9, 0x6, [{0x3, 0x0, 0x8000, 0x9a, 0x2, 0x7}, {0x8, 0x5, 0x5, 0x6, 0x8, 0x3}, {0x1ff, 0x7, 0x0, 0x8, 0x100, 0x10000}, {0x4, 0x8, 0x80000001, 0x1, 0x7, 0xc}, {0x1, 0x5, 0x8, 0x5, 0x0, 0xdaf}]}, [{0x2, 0x6, 0xe6, 0x3, 0x80, 0x6}, {0x10000, 0x0, 0x42, 0x7, 0x0, 0x4}, {0x427b, 0x969, 0x4, 0xff, 0x1, 0xf0}, {0x5, 0xb0fa, 0x4, 0x10000, 0x2, 0x1}, {0x613d88e4, 0x434a, 0x0, 0x0, 0x2, 0x4}, {0x200, 0x5, 0x2, 0x7f, 0xef, 0x80000001}, {0x4, 0x1, 0x5, 0x7, 0x7308ace1, 0x3ff}, {0x9, 0xb0d8, 0x4, 0x4, 0x3, 0x4}, {0x7fffffff, 0x80, 0x8, 0x9, 0xcf, 0x1}, {0x0, 0xcad, 0x9, 0xffff53f5, 0xff}, {0x4, 0x7, 0x6, 0xd7e2, 0x1, 0xaf6}, {0x8, 0x1, 0x8, 0x7, 0x9, 0x3}, {0xfffffff9, 0x7, 0xba01, 0x387, 0x80000001, 0x4}, {0x9, 0x80000001, 0xd, 0x0, 0xffff, 0x6}, {0x5, 0x4, 0x10001, 0x3, 0x9, 0x6}, {0x5, 0xffffffff, 0xfffffbff, 0x7, 0x7, 0x6}, {0x180, 0x25, 0xffff8001, 0x7, 0x8, 0x8a}, {0x6, 0x401, 0xfffffffe, 0xe, 0x10001, 0x271a}, {0x0, 0x7, 0x401, 0x80, 0x4, 0x6}, {0x7fffffff, 0x400, 0x28e2, 0x9, 0xdb}, {0x3ff, 0x2, 0xff, 0x4, 0x4, 0x6}, {0x0, 0xca92, 0x80000001, 0x2, 0xf4d, 0x5}, {0x0, 0x4, 0xa0da, 0x6, 0x200, 0x9b}, {0x0, 0x744b, 0x8, 0x2, 0x1, 0x6}, {0x0, 0x7, 0x6, 0x6, 0x9, 0x9}, {0xf9, 0x3, 0x5d545044, 0x1, 0x0, 0x8}, {0x2, 0x80000001, 0x85b2, 0x338, 0x1, 0xe}, {0x0, 0x7, 0xfe0, 0x60000, 0xe, 0x4}, {0x7ff, 0x9, 0x4, 0x5, 0x1, 0x5}, {0x10, 0xad9, 0x4, 0x2, 0x9, 0xfffffffa}, {0x9, 0x6, 0x7, 0xdc1, 0x3, 0x8}, {0x80000001, 0x7264ba9e, 0x3, 0x7, 0x4, 0x5}, {0x6b, 0x4, 0x4, 0xa2, 0x3, 0x4}, {0x800, 0x4, 0x7, 0x0, 0x3ff, 0x2fc}, {0x3, 0x400, 0x401, 0x10001, 0x6, 0x100000}, {0xa10d, 0x5, 0x14000, 0x1, 0x1, 0x12}, {0x3, 0x4, 0x10001, 0x6, 0x14b6, 0x2}, {0x0, 0x7, 0x5, 0x6, 0x800, 0x4}, {0x6, 0x1, 0x0, 0x8000, 0x9, 0x6}, {0x9, 0x4, 0xfd, 0x5, 0x8, 0xaafb}, {0xfffffffe, 0xffff15b0, 0x1, 0x6, 0x400, 0xfffffffa}, {0x7, 0x8, 0x7, 0x8, 0x9, 0x3}, {0x200, 0x6, 0x7fff, 0x7, 0x7f, 0x2}, {0x10001, 0x7, 0x7, 0xfffffff8, 0x19, 0xa}, {0x80, 0x8b43, 0x7, 0xd, 0x4, 0xe5}, {0x3, 0xd, 0x0, 0x7, 0x2, 0x7fff}, {0x8, 0x2, 0xff, 0x9, 0x7, 0xfff}, {0x6, 0x3, 0x23, 0x4f2f, 0x80000001, 0xffff47dd}, {0x2, 0x6, 0x327, 0x3, 0xfffff001, 0xef14}, {0x2, 0x10001, 0x4, 0x379, 0x4, 0x9}, {0x5, 0x9, 0x5, 0x4, 0xfffffe01, 0x8}, {0xfffffc01, 0xfffffffb, 0x2, 0x4, 0x8001, 0x2}, {0x7, 0x9, 0xfffffe01, 0x3, 0x0, 0x5}, {0x1, 0x40, 0x3, 0x0, 0xf, 0x2}, {0x401, 0x40, 0x0, 0x0, 0x4, 0x1}, {0x3, 0x1c, 0x5, 0xfff, 0xffff8001, 0x8}, {0x0, 0x1, 0x9, 0x9, 0xe0, 0x1000}, {0x100, 0x2, 0x8, 0x1, 0x9, 0x92b}, {0x0, 0x1ff, 0x7, 0x400, 0x8, 0x8}, {0x2, 0x8000, 0x1, 0x7, 0x1000, 0xc0d0}, {0x7, 0x9, 0x2, 0x4, 0x0, 0x5}, {0x5, 0x9, 0xa, 0x8, 0x3, 0x2}, {0x6, 0x7, 0x3182, 0x81, 0xe5f, 0x4}, {0x3, 0x1, 0x200, 0x6, 0x4, 0x9}, {0x4, 0x5, 0xfffffffe, 0x7fffffff, 0x75, 0x4}, {0x2, 0x5, 0x200, 0x9, 0xfffffffd, 0x400}, {0x1, 0x6, 0x3, 0x7, 0x7, 0x5}, {0x9, 0x0, 0xe9, 0x3, 0x7, 0x2}, {0x6, 0x456d, 0x0, 0x94, 0x6, 0xc527}, {0x80e, 0x4, 0x1a8, 0x45, 0x6, 0x1}, {0x3, 0xfffffffb, 0xf, 0x14f, 0x3014, 0x84}, {0x65, 0x6, 0xe0f0, 0x513, 0x3, 0x8000}, {0x3, 0xba000000, 0x6, 0x8, 0xfffffffe, 0x1}, {0x3, 0xad, 0xebdf, 0xfffffff8, 0x75d}, {0x7ff, 0x1, 0xfffffff7, 0x3, 0xfff, 0x81}, {0x7fffffff, 0x6, 0xb9ff, 0xf, 0x7fff, 0x400}, {0x10, 0x2, 0x7712, 0x0, 0x101, 0x8}, {0x62, 0x0, 0x5, 0x6, 0xfc4, 0x305}, {0x0, 0x3ff, 0x401, 0x6, 0x5, 0xa3}, {0x7fff, 0x6, 0x3, 0x9, 0xc13, 0x4}, {0x4, 0x2, 0x1, 0x5, 0xb, 0x800}, {0x7f, 0xfffffffb, 0x2, 0x1, 0x53, 0x4}, {0x3, 0x5, 0x4526, 0x0, 0xb2f, 0x3}, {0xfffffffd, 0xff, 0x6, 0x76, 0x8001, 0x9}, {0xb3, 0x6, 0x0, 0x2, 0xff, 0x4}, {0x2, 0x1, 0x8, 0x6, 0x8, 0x3}, {0x55, 0x5, 0x8, 0xffff0001}, {0x3, 0x6, 0x6, 0x7, 0x2}, {0x9aa, 0x3, 0x4, 0x6d70, 0x8000, 0xfb6}, {0x3, 0x3, 0x4, 0xd, 0x7fffffff, 0x8000}, {0x0, 0x8, 0x10001, 0xfffffffd, 0xffff0000, 0x3}, {0x8, 0x0, 0x101, 0x8000000, 0x4, 0x9}, {0x1, 0x3, 0x7, 0x2, 0x9, 0x1000}, {0x6, 0x9, 0x5, 0x7f, 0x1, 0x8}, {0x8, 0x47cf, 0x9, 0x7, 0x400, 0x9}, {0x5, 0xd, 0xe9f, 0x7, 0x1}, {0x8, 0xffffffff, 0x1, 0x3, 0x8, 0x176774ea}, {0x8, 0x9, 0x7, 0x9, 0x3, 0xf2a00000}, {0x6, 0x5c, 0x8, 0x20000000, 0xd, 0x6e}, {0xff, 0x8000, 0x5, 0x0, 0x3, 0x8}, {0x5, 0x4, 0x9, 0x8, 0x2, 0xbc0}, {0xda, 0x9, 0x3, 0x80000000, 0x800, 0x9}, {0x1, 0x1000, 0x6, 0x9, 0x9, 0x9}, {0x0, 0xfffffe84, 0x8, 0x1ff, 0xfcbd, 0x5}, {0x0, 0x5, 0xe815, 0x4, 0x8e8e5dc, 0x6}, {0x8001, 0x3ff, 0xffffffaf, 0x7, 0x46e9, 0x401}, {0x0, 0xd, 0x7, 0x6, 0x4, 0x1}, {0x1ff, 0xdc44, 0xb, 0x6, 0x4, 0x6000000}, {0x3, 0xa, 0x3, 0x100, 0x400, 0x3}, {0x4, 0x1, 0x200, 0x3, 0x8001, 0x4}, {0x2, 0x6, 0xfffff937, 0x80000000, 0x1e0, 0x3}, {0x9fd6, 0xc, 0x83628a4, 0x5, 0x1, 0x3}, {0x95, 0x6, 0x8, 0xad6, 0x1, 0x8}, {0x942b, 0x1, 0x8, 0xa35, 0x6, 0xa}, {0x72, 0x7, 0x6, 0x2, 0x6, 0x1}, {0x2, 0x7, 0x8, 0x0, 0x3, 0x1}, {0x2, 0x9, 0x101, 0x4, 0x7}, {0x49c, 0x2, 0x24, 0x7d3c, 0x5, 0x5}, {0x7, 0x4, 0xdb, 0x0, 0x56, 0x7fffffff}, {0x7, 0x2, 0x8fd3, 0x800, 0x7, 0x6}, {0x9e, 0x7, 0xa658, 0x9, 0x7, 0x59a}, {0x3, 0xb1, 0x9, 0x3, 0x1, 0x3}, {0xa, 0x86e, 0xff, 0x1, 0x5, 0x80000000}, {0x0, 0x40000000, 0xffffffff, 0x58, 0x8, 0x8}, {0x9, 0x9, 0x5a, 0x9, 0x89d, 0x1f}, {0x0, 0x7, 0xfff, 0x1, 0x5, 0xfffffffb}, {0x597, 0x8000, 0x6, 0x4, 0x10b1, 0xa046}, {0xfffffffc, 0xb0ee5b5, 0x8000, 0x800, 0xb208, 0xffff}], [{0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0xc2bf8157ee9ed8bc, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1, 0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0xc3898e2a37059680}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x5, 0x10001, 0x20000000, 0xffff, 0x9}, 0xa, 0x7, [{0x9, 0x1, 0x7ff, 0x4e, 0xffffff73, 0x5}, {0x0, 0x3, 0x2, 0x6, 0x302154df, 0x9}, {0x7, 0x7, 0x5, 0x5, 0x80, 0xfffffff7}, {0x3, 0x8, 0x6, 0x0, 0xd15e, 0x6}, {0xfffffff9, 0x0, 0x1, 0x4, 0x1f5, 0x1ff}]}, [{0xe, 0x5, 0x6, 0x31d46c2e, 0x7}, {0xfffffffd, 0x0, 0x3, 0x100, 0x1, 0x5}, {0x6, 0x9, 0x5, 0x2, 0x80000000, 0x8}, {0x2, 0x28763e3, 0x7, 0xa, 0x7fffffff, 0x200}, {0x800, 0xffffffff, 0x1, 0x7, 0x9, 0xffff7fff}, {0x7e8, 0x0, 0x4, 0x7fff, 0x6, 0x5}, {0xfffffff3, 0x2, 0x7ff, 0x7f, 0x1}, {0xdd, 0xffffffff, 0xf, 0x1, 0x2, 0x1}, {0x401, 0x3, 0xabd, 0x5, 0x6, 0x800}, {0xfc83, 0x8, 0xfe, 0xe806, 0x3, 0x7bc3}, {0x3, 0x9, 0x5, 0x9, 0x6, 0x3}, {0x6, 0x7, 0x1c11, 0x8, 0x1, 0xc13}, {0x10001, 0x1, 0x66, 0x800, 0x7, 0xffff}, {0x3, 0x60c, 0x5, 0xd3c, 0x2, 0x2}, {0x3, 0x3, 0x1, 0x1000, 0x7ff, 0x2}, {0x6fe, 0xb5d, 0x80000001, 0x7, 0x1b7, 0xffffffff}, {0x9, 0x4, 0xb31b, 0x4, 0xf5e6, 0xd2}, {0x2, 0xc4e, 0x9, 0x120, 0xffffffff, 0xc}, {0xe417, 0x9, 0x1ff, 0x4, 0x0, 0x10001}, {0x7, 0x7f, 0xffffff36, 0x6d04, 0x5, 0x7}, {0x3, 0x1ca9, 0x3, 0x2}, {0x1800, 0x51d, 0x6, 0x9, 0x86, 0x1}, {0x3, 0x7, 0x8, 0x9, 0x10001, 0x3}, {0xe11, 0xe, 0x6, 0x7, 0xfffffffd, 0x3}, {0x8, 0x0, 0x8, 0x3, 0x7, 0x1}, {0xe, 0x10000, 0x6d65, 0x6, 0x1, 0x6}, {0x371f, 0x9, 0x0, 0x7f, 0x80, 0x4}, {0x0, 0x689a, 0x800, 0x8, 0x100, 0x6}, {0xffff2674, 0x7, 0x8, 0x200, 0x7, 0xff}, {0x2, 0x8, 0x9, 0x7, 0x0, 0xd}, {0x6, 0x2, 0x101, 0x3, 0x80000000, 0x5}, {0x2, 0xfb, 0xfffffff9, 0x30, 0x4, 0x200}, {0xfffffe19, 0xac, 0x8, 0x0, 0xffffffec, 0xa53}, {0x3, 0x7f, 0x500, 0x5, 0x8, 0x4}, {0x8, 0x0, 0x2000000, 0x1, 0xc013, 0x2ac4}, {0x400, 0x6, 0x7, 0x1, 0x6, 0x1c3e}, {0x5, 0x8, 0xe, 0xfffffffd, 0x9, 0x7fff}, {0xb, 0x7fffffff, 0x47, 0x3, 0x8, 0xffff8001}, {0xbb0c, 0x6, 0xffffff81, 0x1, 0x9, 0x64a2573b}, {0x10001, 0x1, 0x2, 0x1, 0xc64, 0x7fffffff}, {0x8, 0x3, 0x7, 0xfff, 0x3, 0x5}, {0x2, 0x6, 0x400, 0xbbc7, 0x0, 0x7}, {0x80000000, 0x6, 0xe, 0x0, 0xeb1, 0x7}, {0xfffffff2, 0x3, 0x7, 0x5, 0x2, 0xfffffff7}, {0x6, 0xf8, 0x9, 0x1ff, 0xc1, 0x4bf5}, {0x5, 0x7, 0x5, 0x2, 0x2, 0x6b}, {0x8, 0x5, 0x31, 0x8, 0x40, 0x1}, {0x2, 0x2800, 0xd, 0xffffffff, 0x9}, {0x7f, 0x9, 0x7, 0x6, 0x0, 0x9}, {0x5, 0x3f2, 0x5, 0x50, 0xfff, 0x9}, {0x400, 0x1, 0x2, 0xfffffc00, 0x5, 0x7}, {0x2, 0x1ff, 0x7fff, 0x5, 0x80}, {0xba7, 0x201, 0x200, 0x9, 0x2}, {0x1, 0x3, 0x6, 0xffffff03, 0x8001, 0x9}, {0x800, 0xd54a, 0x7, 0x4, 0x80000001, 0x80000000}, {0x7, 0x3, 0xe, 0x4, 0x2, 0x3}, {0x4, 0xc, 0xd, 0x0, 0xffffffff, 0xc6f7}, {0x3, 0xfffffffa, 0x7938, 0x9670, 0xc00, 0x10000}, {0x0, 0x3, 0x9, 0x20, 0x3, 0x80000000}, {0x1, 0x0, 0x0, 0x3, 0x400, 0x7}, {0x80, 0x8, 0x4, 0x1, 0x9, 0x4}, {0x7, 0x4, 0x1, 0x1, 0x9, 0x8}, {0x2, 0x3, 0x45f6, 0x9, 0x1, 0x5}, {0x2, 0xa0a, 0x6, 0x12b, 0xffffa1c6, 0x100}, {0x6769, 0x5, 0x6, 0x1, 0x6, 0x8}, {0x80, 0x2, 0x7fffffff, 0x2, 0xfffffffd, 0xfffffffd}, {0x4, 0x2, 0x7, 0x8ac6, 0x9, 0x7ff}, {0x400, 0xadca, 0x1, 0x9, 0x9, 0x4}, {0x80, 0x94b, 0x0, 0x6, 0xfff, 0x200}, {0x0, 0x8, 0xfe, 0x0, 0x3, 0xffffffff}, {0xfb, 0xc, 0x1, 0x6, 0x9, 0xffffff58}, {0x1, 0x401, 0x9, 0x5, 0xcbf, 0x1}, {0x0, 0x3, 0x4, 0x10000, 0x1, 0x11df}, {0x5, 0x3, 0x1, 0x7, 0x0, 0x7fff}, {0x7, 0x7, 0x8a, 0xfffff001, 0x7, 0x2}, {0x8, 0x7, 0x7, 0x10000, 0xfffffff5, 0x8}, {0x40, 0x3, 0x4, 0x400, 0x10, 0x7}, {0x81, 0x6, 0x2, 0x3a00000, 0x9, 0x6}, {0xc3, 0x7, 0x4, 0x5, 0xffffff01, 0x80000000}, {0x1, 0x7ff, 0x8, 0x40, 0x5, 0x9}, {0xf53, 0x7fffffff, 0x4, 0x5, 0x2, 0x4}, {0xc8, 0x8001, 0x10001, 0x1, 0xd7b, 0x5}, {0x6, 0xee5, 0x4, 0xff, 0xc, 0x1}, {0x7, 0x7, 0x7, 0x7fffffff, 0x5, 0x2}, {0x200, 0x57, 0xbfd3, 0x5, 0x3ff, 0xffff}, {0xfffffffc, 0x5, 0xfffffffb, 0x7a, 0x9, 0xeb3}, {0x4, 0x40, 0x8, 0x8, 0x3e0, 0x5}, {0x7, 0x0, 0xb, 0x8001, 0x0, 0x8000}, {0xbbd, 0x5, 0x3, 0x8, 0x4, 0x7}, {0x100, 0xff, 0x7, 0x8, 0x259, 0xddfd}, {0x5, 0x1, 0x95c, 0x3f80, 0x9, 0x1}, {0x101, 0x6, 0x1d, 0x0, 0x2000, 0x8}, {0x2, 0x8, 0x400000, 0xffffffb1, 0x4, 0x4}, {0xdb47, 0x1, 0x80000001, 0x7, 0xff, 0x3}, {0x3, 0x7, 0x8, 0xffffffff, 0x9, 0x8}, {0x3, 0x7ff, 0xcd, 0xfffffff9, 0x1, 0x3}, {0x3, 0x6, 0x3ff, 0x80, 0x1f, 0x4}, {0x4, 0x1, 0xfffffeff, 0x1000, 0x7, 0x2}, {0x3, 0x3c0, 0x7, 0x7, 0xff, 0xc8}, {0xf27, 0x49e, 0xfffffffa, 0x101, 0x9, 0x1}, {0xb0c, 0x9, 0x7fff, 0x66, 0x3, 0xbc000000}, {0xc, 0x6, 0x2, 0x8, 0x4}, {0x4, 0x0, 0x6, 0x3, 0x6, 0x6}, {0xa94, 0x126b, 0x6, 0x28000000, 0x5, 0xfffffff8}, {0x36dd80, 0x401, 0x80000000, 0x0, 0x5, 0x400}, {0x4ef5, 0x4, 0x0, 0xfffffff8, 0xffffffff, 0x9}, {0x34, 0x2651, 0x7, 0x7ff, 0xf4}, {0x400, 0x10000, 0x2, 0x6, 0xfffffffc, 0x100}, {0x6, 0x9, 0x7, 0x8, 0x18, 0x6}, {0xaa1, 0x3, 0x0, 0x8000, 0x1, 0x4}, {0xf, 0x4, 0x0, 0x4, 0x4, 0x4}, {0xcc, 0x9c, 0x400, 0xac03, 0x2, 0x5}, {0x2000000, 0x8, 0x0, 0x7, 0x7, 0x4}, {0x3ff, 0x6, 0x0, 0x2, 0x8, 0x7fffffff}, {0x9, 0xc000000, 0x4, 0x4, 0x1000000}, {0x6, 0x5, 0x8, 0x6e55, 0x9, 0x4cd4ace}, {0x1000, 0x7ff, 0xa, 0x7, 0x6, 0xe}, {0x1, 0x80000001, 0x6, 0xf923, 0xfffffff5, 0xc}, {0xfffffffd, 0xc1, 0x5, 0x100, 0xea9d, 0x6}, {0xea0, 0x9, 0x1ff, 0x180, 0x2, 0x5}, {0x200, 0x5, 0x7f, 0x7, 0x9, 0x8}, {0x0, 0xb, 0x4, 0x8, 0x5, 0x5983d989}, {0x7, 0x2, 0x3, 0x3, 0xffffa17f, 0x7f}, {0x7fffffff, 0x4, 0xcc7, 0x9, 0x2, 0x2}, {0x4, 0x3, 0x4, 0xc, 0x5, 0xa}, {0x4, 0x1, 0x3, 0x4e, 0xab26}, {0x8, 0x5, 0x6, 0x0, 0x4, 0x2}, {0x0, 0x101, 0x4, 0x6, 0xf3}], [{0x4}, {0x0, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x1, 0x1}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x7}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x996a20d3fceee4f3}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {}, {}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x4ae7d61349511e6e}, {0x5}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}]}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x2, 0x4, 0x5, 0x3, 0xffffffff}, 0x8, 0x0, [{0xfffffff2, 0x7, 0x3f, 0x5, 0x3, 0x2}, {0x8, 0xc3f, 0x400, 0x6, 0x2, 0x5}, {0x9, 0x1, 0x1f7, 0x101, 0xc, 0x8473}, {0xc, 0x4, 0xe5, 0x12000000, 0x80, 0x47}, {0x3ff, 0xb8, 0x3, 0xfff, 0x7ff, 0x8}, {0x2, 0x2, 0x0, 0x7, 0x3, 0x9}, {0x1, 0x1e9, 0x2, 0x0, 0x0, 0x800}]}, [{0xaec, 0x4, 0x0, 0x2, 0xffff8000, 0x7}, {0x0, 0x7, 0x1ece, 0x0, 0x100, 0x1}, {0x7, 0xd, 0x4, 0x0, 0xb, 0x77d}, {0xa7, 0xfff, 0x6, 0x3, 0x8, 0x3}, {0x2, 0x5a287ed9, 0x19, 0x0, 0xfffffff8, 0x10}, {0x217586f2, 0x75b, 0x7, 0xd1, 0x0, 0x50a1}, {0x91e, 0x3, 0xc50b, 0x2, 0x3, 0x4}, {0x2, 0x5, 0x0, 0x8a, 0xffff, 0x1}, {0x7, 0x300, 0x5b, 0x2, 0x9, 0x40}, {0x7fffffff, 0x3, 0x6, 0x74c, 0xc5d6, 0x6}, {0x5, 0x6000000, 0x0, 0xc2, 0x7, 0x4}, {0xfffffffb, 0xe000000, 0xf, 0x5, 0xaf, 0x401}, {0x10000, 0x6, 0x10000, 0x69, 0x7, 0x3ff}, {0x2, 0x4, 0xf, 0x3, 0xa6eb, 0x5}, {0x3c80, 0x6, 0x40, 0x80000001, 0xe, 0x5da7}, {0x1, 0x66ca, 0xffffffff, 0x3, 0x40, 0x7fff}, {0x4, 0x5, 0x8, 0x9, 0x0, 0x3}, {0x10, 0xdd3d, 0xe, 0x6e, 0x9, 0x3}, {0xa2f, 0x5, 0x8000, 0xffff, 0x5, 0x8}, {0x7ff, 0x200, 0x6, 0x10001, 0xfffffffa, 0x9}, {0x4, 0x1, 0x10001, 0x6, 0x6, 0x3}, {0x6, 0x1, 0x10000000, 0x48, 0x6, 0x1}, {0x9, 0xd, 0x8, 0xcff4, 0x4}, {0x1000, 0x7, 0xb1, 0x3, 0xfffffffa, 0x8}, {0x81, 0x5, 0x7b, 0x2, 0x3b05ca9e, 0x3}, {0x1, 0x0, 0x5, 0x5, 0x6, 0x6}, {0xac, 0x934, 0x101, 0x5, 0x4, 0x101}, {0x2, 0x6, 0x6, 0x8, 0x3, 0x4}, {0x200, 0x2, 0x6, 0x0, 0x2, 0x9af3}, {0x7, 0x1ff, 0x9, 0x2, 0x80000000, 0x9}, {0xffffffdf, 0x3, 0x1, 0x8, 0x2, 0x322}, {0x9, 0x0, 0xd, 0xffc0, 0x1, 0xfff}, {0x7, 0x5, 0x7, 0x200, 0x8, 0xa8}, {0x9, 0x100, 0xff, 0x7fffffff, 0x7fff}, {0x6, 0x3, 0x6bb, 0x3, 0x8, 0x6}, {0x4, 0x8, 0x4, 0x3, 0xb2cb}, {0x2438, 0xa9, 0x0, 0x80, 0x3, 0x1000}, {0x3, 0x2, 0x3, 0x3096, 0x2, 0x2}, {0xd006, 0x3, 0xfff, 0x6, 0x10000, 0x9}, {0x44e, 0x0, 0xf, 0x3, 0xd371, 0xf}, {0x7fff, 0xc6, 0x6, 0x5, 0x0, 0x1}, {0x8, 0x8, 0x3, 0x8, 0x1, 0x1}, {0x0, 0x4, 0xb, 0x4, 0x1, 0x200}, {0x4, 0x2, 0xfffffffd, 0x3, 0xfff, 0x5}, {0x400, 0x0, 0x800, 0x2, 0xffffffe1, 0x7}, {0xa, 0xaef, 0x1, 0x3, 0x2, 0x9}, {0xfd96, 0x5b5, 0x8, 0x4, 0x0, 0x9}, {0x2, 0x9, 0xffff8001, 0xb, 0x1, 0x2}, {0x40, 0x7, 0x200, 0x5, 0x81, 0x5}, {0x2, 0x5, 0x401, 0x3, 0x9}, {0x669ecdfb, 0x2e3, 0x3, 0x9, 0x8, 0x7}, {0x51b8b1da, 0xd30, 0x6, 0xc, 0x400, 0x95f}, {0x6b, 0x8, 0x1, 0x6, 0x8, 0x5}, {0x3, 0xe, 0x4, 0x3, 0x8001, 0x432b}, {0x2, 0xd, 0x9, 0xfed, 0x0, 0xd4a}, {0x2, 0xcf, 0x100, 0x5, 0x1, 0x3}, {0x2, 0x6, 0x9, 0x7fff, 0x7f80, 0xd}, {0x7fffffff, 0x9, 0x101, 0x2, 0x6, 0x2033}, {0x7, 0x5f, 0x4, 0x4, 0x10001, 0x700}, {0x5, 0x401, 0xfffffff7, 0x6b3a, 0x8, 0xfffffffe}, {0x6, 0x7, 0x5, 0x101, 0x3}, {0x0, 0x9, 0x1, 0x81, 0xc832, 0xfffffffa}, {0x56c36d69, 0x7, 0x6, 0x6, 0x81, 0x6}, {0x7, 0x3, 0x80000000, 0x5, 0x7fffffff, 0x847}, {0x5, 0xd, 0x6, 0x10, 0x7, 0x7f}, {0xffff, 0x3ff, 0x1, 0x610c, 0x4, 0xffffffbc}, {0x2, 0x8, 0x9, 0x3b, 0x0, 0x2}, {0x5, 0x7f, 0xffff8000, 0x2, 0x2, 0x5}, {0x11, 0xc, 0x3, 0x0, 0xe, 0x5}, {0x4, 0x8000, 0xf28, 0x5, 0x0, 0x7}, {0x5, 0xffffffbd, 0x3, 0xfffffff9, 0x8, 0x2}, {0xa6, 0x80000001, 0xb1, 0x382, 0x7, 0xd78}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x4}, {0x8, 0x5, 0x8, 0x0, 0x5, 0x3}, {0x7, 0x7, 0x6, 0xda3, 0x4, 0x6}, {0x10000, 0x6, 0x15d00, 0x1, 0x5, 0xa}, {0x5, 0x3, 0x9, 0x81, 0x17, 0xffffffc0}, {0x100, 0x2, 0x1, 0x4, 0x1, 0x9}, {0xb1, 0xfffffffd, 0x7, 0x1, 0x7, 0x5}, {0x6, 0x7a4a, 0x6, 0xab5, 0xf7, 0x1}, {0x31b7, 0x1, 0x10, 0x0, 0xbc, 0x6}, {0x0, 0x8, 0xf, 0x0, 0x88, 0x8}, {0x1000, 0x1, 0x7, 0x0, 0x401, 0x40}, {0xb0e0, 0x81, 0x4, 0x40, 0xb89, 0xfffffffb}, {0x100, 0xaae, 0x4, 0x80000000, 0x931, 0x6}, {0x1, 0x7, 0x2, 0x6151, 0x6, 0x8}, {0x1, 0xfffff001, 0x9, 0x6e3c, 0x8, 0x81}, {0x0, 0xfffff000, 0xfffffbff, 0x2d861f5e, 0x2, 0x5}, {0x16, 0x9, 0x12000000, 0x4, 0x7, 0xa0000}, {0x0, 0x7ff, 0x9ebc, 0xe3, 0x401, 0xee5f}, {0x0, 0xc34, 0x3ff, 0x9f, 0x8, 0x4174}, {0x7, 0x81, 0x671d, 0xf, 0x96, 0x1}, {0x4, 0x2, 0x12, 0x6, 0x2, 0x4}, {0x4, 0x100, 0x1, 0x1000, 0x3f9b, 0x27a}, {0x3, 0xa3, 0x3, 0x7f6, 0x8001, 0x1}, {0x3, 0xd1f, 0xd59, 0x8, 0x2, 0xd8000000}, {0x58000000, 0xfffffff7, 0x9, 0x3, 0x2, 0x10000}, {0x4, 0x0, 0x1, 0x100, 0x115a9581, 0xfffffffa}, {0x7a, 0x0, 0x5, 0x8, 0x9, 0x6}, {0xbbcb, 0x1, 0x6, 0x3, 0x1, 0xabb2}, {0x3, 0x7, 0xda9, 0x0, 0x4}, {0x4, 0x1ff, 0xfffffffb, 0x8, 0x1, 0x1}, {0xfffffffa, 0x355, 0x1, 0x1c294b87, 0x8, 0x80000001}, {0x21, 0x400, 0x5, 0x8000, 0x1000, 0xaa0}, {0x4, 0x3, 0x800, 0x3ff, 0x9, 0x9}, {0x8, 0x7, 0xf571, 0x3ff, 0x78b2, 0x7}, {0x2, 0x3, 0x7, 0x4, 0x0, 0x80000000}, {0x8, 0x6, 0x4, 0x2, 0x3, 0x3}, {0x8, 0xffffffff, 0x7f, 0x4, 0x6}, {0x80000001, 0x2, 0x7, 0x1, 0x80000000, 0x11fc}, {0xfff, 0x3, 0x10000, 0x7, 0x3, 0x5}, {0x7, 0x6, 0x2, 0x1, 0x2, 0x2}, {0x5, 0x2, 0x3, 0x8, 0x2, 0xfffffffe}, {0x4, 0x7ff, 0x0, 0x6, 0x9}, {0x696d8378, 0x4, 0x2, 0x3, 0x1, 0x6}, {0x401, 0x2, 0x3b, 0xf9, 0x9, 0x10}, {0x6, 0x3, 0x614, 0x80000001, 0x3df, 0x3}, {0x4, 0x6, 0xc43f, 0x1, 0x8, 0x6}, {0x4, 0x7, 0x596c, 0xc1c3, 0x9, 0x4}, {0xfff, 0x5, 0x7fff, 0x3, 0xfffffffe, 0x2}, {0x3, 0x9, 0x3, 0x6, 0x1, 0x3a87}, {0x9, 0x7, 0x6, 0x22be, 0x1, 0x4}, {0xdc6, 0x3, 0x0, 0x9, 0x6, 0x6}, {0x4, 0x0, 0x0, 0x10, 0x0, 0x81}, {0x4b, 0x7fffffff, 0xfff, 0xff, 0x4, 0x100}, {0x5, 0xf, 0x5, 0x5, 0x5, 0x2}, {0x2d1e, 0x101, 0x6, 0x803a, 0x7, 0xff}, {0x2, 0x200, 0x3, 0x0, 0x7, 0x800}], [{0x3}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x5}, {0x4}, {}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x3}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0xea62d5a0f3643a80, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6940}, 0x1, 0x0, 0x0, 0x840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) getpeername$ax25(r0, &(0x7f0000000280)={{}, [@null, @rose, @default, @bcast, @bcast, @default, @rose, @netrom]}, &(0x7f0000000300)=0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0xc022}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x558}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.920342402s ago: executing program 1 (id=3813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x490120, 0x0) write$P9_RFSYNC(r1, &(0x7f00000002c0)={0xffffffffffffffdc, 0x33, 0x1}, 0x7) fcntl$notify(r1, 0x402, 0x8000003d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1}]}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0x4) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000100)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000140)=0x84}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mmap$binder(&(0x7f0000915000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x20000012) 1.909168588s ago: executing program 2 (id=3814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009400000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xe2, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5, 0x0, 0x7, 0x2}, 'syz1\x00', 0x41}) ioctl$UI_DEV_CREATE(r4, 0x5501) cachestat(r3, &(0x7f0000000180)={0x1, 0x7fffffffffffffff}, &(0x7f0000000300), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x82, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.821647049s ago: executing program 4 (id=3815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x58800}, 0x4000040) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000280)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xfffffd7e, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xfffe, 0x5}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) mmap(&(0x7f00005cd000/0xf000)=nil, 0xf000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@file={0x1, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b010004000000140003006d61637365633000000000000000001d0a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) modify_ldt$read(0x0, &(0x7f0000000480)=""/243, 0xf3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000a00)=""/126, 0x7e, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000240)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1.731150186s ago: executing program 4 (id=3816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000000c0)={r9, 0x0, 0x0}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.683764353s ago: executing program 2 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x24, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002a00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$FIONCLEX(r2, 0x5450) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f00000006c0)=@v2={0x2000000, [{0x1, 0x7}, {0x3, 0xffffffff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.63128424s ago: executing program 4 (id=3818): read$eventfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r3, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000003c0)=ANY=[]) socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01042bbd7000000800011400000018000180140002006e657464657673696d3000000000000005000b00000056c3ff29b9c089060032d6982da0022ea1a357bd66ec57aef438db7dd86792d914ee673c5ed7dc9f6adfbdf57e2454be3dd72bf455971bfdb41a46dc2528212be163e4ddd02959e6fffce3870b3e9d21"], 0x34}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000640)=0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.62924584s ago: executing program 2 (id=3819): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$igmp(0x2, 0x3, 0x2) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000080), 0x4) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000ba182bd2131b3da9dbda73e307e539f31000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000034000000060a01040000000000000000010000000900020073967a300000000008000a40000000000900010073797a3000000000140000001100010000000000000000000000000aaab91e661f66c6f2db52ba42d125593a0f"], 0xa8}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="005500416759bd7000000000001700000008000680040002001400030000080800010008000a00"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.477426119s ago: executing program 0 (id=3820): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb000000"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}}, 0x0) r3 = userfaultfd(0x801) getpid() ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) 1.074761768s ago: executing program 1 (id=3821): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xd, 0x109182) 688.036353ms ago: executing program 4 (id=3822): syz_80211_inject_frame(0x0, 0x0, 0x32) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newae={0x2b8, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@mcast2, 0x4d6, 0xa, 0x2b}, @in6=@mcast2, 0x2000, 0x3506}, [@migrate={0x180, 0x11, [{@in=@loopback, @in=@local, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x33, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010100, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x33, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in=@empty, @in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x2, 0x0, 0x34ff, 0xa, 0xa}]}, @sa={0xe0, 0x6, {{@in=@remote, @in=@loopback, 0x4e22, 0x0, 0x4e21, 0x2c73, 0xa, 0x20, 0x60, 0x21}, {@in=@broadcast, 0x4d2, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0xb}, {0x4, 0xa, 0x8000000000000000, 0xfffffffffffffffc, 0x8, 0x800007f, 0xfffffffffffffff8, 0x280000000000}, {0x0, 0xfffffffffffffffd, 0xf, 0x8000000000000001}, {0x8001, 0x1, 0xfffffaa6}, 0x70bd25, 0x3501, 0xa, 0x2, 0x5}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @proto={0x5, 0x19, 0x6c}]}, 0x2b8}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 680.815301ms ago: executing program 1 (id=3830): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$pmem0(0xffffff9c, &(0x7f0000000000), 0x8600, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x28, 0x0, 0xd024, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8, 0x7800, 0xa45, 0x8001}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@getchain={0x3c, 0x66, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0xf}, {0xa, 0xd}, {0x1, 0x6}}, [{0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000003ac0)) r11 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000014e000/0x3000)=nil) shmat(r11, &(0x7f000015d000/0x3000)=nil, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1bc400000000000000000f00000008000300", @ANYRES32=r12, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) 644.803416ms ago: executing program 2 (id=3823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xf5ff}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="18ef800000cd000000000000000000005e5900002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xf5ff}}], 0xf00, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) (async) shutdown(r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="18ef800000cd000000000000000000005e5900002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 527.134782ms ago: executing program 0 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYRES8], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) kcmp(0xffffffffffffffff, r3, 0x1, r2, r2) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblc\x00', 0x1, 0x2, 0x6e}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x44}}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x100000cd, 0x12d5f, 0x3}}, 0x44) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @empty}, 0x0, 0x1, 0x2, 0x2}}, 0x2e) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x68, r9, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x401, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) sendmmsg$sock(r2, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 523.753797ms ago: executing program 2 (id=3825): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000100)="de", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000300)={r3}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000600), r4, 0x0, 0x1, 0x4}}, 0x20) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973de47a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3287b03fffa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 411.395164ms ago: executing program 2 (id=3826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffffffffffeeb}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (rerun: 32) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) recvmsg$can_bcm(r4, &(0x7f00000007c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f00000006c0)=""/72, 0x48}], 0x9}, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x3}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x13, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) shutdown(r6, 0x1) 0s ago: executing program 0 (id=3827): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x4, 0x101, 0x10000, 0x3, 0x85, 0x81, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x6, 0x0, @void}, 0x10) openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x101000, 0x0) dup(r0) pipe2(&(0x7f00000000c0), 0x80000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8d b4 26 00 00 00 00 [ 564.758782][T18131] RSP: 002b:00000000f5116590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 564.758792][T18131] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5116620 [ 564.758799][T18131] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 564.758805][T18131] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 564.758811][T18131] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 564.758817][T18131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.758830][T18131] [ 564.772186][T18125] lo speed is unknown, defaulting to 1000 [ 564.835339][T18125] lo speed is unknown, defaulting to 1000 [ 565.343961][ T838] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 565.474958][ T838] usb 5-1: device descriptor read/64, error -71 [ 565.547958][T18156] evm: overlay not supported [ 565.600240][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 565.724078][ T838] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 566.081833][T18162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3032'. [ 566.144243][ T838] usb 5-1: device descriptor read/64, error -71 [ 566.254171][ T838] usb usb5-port1: attempt power cycle [ 566.381878][T18175] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 566.381878][T18175] program syz.1.3037 not setting count and/or reply_len properly [ 566.603961][ T838] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 566.610037][T18181] netlink: 'syz.3.3039': attribute type 12 has an invalid length. [ 566.625465][ T838] usb 5-1: device descriptor read/8, error -71 [ 566.944098][ T838] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 566.967894][ T838] usb 5-1: device descriptor read/8, error -71 [ 567.079387][ T838] usb usb5-port1: unable to enumerate USB device [ 567.164054][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 567.314023][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 567.317819][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 567.322651][ T53] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 567.325617][ T53] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 567.328123][ T53] usb 8-1: Product: syz [ 567.329445][ T53] usb 8-1: Manufacturer: syz [ 567.330904][ T53] usb 8-1: SerialNumber: syz [ 567.333462][ T53] usb 8-1: config 0 descriptor?? [ 567.335611][T18183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 567.338501][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 567.340388][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 567.671395][ T53] usb 8-1: USB disconnect, device number 9 [ 567.674205][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 567.984063][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 568.161936][T18213] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 568.168740][T18213] macvtap0: entered allmulticast mode [ 568.171116][T18213] veth0_macvtap: entered allmulticast mode [ 568.204015][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 568.207119][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 568.316200][T18214] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3046'. [ 568.409172][ T53] usb 8-1: string descriptor 0 read error: -22 [ 568.411222][ T53] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 568.414048][ T53] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 568.486618][ T53] usb 8-1: config 0 descriptor?? [ 568.489770][T18183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 568.494150][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 568.496677][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 568.804189][ T53] usb 8-1: USB disconnect, device number 10 [ 569.125182][T18228] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 569.125182][T18228] program syz.1.3050 not setting count and/or reply_len properly [ 569.622719][T18240] input: syz1 as /devices/virtual/input/input175 [ 569.656619][T18242] tmpfs: Unknown parameter 'grpquota 0 [ 569.656619][T18242] ' [ 569.754120][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 570.200779][T18254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3058'. [ 570.436512][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3057'. [ 570.586626][T18268] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 570.586626][T18268] program syz.3.3061 not setting count and/or reply_len properly [ 571.171170][T18283] mkiss: ax0: crc mode is auto. [ 571.833971][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 573.192299][T18312] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3071'. [ 573.481811][T18324] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 573.481811][T18324] program syz.0.3075 not setting count and/or reply_len properly [ 573.665011][ T1118] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 573.668145][ T1118] sr 2:0:0:0: [sr0] tag#25 Sense Key : Illegal Request [current] [ 573.670578][ T1118] sr 2:0:0:0: [sr0] tag#25 Add. Sense: Invalid command operation code [ 573.673111][ T1118] sr 2:0:0:0: [sr0] tag#25 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 573.684777][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 573.687975][ T1118] buffer_io_error: 22 callbacks suppressed [ 573.687983][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 573.692630][ T1118] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 573.924243][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 575.221605][T18375] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 575.221605][T18375] program syz.0.3089 not setting count and/or reply_len properly [ 576.004046][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 576.263995][ T6015] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 576.273305][T18417] vxcan3: entered promiscuous mode [ 576.276274][T18417] vxcan3: entered allmulticast mode [ 576.326421][T18415] /dev/sr0: Can't open blockdev [ 576.437428][ T6015] usb 5-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.441666][ T6015] usb 5-1: config 1 interface 0 has no altsetting 0 [ 576.452285][ T6015] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 576.455592][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.459938][ T6015] usb 5-1: Product: syz [ 576.463131][ T6015] usb 5-1: Manufacturer: syz [ 576.465295][ T6015] usb 5-1: SerialNumber: syz [ 576.476254][T18421] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 576.476254][T18421] program syz.3.3102 not setting count and/or reply_len properly [ 577.083128][ T6015] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 577.101526][ T6015] usb 5-1: USB disconnect, device number 16 [ 577.119895][ T6015] usblp0: removed [ 577.169726][T18436] program syz.0.3107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.649913][T18429] lo speed is unknown, defaulting to 1000 [ 577.665476][T18429] lo speed is unknown, defaulting to 1000 [ 578.078504][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 578.512669][T18455] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 578.512669][T18455] program syz.3.3112 not setting count and/or reply_len properly [ 578.910180][T18473] lo speed is unknown, defaulting to 1000 [ 578.914620][T18473] lo speed is unknown, defaulting to 1000 [ 578.953137][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 578.961831][T18478] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3117'. [ 578.966723][T18478] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3117'. [ 578.968322][T18470] wireguard0: entered promiscuous mode [ 578.974535][T18470] wireguard0: entered allmulticast mode [ 579.184952][T18476] ipvlan4: entered promiscuous mode [ 579.437085][T18491] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 579.733996][T18507] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 579.733996][T18507] program syz.1.3125 not setting count and/or reply_len properly [ 579.785210][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 579.788267][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 580.157282][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 580.446876][T18527] siw: device registration error -23 [ 580.454256][ T5950] Bluetooth: hci0: unexpected event for opcode 0x041a [ 580.785168][ T40] audit: type=1326 audit(1749999676.273:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.793563][ T40] audit: type=1326 audit(1749999676.273:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.802295][ T40] audit: type=1326 audit(1749999676.273:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.809097][ T40] audit: type=1326 audit(1749999676.273:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.816133][ T40] audit: type=1326 audit(1749999676.273:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.822608][ T40] audit: type=1326 audit(1749999676.273:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.829420][ T40] audit: type=1326 audit(1749999676.273:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.836484][ T40] audit: type=1326 audit(1749999676.273:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.842912][ T40] audit: type=1326 audit(1749999676.273:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 580.850233][ T40] audit: type=1326 audit(1749999676.273:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.0.3134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 581.255884][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3138'. [ 581.432608][T18553] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 581.432608][T18553] program syz.1.3140 not setting count and/or reply_len properly [ 582.233964][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 582.617964][ T6013] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 582.754329][T18585] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3151'. [ 582.800709][ T6013] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.814100][ T6013] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 582.817397][ T6013] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.820195][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.830425][T18572] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 582.836887][ T6013] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.037416][T18572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.040133][T18572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.122737][ T60] usb 8-1: USB disconnect, device number 11 [ 583.992478][T18631] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 583.992478][T18631] program syz.2.3159 not setting count and/or reply_len properly [ 584.334533][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 584.393111][T18637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3163'. [ 585.035207][T18647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3164'. [ 586.161687][T18669] 9pnet_virtio: no channels available for device syz [ 586.168980][T18669] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 586.394015][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 586.422104][T18679] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 586.422104][T18679] program syz.3.3174 not setting count and/or reply_len properly [ 587.096049][T18695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.220213][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 587.654598][T18721] FAULT_INJECTION: forcing a failure. [ 587.654598][T18721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.659561][T18721] CPU: 0 UID: 0 PID: 18721 Comm: syz.0.3188 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 587.659576][T18721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 587.659584][T18721] Call Trace: [ 587.659588][T18721] [ 587.659593][T18721] dump_stack_lvl+0x16c/0x1f0 [ 587.659629][T18721] should_fail_ex+0x512/0x640 [ 587.659654][T18721] should_fail_alloc_page+0xe7/0x130 [ 587.659670][T18721] prepare_alloc_pages+0x3c2/0x610 [ 587.659683][T18721] ? rcu_is_watching+0x12/0xc0 [ 587.659696][T18721] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 587.659713][T18721] ? mark_held_locks+0x49/0x80 [ 587.659727][T18721] ? __send_ipi_mask+0x42f/0x650 [ 587.659739][T18721] ? lockdep_hardirqs_on+0x7c/0x110 [ 587.659755][T18721] ? __send_ipi_mask+0x33b/0x650 [ 587.659770][T18721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.659788][T18721] ? __pfx_native_flush_tlb_global+0x10/0x10 [ 587.659802][T18721] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 587.659815][T18721] ? smp_call_function_many_cond+0xf0b/0x1510 [ 587.659826][T18721] ? lockdep_hardirqs_on+0x7c/0x110 [ 587.659842][T18721] ? smp_call_function_many_cond+0x416/0x1510 [ 587.659854][T18721] ? __lock_acquire+0xb8a/0x1c90 [ 587.659867][T18721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 587.659890][T18721] ? policy_nodemask+0xea/0x4e0 [ 587.659909][T18721] alloc_pages_mpol+0x1fb/0x550 [ 587.659920][T18721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 587.659929][T18721] ? __pfx_static_protections+0x10/0x10 [ 587.659944][T18721] ? find_held_lock+0x2b/0x80 [ 587.659958][T18721] alloc_pages_noprof+0x131/0x390 [ 587.659969][T18721] __change_page_attr_set_clr+0x451/0x28b0 [ 587.659995][T18721] ? __pfx___change_page_attr_set_clr+0x10/0x10 [ 587.660011][T18721] ? rcu_watching_snap_stopped_since+0x80/0x110 [ 587.660023][T18721] ? __purge_vmap_area_lazy+0x405/0xc60 [ 587.660038][T18721] ? _vm_unmap_aliases+0x461/0x670 [ 587.660054][T18721] ? drm_gem_get_pages+0x6bd/0xa40 [ 587.660074][T18721] change_page_attr_set_clr+0x2cc/0x4a0 [ 587.660092][T18721] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 587.660120][T18721] _set_pages_array+0x1ab/0x2c0 [ 587.660138][T18721] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 587.660152][T18721] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 587.660170][T18721] drm_gem_shmem_pin_locked+0x223/0x470 [ 587.660183][T18721] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 587.660196][T18721] ? __pfx___might_resched+0x10/0x10 [ 587.660211][T18721] ? __pfx_drm_gem_shmem_object_pin+0x10/0x10 [ 587.660224][T18721] drm_gem_pin+0x9c/0x110 [ 587.660240][T18721] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 587.660252][T18721] drm_gem_map_attach+0x8c/0x120 [ 587.660264][T18721] dma_buf_dynamic_attach+0x1f3/0x530 [ 587.660278][T18721] ? __fget_files+0x20e/0x3c0 [ 587.660295][T18721] drm_gem_prime_import_dev+0xb4/0x440 [ 587.660309][T18721] drm_gem_prime_fd_to_handle+0x45a/0x5f0 [ 587.660325][T18721] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 587.660340][T18721] drm_ioctl_kernel+0x1f1/0x3e0 [ 587.660356][T18721] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 587.660370][T18721] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 587.660392][T18721] drm_ioctl+0x5c9/0xc30 [ 587.660411][T18721] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 587.660425][T18721] ? __pfx_drm_ioctl+0x10/0x10 [ 587.660453][T18721] drm_compat_ioctl+0x327/0x460 [ 587.660467][T18721] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 587.660480][T18721] __ia32_compat_sys_ioctl+0x242/0x370 [ 587.660495][T18721] __do_fast_syscall_32+0x7c/0x3a0 [ 587.660507][T18721] do_fast_syscall_32+0x32/0x80 [ 587.660517][T18721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 587.660531][T18721] RIP: 0023:0xf704e579 [ 587.660540][T18721] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 587.660551][T18721] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 587.660561][T18721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c00c642e [ 587.660568][T18721] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.660574][T18721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.660580][T18721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 587.660586][T18721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.660600][T18721] [ 587.904921][T18732] input: syz1 as /devices/virtual/input/input177 [ 588.119060][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 588.485433][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 588.793989][ T53] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 588.830841][T18768] input: syz1 as /devices/virtual/input/input179 [ 588.964054][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 588.969069][ T53] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 511 [ 588.972150][ T53] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 588.977222][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.980157][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.982651][ T53] usb 5-1: Product: syz [ 588.984371][ T53] usb 5-1: Manufacturer: 鞉à¬ìˆ‰æ¥­â—ì®Ð¶å¼Žî·…㫥幩뿓้ⶳ斴蒨ã³è®ƒáœ†íˆ¥ã¼èƒî­¢ìŒ‡ì†½ì´…豆₤妆ï†ê¤¢ä¢™ç§„弤゗￥ã³åš¦æ—ªë“ºã…‡âº¶ìŒ¸×›ë³²â¾«ì’¨ë¹¾éŸ°Ç›í›¶äŽ¯ï«šæª»îŒ˜æ„ á¼³ê“¶ãœƒá‚¤ê­¦ì‘šê¦©á™€è¼· [ 588.990967][ T53] usb 5-1: SerialNumber: syz [ 589.083862][T18779] FAULT_INJECTION: forcing a failure. [ 589.083862][T18779] name failslab, interval 1, probability 0, space 0, times 0 [ 589.090776][T18779] CPU: 1 UID: 0 PID: 18779 Comm: syz.2.3203 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 589.090803][T18779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 589.090810][T18779] Call Trace: [ 589.090815][T18779] [ 589.090819][T18779] dump_stack_lvl+0x16c/0x1f0 [ 589.090841][T18779] should_fail_ex+0x512/0x640 [ 589.090857][T18779] ? fs_reclaim_acquire+0xae/0x150 [ 589.090871][T18779] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 589.090887][T18779] should_failslab+0xc2/0x120 [ 589.090898][T18779] __kmalloc_noprof+0xd2/0x510 [ 589.090918][T18779] tomoyo_realpath_from_path+0xc2/0x6e0 [ 589.090935][T18779] ? tomoyo_profile+0x47/0x60 [ 589.090955][T18779] tomoyo_path_number_perm+0x245/0x580 [ 589.090967][T18779] ? tomoyo_path_number_perm+0x237/0x580 [ 589.090981][T18779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.091009][T18779] ? find_held_lock+0x2b/0x80 [ 589.091019][T18779] ? hook_file_ioctl_common+0x145/0x410 [ 589.091035][T18779] ? __fget_files+0x20e/0x3c0 [ 589.091048][T18779] ? fput+0x60/0xf0 [ 589.091060][T18779] security_file_ioctl_compat+0x9b/0x240 [ 589.091076][T18779] __ia32_compat_sys_ioctl+0xc3/0x370 [ 589.091091][T18779] __do_fast_syscall_32+0x7c/0x3a0 [ 589.091103][T18779] do_fast_syscall_32+0x32/0x80 [ 589.091113][T18779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.091127][T18779] RIP: 0023:0xf7fc1579 [ 589.091136][T18779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 589.091147][T18779] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 589.091157][T18779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 589.091164][T18779] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 589.091170][T18779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.091176][T18779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 589.091182][T18779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.091195][T18779] [ 589.091661][T18779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.204393][ T53] cdc_ncm 5-1:1.0: bind() failure [ 589.208943][ T53] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 589.211096][ T53] cdc_ncm 5-1:1.1: bind() failure [ 589.215676][ T53] usb 5-1: USB disconnect, device number 17 [ 589.225510][T18784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3205'. [ 589.548357][T18792] netfs: Couldn't get user pages (rc=-14) [ 589.758438][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 589.806730][T18802] netlink: 'syz.3.3208': attribute type 11 has an invalid length. [ 589.814850][T18802] netlink: 'syz.3.3208': attribute type 21 has an invalid length. [ 589.817707][T18802] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3208'. [ 589.820861][T18802] netlink: 'syz.3.3208': attribute type 4 has an invalid length. [ 589.823312][T18802] netlink: 'syz.3.3208': attribute type 3 has an invalid length. [ 589.827348][T18802] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3208'. [ 589.837734][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 589.857777][T18807] FAULT_INJECTION: forcing a failure. [ 589.857777][T18807] name failslab, interval 1, probability 0, space 0, times 0 [ 589.861668][T18807] CPU: 0 UID: 0 PID: 18807 Comm: syz.3.3213 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 589.861684][T18807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 589.861691][T18807] Call Trace: [ 589.861695][T18807] [ 589.861699][T18807] dump_stack_lvl+0x16c/0x1f0 [ 589.861720][T18807] should_fail_ex+0x512/0x640 [ 589.861747][T18807] ? fs_reclaim_acquire+0xae/0x150 [ 589.861764][T18807] ? tomoyo_encode2+0x100/0x3e0 [ 589.861778][T18807] should_failslab+0xc2/0x120 [ 589.861789][T18807] __kmalloc_noprof+0xd2/0x510 [ 589.861805][T18807] ? d_absolute_path+0x136/0x1a0 [ 589.861819][T18807] tomoyo_encode2+0x100/0x3e0 [ 589.861835][T18807] tomoyo_encode+0x29/0x50 [ 589.861850][T18807] tomoyo_realpath_from_path+0x18f/0x6e0 [ 589.861869][T18807] tomoyo_path_number_perm+0x245/0x580 [ 589.861882][T18807] ? tomoyo_path_number_perm+0x237/0x580 [ 589.861896][T18807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.861924][T18807] ? find_held_lock+0x2b/0x80 [ 589.861934][T18807] ? hook_file_ioctl_common+0x145/0x410 [ 589.861950][T18807] ? __fget_files+0x20e/0x3c0 [ 589.861964][T18807] ? fput+0x60/0xf0 [ 589.861976][T18807] security_file_ioctl_compat+0x9b/0x240 [ 589.861992][T18807] __ia32_compat_sys_ioctl+0xc3/0x370 [ 589.862007][T18807] __do_fast_syscall_32+0x7c/0x3a0 [ 589.862019][T18807] do_fast_syscall_32+0x32/0x80 [ 589.862029][T18807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.862043][T18807] RIP: 0023:0xf7f72579 [ 589.862051][T18807] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 589.862062][T18807] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 589.862072][T18807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 589.862079][T18807] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 589.862085][T18807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.862091][T18807] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 589.862097][T18807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.862111][T18807] [ 589.862134][T18807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.979285][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 590.158063][T18822] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 590.158063][T18822] program syz.3.3215 not setting count and/or reply_len properly [ 590.240114][T18824] FAULT_INJECTION: forcing a failure. [ 590.240114][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.248293][T18824] CPU: 0 UID: 0 PID: 18824 Comm: syz.0.3217 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 590.248310][T18824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.248319][T18824] Call Trace: [ 590.248324][T18824] [ 590.248328][T18824] dump_stack_lvl+0x16c/0x1f0 [ 590.248352][T18824] should_fail_ex+0x512/0x640 [ 590.248370][T18824] _copy_from_user+0x2e/0xd0 [ 590.248388][T18824] kstrtouint_from_user+0xd6/0x1d0 [ 590.248402][T18824] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 590.248415][T18824] ? __lock_acquire+0xb8a/0x1c90 [ 590.248437][T18824] proc_fail_nth_write+0x83/0x250 [ 590.248450][T18824] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 590.248467][T18824] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 590.248479][T18824] vfs_write+0x2a0/0x1150 [ 590.248497][T18824] ? __pfx_vfs_write+0x10/0x10 [ 590.248511][T18824] ? find_held_lock+0x2b/0x80 [ 590.248525][T18824] ? __fget_files+0x20e/0x3c0 [ 590.248544][T18824] ksys_write+0x12a/0x250 [ 590.248559][T18824] ? __pfx_ksys_write+0x10/0x10 [ 590.248575][T18824] ? rcu_is_watching+0x12/0xc0 [ 590.248588][T18824] __do_fast_syscall_32+0x7c/0x3a0 [ 590.248605][T18824] do_fast_syscall_32+0x32/0x80 [ 590.248616][T18824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.248630][T18824] RIP: 0023:0xf704e579 [ 590.248639][T18824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 590.248650][T18824] RSP: 002b:00000000f503e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 590.248663][T18824] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f503e620 [ 590.248670][T18824] RDX: 0000000000000001 RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 590.248676][T18824] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 590.248682][T18824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 590.248689][T18824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.248702][T18824] [ 590.254345][T18825] input: syz1 as /devices/virtual/input/input181 [ 590.541924][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 590.554013][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 590.748752][T18840] FAULT_INJECTION: forcing a failure. [ 590.748752][T18840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.752935][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.3.3223 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 590.752950][T18840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.752957][T18840] Call Trace: [ 590.752962][T18840] [ 590.752967][T18840] dump_stack_lvl+0x16c/0x1f0 [ 590.752988][T18840] should_fail_ex+0x512/0x640 [ 590.753007][T18840] _copy_from_user+0x2e/0xd0 [ 590.753025][T18840] drm_ioctl+0x4fb/0xc30 [ 590.753045][T18840] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 590.753062][T18840] ? __pfx_drm_ioctl+0x10/0x10 [ 590.753088][T18840] drm_compat_ioctl+0x327/0x460 [ 590.753102][T18840] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 590.753115][T18840] __ia32_compat_sys_ioctl+0x242/0x370 [ 590.753132][T18840] __do_fast_syscall_32+0x7c/0x3a0 [ 590.753143][T18840] do_fast_syscall_32+0x32/0x80 [ 590.753153][T18840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.753167][T18840] RIP: 0023:0xf7f72579 [ 590.753176][T18840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 590.753187][T18840] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 590.753197][T18840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 590.753204][T18840] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.753210][T18840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.753217][T18840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 590.753223][T18840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.753236][T18840] [ 590.859527][T18844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3225'. [ 590.977292][ T34] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 591.125444][ T34] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 591.128032][ T34] usb 5-1: config 0 has no interface number 0 [ 591.138055][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 591.140956][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.143464][ T34] usb 5-1: Product: syz [ 591.155469][ T34] usb 5-1: Manufacturer: syz [ 591.159476][ T34] usb 5-1: SerialNumber: syz [ 591.164778][ T34] usb 5-1: config 0 descriptor?? [ 591.167976][ T34] hub 5-1:0.132: bad descriptor, ignoring hub [ 591.170101][ T34] hub 5-1:0.132: probe with driver hub failed with error -5 [ 591.176808][ T34] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input182 [ 591.378512][T18838] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 591.473199][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 591.643334][T18863] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 591.643334][T18863] program syz.2.3229 not setting count and/or reply_len properly [ 591.651001][T18581] usb 5-1: USB disconnect, device number 18 [ 591.810345][ T5950] Bluetooth: hci0: unexpected event for opcode 0x203d [ 591.920722][ T838] libceph: connect (1)[c::]:6789 error -101 [ 591.922728][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 591.966160][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 591.966176][ T40] audit: type=1326 audit(1749999687.453:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 591.980395][ T40] audit: type=1326 audit(1749999687.463:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 591.998930][ T40] audit: type=1326 audit(1749999687.463:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.007245][ T40] audit: type=1326 audit(1749999687.463:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.017269][ T40] audit: type=1326 audit(1749999687.463:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.024189][ T40] audit: type=1326 audit(1749999687.463:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.031075][ T40] audit: type=1326 audit(1749999687.463:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.039585][ T40] audit: type=1326 audit(1749999687.463:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.047946][ T40] audit: type=1326 audit(1749999687.463:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.056341][ T40] audit: type=1326 audit(1749999687.463:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.3.3231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7ffc0000 [ 592.072261][T18869] ceph: No mds server is up or the cluster is laggy [ 592.106856][T18876] FAULT_INJECTION: forcing a failure. [ 592.106856][T18876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.111454][T18876] CPU: 3 UID: 0 PID: 18876 Comm: syz.0.3232 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 592.111470][T18876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 592.111477][T18876] Call Trace: [ 592.111482][T18876] [ 592.111486][T18876] dump_stack_lvl+0x16c/0x1f0 [ 592.111508][T18876] should_fail_ex+0x512/0x640 [ 592.111527][T18876] _copy_to_user+0x32/0xd0 [ 592.111546][T18876] drm_ioctl+0x5eb/0xc30 [ 592.111570][T18876] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 592.111587][T18876] ? __pfx_drm_ioctl+0x10/0x10 [ 592.111618][T18876] drm_compat_ioctl+0x327/0x460 [ 592.111632][T18876] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 592.111645][T18876] __ia32_compat_sys_ioctl+0x242/0x370 [ 592.111660][T18876] __do_fast_syscall_32+0x7c/0x3a0 [ 592.111672][T18876] do_fast_syscall_32+0x32/0x80 [ 592.111683][T18876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.111697][T18876] RIP: 0023:0xf704e579 [ 592.111706][T18876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 592.111717][T18876] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 592.111728][T18876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 592.111735][T18876] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.111741][T18876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.111747][T18876] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.111753][T18876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.111766][T18876] [ 592.324864][T18884] batadv_slave_0: entered promiscuous mode [ 592.570947][T18888] input: syz1 as /devices/virtual/input/input184 [ 592.644009][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 592.986487][T18894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3237'. [ 593.464931][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 593.846008][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 594.069951][T18912] FAULT_INJECTION: forcing a failure. [ 594.069951][T18912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.074561][T18912] CPU: 3 UID: 0 PID: 18912 Comm: syz.3.3242 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 594.074585][T18912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 594.074596][T18912] Call Trace: [ 594.074603][T18912] [ 594.074610][T18912] dump_stack_lvl+0x16c/0x1f0 [ 594.074641][T18912] should_fail_ex+0x512/0x640 [ 594.074671][T18912] _copy_to_user+0x32/0xd0 [ 594.074701][T18912] simple_read_from_buffer+0xcb/0x170 [ 594.074727][T18912] proc_fail_nth_read+0x197/0x270 [ 594.074749][T18912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.074772][T18912] ? rw_verify_area+0xcf/0x680 [ 594.074791][T18912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.074810][T18912] vfs_read+0x1e1/0xc60 [ 594.074834][T18912] ? fdget_pos+0x2a2/0x370 [ 594.074860][T18912] ? __pfx_vfs_read+0x10/0x10 [ 594.074885][T18912] ? find_held_lock+0x2b/0x80 [ 594.074910][T18912] ? __fget_files+0x20e/0x3c0 [ 594.074941][T18912] ksys_read+0x12a/0x250 [ 594.074963][T18912] ? __pfx_ksys_read+0x10/0x10 [ 594.074989][T18912] ? rcu_is_watching+0x12/0xc0 [ 594.075011][T18912] __do_fast_syscall_32+0x7c/0x3a0 [ 594.075032][T18912] do_fast_syscall_32+0x32/0x80 [ 594.075048][T18912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.075069][T18912] RIP: 0023:0xf7f72579 [ 594.075082][T18912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 594.075099][T18912] RSP: 002b:00000000f5096590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 594.075115][T18912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620 [ 594.075126][T18912] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 594.075136][T18912] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 594.075145][T18912] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 594.075155][T18912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.075197][T18912] [ 594.194799][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 594.714156][ T5950] Bluetooth: hci1: command 0x2021 tx timeout [ 595.621984][T18937] vivid-002: ================= START STATUS ================= [ 595.624535][T18937] vivid-002: Radio HW Seek Mode: Bounded [ 595.626567][T18937] vivid-002: Radio Programmable HW Seek: false [ 595.628595][T18937] vivid-002: RDS Rx I/O Mode: Block I/O [ 595.630380][T18937] vivid-002: Generate RBDS Instead of RDS: false [ 595.632412][T18937] vivid-002: RDS Reception: true [ 595.634085][T18937] vivid-002: RDS Program Type: 0 inactive [ 595.635841][T18937] vivid-002: RDS PS Name: inactive [ 595.637487][T18937] vivid-002: RDS Radio Text: inactive [ 595.639218][T18937] vivid-002: RDS Traffic Announcement: false inactive [ 595.641405][T18937] vivid-002: RDS Traffic Program: false inactive [ 595.643511][T18937] vivid-002: RDS Music: false inactive [ 595.645465][T18937] vivid-002: ================== END STATUS ================== [ 596.242240][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 596.270343][T18944] input: syz1 as /devices/virtual/input/input186 [ 597.711760][T18981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3262'. [ 598.127474][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 598.897102][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 599.211211][T19003] input: syz1 as /devices/virtual/input/input188 [ 599.449278][T19008] ipvlan4: entered promiscuous mode [ 600.415875][T19031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'. [ 600.904468][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 601.674548][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 602.253982][ T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 602.345508][T19050] input: syz1 as /devices/virtual/input/input190 [ 602.574390][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 602.744116][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 602.747250][ T53] usb 8-1: config 0 has no interfaces? [ 602.749962][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.752776][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.763973][ T53] usb 8-1: SerialNumber: syz [ 602.766612][ T53] usb 8-1: config 0 descriptor?? [ 602.981655][T19051] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 602.984275][T19051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3280'. [ 602.993166][ T53] usb 8-1: USB disconnect, device number 12 [ 604.054350][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 604.238076][T19081] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3285'. [ 605.218141][T19100] input: syz1 as /devices/virtual/input/input192 [ 605.377561][T19110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3295'. [ 605.994418][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 606.185290][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 606.244752][T19145] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3307'. [ 606.245530][T19144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3302'. [ 607.092676][T19159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 607.094762][T19159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 607.104780][T19159] vhci_hcd vhci_hcd.0: Device attached [ 607.125649][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.128871][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.131880][T19160] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 607.135734][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.138419][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.149666][ T59] vhci_hcd: stop threads [ 607.151028][ T59] vhci_hcd: release socket [ 607.152424][ T59] vhci_hcd: disconnect device [ 607.543768][T19166] input: syz1 as /devices/virtual/input/input194 [ 607.652060][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 607.661406][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 608.179420][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 608.244004][T19190] program syz.0.3319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.247624][T19190] nfs: Unknown parameter 'ntext' [ 608.749643][T19204] ipvlan5: entered promiscuous mode [ 609.439024][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 609.443585][ T6917] bond0: (slave bond_slave_0): interface is now down [ 609.447265][T19214] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 609.448512][ T6917] bond0: (slave bond_slave_1): interface is now down [ 609.455041][T19214] erspan0: entered promiscuous mode [ 609.458791][T19214] bond0: (slave erspan0): no link monitoring support [ 609.481733][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 609.746170][T19217] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3324'. [ 609.919843][T19223] ipvlan5: entered promiscuous mode [ 610.367574][T19233] input: syz1 as /devices/virtual/input/input196 [ 610.850731][T19244] input: syz1 as /devices/virtual/input/input198 [ 611.355741][ T59] bond0: (slave bond_slave_0): interface is now down [ 611.357827][ T59] bond0: (slave bond_slave_1): interface is now down [ 611.371859][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 611.454526][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 611.738560][T19258] openvswitch: netlink: IP tunnel dst address not specified [ 612.278294][T19267] syz.0.3337: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.282568][T19267] CPU: 1 UID: 0 PID: 19267 Comm: syz.0.3337 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 612.282584][T19267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 612.282592][T19267] Call Trace: [ 612.282596][T19267] [ 612.282602][T19267] dump_stack_lvl+0x16c/0x1f0 [ 612.282637][T19267] warn_alloc+0x248/0x3a0 [ 612.282657][T19267] ? __pfx_warn_alloc+0x10/0x10 [ 612.282672][T19267] ? psi_memstall_leave+0x1e6/0x2d0 [ 612.282687][T19267] ? __alloc_pages_direct_compact+0x466/0x580 [ 612.282705][T19267] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 612.282723][T19267] ? psi_memstall_leave+0x1e6/0x2d0 [ 612.282739][T19267] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 612.282764][T19267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 612.282789][T19267] ? keyring_compare_object+0x72/0x210 [ 612.282807][T19267] ? assoc_array_find+0x1b1/0x230 [ 612.282828][T19267] ? dns_resolver_preparse+0x319/0xe00 [ 612.282840][T19267] __alloc_pages_noprof+0xb/0x1b0 [ 612.282856][T19267] ___kmalloc_large_node+0x84/0x1e0 [ 612.282870][T19267] ? dns_resolver_preparse+0x319/0xe00 [ 612.282881][T19267] __kmalloc_large_node_noprof+0x1c/0x70 [ 612.282895][T19267] __kmalloc_noprof.cold+0xc/0x61 [ 612.282911][T19267] ? memchr+0x27/0x80 [ 612.282925][T19267] dns_resolver_preparse+0x319/0xe00 [ 612.282939][T19267] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 612.282951][T19267] ? __pfx___might_resched+0x10/0x10 [ 612.282967][T19267] ? down_read+0x13d/0x480 [ 612.282978][T19267] ? __pfx_down_read+0x10/0x10 [ 612.282992][T19267] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 612.283005][T19267] __key_create_or_update+0x455/0xe10 [ 612.283022][T19267] ? __pfx___key_create_or_update+0x10/0x10 [ 612.283037][T19267] ? lookup_user_key+0x2ce/0x1300 [ 612.283057][T19267] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 612.283071][T19267] ? __pfx_keyring_search_iterator+0x10/0x10 [ 612.283089][T19267] key_create_or_update+0x42/0x60 [ 612.283106][T19267] __do_sys_add_key+0x298/0x470 [ 612.283123][T19267] ? __pfx___do_sys_add_key+0x10/0x10 [ 612.283144][T19267] ? rcu_is_watching+0x12/0xc0 [ 612.283157][T19267] __do_fast_syscall_32+0x7c/0x3a0 [ 612.283169][T19267] do_fast_syscall_32+0x32/0x80 [ 612.283179][T19267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.283212][T19267] RIP: 0023:0xf704e579 [ 612.283223][T19267] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 612.283234][T19267] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 612.283245][T19267] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000080000540 [ 612.283252][T19267] RDX: 0000000080000580 RSI: 00000000000fffff RDI: 0000000037a24cb8 [ 612.283259][T19267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.283266][T19267] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 612.283272][T19267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.283287][T19267] [ 612.283303][T19267] Mem-Info: [ 612.378826][T19267] active_anon:8275 inactive_anon:4285 isolated_anon:0 [ 612.378826][T19267] active_file:446 inactive_file:4693 isolated_file:0 [ 612.378826][T19267] unevictable:1768 dirty:59 writeback:0 [ 612.378826][T19267] slab_reclaimable:9135 slab_unreclaimable:99522 [ 612.378826][T19267] mapped:28709 shmem:13202 pagetables:1133 [ 612.378826][T19267] sec_pagetables:332 bounce:0 [ 612.378826][T19267] kernel_misc_reclaimable:0 [ 612.378826][T19267] free:40557 free_pcp:1223 free_cma:0 [ 612.391929][T19267] Node 0 active_anon:2728kB inactive_anon:1608kB active_file:0kB inactive_file:148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3860kB dirty:0kB writeback:0kB shmem:8256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7056kB pagetables:1664kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB [ 612.401826][T19267] Node 1 active_anon:33172kB inactive_anon:15532kB active_file:1784kB inactive_file:18624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:113800kB dirty:236kB writeback:0kB shmem:47376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7224kB pagetables:2868kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB [ 612.411864][T19267] Node 0 DMA free:2012kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:40kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 612.420416][T19267] lowmem_reserve[]: 0 289 289 289 289 [ 612.422084][T19267] Node 0 DMA32 free:16460kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:2048KB free_highatomic:712KB active_anon:2428kB inactive_anon:2012kB active_file:148kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:4468kB local_pcp:0kB free_cma:0kB [ 612.431570][T19267] lowmem_reserve[]: 0 0 0 0 0 [ 612.433069][T19267] Node 1 DMA32 free:127828kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1956KB active_anon:36272kB inactive_anon:15532kB active_file:1784kB inactive_file:18624kB unevictable:3536kB writepending:236kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:10256kB local_pcp:0kB free_cma:0kB [ 612.444507][T19267] lowmem_reserve[]: 0 0 0 0 0 [ 612.446787][T19267] Node 0 DMA: 1*4kB (U) 26*8kB (UM) 14*16kB (UM) 9*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2004kB [ 612.453735][T19267] Node 0 DMA32: 688*4kB (UEH) 357*8kB (UEH) 80*16kB (UEH) 58*32kB (UMEH) 54*64kB (UMEH) 25*128kB (UMEH) 10*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17960kB [ 612.459905][T19267] Node 1 DMA32: 831*4kB (UMEH) 631*8kB (UE) 348*16kB (UE) 496*32kB (UMEH) 205*64kB (UMEH) 151*128kB (UMEH) 78*256kB (UMEH) 65*512kB (UM) 11*1024kB (MH) 0*2048kB 0*4096kB = 126772kB [ 612.467727][T19267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.472113][T19267] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.476160][T19267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.480478][T19267] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.484704][T19267] 21034 total pagecache pages [ 612.486843][T19267] 463 pages in swap cache [ 612.488896][T19267] Free swap = 82692kB [ 612.490905][T19267] Total swap = 124996kB [ 612.492686][T19267] 524155 pages RAM [ 612.494774][T19267] 0 pages HighMem/MovableOnly [ 612.497927][T19267] 209150 pages reserved [ 612.499699][T19267] 0 pages cma reserved [ 612.813826][T19272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3338'. [ 613.068663][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 613.071847][T19289] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 613.074608][T19289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.274204][ T6884] bond0: (slave bond_slave_0): interface is now down [ 613.276347][ T6884] bond0: (slave bond_slave_1): interface is now down [ 613.281946][ T6884] bond0: now running without any active interface! [ 613.297474][T19301] input: syz1 as /devices/virtual/input/input200 [ 613.675922][ T53] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 613.693923][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 613.845310][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 613.848826][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.851833][ T53] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 613.854943][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.860400][ T53] usb 8-1: config 0 descriptor?? [ 613.914498][T19311] lo speed is unknown, defaulting to 1000 [ 613.918337][T19311] lo speed is unknown, defaulting to 1000 [ 614.241003][T19319] pimreg: entered allmulticast mode [ 614.706347][T19328] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3352'. [ 614.744062][ C2] hpet_rtc_timer_reinit: 35 callbacks suppressed [ 614.744076][ C2] hpet: Lost 1 RTC interrupts [ 615.315958][T19332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3354'. [ 615.318887][T19332] trusted_key: encrypted_key: insufficient parameters specified [ 615.444966][T19300] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 615.448720][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 615.451291][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 615.455188][ T53] usb 8-1: USB disconnect, device number 13 [ 615.481352][T19342] IPv4: Oversized IP packet from 127.202.26.0 [ 615.712780][T19346] input: syz1 as /devices/virtual/input/input202 [ 615.762533][T19346] FAULT_INJECTION: forcing a failure. [ 615.762533][T19346] name failslab, interval 1, probability 0, space 0, times 0 [ 615.768541][T19346] CPU: 1 UID: 0 PID: 19346 Comm: syz.1.3359 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 615.768569][T19346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 615.768576][T19346] Call Trace: [ 615.768581][T19346] [ 615.768585][T19346] dump_stack_lvl+0x16c/0x1f0 [ 615.768607][T19346] should_fail_ex+0x512/0x640 [ 615.768624][T19346] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 615.768643][T19346] should_failslab+0xc2/0x120 [ 615.768654][T19346] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 615.768670][T19346] ? getname_flags.part.0+0x4c/0x550 [ 615.768689][T19346] ? fput+0x70/0xf0 [ 615.768700][T19346] getname_flags.part.0+0x4c/0x550 [ 615.768714][T19346] getname_flags+0x93/0xf0 [ 615.768729][T19346] __ia32_sys_link+0x57/0xa0 [ 615.768747][T19346] __do_fast_syscall_32+0x7c/0x3a0 [ 615.768759][T19346] do_fast_syscall_32+0x32/0x80 [ 615.768770][T19346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.768785][T19346] RIP: 0023:0xf7ff8579 [ 615.768794][T19346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 615.768817][T19346] RSP: 002b:00000000f50d455c EFLAGS: 00000296 ORIG_RAX: 0000000000000009 [ 615.768828][T19346] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800001c0 [ 615.768835][T19346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.768842][T19346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.768848][T19346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 615.768855][T19346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.768869][T19346] [ 616.555625][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 616.699829][T19359] input: syz1 as /devices/virtual/input/input205 [ 616.708089][T19360] input: syz1 as /devices/virtual/input/input206 [ 617.562887][T19377] input: syz1 as /devices/virtual/input/input207 [ 617.577148][T19377] input: syz0 as /devices/virtual/input/input208 [ 618.136091][T19394] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3369'. [ 618.491423][T19406] lo: entered promiscuous mode [ 618.493618][T19406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.504484][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 618.657418][T19408] /dev/sr0: Can't open blockdev [ 618.726558][T19412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3377'. [ 618.955631][T19419] input: syz1 as /devices/virtual/input/input211 [ 619.155073][T19425] input: syz1 as /devices/virtual/input/input212 [ 619.670775][T19433] ipvlan14: entered promiscuous mode [ 619.932658][T19437] input: syz1 as /devices/virtual/input/input214 [ 620.898386][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 621.217889][T19469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 621.221515][T19469] UDF-fs: Scanning with blocksize 512 failed [ 621.227605][T19469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 621.231174][T19469] UDF-fs: Scanning with blocksize 1024 failed [ 621.235468][T19469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 621.238989][T19469] UDF-fs: Scanning with blocksize 2048 failed [ 621.244757][T19469] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 621.247246][T19469] UDF-fs: Scanning with blocksize 4096 failed [ 621.508807][T19468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3392'. [ 621.945619][T19491] i2c i2c-1: Invalid block write size 34 [ 621.987947][T19494] input: syz1 as /devices/virtual/input/input216 [ 622.158524][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806976dc00: rx timeout, send abort [ 622.554478][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 622.658599][ C3] vcan0: j1939_tp_rxtimer: 0xffff888050786400: rx timeout, send abort [ 622.661379][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806976dc00: abort rx timeout. Force session deactivation [ 622.836366][T19513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.842987][T19512] syzkaller1: entered promiscuous mode [ 622.845153][T19512] syzkaller1: entered allmulticast mode [ 622.907609][T19509] input: syz1 as /devices/virtual/input/input218 [ 623.046066][T19522] lo speed is unknown, defaulting to 1000 [ 623.048692][T19522] lo speed is unknown, defaulting to 1000 [ 623.161337][ C3] vcan0: j1939_tp_rxtimer: 0xffff888050786400: abort rx timeout. Force session deactivation [ 623.178223][T19527] ipvlan6: entered promiscuous mode [ 623.241268][T19530] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3407'. [ 623.410763][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 623.836051][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 623.959763][T19542] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 623.959763][T19542] program syz.3.3413 not setting count and/or reply_len properly [ 624.153567][T19547] ipvlan6: entered promiscuous mode [ 624.859853][T19554] lo speed is unknown, defaulting to 1000 [ 624.863815][T19554] lo speed is unknown, defaulting to 1000 [ 625.515016][T19564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3416'. [ 625.541651][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 626.209604][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 626.660215][T19591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3425'. [ 627.375328][T19602] input: syz1 as /devices/virtual/input/input221 [ 627.424421][T19608] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 627.424421][T19608] program syz.0.3427 not setting count and/or reply_len properly [ 627.565946][T19613] ipvlan7: entered promiscuous mode [ 627.583390][T19611] input: syz1 as /devices/virtual/input/input222 [ 627.886046][T19617] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3431'. [ 628.935838][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 629.004184][T19636] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 629.004184][T19636] program syz.1.3435 not setting count and/or reply_len properly [ 629.243433][T19641] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 629.243433][T19641] program syz.3.3436 not setting count and/or reply_len properly [ 629.266867][T19642] trusted_key: encrypted_key: insufficient parameters specified [ 629.333454][T19644] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3438'. [ 629.612010][T19653] ipvlan8: entered promiscuous mode [ 629.912437][T19663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3439'. [ 630.192121][T19664] input: syz1 as /devices/virtual/input/input224 [ 630.596652][T19677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3446'. [ 631.159326][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 631.299770][T19690] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 631.299770][T19690] program syz.2.3448 not setting count and/or reply_len properly [ 631.379707][T19691] ip6gre1: entered promiscuous mode [ 631.381851][T19691] ip6gre1: entered allmulticast mode [ 631.746091][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3452'. [ 631.749848][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3452'. [ 632.146507][ T40] audit: type=1326 audit(1749999727.633:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.146562][ T40] audit: type=1326 audit(1749999727.633:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.150528][ T40] audit: type=1326 audit(1749999727.633:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.150578][ T40] audit: type=1326 audit(1749999727.633:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.150618][ T40] audit: type=1326 audit(1749999727.633:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.152156][ T40] audit: type=1326 audit(1749999727.633:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.152487][ T40] audit: type=1326 audit(1749999727.633:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.152844][ T40] audit: type=1326 audit(1749999727.633:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.153312][ T40] audit: type=1326 audit(1749999727.633:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 632.153806][ T40] audit: type=1326 audit(1749999727.633:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.2.3453" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc1598 code=0x7ffc0000 [ 633.311250][ T6138] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 633.326352][T19725] input: syz1 as /devices/virtual/input/input226 [ 633.328803][T19729] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3458'. [ 633.784599][T19739] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 633.784599][T19739] program syz.3.3461 not setting count and/or reply_len properly [ 635.034494][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 635.055740][T19767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3471'. [ 635.516966][ T5950] Bluetooth: hci0: unexpected event for opcode 0x203c [ 635.666527][T19786] input: syz1 as /devices/virtual/input/input229 [ 635.862435][T19790] input: syz1 as /devices/virtual/input/input230 [ 636.580227][T19809] libceph: resolve '0' (ret=-3): failed [ 636.614593][T19807] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 636.614593][T19807] program syz.0.3480 not setting count and/or reply_len properly [ 636.769190][T19815] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 636.769190][T19815] program syz.3.3481 not setting count and/or reply_len properly [ 637.203187][T19820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3485'. [ 637.304710][ T6138] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 637.709236][T19832] ipvlan9: entered promiscuous mode [ 638.019733][T19838] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 638.019733][T19838] program syz.3.3487 not setting count and/or reply_len properly [ 639.644959][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 639.755652][T19870] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 639.755652][T19870] program syz.2.3495 not setting count and/or reply_len properly [ 640.057613][T19875] dlm: no locking on control device [ 640.120653][T19876] input: syz1 as /devices/virtual/input/input232 [ 640.125074][T19880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.128234][T19880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.418946][T19884] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 640.578979][T19888] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 640.578979][T19888] program syz.1.3503 not setting count and/or reply_len properly [ 640.957306][T19893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3504'. [ 641.265838][T19902] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3506'. [ 642.114341][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 642.372980][T19926] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 642.372980][T19926] program syz.3.3510 not setting count and/or reply_len properly [ 643.037184][T19937] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3517'. [ 643.756895][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 644.555873][T19968] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 644.555873][T19968] program syz.0.3526 not setting count and/or reply_len properly [ 644.647022][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 645.005583][T19977] input: syz1 as /devices/virtual/input/input236 [ 645.110190][T19981] 9pnet_fd: Insufficient options for proto=fd [ 645.364422][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 645.776573][T19994] ipvlan7: entered promiscuous mode [ 646.107563][T20003] ipvlan10: entered promiscuous mode [ 647.422018][ T6138] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 647.499758][T20031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3542'. [ 647.601032][T20038] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 647.601032][T20038] program syz.0.3541 not setting count and/or reply_len properly [ 648.118477][T20042] input: syz1 as /devices/virtual/input/input238 [ 648.889406][T20059] ipvlan9: entered promiscuous mode [ 649.119237][T20066] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3549'. [ 649.466296][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 649.671807][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 650.559870][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 650.729551][T20096] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 650.729551][T20096] program syz.0.3554 not setting count and/or reply_len properly [ 650.815754][T20100] input: syz1 as /devices/virtual/input/input240 [ 651.742906][T20119] wireguard0: entered promiscuous mode [ 651.744740][T20119] wireguard0: entered allmulticast mode [ 651.827613][T20124] ipvlan15: entered promiscuous mode [ 652.369024][T20140] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 652.369024][T20140] program syz.2.3567 not setting count and/or reply_len properly [ 652.374128][ T6031] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 652.387492][T20141] ipvlan10: entered promiscuous mode [ 652.554141][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 652.557893][ T6031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 652.562946][ T6031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.577233][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 652.583022][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 652.589816][ T6031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.598876][ T6031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 652.604640][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.774557][T20143] sp0: Synchronizing with TNC [ 652.777239][T20143] [U] è [ 652.814307][ T6031] usb 6-1: usb_control_msg returned -32 [ 652.816591][ T6031] usbtmc 6-1:16.0: can't read capabilities [ 653.246427][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 653.438657][T20164] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 653.438657][T20164] program syz.0.3573 not setting count and/or reply_len properly [ 654.165840][T20176] ip6t_srh: unknown srh invflags 6BE9 [ 654.172084][T20176] ubi: mtd0 is already attached to ubi31 [ 654.470025][T20175] netlink: 'syz.0.3576': attribute type 20 has an invalid length. [ 654.990285][T20191] ipvlan8: entered promiscuous mode [ 655.100612][T20190] ipvlan11: entered promiscuous mode [ 655.151087][ T29] usb 6-1: USB disconnect, device number 15 [ 655.227279][T20203] FAULT_INJECTION: forcing a failure. [ 655.227279][T20203] name failslab, interval 1, probability 0, space 0, times 0 [ 655.236131][T20203] CPU: 0 UID: 0 PID: 20203 Comm: syz.1.3582 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 655.236148][T20203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 655.236156][T20203] Call Trace: [ 655.236161][T20203] [ 655.236165][T20203] dump_stack_lvl+0x16c/0x1f0 [ 655.236214][T20203] should_fail_ex+0x512/0x640 [ 655.236237][T20203] ? fs_reclaim_acquire+0xae/0x150 [ 655.236252][T20203] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 655.236269][T20203] should_failslab+0xc2/0x120 [ 655.236281][T20203] __kmalloc_noprof+0xd2/0x510 [ 655.236300][T20203] tomoyo_realpath_from_path+0xc2/0x6e0 [ 655.236317][T20203] ? tomoyo_profile+0x47/0x60 [ 655.236341][T20203] tomoyo_path_number_perm+0x245/0x580 [ 655.236354][T20203] ? tomoyo_path_number_perm+0x237/0x580 [ 655.236368][T20203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 655.236397][T20203] ? find_held_lock+0x2b/0x80 [ 655.236408][T20203] ? hook_file_ioctl_common+0x145/0x410 [ 655.236423][T20203] ? __fget_files+0x20e/0x3c0 [ 655.236437][T20203] ? fput+0x60/0xf0 [ 655.236450][T20203] security_file_ioctl_compat+0x9b/0x240 [ 655.236466][T20203] __ia32_compat_sys_ioctl+0xc3/0x370 [ 655.236482][T20203] __do_fast_syscall_32+0x7c/0x3a0 [ 655.236494][T20203] do_fast_syscall_32+0x32/0x80 [ 655.236505][T20203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.236519][T20203] RIP: 0023:0xf7ff8579 [ 655.236529][T20203] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 655.236540][T20203] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 655.236552][T20203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c00464be [ 655.236559][T20203] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.236566][T20203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.236572][T20203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 655.236579][T20203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.236593][T20203] [ 655.238457][T20203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 655.767624][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 656.387385][T20222] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 656.387385][T20222] program syz.1.3585 not setting count and/or reply_len properly [ 656.463244][T20224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.467444][T20224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.661203][T20230] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 656.661203][T20230] program syz.0.3591 not setting count and/or reply_len properly [ 657.178521][T20240] FAULT_INJECTION: forcing a failure. [ 657.178521][T20240] name failslab, interval 1, probability 0, space 0, times 0 [ 657.182520][T20240] CPU: 2 UID: 0 PID: 20240 Comm: syz.0.3594 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 657.182535][T20240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 657.182543][T20240] Call Trace: [ 657.182547][T20240] [ 657.182552][T20240] dump_stack_lvl+0x16c/0x1f0 [ 657.182574][T20240] should_fail_ex+0x512/0x640 [ 657.182591][T20240] ? fs_reclaim_acquire+0xae/0x150 [ 657.182606][T20240] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 657.182622][T20240] should_failslab+0xc2/0x120 [ 657.182634][T20240] __kmalloc_noprof+0xd2/0x510 [ 657.182653][T20240] tomoyo_realpath_from_path+0xc2/0x6e0 [ 657.182670][T20240] ? tomoyo_profile+0x47/0x60 [ 657.182689][T20240] tomoyo_path_number_perm+0x245/0x580 [ 657.182702][T20240] ? tomoyo_path_number_perm+0x237/0x580 [ 657.182716][T20240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.182744][T20240] ? find_held_lock+0x2b/0x80 [ 657.182755][T20240] ? hook_file_ioctl_common+0x145/0x410 [ 657.182771][T20240] ? __fget_files+0x20e/0x3c0 [ 657.182802][T20240] ? fput+0x60/0xf0 [ 657.182815][T20240] security_file_ioctl_compat+0x9b/0x240 [ 657.182831][T20240] __ia32_compat_sys_ioctl+0xc3/0x370 [ 657.182851][T20240] __do_fast_syscall_32+0x7c/0x3a0 [ 657.182864][T20240] do_fast_syscall_32+0x32/0x80 [ 657.182874][T20240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.182889][T20240] RIP: 0023:0xf704e579 [ 657.182898][T20240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 657.182909][T20240] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 657.182920][T20240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040044103 [ 657.182927][T20240] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.182934][T20240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.182940][T20240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 657.182946][T20240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.182960][T20240] [ 657.182965][T20240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 657.564540][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 657.864400][T20257] ipvlan16: entered promiscuous mode [ 658.006815][T20264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.009555][T20264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.063218][T20268] ipvlan11: entered promiscuous mode [ 658.840643][T20284] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3603'. [ 659.041169][T20285] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 659.041169][T20285] program syz.3.3604 not setting count and/or reply_len properly [ 659.151162][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3607'. [ 659.339034][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 659.508823][T20299] FAULT_INJECTION: forcing a failure. [ 659.508823][T20299] name failslab, interval 1, probability 0, space 0, times 0 [ 659.527327][T20299] CPU: 3 UID: 0 PID: 20299 Comm: syz.2.3609 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 659.527347][T20299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 659.527355][T20299] Call Trace: [ 659.527359][T20299] [ 659.527365][T20299] dump_stack_lvl+0x16c/0x1f0 [ 659.527388][T20299] should_fail_ex+0x512/0x640 [ 659.527405][T20299] ? fs_reclaim_acquire+0xae/0x150 [ 659.527422][T20299] ? tomoyo_encode2+0x100/0x3e0 [ 659.527438][T20299] should_failslab+0xc2/0x120 [ 659.527449][T20299] __kmalloc_noprof+0xd2/0x510 [ 659.527467][T20299] ? d_absolute_path+0x136/0x1a0 [ 659.527482][T20299] tomoyo_encode2+0x100/0x3e0 [ 659.527500][T20299] tomoyo_encode+0x29/0x50 [ 659.527515][T20299] tomoyo_realpath_from_path+0x18f/0x6e0 [ 659.527536][T20299] tomoyo_path_number_perm+0x245/0x580 [ 659.527549][T20299] ? tomoyo_path_number_perm+0x237/0x580 [ 659.527564][T20299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 659.527594][T20299] ? find_held_lock+0x2b/0x80 [ 659.527606][T20299] ? hook_file_ioctl_common+0x145/0x410 [ 659.527622][T20299] ? __fget_files+0x20e/0x3c0 [ 659.527637][T20299] ? fput+0x60/0xf0 [ 659.527650][T20299] security_file_ioctl_compat+0x9b/0x240 [ 659.527667][T20299] __ia32_compat_sys_ioctl+0xc3/0x370 [ 659.527683][T20299] __do_fast_syscall_32+0x7c/0x3a0 [ 659.527697][T20299] do_fast_syscall_32+0x32/0x80 [ 659.527708][T20299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.527722][T20299] RIP: 0023:0xf7fc1579 [ 659.527732][T20299] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 659.527747][T20299] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 659.527764][T20299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040044103 [ 659.527775][T20299] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.527785][T20299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.527796][T20299] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 659.527808][T20299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.527836][T20299] [ 659.527857][T20299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 659.882458][ T6138] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 659.996819][T20311] FAULT_INJECTION: forcing a failure. [ 659.996819][T20311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.000953][T20311] CPU: 1 UID: 0 PID: 20311 Comm: syz.0.3613 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 660.000969][T20311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 660.000976][T20311] Call Trace: [ 660.000980][T20311] [ 660.000985][T20311] dump_stack_lvl+0x16c/0x1f0 [ 660.001008][T20311] should_fail_ex+0x512/0x640 [ 660.001028][T20311] _copy_from_user+0x2e/0xd0 [ 660.001046][T20311] drm_ioctl+0x4fb/0xc30 [ 660.001067][T20311] ? __pfx_drm_mode_destroyblob_ioctl+0x10/0x10 [ 660.001084][T20311] ? __pfx_drm_ioctl+0x10/0x10 [ 660.001111][T20311] drm_compat_ioctl+0x327/0x460 [ 660.001126][T20311] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 660.001139][T20311] __ia32_compat_sys_ioctl+0x242/0x370 [ 660.001155][T20311] __do_fast_syscall_32+0x7c/0x3a0 [ 660.001167][T20311] do_fast_syscall_32+0x32/0x80 [ 660.001177][T20311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.001192][T20311] RIP: 0023:0xf704e579 [ 660.001201][T20311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.001212][T20311] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 660.001222][T20311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c00464be [ 660.001229][T20311] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.001236][T20311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.001242][T20311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 660.001249][T20311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.001262][T20311] [ 660.144118][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 660.148989][T20318] overlay: Unknown parameter 'userxattr:default_permissions' [ 660.294362][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 660.301255][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 660.314037][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.317223][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.326426][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.330438][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.335237][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.339179][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.375913][T20324] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 660.375913][T20324] program syz.0.3617 not setting count and/or reply_len properly [ 660.550932][ T34] usb 6-1: usb_control_msg returned -32 [ 660.552563][ T34] usbtmc 6-1:16.0: can't read capabilities [ 660.807772][T20328] FAULT_INJECTION: forcing a failure. [ 660.807772][T20328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.812434][T20328] CPU: 3 UID: 0 PID: 20328 Comm: syz.0.3619 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 660.812450][T20328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 660.812457][T20328] Call Trace: [ 660.812462][T20328] [ 660.812467][T20328] dump_stack_lvl+0x16c/0x1f0 [ 660.812489][T20328] should_fail_ex+0x512/0x640 [ 660.812508][T20328] _copy_to_user+0x32/0xd0 [ 660.812526][T20328] simple_read_from_buffer+0xcb/0x170 [ 660.812543][T20328] proc_fail_nth_read+0x197/0x270 [ 660.812557][T20328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.812571][T20328] ? rw_verify_area+0xcf/0x680 [ 660.812585][T20328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.812598][T20328] vfs_read+0x1e1/0xc60 [ 660.812613][T20328] ? fdget_pos+0x2a2/0x370 [ 660.812631][T20328] ? __pfx_vfs_read+0x10/0x10 [ 660.812645][T20328] ? find_held_lock+0x2b/0x80 [ 660.812660][T20328] ? __fget_files+0x20e/0x3c0 [ 660.812679][T20328] ksys_read+0x12a/0x250 [ 660.812694][T20328] ? __pfx_ksys_read+0x10/0x10 [ 660.812710][T20328] ? rcu_is_watching+0x12/0xc0 [ 660.812723][T20328] __do_fast_syscall_32+0x7c/0x3a0 [ 660.812736][T20328] do_fast_syscall_32+0x32/0x80 [ 660.812746][T20328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.812760][T20328] RIP: 0023:0xf704e579 [ 660.812769][T20328] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 660.812780][T20328] RSP: 002b:00000000f503e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 660.812791][T20328] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f503e620 [ 660.812798][T20328] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 660.812804][T20328] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 660.812810][T20328] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 660.812816][T20328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.812830][T20328] [ 661.275949][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 661.734422][ T6031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 662.428049][T20355] ipvlan17: entered promiscuous mode [ 662.476834][T20356] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 662.476834][T20356] program syz.0.3624 not setting count and/or reply_len properly [ 662.821148][ T9] usb 6-1: USB disconnect, device number 16 [ 662.932336][T20368] ipvlan9: entered promiscuous mode [ 663.327709][T20375] input: syz1 as /devices/virtual/input/input242 [ 663.977695][T20383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3631'. [ 664.192415][ T40] kauditd_printk_skb: 1251 callbacks suppressed [ 664.192431][ T40] audit: type=1326 audit(1749999759.673:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.3.3631" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72579 code=0x7eff0000 [ 664.576694][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 664.588407][T20402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3636'. [ 665.637271][T20414] bridge0: port 3(syz_tun) entered blocking state [ 665.640664][T20414] bridge0: port 3(syz_tun) entered disabled state [ 665.645405][T20414] syz_tun: entered allmulticast mode [ 665.650983][T20414] syz_tun: entered promiscuous mode [ 665.653954][T20414] bridge0: port 3(syz_tun) entered blocking state [ 665.656126][T20414] bridge0: port 3(syz_tun) entered forwarding state [ 666.380589][T20436] FAULT_INJECTION: forcing a failure. [ 666.380589][T20436] name failslab, interval 1, probability 0, space 0, times 0 [ 666.384657][T20436] CPU: 2 UID: 0 PID: 20436 Comm: syz.3.3646 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 666.384673][T20436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 666.384680][T20436] Call Trace: [ 666.384685][T20436] [ 666.384689][T20436] dump_stack_lvl+0x16c/0x1f0 [ 666.384711][T20436] should_fail_ex+0x512/0x640 [ 666.384727][T20436] ? fs_reclaim_acquire+0xae/0x150 [ 666.384742][T20436] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.384759][T20436] should_failslab+0xc2/0x120 [ 666.384770][T20436] __kmalloc_noprof+0xd2/0x510 [ 666.384789][T20436] tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.384806][T20436] ? tomoyo_profile+0x47/0x60 [ 666.384825][T20436] tomoyo_path_number_perm+0x245/0x580 [ 666.384838][T20436] ? tomoyo_path_number_perm+0x237/0x580 [ 666.384852][T20436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 666.384880][T20436] ? find_held_lock+0x2b/0x80 [ 666.384891][T20436] ? hook_file_ioctl_common+0x145/0x410 [ 666.384907][T20436] ? __fget_files+0x20e/0x3c0 [ 666.384921][T20436] ? fput+0x60/0xf0 [ 666.384933][T20436] security_file_ioctl_compat+0x9b/0x240 [ 666.384949][T20436] __ia32_compat_sys_ioctl+0xc3/0x370 [ 666.384965][T20436] __do_fast_syscall_32+0x7c/0x3a0 [ 666.384977][T20436] do_fast_syscall_32+0x32/0x80 [ 666.384988][T20436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.385002][T20436] RIP: 0023:0xf7f72579 [ 666.385011][T20436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 666.385022][T20436] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 666.385034][T20436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040305652 [ 666.385041][T20436] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.385047][T20436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.385053][T20436] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 666.385060][T20436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.385073][T20436] [ 666.385078][T20436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.464819][ T6031] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 667.604127][ T6031] usb 5-1: device descriptor read/64, error -71 [ 667.844069][ T6031] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 667.904510][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 667.974016][ T6031] usb 5-1: device descriptor read/64, error -71 [ 668.085263][ T6031] usb usb5-port1: attempt power cycle [ 668.129573][T20473] FAULT_INJECTION: forcing a failure. [ 668.129573][T20473] name failslab, interval 1, probability 0, space 0, times 0 [ 668.133382][T20473] CPU: 0 UID: 0 PID: 20473 Comm: syz.2.3656 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 668.133398][T20473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 668.133405][T20473] Call Trace: [ 668.133410][T20473] [ 668.133415][T20473] dump_stack_lvl+0x16c/0x1f0 [ 668.133437][T20473] should_fail_ex+0x512/0x640 [ 668.133454][T20473] ? fs_reclaim_acquire+0xae/0x150 [ 668.133468][T20473] ? tomoyo_encode2+0x100/0x3e0 [ 668.133483][T20473] should_failslab+0xc2/0x120 [ 668.133494][T20473] __kmalloc_noprof+0xd2/0x510 [ 668.133511][T20473] ? d_absolute_path+0x136/0x1a0 [ 668.133524][T20473] tomoyo_encode2+0x100/0x3e0 [ 668.133541][T20473] tomoyo_encode+0x29/0x50 [ 668.133555][T20473] tomoyo_realpath_from_path+0x18f/0x6e0 [ 668.133575][T20473] tomoyo_path_number_perm+0x245/0x580 [ 668.133588][T20473] ? tomoyo_path_number_perm+0x237/0x580 [ 668.133602][T20473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 668.133630][T20473] ? find_held_lock+0x2b/0x80 [ 668.133641][T20473] ? hook_file_ioctl_common+0x145/0x410 [ 668.133656][T20473] ? __fget_files+0x20e/0x3c0 [ 668.133671][T20473] ? fput+0x60/0xf0 [ 668.133683][T20473] security_file_ioctl_compat+0x9b/0x240 [ 668.133699][T20473] __ia32_compat_sys_ioctl+0xc3/0x370 [ 668.133715][T20473] __do_fast_syscall_32+0x7c/0x3a0 [ 668.133727][T20473] do_fast_syscall_32+0x32/0x80 [ 668.133737][T20473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.133751][T20473] RIP: 0023:0xf7fc1579 [ 668.133760][T20473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 668.133771][T20473] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 668.133782][T20473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040305652 [ 668.133789][T20473] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.133795][T20473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.133802][T20473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 668.133820][T20473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.133834][T20473] [ 668.133844][T20473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 668.244633][T20475] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 668.246742][T20475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 668.249955][T20475] vhci_hcd vhci_hcd.0: Device attached [ 668.307237][T20476] vhci_hcd: unknown pdu 1 [ 668.310199][ T6882] vhci_hcd: stop threads [ 668.311594][ T6882] vhci_hcd: release socket [ 668.313018][ T6882] vhci_hcd: disconnect device [ 668.359378][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'. [ 668.434126][ T6031] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 668.454844][ T6031] usb 5-1: device descriptor read/8, error -71 [ 668.662236][T20490] ipvlan1: entered promiscuous mode [ 668.713986][ T6031] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 668.734569][ T6031] usb 5-1: device descriptor read/8, error -71 [ 668.844717][ T6031] usb usb5-port1: unable to enumerate USB device [ 669.788728][T20499] input: syz1 as /devices/virtual/input/input246 [ 669.967620][T20505] ipvlan10: entered promiscuous mode [ 670.010755][T20508] SET target dimension over the limit! [ 670.054708][T20511] FAULT_INJECTION: forcing a failure. [ 670.054708][T20511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.059782][T20511] CPU: 2 UID: 0 PID: 20511 Comm: syz.1.3667 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 670.059810][T20511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 670.059818][T20511] Call Trace: [ 670.059823][T20511] [ 670.059827][T20511] dump_stack_lvl+0x16c/0x1f0 [ 670.059849][T20511] should_fail_ex+0x512/0x640 [ 670.059869][T20511] _copy_from_user+0x2e/0xd0 [ 670.059887][T20511] video_usercopy+0x723/0x1440 [ 670.059906][T20511] ? __pfx___video_do_ioctl+0x10/0x10 [ 670.059922][T20511] ? __pfx_video_usercopy+0x10/0x10 [ 670.059943][T20511] ? hook_file_ioctl_common+0x145/0x410 [ 670.059960][T20511] v4l2_ioctl+0x1bd/0x250 [ 670.059974][T20511] ? fput+0x61/0xf0 [ 670.059986][T20511] v4l2_compat_ioctl32+0x214/0x2c0 [ 670.060000][T20511] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 670.060015][T20511] __ia32_compat_sys_ioctl+0x242/0x370 [ 670.060030][T20511] __do_fast_syscall_32+0x7c/0x3a0 [ 670.060042][T20511] do_fast_syscall_32+0x32/0x80 [ 670.060053][T20511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 670.060067][T20511] RIP: 0023:0xf7ff8579 [ 670.060076][T20511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 670.060087][T20511] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 670.060098][T20511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040305652 [ 670.060105][T20511] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.060111][T20511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 670.060117][T20511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 670.060124][T20511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.060137][T20511] [ 670.121424][ C2] hpet: Lost 3 RTC interrupts [ 670.185802][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'. [ 670.913263][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 671.113103][T20540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.115851][T20540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.118879][T20540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.121233][T20540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.128629][T20543] FAULT_INJECTION: forcing a failure. [ 671.128629][T20543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.134378][T20543] CPU: 3 UID: 0 PID: 20543 Comm: syz.0.3676 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 671.134394][T20543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 671.134401][T20543] Call Trace: [ 671.134405][T20543] [ 671.134410][T20543] dump_stack_lvl+0x16c/0x1f0 [ 671.134448][T20543] should_fail_ex+0x512/0x640 [ 671.134467][T20543] _copy_to_user+0x32/0xd0 [ 671.134487][T20543] simple_read_from_buffer+0xcb/0x170 [ 671.134503][T20543] proc_fail_nth_read+0x197/0x270 [ 671.134517][T20543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.134531][T20543] ? rw_verify_area+0xcf/0x680 [ 671.134545][T20543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.134558][T20543] vfs_read+0x1e1/0xc60 [ 671.134573][T20543] ? fdget_pos+0x2a2/0x370 [ 671.134591][T20543] ? __pfx_vfs_read+0x10/0x10 [ 671.134605][T20543] ? find_held_lock+0x2b/0x80 [ 671.134621][T20543] ? __fget_files+0x20e/0x3c0 [ 671.134640][T20543] ksys_read+0x12a/0x250 [ 671.134680][T20543] ? __pfx_ksys_read+0x10/0x10 [ 671.134697][T20543] ? rcu_is_watching+0x12/0xc0 [ 671.134711][T20543] __do_fast_syscall_32+0x7c/0x3a0 [ 671.134723][T20543] do_fast_syscall_32+0x32/0x80 [ 671.134734][T20543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.134748][T20543] RIP: 0023:0xf704e579 [ 671.134757][T20543] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 671.134769][T20543] RSP: 002b:00000000f503e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 671.134780][T20543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f503e620 [ 671.134787][T20543] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 671.134794][T20543] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 671.134800][T20543] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 671.134806][T20543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 671.134820][T20543] [ 671.335716][T20549] tmpfs: Unknown parameter 'mpo†' [ 671.378070][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 672.905406][T20570] input: syz1 as /devices/virtual/input/input248 [ 672.958858][T20573] netlink: 'syz.3.3682': attribute type 3 has an invalid length. [ 673.807320][T20582] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 673.807320][T20582] program syz.1.3684 not setting count and/or reply_len properly [ 674.675074][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 675.315606][T20605] input: syz1 as /devices/virtual/input/input250 [ 675.394071][ T6031] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 675.574010][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 675.577220][ T6031] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 675.579885][ T6031] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.583333][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.586662][ T6031] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.589731][ T6031] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.594581][ T6031] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 675.598017][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.808643][ T6031] usb 6-1: usb_control_msg returned -32 [ 675.810422][ T6031] usbtmc 6-1:16.0: can't read capabilities [ 675.829365][ T6917] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.896524][ T6917] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.968581][ T6917] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.040563][ T6917] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.067973][T20620] ipvlan12: entered promiscuous mode [ 676.078018][ T5308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.082219][ T5308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.085738][ T5308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.090126][ T5308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.094663][ T5308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.134556][T20621] lo speed is unknown, defaulting to 1000 [ 676.138647][T20621] lo speed is unknown, defaulting to 1000 [ 676.205876][ T6917] bridge_slave_1: left allmulticast mode [ 676.207915][ T6917] bridge_slave_1: left promiscuous mode [ 676.211446][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.219422][ T6917] bridge_slave_0: left allmulticast mode [ 676.221259][ T6917] bridge_slave_0: left promiscuous mode [ 676.223110][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.635828][ T6917] team0: Port device geneve0 removed [ 677.438046][T20637] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 677.438046][T20637] program syz.2.3700 not setting count and/or reply_len properly [ 678.099034][ T6917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.103785][ T6917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.107698][ T6917] bond0 (unregistering): Released all slaves [ 678.138423][T15572] usb 6-1: USB disconnect, device number 17 [ 678.154985][ T5308] Bluetooth: hci2: command tx timeout [ 678.192358][ T6917] bond1 (unregistering): Released all slaves [ 678.276301][ T6917] bond2 (unregistering): (slave veth3): Releasing active interface [ 678.278760][ T6917] vlan3: entered promiscuous mode [ 678.282390][ T6917] bond2 (unregistering): (slave vlan3): Releasing active interface [ 678.286451][ T6917] bond2 (unregistering): Released all slaves [ 678.334621][T20643] fuse: Unknown parameter 'ÿ0xffffffffffffffff0x0000000000000475ÿÿÿÿu' [ 678.377760][ T6917] bond3 (unregistering): Released all slaves [ 678.391103][T20639] IPVS: Error connecting to the multicast addr [ 678.456597][T20621] chnl_net:caif_netlink_parms(): no params data found [ 678.709610][T20621] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.718950][T20621] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.722047][T20621] bridge_slave_0: entered allmulticast mode [ 678.727818][T20621] bridge_slave_0: entered promiscuous mode [ 678.734999][T20621] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.737457][T20621] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.740017][T20621] bridge_slave_1: entered allmulticast mode [ 678.743594][T20621] bridge_slave_1: entered promiscuous mode [ 678.787983][T20621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.792655][T20621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.864193][T20666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 678.997821][T20621] team0: Port device team_slave_0 added [ 679.001733][T20621] team0: Port device team_slave_1 added [ 679.040326][T20621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.042644][T20621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.054256][T20621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.065677][T20621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.068603][T20621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.079082][T20621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.149876][T20672] ipvlan12: entered promiscuous mode [ 679.157514][T20621] hsr_slave_0: entered promiscuous mode [ 679.159985][T20621] hsr_slave_1: entered promiscuous mode [ 679.292397][T20621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 679.299067][T20621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 679.303450][T20621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 679.307930][T20621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.331679][T20621] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.334031][T20621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.336737][T20621] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.339001][T20621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.394481][ T34] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 679.400065][T20621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.413295][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.417156][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.432485][T20621] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.438804][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.441093][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.448411][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.450653][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.546559][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 679.553242][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 679.556791][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.561238][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.565495][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.569382][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.618745][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 679.622668][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.729968][T20621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.836165][ T34] usb 5-1: usb_control_msg returned -32 [ 679.837827][ T34] usbtmc 5-1:16.0: can't read capabilities [ 679.916806][T20621] veth0_vlan: entered promiscuous mode [ 679.923203][T20621] veth1_vlan: entered promiscuous mode [ 679.944996][T20621] veth0_macvtap: entered promiscuous mode [ 679.951188][T20621] veth1_macvtap: entered promiscuous mode [ 679.968381][T20621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.983366][T20621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.023367][T20621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.026372][T20621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.028806][T20621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.031972][T20621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.034146][T20701] input: syz1 as /devices/virtual/input/input252 [ 680.130691][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.133523][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.181434][ T6884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.184927][ T6884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.251450][ T5308] Bluetooth: hci2: command tx timeout [ 680.308230][ T6015] IPVS: starting estimator thread 0... [ 680.413985][T20711] IPVS: using max 42 ests per chain, 100800 per kthread [ 680.625639][T20713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3695'. [ 681.029801][T20722] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 681.032577][T20722] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 681.040905][T20722] vhci_hcd vhci_hcd.0: Device attached [ 681.249355][T20723] vhci_hcd: connection closed [ 681.249597][ T59] vhci_hcd: stop threads [ 681.252997][ T59] vhci_hcd: release socket [ 681.254923][ T59] vhci_hcd: disconnect device [ 681.314030][ T29] vhci_hcd: vhci_device speed not set [ 681.407795][T20732] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3719'. [ 681.410910][T20732] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3719'. [ 681.417320][T20732] random: crng reseeded on system resumption [ 681.437449][T20732] Restarting kernel threads ... [ 681.439743][T20732] Done restarting kernel threads. [ 681.661455][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 681.896028][ T6917] hsr_slave_0: left promiscuous mode [ 681.899530][ T6917] hsr_slave_1: left promiscuous mode [ 681.906058][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.912305][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.922256][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.954052][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.016117][ T6917] veth1_macvtap: left promiscuous mode [ 682.018174][ T6917] veth0_macvtap: left promiscuous mode [ 682.022569][ T6917] veth1_vlan: left promiscuous mode [ 682.024416][ T6917] veth0_vlan: left promiscuous mode [ 682.128242][T15572] usb 5-1: USB disconnect, device number 23 [ 682.314001][ T5308] Bluetooth: hci2: command tx timeout [ 682.416660][T20746] fuse: Unknown parameter ' [ 682.416660][T20746] ' [ 683.018576][ T6917] team0 (unregistering): Port device team_slave_1 removed [ 683.101908][ T6917] team0 (unregistering): Port device team_slave_0 removed [ 683.866451][T20702] lo speed is unknown, defaulting to 1000 [ 683.868701][T20702] infiniband syz2: ib_query_port failed (-19) [ 684.018825][T20763] netdevsim netdevsim2: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 684.023414][T20763] netdevsim netdevsim2: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 684.023703][T20761] lo speed is unknown, defaulting to 1000 [ 684.183673][T20765] input: syz1 as /devices/virtual/input/input254 [ 684.394658][ T5308] Bluetooth: hci2: command tx timeout [ 684.403137][ T6917] IPVS: stop unused estimator thread 0... [ 684.498823][T20774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.502764][T20774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.622909][T20775] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3729'. [ 685.065959][T20783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3733'. [ 685.226606][T20781] syz.2.3732: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 685.230995][T20781] CPU: 2 UID: 0 PID: 20781 Comm: syz.2.3732 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 685.231011][T20781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 685.231019][T20781] Call Trace: [ 685.231023][T20781] [ 685.231028][T20781] dump_stack_lvl+0x16c/0x1f0 [ 685.231066][T20781] warn_alloc+0x248/0x3a0 [ 685.231085][T20781] ? __pfx_warn_alloc+0x10/0x10 [ 685.231101][T20781] ? psi_memstall_leave+0x1e6/0x2d0 [ 685.231116][T20781] ? __alloc_pages_direct_compact+0x466/0x580 [ 685.231134][T20781] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 685.231154][T20781] ? psi_memstall_leave+0x1e6/0x2d0 [ 685.231170][T20781] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 685.231190][T20781] ? __pfx_stack_trace_save+0x10/0x10 [ 685.231205][T20781] ? relay_open+0x653/0xad0 [ 685.231221][T20781] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 685.231238][T20781] ? kasan_save_stack+0x33/0x60 [ 685.231255][T20781] ? __kasan_kmalloc+0xaa/0xb0 [ 685.231271][T20781] ? relay_open+0x653/0xad0 [ 685.231285][T20781] ? compat_blk_trace_setup+0x159/0x220 [ 685.231297][T20781] ? blk_trace_ioctl+0x21d/0x280 [ 685.231309][T20781] ? compat_blkdev_ioctl+0x13b/0x7a0 [ 685.231339][T20781] ? relay_open_buf.part.0+0xf9/0xc80 [ 685.231353][T20781] __alloc_pages_noprof+0xb/0x1b0 [ 685.231370][T20781] ___kmalloc_large_node+0x84/0x1e0 [ 685.231386][T20781] ? relay_open_buf.part.0+0xf9/0xc80 [ 685.231399][T20781] __kmalloc_large_node_noprof+0x1c/0x70 [ 685.231414][T20781] __kmalloc_noprof.cold+0xc/0x61 [ 685.231433][T20781] ? kasan_save_track+0x14/0x30 [ 685.231451][T20781] relay_open_buf.part.0+0xf9/0xc80 [ 685.231472][T20781] relay_open+0x653/0xad0 [ 685.231486][T20781] ? debugfs_create_file_full+0x41/0x60 [ 685.231505][T20781] do_blk_trace_setup+0x503/0xb50 [ 685.231520][T20781] compat_blk_trace_setup+0x159/0x220 [ 685.231534][T20781] ? __pfx_compat_blk_trace_setup+0x10/0x10 [ 685.231546][T20781] ? tomoyo_path_number_perm+0x18d/0x580 [ 685.231563][T20781] ? snprintf+0xc7/0x100 [ 685.231580][T20781] ? __pfx_snprintf+0x10/0x10 [ 685.231605][T20781] blk_trace_ioctl+0x21d/0x280 [ 685.231618][T20781] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 685.231635][T20781] ? find_held_lock+0x2b/0x80 [ 685.231649][T20781] compat_blkdev_ioctl+0x13b/0x7a0 [ 685.231664][T20781] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 685.231677][T20781] ? __ia32_compat_sys_openat+0xa0/0x210 [ 685.231695][T20781] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 685.231709][T20781] __ia32_compat_sys_ioctl+0x242/0x370 [ 685.231727][T20781] __do_fast_syscall_32+0x7c/0x3a0 [ 685.231740][T20781] do_fast_syscall_32+0x32/0x80 [ 685.231751][T20781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 685.231765][T20781] RIP: 0023:0xf7fc1579 [ 685.231775][T20781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 685.231787][T20781] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 685.231798][T20781] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0401273 [ 685.231805][T20781] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.231812][T20781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.231819][T20781] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 685.231826][T20781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.231840][T20781] [ 685.231844][T20781] Mem-Info: [ 685.297689][T20793] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3736'. [ 685.298028][T20781] active_anon:2996 inactive_anon:800 isolated_anon:0 [ 685.298028][T20781] active_file:3461 inactive_file:375 isolated_file:0 [ 685.298028][T20781] unevictable:1768 dirty:243 writeback:2 [ 685.298028][T20781] slab_reclaimable:9711 slab_unreclaimable:102535 [ 685.298028][T20781] mapped:25016 shmem:4547 pagetables:1083 [ 685.298028][T20781] sec_pagetables:340 bounce:0 [ 685.298028][T20781] kernel_misc_reclaimable:0 [ 685.298028][T20781] free:42730 free_pcp:1669 free_cma:0 [ 685.304140][T20793] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 685.304679][T20781] Node 0 active_anon:2424kB inactive_anon:40kB active_file:1908kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2248kB dirty:40kB writeback:0kB shmem:6072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7056kB pagetables:1404kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 685.431528][T20781] Node 1 active_anon:8184kB inactive_anon:15300kB active_file:13548kB inactive_file:4936kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103316kB dirty:32kB writeback:8kB shmem:23316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6380kB pagetables:3028kB sec_pagetables:172kB all_unreclaimable? no Balloon:0kB [ 685.443465][T20781] Node 0 DMA free:2004kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88kB inactive_anon:4kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 685.452460][T20781] lowmem_reserve[]: 0 289 289 289 289 [ 685.454234][T20781] Node 0 DMA32 free:16196kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:2048KB free_highatomic:832KB active_anon:2336kB inactive_anon:36kB active_file:1860kB inactive_file:8kB unevictable:3536kB writepending:40kB present:1032196kB managed:296392kB mlocked:0kB bounce:0kB free_pcp:2364kB local_pcp:32kB free_cma:0kB [ 685.464318][T20781] lowmem_reserve[]: 0 0 0 0 0 [ 685.465824][T20781] Node 1 DMA32 free:123464kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:508KB active_anon:11284kB inactive_anon:15300kB active_file:16548kB inactive_file:4936kB unevictable:3536kB writepending:40kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:12076kB local_pcp:484kB free_cma:0kB [ 685.476413][T20781] lowmem_reserve[]: 0 0 0 0 0 [ 685.477914][T20781] Node 0 DMA: 5*4kB (U) 27*8kB (U) 13*16kB (UM) 9*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2012kB [ 685.482472][T20781] Node 0 DMA32: 27*4kB (UMEH) 35*8kB (UMEH) 20*16kB (UEH) 123*32kB (UMEH) 61*64kB (UMEH) 30*128kB (UMEH) 13*256kB (UME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16228kB [ 685.487871][T20781] Node 1 DMA32: 44*4kB (UMEH) 43*8kB (UEH) 15*16kB (UEH) 228*32kB (UMEH) 25*64kB (UMEH) 101*128kB (UME) 131*256kB (UMEH) 87*512kB (UM) 22*1024kB (UME) 0*2048kB 0*4096kB = 123192kB [ 685.493302][T20781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.496284][T20781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.499170][T20781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 685.503118][T20781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 685.506028][T20781] 15578 total pagecache pages [ 685.507537][T20781] 479 pages in swap cache [ 685.508902][T20781] Free swap = 76132kB [ 685.510282][T20781] Total swap = 124996kB [ 685.511583][T20781] 524155 pages RAM [ 685.512625][T20781] 0 pages HighMem/MovableOnly [ 685.514312][T20781] 209150 pages reserved [ 685.515647][T20781] 0 pages cma reserved [ 685.563350][T20795] ipvlan13: entered promiscuous mode [ 685.634679][T20803] batadv_slave_0: entered promiscuous mode [ 686.224042][T20702] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 686.374132][T20702] usb 9-1: Using ep0 maxpacket: 8 [ 686.379599][T20702] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 686.382291][T20702] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.386905][T20702] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.390061][T20702] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.393249][T20702] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.398986][T20702] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 686.401846][T20702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.613793][T20702] usb 9-1: usb_control_msg returned -32 [ 686.615660][T20702] usbtmc 9-1:16.0: can't read capabilities [ 686.709229][T20823] input: syz1 as /devices/virtual/input/input256 [ 687.030837][T20830] 9pnet_fd: Insufficient options for proto=fd [ 687.030842][T20828] 9pnet_fd: Insufficient options for proto=fd [ 687.764786][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 688.231991][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'. [ 688.299881][T20856] ipvlan11: entered promiscuous mode [ 688.990234][T15572] usb 9-1: USB disconnect, device number 2 [ 689.025782][T20873] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 689.355569][T20875] input: syz1 as /devices/virtual/input/input258 [ 689.603241][T20887] cgroup: No subsys list or none specified [ 689.987110][T15572] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 690.121418][T14861] libceph: connect (1)[c::]:6789 error -101 [ 690.124388][T14861] libceph: mon0 (1)[c::]:6789 connect error [ 690.135317][T20900] ceph: No mds server is up or the cluster is laggy [ 690.140361][T14861] libceph: connect (1)[c::]:6789 error -101 [ 690.145199][T14861] libceph: mon0 (1)[c::]:6789 connect error [ 690.273284][T20907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.284075][T20907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.592803][T20919] netlink: 'syz.1.3771': attribute type 11 has an invalid length. [ 690.600453][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'. [ 690.603858][T20919] vcan0: entered promiscuous mode [ 690.605651][T20919] vcan0: entered allmulticast mode [ 690.738295][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 691.092207][T20935] kernel read not supported for file /eth0 (pid: 20935 comm: syz.1.3776) [ 691.096495][ T40] audit: type=1800 audit(2000000002.459:2108): pid=20935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="eth0" dev="mqueue" ino=63914 res=0 errno=0 [ 691.117362][T20935] netlink: 'syz.1.3776': attribute type 1 has an invalid length. [ 691.139390][T20935] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 691.155091][T20935] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 691.160247][T20935] bond2 (unregistering): Released all slaves [ 691.204578][T20941] input: syz1 as /devices/virtual/input/input260 [ 691.613943][ T6138] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 691.763979][ T6138] usb 6-1: Using ep0 maxpacket: 8 [ 691.775714][ T6138] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 691.778279][ T6138] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.781309][ T6138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.793937][ T6138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.796982][ T6138] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.801339][ T6138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.813930][ T6138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.023846][ T6138] usb 6-1: usb_control_msg returned -32 [ 692.025664][ T6138] usbtmc 6-1:16.0: can't read capabilities [ 692.291700][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 692.442898][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.446179][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.998678][T20996] ipvlan2: entered promiscuous mode [ 693.573687][T20999] tmpfs: Unknown parameter 'n_ingdà "g' [ 693.793862][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3796'. [ 693.799998][T21010] input: syz0 as /devices/virtual/input/input261 [ 693.803416][T21010] random: crng reseeded on system resumption [ 693.920962][T21014] pim6reg: entered allmulticast mode [ 693.928360][T21014] pim6reg: left allmulticast mode [ 694.321555][T21018] tmpfs: Bad value for 'mpol' [ 694.392205][ T34] usb 6-1: USB disconnect, device number 18 [ 694.577396][ T5308] Bluetooth: hci2: connection err: -111 [ 694.668926][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 695.373298][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3802'. [ 695.441680][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 695.459311][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3806'. [ 695.460756][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3807'. [ 695.653151][T21051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3804'. [ 695.915497][T21057] ipvlan14: entered promiscuous mode [ 696.431553][T21063] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 696.436646][T21063] qnx6: wrong signature (magic) in superblock #1. [ 696.438805][T21063] qnx6: unable to read the first superblock [ 697.307984][ T40] audit: type=1326 audit(2000000008.669:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.1.3813" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x0 [ 697.362429][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3813'. [ 697.979774][T21105] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 698.700856][T21119] ipvlan3: entered promiscuous mode [ 698.737653][T21123] netlink: 'syz.2.3825': attribute type 1 has an invalid length. [ 698.742147][T21123] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3825'. [ 699.192319][T21132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 699.261311][ C3] [ 699.261317][ C3] ======================================================== [ 699.261322][ C3] WARNING: possible irq lock inversion dependency detected [ 699.261327][ C3] 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 Not tainted [ 699.261334][ C3] -------------------------------------------------------- [ 699.261338][ C3] ksoftirqd/3/33 just changed the state of lock: [ 699.261344][ C3] ffff888023fcc230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 699.261379][ C3] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 699.261384][ C3] (tasklist_lock){.+.+}-{3:3} [ 699.261394][ C3] [ 699.261394][ C3] [ 699.261394][ C3] and interrupts could create inverse lock ordering between them. [ 699.261394][ C3] [ 699.261399][ C3] [ 699.261399][ C3] other info that might help us debug this: [ 699.261402][ C3] Chain exists of: [ 699.261402][ C3] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 699.261402][ C3] [ 699.261422][ C3] Possible interrupt unsafe locking scenario: [ 699.261422][ C3] [ 699.261425][ C3] CPU0 CPU1 [ 699.261429][ C3] ---- ---- [ 699.261431][ C3] lock(tasklist_lock); [ 699.261438][ C3] local_irq_disable(); [ 699.261442][ C3] lock(&dev->event_lock#2); [ 699.261452][ C3] lock(&client->buffer_lock); [ 699.261460][ C3] [ 699.261463][ C3] lock(&dev->event_lock#2); [ 699.261472][ C3] [ 699.261472][ C3] *** DEADLOCK *** [ 699.261472][ C3] [ 699.261475][ C3] 1 lock held by ksoftirqd/3/33: [ 699.261481][ C3] #0: ffffffff8e5c46c0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x61/0x270 [ 699.261511][ C3] [ 699.261511][ C3] the shortest dependencies between 2nd lock and 1st lock: [ 699.261518][ C3] -> (tasklist_lock){.+.+}-{3:3} { [ 699.261532][ C3] HARDIRQ-ON-R at: [ 699.261538][ C3] lock_acquire+0x179/0x350 [ 699.261553][ C3] _raw_read_lock+0x5f/0x70 [ 699.261568][ C3] __do_wait+0x105/0x890 [ 699.261582][ C3] do_wait+0x21e/0x5a0 [ 699.261595][ C3] kernel_wait+0x9f/0x160 [ 699.261608][ C3] call_usermodehelper_exec_work+0xf1/0x170 [ 699.261625][ C3] process_one_work+0x9cf/0x1b70 [ 699.261640][ C3] worker_thread+0x6c8/0xf10 [ 699.261655][ C3] kthread+0x3c2/0x780 [ 699.261668][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.261682][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.261693][ C3] SOFTIRQ-ON-R at: [ 699.261699][ C3] lock_acquire+0x179/0x350 [ 699.261712][ C3] _raw_read_lock+0x5f/0x70 [ 699.261725][ C3] __do_wait+0x105/0x890 [ 699.261738][ C3] do_wait+0x21e/0x5a0 [ 699.261751][ C3] kernel_wait+0x9f/0x160 [ 699.261765][ C3] call_usermodehelper_exec_work+0xf1/0x170 [ 699.261782][ C3] process_one_work+0x9cf/0x1b70 [ 699.261797][ C3] worker_thread+0x6c8/0xf10 [ 699.261811][ C3] kthread+0x3c2/0x780 [ 699.261824][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.261837][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.261852][ C3] INITIAL USE at: [ 699.261858][ C3] lock_acquire+0x179/0x350 [ 699.261870][ C3] _raw_write_lock_irq+0x36/0x50 [ 699.261884][ C3] copy_process+0x4caf/0x76a0 [ 699.261896][ C3] kernel_clone+0xfc/0x960 [ 699.261907][ C3] user_mode_thread+0xc7/0x110 [ 699.261919][ C3] rest_init+0x23/0x2b0 [ 699.261931][ C3] start_kernel+0x3ee/0x4d0 [ 699.261980][ C3] x86_64_start_reservations+0x18/0x30 [ 699.261993][ C3] x86_64_start_kernel+0x130/0x190 [ 699.262006][ C3] common_startup_64+0x13e/0x148 [ 699.262022][ C3] INITIAL READ USE at: [ 699.262029][ C3] lock_acquire+0x179/0x350 [ 699.262041][ C3] _raw_read_lock+0x5f/0x70 [ 699.262055][ C3] __do_wait+0x105/0x890 [ 699.262068][ C3] do_wait+0x21e/0x5a0 [ 699.262081][ C3] kernel_wait+0x9f/0x160 [ 699.262095][ C3] call_usermodehelper_exec_work+0xf1/0x170 [ 699.262111][ C3] process_one_work+0x9cf/0x1b70 [ 699.262126][ C3] worker_thread+0x6c8/0xf10 [ 699.262140][ C3] kthread+0x3c2/0x780 [ 699.262153][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.262166][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.262176][ C3] } [ 699.262179][ C3] ... key at: [] tasklist_lock+0x18/0x40 [ 699.262196][ C3] ... acquired at: [ 699.262199][ C3] _raw_read_lock+0x5f/0x70 [ 699.262212][ C3] send_sigio+0xb8/0x3e0 [ 699.262222][ C3] dnotify_handle_event+0x15e/0x2b0 [ 699.262237][ C3] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 699.262249][ C3] fsnotify+0x13d6/0x1dc0 [ 699.262259][ C3] path_openat+0x1b50/0x2cb0 [ 699.262272][ C3] do_filp_open+0x20b/0x470 [ 699.262285][ C3] do_sys_openat2+0x11b/0x1d0 [ 699.262296][ C3] __ia32_compat_sys_openat+0x16d/0x210 [ 699.262307][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.262316][ C3] do_fast_syscall_32+0x32/0x80 [ 699.262325][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.262337][ C3] [ 699.262340][ C3] -> (&f_owner->lock){....}-{3:3} { [ 699.262354][ C3] INITIAL USE at: [ 699.262359][ C3] lock_acquire+0x179/0x350 [ 699.262372][ C3] _raw_write_lock_irq+0x36/0x50 [ 699.262385][ C3] __f_setown+0x61/0x3c0 [ 699.262412][ C3] fcntl_dirnotify+0x78f/0xb50 [ 699.262427][ C3] do_fcntl+0xe62/0x15a0 [ 699.262435][ C3] do_compat_fcntl64+0x367/0x710 [ 699.262445][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.262454][ C3] do_fast_syscall_32+0x32/0x80 [ 699.262463][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.262476][ C3] INITIAL READ USE at: [ 699.262482][ C3] lock_acquire+0x179/0x350 [ 699.262494][ C3] _raw_read_lock_irqsave+0x74/0x90 [ 699.262508][ C3] send_sigio+0x31/0x3e0 [ 699.262518][ C3] dnotify_handle_event+0x15e/0x2b0 [ 699.262532][ C3] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 699.262545][ C3] fsnotify+0x13d6/0x1dc0 [ 699.262556][ C3] path_openat+0x1b50/0x2cb0 [ 699.262569][ C3] do_filp_open+0x20b/0x470 [ 699.262583][ C3] do_sys_openat2+0x11b/0x1d0 [ 699.262593][ C3] __ia32_compat_sys_openat+0x16d/0x210 [ 699.262605][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.262615][ C3] do_fast_syscall_32+0x32/0x80 [ 699.262624][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.262636][ C3] } [ 699.262639][ C3] ... key at: [] __key.1+0x0/0x40 [ 699.262652][ C3] ... acquired at: [ 699.262656][ C3] _raw_read_lock_irqsave+0x74/0x90 [ 699.262669][ C3] send_sigio+0x31/0x3e0 [ 699.262678][ C3] kill_fasync+0x214/0x510 [ 699.262687][ C3] sock_wake_async+0x132/0x160 [ 699.262698][ C3] unix_release_sock+0xb7d/0x12e0 [ 699.262712][ C3] unix_release+0x91/0xf0 [ 699.262725][ C3] __sock_release+0xb0/0x270 [ 699.262733][ C3] sock_close+0x1c/0x30 [ 699.262742][ C3] __fput+0x402/0xb70 [ 699.262750][ C3] task_work_run+0x150/0x240 [ 699.262764][ C3] get_signal+0x1d1/0x26d0 [ 699.262774][ C3] arch_do_signal_or_restart+0x8f/0x790 [ 699.262784][ C3] exit_to_user_mode_loop+0x84/0x110 [ 699.262800][ C3] __do_fast_syscall_32+0x2ac/0x3a0 [ 699.262808][ C3] do_fast_syscall_32+0x32/0x80 [ 699.262817][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.262829][ C3] [ 699.262831][ C3] -> (&new->fa_lock){....}-{3:3} { [ 699.262849][ C3] INITIAL USE at: [ 699.262855][ C3] lock_acquire+0x179/0x350 [ 699.262868][ C3] _raw_write_lock_irq+0x36/0x50 [ 699.262882][ C3] fasync_remove_entry+0xb2/0x1e0 [ 699.262892][ C3] fasync_helper+0xaf/0xd0 [ 699.262902][ C3] lease_modify+0x232/0x500 [ 699.262912][ C3] locks_remove_file+0x29e/0x5c0 [ 699.262923][ C3] __fput+0x351/0xb70 [ 699.262931][ C3] task_work_run+0x150/0x240 [ 699.262945][ C3] do_exit+0x864/0x2bd0 [ 699.262958][ C3] do_group_exit+0xd3/0x2a0 [ 699.262970][ C3] get_signal+0x2673/0x26d0 [ 699.262981][ C3] arch_do_signal_or_restart+0x8f/0x790 [ 699.262991][ C3] exit_to_user_mode_loop+0x84/0x110 [ 699.263006][ C3] __do_fast_syscall_32+0x2ac/0x3a0 [ 699.263015][ C3] do_fast_syscall_32+0x32/0x80 [ 699.263024][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.263036][ C3] INITIAL READ USE at: [ 699.263043][ C3] lock_acquire+0x179/0x350 [ 699.263055][ C3] _raw_read_lock_irqsave+0x74/0x90 [ 699.263069][ C3] kill_fasync+0x138/0x510 [ 699.263079][ C3] sock_wake_async+0x132/0x160 [ 699.263089][ C3] unix_release_sock+0xb7d/0x12e0 [ 699.263103][ C3] unix_release+0x91/0xf0 [ 699.263116][ C3] __sock_release+0xb0/0x270 [ 699.263125][ C3] sock_close+0x1c/0x30 [ 699.263134][ C3] __fput+0x402/0xb70 [ 699.263143][ C3] task_work_run+0x150/0x240 [ 699.263157][ C3] get_signal+0x1d1/0x26d0 [ 699.263167][ C3] arch_do_signal_or_restart+0x8f/0x790 [ 699.263178][ C3] exit_to_user_mode_loop+0x84/0x110 [ 699.263193][ C3] __do_fast_syscall_32+0x2ac/0x3a0 [ 699.263203][ C3] do_fast_syscall_32+0x32/0x80 [ 699.263212][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.263224][ C3] } [ 699.263227][ C3] ... key at: [] __key.0+0x0/0x40 [ 699.263239][ C3] ... acquired at: [ 699.263242][ C3] _raw_read_lock_irqsave+0x74/0x90 [ 699.263256][ C3] kill_fasync+0x138/0x510 [ 699.263265][ C3] evdev_pass_values+0x619/0x9b0 [ 699.263278][ C3] evdev_events+0x1bb/0x390 [ 699.263290][ C3] input_pass_values+0x6c7/0x890 [ 699.263303][ C3] input_handle_event+0xf00/0x14d0 [ 699.263317][ C3] input_inject_event+0x1cd/0x390 [ 699.263330][ C3] evdev_write+0x2e1/0x440 [ 699.263342][ C3] vfs_write+0x2a0/0x1150 [ 699.263355][ C3] ksys_write+0x1f8/0x250 [ 699.263368][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.263376][ C3] do_fast_syscall_32+0x32/0x80 [ 699.263385][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.263397][ C3] [ 699.263399][ C3] -> (&client->buffer_lock){....}-{3:3} { [ 699.263413][ C3] INITIAL USE at: [ 699.263419][ C3] lock_acquire+0x179/0x350 [ 699.263431][ C3] _raw_spin_lock+0x2e/0x40 [ 699.263458][ C3] evdev_pass_values+0x10e/0x9b0 [ 699.263471][ C3] evdev_events+0x1bb/0x390 [ 699.263484][ C3] input_pass_values+0x6c7/0x890 [ 699.263497][ C3] input_handle_event+0xf00/0x14d0 [ 699.263511][ C3] input_inject_event+0x1cd/0x390 [ 699.263524][ C3] evdev_write+0x2e1/0x440 [ 699.263537][ C3] vfs_write+0x2a0/0x1150 [ 699.263550][ C3] ksys_write+0x1f8/0x250 [ 699.263563][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.263572][ C3] do_fast_syscall_32+0x32/0x80 [ 699.263581][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.263593][ C3] } [ 699.263596][ C3] ... key at: [] __key.1+0x0/0x40 [ 699.263610][ C3] ... acquired at: [ 699.263613][ C3] _raw_spin_lock+0x2e/0x40 [ 699.263625][ C3] evdev_pass_values+0x10e/0x9b0 [ 699.263637][ C3] evdev_events+0x1bb/0x390 [ 699.263650][ C3] input_pass_values+0x6c7/0x890 [ 699.263663][ C3] input_handle_event+0xf00/0x14d0 [ 699.263676][ C3] input_inject_event+0x1cd/0x390 [ 699.263690][ C3] evdev_write+0x2e1/0x440 [ 699.263702][ C3] vfs_write+0x2a0/0x1150 [ 699.263715][ C3] ksys_write+0x1f8/0x250 [ 699.263728][ C3] __do_fast_syscall_32+0x7c/0x3a0 [ 699.263737][ C3] do_fast_syscall_32+0x32/0x80 [ 699.263745][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.263757][ C3] [ 699.263759][ C3] -> (&dev->event_lock#2){..-.}-{3:3} { [ 699.263775][ C3] IN-SOFTIRQ-W at: [ 699.263781][ C3] lock_acquire+0x179/0x350 [ 699.263793][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 699.263807][ C3] input_inject_event+0x9f/0x390 [ 699.263820][ C3] led_set_brightness+0x217/0x290 [ 699.263831][ C3] led_trigger_event+0xda/0x270 [ 699.263845][ C3] kbd_bh+0x21b/0x300 [ 699.263857][ C3] tasklet_action_common+0x281/0x400 [ 699.263880][ C3] handle_softirqs+0x219/0x8e0 [ 699.263891][ C3] run_ksoftirqd+0x3a/0x60 [ 699.263901][ C3] smpboot_thread_fn+0x3f7/0xae0 [ 699.263913][ C3] kthread+0x3c2/0x780 [ 699.263925][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.263938][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.263960][ C3] INITIAL USE at: [ 699.263966][ C3] lock_acquire+0x179/0x350 [ 699.263979][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 699.263993][ C3] input_inject_event+0x9f/0x390 [ 699.264006][ C3] led_set_brightness+0x217/0x290 [ 699.264017][ C3] kbd_led_trigger_activate+0xcb/0x110 [ 699.264033][ C3] led_trigger_set+0x59a/0xc50 [ 699.264045][ C3] led_trigger_set_default+0x1e0/0x2e0 [ 699.264059][ C3] led_classdev_register_ext+0x7b8/0xa10 [ 699.264071][ C3] input_leds_connect+0x552/0x8e0 [ 699.264082][ C3] input_attach_handler.isra.0+0x184/0x260 [ 699.264095][ C3] input_register_device+0xa84/0x1130 [ 699.264108][ C3] atkbd_connect+0x5da/0xa20 [ 699.264123][ C3] serio_driver_probe+0x74/0xb0 [ 699.264135][ C3] really_probe+0x23e/0xa90 [ 699.264150][ C3] __driver_probe_device+0x1de/0x440 [ 699.264164][ C3] driver_probe_device+0x4c/0x1b0 [ 699.264179][ C3] __driver_attach+0x283/0x580 [ 699.264193][ C3] bus_for_each_dev+0x13e/0x1d0 [ 699.264205][ C3] serio_handle_event+0x247/0xa50 [ 699.264217][ C3] process_one_work+0x9cf/0x1b70 [ 699.264232][ C3] worker_thread+0x6c8/0xf10 [ 699.264246][ C3] kthread+0x3c2/0x780 [ 699.264259][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.264271][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.264281][ C3] } [ 699.264284][ C3] ... key at: [] __key.7+0x0/0x40 [ 699.264296][ C3] ... acquired at: [ 699.264299][ C3] __lock_acquire+0x8a5/0x1c90 [ 699.264311][ C3] lock_acquire+0x179/0x350 [ 699.264323][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 699.264336][ C3] input_inject_event+0x9f/0x390 [ 699.264349][ C3] led_set_brightness+0x217/0x290 [ 699.264359][ C3] led_trigger_event+0xda/0x270 [ 699.264372][ C3] kbd_bh+0x21b/0x300 [ 699.264380][ C3] tasklet_action_common+0x281/0x400 [ 699.264390][ C3] handle_softirqs+0x219/0x8e0 [ 699.264400][ C3] run_ksoftirqd+0x3a/0x60 [ 699.264410][ C3] smpboot_thread_fn+0x3f7/0xae0 [ 699.264420][ C3] kthread+0x3c2/0x780 [ 699.264432][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.264444][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.264454][ C3] [ 699.264456][ C3] [ 699.264456][ C3] stack backtrace: [ 699.264462][ C3] CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 699.264476][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 699.264483][ C3] Call Trace: [ 699.264486][ C3] [ 699.264492][ C3] dump_stack_lvl+0x116/0x1f0 [ 699.264508][ C3] print_irq_inversion_bug.part.0+0x212/0x270 [ 699.264523][ C3] mark_lock+0x2e5/0x610 [ 699.264537][ C3] __lock_acquire+0x8a5/0x1c90 [ 699.264551][ C3] ? __perf_event_task_sched_in+0x27a/0xa10 [ 699.264569][ C3] lock_acquire+0x179/0x350 [ 699.264581][ C3] ? input_inject_event+0x9f/0x390 [ 699.264596][ C3] ? rcu_is_watching+0x12/0xc0 [ 699.264606][ C3] ? finish_task_switch.isra.0+0x221/0xc10 [ 699.264618][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 699.264631][ C3] ? input_inject_event+0x9f/0x390 [ 699.264645][ C3] input_inject_event+0x9f/0x390 [ 699.264659][ C3] ? find_held_lock+0x2b/0x80 [ 699.264668][ C3] ? __pfx_input_leds_brightness_set+0x10/0x10 [ 699.264681][ C3] led_set_brightness+0x217/0x290 [ 699.264692][ C3] led_trigger_event+0xda/0x270 [ 699.264706][ C3] kbd_bh+0x21b/0x300 [ 699.264715][ C3] tasklet_action_common+0x281/0x400 [ 699.264728][ C3] handle_softirqs+0x219/0x8e0 [ 699.264739][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 699.264751][ C3] ? __pfx_run_ksoftirqd+0x10/0x10 [ 699.264761][ C3] ? smpboot_thread_fn+0x326/0xae0 [ 699.264772][ C3] run_ksoftirqd+0x3a/0x60 [ 699.264781][ C3] smpboot_thread_fn+0x3f7/0xae0 [ 699.264793][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 699.264804][ C3] kthread+0x3c2/0x780 [ 699.264817][ C3] ? __pfx_kthread+0x10/0x10 [ 699.264831][ C3] ? rcu_is_watching+0x12/0xc0 [ 699.264840][ C3] ? __pfx_kthread+0x10/0x10 [ 699.264860][ C3] ret_from_fork+0x5d4/0x6f0 [ 699.264873][ C3] ? __pfx_kthread+0x10/0x10 [ 699.264886][ C3] ret_from_fork_asm+0x1a/0x30 [ 699.264899][ C3] VM DIAGNOSIS: 15:03:14 Registers: info registers vcpu 0 CPU#0 RAX=ffffc900067bf618 RBX=ffff88802b33d040 RCX=ffffc9000c803000 RDX=1ffff11005667a08 RSI=ffffffff81af8214 RDI=ffffffff8df1dda8 RBP=ffff88802425c8b8 RSP=ffffc900067bf5e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=1ffff92000cf7ebf R14=ffff88802425c8b8 R15=0000000000000000 RIP=ffffffff81af8279 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50f5da4 CR3=000000002784c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802425c8b8 RCX=ffffffff81af605b RDX=ffff88801dee2440 RSI=ffffffff84d7985b RDI=ffff88802425c8b8 RBP=0000000000000000 RSP=ffffc9000046fd88 R8 =0000000000000001 R9 =ffffed1005667a08 R10=ffff88802b33d047 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000001 R14=ffffffff90a82f50 R15=0000000000000000 RIP=ffffffff84d7986c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097661000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000324f7ff8 CR3=000000002784c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90029d2f568 RCX=ffffc90029d30001 RDX=1ffff920053a5ead RSI=ffffffff8c1562a0 RDI=ffffc90029d2f568 RBP=ffffc90029d2f5f8 RSP=ffffc90029d2f550 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90029d2f568 R11=0000000000084ea9 R12=ffffffff81a708a0 R13=ffffc90029d2f628 R14=0000000000000000 R15=ffff88804a4e4880 RIP=ffffffff816a8156 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f98b5ab2c80 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7153800 CR3=00000000279c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=00000000c1800000 Opmask03=0000000000000000 Opmask04=00000000fffffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefad7b0db 00007ffefad7b0db ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefad7b5e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefad7b5e0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666663c5b203a74 6120202020202079 656b202e2e2e2020 20205d3343202020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3078303d65646f63 2039373538666637 6678303d70692031 3d7461706d6f6320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3034323d6c6c6163 7379732033303030 303030343d686372 612031333d676973 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022726f74756365 78652d7a79732f22 3d65786520223331 38332e312e7a7973 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 223d6d6d6f632033 373031323d646970 2064656e69666e6f 636e753d6a627573 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e657365727020 426b30343a676e69 646e657065746972 7720426b36333533 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000008000105 RCX=ffffffff8b7a6ad4 RDX=ffff8880245c2440 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc9000390fa20 RSP=ffffc9000390f9a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff8880424818c0 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81bb827b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5fa1d94300 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d0a0f77f40 CR3=0000000044dfb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=58f882341e1ff2d9 86b241312ecaaa35 58f882341e1ff2d9 86b241312ecaaa35 58f882341e1ff2d9 86b241312ecaaa35 58f882341e1ff2d9 86b241312ecaaa35 ZMM18=1a86f6ca7c452a26 02a2ffd46502edc8 1a86f6ca7c452a26 02a2ffd46502edc8 1a86f6ca7c452a26 02a2ffd46502edc8 1a86f6ca7c452a26 02a2ffd46502edc8 ZMM19=bf18000000000000 0000000000000004 bf18000000000000 0000000000000003 bf18000000000000 0000000000000002 bf18000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f003080288040508 0280020502800200 0800060800020800 080170ca0fffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff020880a2d0e208 0001000000080606 0125c60004000190 cc8208000fffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0201c708000800 48da6408000fffff ffff020fffffffff 02060171a23c0000 ZMM24=6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 6502edc86502edc8 ZMM25=02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 02a2ffd402a2ffd4 ZMM26=7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 7c452a267c452a26 ZMM27=1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca 1a86f6ca1a86f6ca ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=be180000be180000 be180000be180000 be180000be180000 be180000be180000 be180000be180000 be180000be180000 be180000be180000 be180000be180000