last executing test programs: 9m38.393418114s ago: executing program 2 (id=363): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_io_uring_setup(0x384, &(0x7f0000000080)={0x0, 0xeaae, 0x13100, 0x4000002, 0xae0}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x2def, 0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(r1, 0xa8c6abd9237bc486, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x6}) 9m34.905709576s ago: executing program 2 (id=379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='ext4_es_find_extent_range_exit\x00', r2, 0x0, 0x8}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x2, 0xa0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, 0x0, 0x20000000) 9m31.930499115s ago: executing program 2 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f000000de40)=ANY=[@ANYRES64=r0, @ANYBLOB="629ecf677b43f6678dbc87c93e8df07f9e3fd4b2f6502e6beee9696dac9c82aad545aa893ea10865dc32dcda617fd4f11b0d416ccb36119903ff553a53b12b487aa4246dfc46d0e7434c2fdb027762086bde7b54793fb1"], 0x2000}], 0x1}, 0x80000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000300)={0x10002, 0x3, 0xdddd0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x7}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nci(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) write$nci(r6, &(0x7f00000003c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x4, {0x1, 0x40, 0x8}}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x9000000}}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 9m30.708281335s ago: executing program 2 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async, rerun: 32) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) (async, rerun: 32) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async) r4 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x40040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x104) (async, rerun: 32) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) (rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x180048, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x90d0b0, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) r6 = getpid() (rerun: 32) syz_pidfd_open(r6, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) 9m30.531879298s ago: executing program 2 (id=394): fsopen(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 9m30.446194127s ago: executing program 2 (id=397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fsopen(&(0x7f00000003c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x300, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000b6c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000001c0)={0x0, 0x1ff, [0x81, 0x8, 0x9, 0x3, 0x3, 0x40]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107004000efffffffffffdfff110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000140)=0x48c8, 0x4) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r10, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r9}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) sendto$packet(r7, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r7, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0) 9m30.369570896s ago: executing program 32 (id=397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fsopen(&(0x7f00000003c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x300, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff000000000000000000001801"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000b6c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x408}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000001c0)={0x0, 0x1ff, [0x81, 0x8, 0x9, 0x3, 0x3, 0x40]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107004000efffffffffffdfff110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000140)=0x48c8, 0x4) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r10, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r9}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) sendto$packet(r7, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r7, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0) 8.581334235s ago: executing program 4 (id=2385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001100)={0x100, 0xee9, &(0x7f0000000040)="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", 0x0, 0x1c8}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240"], 0x122}}, 0x4008090) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) r6 = epoll_create1(0x0) epoll_pwait2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) read$char_usb(r7, &(0x7f0000000100)=""/242, 0xf2) 7.579355228s ago: executing program 3 (id=2393): ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = io_uring_setup(0x863, &(0x7f0000000380)={0x0, 0x7, 0x2, 0x3, 0x22b}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990011007b000000080022017b00000008009f0006000000080026001c1600000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) read$alg(r8, &(0x7f0000000780)=""/4110, 0x100e) 7.33743637s ago: executing program 3 (id=2395): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x1a0, 0x30, 0x20, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffdffffff7, 0x0, 0x7fff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_skbedit={0xfc, 0x16, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xc}}]}, {0xb6, 0x6, "0e67fe3b646fc7e2a02d40445dac05251ea8d21557cbd7ae04d7d65a05298e951c20875015c2fe31cd696f65dc5b060fd46b31ecd6d2ddc8fe7e820cc43c7853d60b32065a396b46c660494b49ce9cddaa6eb10bbde045088c0852b84cbe80a31f3b821b0a7253036acf8a72d06070a025492ad0a840ed96d005e5fce17b0207f54439029c705df6f006575a2b7efb95f2f2adc11c54a49704a01dda2c78ca3eea3e26d0e1d809243deceabc08563d6b7c4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) munlockall() connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 6.28706344s ago: executing program 3 (id=2397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x17, 0x0, 0x0, 0x8b, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) (async) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0xa32, 0x0, 0x47, 0x0, 0x0) write(r2, &(0x7f0000000040)="09000000010000", 0x7) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) (async) fchdir(r10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r13, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xefac}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@alu={0x7, 0x1, 0x1, 0x1, 0x6, 0xbe0d0eaee62fbcea, 0xfffffffffffffff0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x8f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x82}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x0, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc9}, @call={0x85, 0x0, 0x0, 0x12}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0xbf, &(0x7f00000009c0)=""/191, 0x41100, 0x1, '\x00', r11, @cgroup_sock_addr=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x3, 0x400}, 0x10, r13, r8, 0x2, &(0x7f0000000940)=[r7, r0, r0, r7, r7], &(0x7f0000000a80)=[{0x5, 0x5, 0x7, 0x1}, {0x4, 0x1, 0x1, 0x3}], 0x10, 0x1, @void, @value}, 0x94) 6.041430446s ago: executing program 3 (id=2399): pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) sendto$inet6(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e20, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180001000000000000000000000000009500060000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x27c, 0x0, 0x18c, 0x203, 0xc8, 0x19030000, 0x1b4, 0x2e0, 0x2e0, 0x1b4, 0x2e0, 0x3, 0x0, {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x300, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private1, [0xffffff00, 0x17fffff7e, 0xff000000], [0xff, 0xff, 0xff, 0xff], 'veth1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x62, 0x0, 0x7, 0x20}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48850) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/82, 0x28000, 0x800}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.041803804s ago: executing program 3 (id=2402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5}}}]}, 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a000000090581030000000000090401"], 0x0) 5.04145726s ago: executing program 0 (id=2403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0x0) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440), 0x0) 4.691698586s ago: executing program 1 (id=2404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc0162b2000800", @ANYRES16=0x0, @ANYRES32=0x41424344, @ANYRES8=r1], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 3.961628146s ago: executing program 4 (id=2405): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000007e7459dff14a42edda57b8e84d02d5ff2fd0e4a74b36a1505ea75707f65f82e0212a3dee07", @ANYRES16=0x0, @ANYBLOB="01000000000000000000140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0000"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r1 = openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, &(0x7f0000000540)=[{&(0x7f00000004c0)={0x18, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x109, 0x0, 0x0, @u32=0x5}]}, 0x18}], 0x1, &(0x7f0000000640)=[@cred={{0x18}}], 0x18, 0x4080}, 0x4008000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x90009427, &(0x7f0000000700)) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) socket$inet6(0xa, 0x80002, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x142, 0xfe) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB='\t', @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 3.7117017s ago: executing program 0 (id=2406): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') creat(0x0, 0x125) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x200000000000002, {0x2, 0x0, 0x8000000000000001, 0x0, 0x4000, 0x3, {0x3, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0xe19, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x809000, 0x0, 0x0, 0xfffffffd}}, 0x50) r4 = creat(&(0x7f0000000a40)='./file0/file0\x00', 0x0) write$qrtrtun(r4, &(0x7f00000003c0)='\x00\x00', 0x2) chdir(&(0x7f00000003c0)='./bus\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.593534212s ago: executing program 1 (id=2407): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="f50fd6e4036a83ab7b86bc7ee68fba57420ccf4e7caba602694f593fa45535b638443e99532629d8c4e6b2005c9243c83e13a112314b3f26769c786c37c97ed4dfd871af7941827c954b98f7b3d4ddbe8e21ccaad9c7edefc0fe71396d77ed76b3ebbbef3de53d9afa87b8a3bda09542b68932cfcf6358fa292afecade94543625bbe33400", 0x85) 3.499574013s ago: executing program 0 (id=2408): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_stats={0x2e}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x64, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_open_dev$dri(&(0x7f00000010c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000340)={0x0, 0x0}) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r5) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000), 0x80020, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0x40045407, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 3.499261303s ago: executing program 1 (id=2409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='d\x9f\xcc\'K\x97s\xd6\x1b\x94\xc5\xc8\xee\xedS\x9a\x9a\xec\xf6W-\x0e\xfa\xd48`_\'\x00\x80\xb4\xb2\xe1\x9a\\!\x86\x10R\xf3oz\\\xb3+m\xb47\x14\x99\x0f\xd6\x9cYn*~\xdf~\x99x\x98\x9f\x89\x8c\x86\x13\xf7\xc6\xa4\xa9\xfe\x06d+\xd57\x1a\x8e\xc3GM\x11\x8c4w\x1e\xc5\xea\xf2\xc7#\xffuq\x82\xebr\xc6\x16\x99\xc35_\xbe29K\xad\xc2\xb5+2\xfe\x88\xb0\x9e\xc6P\xc5\xd9\xb5M^\x81\xdf\x00\x00\xf8\xb3@p\xa3y\xbd\'\xd5\xea\xed\xdc\xc2\x12Zu\f\x98=\xc3\n\x93\xf3Y\xc0\x02\x98\xe4Y\x91t\xf4\xf2\xae|\xb7\xb8\x81o\xd5\xb2^\xdf+m\xddJ\xc8\xac\xbe\xd6\x02\xb7|]\x9a\\ \xa0a=\x92X\a\x99\xc0l\x17I\x02i\xa4A\x8a\x1d\xb5Xt\xbck\xc1nU\x9f\xd3\\_\x80\xa7\xc7\xa2\xae\xe3\x95l]\x91\n}\x12\x93k\xf8DN\x0fGeN\x00\xb8\xc9\xabO\xd7\xfc\xa5u\xcf\x1c\x87\x06\x03\xc2\x9a2\x83\xaf\xd5\xee\xc8_\xbe\xfb\xb6\xa2\xe6\xad;\xfbC\x11\xb9\x84{\x9fr\x9b\x14\xf9\x00\x10\x1e\xcd\'%\x1d\x06\xdbe\xcd\xb8\xb1\x7f\xd2r\x1b\x84\xd6\'\x13\x9e>\x938\x0ef7\x8btv\bO\xe0$C\x95\x02\xb0\x91\xfewY\x1b\x05^\x85L\v\xd7]\xc8\xb3\x9d2g\xfc\x1b*\x02\x8d\xde\xeb\x06H\x1f/\xd2,\rR\x83L\xf3\x99\xc0\x11\x00\xd4\xbf*\xe6q\xa8\x9c\xf7\x1dh\x88\xf9\xb7\xf8x\x1bG\x90\x91rPK\xdeOX\x87', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0xfffffffffffffce1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18001000000000000080006c55ffffff9500001d0e000020"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[], 0x0) 3.431495904s ago: executing program 0 (id=2410): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cdrom(0xffffff9c, &(0x7f0000000640), 0x101200, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) getpid() openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = syz_open_procfs(0x0, 0x0) dup(r0) sched_setaffinity(0x0, 0xffffffffffffff61, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() execveat(r1, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000400)='/{\'^\x00', &(0x7f0000000440)='/dev/cdrom\x00', &(0x7f0000000480)='/dev/cdrom\x00', &(0x7f00000004c0)='wlc\x00', &(0x7f0000000500)='syzkaller\x00']}, &(0x7f00000007c0)={[&(0x7f00000006c0)='/dev/cpu/#/msr\x00', &(0x7f0000000700)='IPVS\x00', &(0x7f0000000740)=':\x00', &(0x7f0000000780)='IPVS\x00']}, 0x1000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) listen(r4, 0x81) syz_emit_ethernet(0x60, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b260ed", 0x2a, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8afb72d8398dcbac145121cd4e97f5f2"}]}}, {"993f"}}}}}}}, 0x0) 3.197043397s ago: executing program 4 (id=2411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='d\x9f\xcc\'K\x97s\xd6\x1b\x94\xc5\xc8\xee\xedS\x9a\x9a\xec\xf6W-\x0e\xfa\xd48`_\'\x00\x80\xb4\xb2\xe1\x9a\\!\x86\x10R\xf3oz\\\xb3+m\xb47\x14\x99\x0f\xd6\x9cYn*~\xdf~\x99x\x98\x9f\x89\x8c\x86\x13\xf7\xc6\xa4\xa9\xfe\x06d+\xd57\x1a\x8e\xc3GM\x11\x8c4w\x1e\xc5\xea\xf2\xc7#\xffuq\x82\xebr\xc6\x16\x99\xc35_\xbe29K\xad\xc2\xb5+2\xfe\x88\xb0\x9e\xc6P\xc5\xd9\xb5M^\x81\xdf\x00\x00\xf8\xb3@p\xa3y\xbd\'\xd5\xea\xed\xdc\xc2\x12Zu\f\x98=\xc3\n\x93\xf3Y\xc0\x02\x98\xe4Y\x91t\xf4\xf2\xae|\xb7\xb8\x81o\xd5\xb2^\xdf+m\xddJ\xc8\xac\xbe\xd6\x02\xb7|]\x9a\\ \xa0a=\x92X\a\x99\xc0l\x17I\x02i\xa4A\x8a\x1d\xb5Xt\xbck\xc1nU\x9f\xd3\\_\x80\xa7\xc7\xa2\xae\xe3\x95l]\x91\n}\x12\x93k\xf8DN\x0fGeN\x00\xb8\xc9\xabO\xd7\xfc\xa5u\xcf\x1c\x87\x06\x03\xc2\x9a2\x83\xaf\xd5\xee\xc8_\xbe\xfb\xb6\xa2\xe6\xad;\xfbC\x11\xb9\x84{\x9fr\x9b\x14\xf9\x00\x10\x1e\xcd\'%\x1d\x06\xdbe\xcd\xb8\xb1\x7f\xd2r\x1b\x84\xd6\'\x13\x9e>\x938\x0ef7\x8btv\bO\xe0$C\x95\x02\xb0\x91\xfewY\x1b\x05^\x85L\v\xd7]\xc8\xb3\x9d2g\xfc\x1b*\x02\x8d\xde\xeb\x06H\x1f/\xd2,\rR\x83L\xf3\x99\xc0\x11\x00\xd4\xbf*\xe6q\xa8\x9c\xf7\x1dh\x88\xf9\xb7\xf8x\x1bG\x90\x91rPK\xdeOX\x87', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0xfffffffffffffce1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18001000000000000080006c55ffffff9500001d0e000020"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[], 0x0) 2.673205181s ago: executing program 3 (id=2412): getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mount(0x0, 0x0, 0x0, 0x400080, &(0x7f00000001c0)='discard') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$vmci(0xffffff9c, &(0x7f0000000800), 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x3, 0x20, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xfffffffffffffffe, 0x9, 0x5, 0x3, 0x4, 0x20}, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) recvfrom$inet6(r2, &(0x7f0000000300)=""/44, 0x2c, 0x140, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r3) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.365595031s ago: executing program 1 (id=2413): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0x0) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, 0x0, 0x0) 2.230360683s ago: executing program 4 (id=2414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0x0) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440), 0x0) 1.147745093s ago: executing program 4 (id=2416): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000007e7459dff14a42edda57b8e84d02d5ff2fd0e4a74b36a1505ea75707f65f82e0212a3dee07", @ANYRES16=0x0, @ANYBLOB="01000000000000000000140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0000"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r1 = openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, &(0x7f0000000540)=[{&(0x7f00000004c0)={0x18, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x109, 0x0, 0x0, @u32=0x5}]}, 0x18}], 0x1, &(0x7f0000000640)=[@cred={{0x18}}], 0x18, 0x4080}, 0x4008000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x90009427, &(0x7f0000000700)) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) socket$inet6(0xa, 0x80002, 0x88) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x142, 0xfe) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB='\t', @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.010454939s ago: executing program 1 (id=2417): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x180, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@rand_addr=0x64010100, @in=@local, 0x32, 0x0, 0x0, 0x3505, 0xa, 0x2}, {@in6=@empty, @in6=@private1, @in6=@remote, @in=@local, 0x3c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010102, @in=@multicast1, @in=@remote, @in6=@local, 0x3c, 0x4, 0x0, 0x34ff, 0x0, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x3, 0x0, 0xf, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, @in=@multicast2, @in=@broadcast, 0xcc, 0x2, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x23c}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 891.615452ms ago: executing program 1 (id=2418): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000300)={0x10002, 0x3, 0xdddd0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x7}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$nci(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) write$nci(r4, &(0x7f00000003c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x4, {0x1, 0x40, 0x8}}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 610.776654ms ago: executing program 4 (id=2419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x100000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x49, 0x2, 0x2, "ffffff3098f6da9ac11e00ff0700000000cc060016002000000200a1a9550500", 0x20385655}) socketpair(0x2, 0x800, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_io_uring_setup(0x499f, &(0x7f00000003c0)={0x0, 0x58ee, 0x2, 0x2, 0x3}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000540)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c", 0x32) write$qrtrtun(r1, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba797889083", 0x4e) write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010326bd7002fadbdf25ebffffff"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x7e, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x5, 0x806, 0x5) socket(0x10, 0x80002, 0x0) 89.688319ms ago: executing program 0 (id=2420): syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005a00b5"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 0 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008005}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x10, 0x840}}], 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x96, 0x1, 0x100000, 0x8, {{0x37, 0x4, 0x0, 0x3f, 0xdc, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x54, 0xfc, 0x3, 0x3, [{@empty, 0x3}, {@local, 0x6}, {@private=0xa010101, 0x7fffffff}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x7}, {@private=0xa010101, 0x41f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@broadcast, 0x8}, {@multicast1, 0x8}]}, @cipso={0x86, 0x6b, 0x1, [{0x7, 0x8, "97e67e245c11"}, {0x0, 0x7, "40af8d8aec"}, {0x5, 0x8, "86d4ada3c38d"}, {0x0, 0x2}, {0x2, 0x8, "20ed55f8e629"}, {0x7, 0xe, "fe7a6e87ed00b487ae3c8656"}, {0x6, 0xf, "ae74635f8292ad7c6ebb9f8e6e"}, {0x6, 0xb, "1d982e4105e9738fa7"}, {0x5, 0xf, "bf00a1beb3aa507ec622c5b445"}, {0x5, 0xd, "a9c6bce6c60ca8c18872d5"}]}, @generic={0x83, 0x7, "42ebf79f1e"}]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002840)=@deltfilter={0x3a44, 0x2d, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xa}, {0x5, 0x7}, {0xd, 0xc}}, [@f_rsvp={{0x9}, {0x1ec0, 0x2, [@TCA_RSVP_ACT={0x1644, 0x6, [@m_police={0x604, 0x9, 0x0, 0x0, {{0xb}, {0x598, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x0, 0x0, 0x7, 0x1, {0xfb, 0x2, 0x3, 0x4, 0x2, 0x3}, {0x9, 0x0, 0x800, 0x8001, 0x1, 0x4d7f}, 0x4, 0x7f, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x2, 0x3, 0x49d379f6, {0x6, 0x0, 0x254, 0x80, 0x9, 0x2c}, {0x3, 0x0, 0x2, 0xb000, 0x0, 0x2}, 0xd0000000, 0x1, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x57e, 0xffffffff, 0x9, 0x4, 0x5, 0x3, 0x3, 0x2, 0xffffff00, 0x1, 0x1, 0xffffff01, 0x6ef2, 0xffff, 0xc, 0x1, 0x7, 0xe, 0x0, 0x7, 0xffffff62, 0x5, 0x6, 0x3ff, 0x0, 0x6, 0x2, 0x8000, 0x6, 0x100, 0x5c3, 0x5, 0xfffffff0, 0x0, 0x3, 0x4, 0x0, 0xdcb, 0x4, 0x442, 0x3, 0x9, 0x101, 0x4, 0x0, 0xf7a5, 0x5, 0x25, 0x4c, 0x8, 0x6cf9, 0x7a9, 0x338, 0x401, 0x97, 0xfaf, 0x4, 0x80, 0x6f009837, 0x79, 0x7, 0x1, 0x2c, 0xb16f, 0x9, 0x480, 0xfd, 0x0, 0x3f53, 0x5, 0x9, 0xff, 0x2, 0x4, 0x8077, 0x5, 0x7fffffff, 0x2, 0x4a0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xd, 0x2, 0x1, 0x7, 0x0, 0x8, 0xa3, 0x7, 0x9, 0x2, 0xc, 0x40, 0x7, 0x800, 0x6, 0x401, 0xe, 0x7fffffff, 0xffff, 0xe4, 0x6, 0x9, 0x101, 0x1, 0xffff, 0x200, 0xfffffffa, 0x0, 0x4, 0x7, 0x740b7535, 0x936b, 0x47a3, 0x62, 0x8, 0x6, 0x9e, 0x3, 0x0, 0x8, 0x49, 0xfff, 0x100, 0x989, 0x8, 0x1, 0x7, 0x16b, 0x1000, 0xbdbf, 0x63c533fb, 0x7, 0xa, 0x5, 0x200, 0x6, 0x3, 0x5, 0x8, 0x5, 0xb96, 0x4, 0x75c, 0x8, 0x5, 0x94c, 0x3165, 0x38a, 0x4, 0x101, 0x80000000, 0x9, 0x9, 0x8, 0xff, 0x803, 0x7, 0x8001, 0x6, 0x1, 0x80000000, 0x7f, 0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3, 0x400, 0x9, 0x7, 0x1, 0x7ff, 0x401, 0x1, 0xfffff3d2, 0x1, 0xfffffff8, 0x2, 0x0, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x79eb, 0x5, 0x6, 0x5, 0x8, 0x1, 0x7, 0x5, 0x7, 0x8, 0xff, 0x5, 0x2, 0x2, 0x5, 0x8, 0x2, 0xff, 0x4, 0x0, 0x7, 0xffffffff, 0x6, 0x4, 0x71, 0x9fe0, 0xe04a, 0x10, 0xfa, 0x708, 0x8, 0x630fe63a, 0x7, 0x6, 0x3, 0x2, 0x81f8, 0x100, 0x8, 0xd, 0x0, 0x6, 0x3, 0xffa3, 0x7, 0xff69, 0xa, 0xffff69a7, 0x6, 0x9, 0xe, 0x8, 0x6, 0x8, 0xfffffff9, 0x8, 0x7ad, 0x4, 0x9, 0x2, 0x0, 0x1aa7, 0x0, 0xfffffff7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf972}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0xffffffffffffffff, 0x9, 0x6, 0xd, {0x9, 0x2, 0xef, 0x7ff, 0xcc, 0x4}, {0x8, 0x2, 0x2, 0x9d, 0x6}, 0x7, 0x2, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffb61}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x9, 0x73, 0x5b0e, {0x6, 0x2, 0xc, 0xc}, {0x2, 0x0, 0x1, 0x4, 0x8, 0x5}, 0x91d, 0xa, 0xa9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0xffffffffffffffff, 0x7f, 0x3, 0x7, {0x7, 0x2, 0xfffa, 0x4a7e, 0xf8c, 0x8001}, {0x3, 0x0, 0x3, 0x1, 0xffff, 0x1}, 0x7f, 0xb2, 0x80}}]]}, {0x44, 0x6, "8cb05c818517027e4e6360eb4bbd4a8a119e8bc05a6819462029fe3e85f933b8a9f2b1228c444b5ddc1a14d8ebf447b88c35bb3f53f80d5ac40bc8ecdfbf7f41"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x103c, 0x14, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x136b, 0xffffffffffffffff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xd}}, @TCA_RSVP_POLICE={0x868, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xe, 0x23d125f, 0x200, 0x81, 0xba, 0x1, 0x57, 0x2, 0x8, 0x4, 0x4, 0x40, 0x0, 0xc7c, 0x3, 0x9, 0x6, 0x87, 0xfffffff9, 0x0, 0xfffffffd, 0xfffffff3, 0x0, 0x2, 0xe71c, 0x8, 0x2, 0x7f, 0x0, 0x40, 0x7, 0x9, 0x9, 0x8, 0x514, 0x7f, 0x5, 0x8000000, 0x3, 0x2, 0x4, 0x8, 0x7, 0x3, 0x80000000, 0x5, 0x10a, 0x67a, 0x200, 0x7, 0x7, 0x9, 0x38c, 0x4, 0x81, 0x80, 0x7fffffff, 0xc8de, 0x3, 0x6, 0x29, 0x8, 0x8, 0x40, 0x7, 0x0, 0x8, 0xffffcafb, 0x8000, 0x0, 0x5, 0x80, 0x81, 0x9, 0xfffffffb, 0x2fdc, 0x2, 0x39, 0x5, 0x1, 0x2, 0x7, 0x81, 0x800, 0x0, 0x6, 0xa0c1, 0x4, 0xfffffffa, 0x5, 0x0, 0x3d, 0xb, 0x5, 0xfffffff8, 0x1ff, 0x5, 0x0, 0x6, 0xc7, 0x4, 0x9, 0x80, 0x2, 0x9, 0x10, 0xa0, 0x7fffffff, 0x2, 0x7, 0x3ff, 0x800, 0x3, 0xa, 0xfff, 0x72bdf926, 0x2, 0xb689, 0x401, 0x10, 0x2c9b, 0xfff, 0x9, 0xf, 0x1, 0x400, 0x0, 0x8000, 0x1, 0x9, 0xf8000000, 0x55014967, 0xfffffff5, 0x7, 0x2, 0x6, 0x3, 0x1000, 0x4, 0x950, 0xffffffff, 0x5, 0x4, 0x0, 0x101, 0x2, 0x8, 0xffff, 0x10000, 0x0, 0x6, 0x8, 0xfff, 0x400, 0xa52d, 0x9, 0xfffffffb, 0x97, 0x8, 0x81, 0x2, 0x4, 0xbd, 0x3, 0x9, 0x6, 0x80000000, 0xb0b7, 0x81, 0x4, 0x1ff, 0x2f, 0x0, 0x7, 0xd91, 0xfff, 0x7, 0x1c0, 0x7fffffff, 0x8, 0x9, 0x9, 0x2, 0x0, 0x637, 0x0, 0x6, 0x9, 0x0, 0x1, 0x1, 0x8001, 0x7f, 0x83, 0x81, 0x80000000, 0x1f08, 0x1, 0xed, 0x6d00, 0x5, 0x100, 0x3497, 0x17, 0x3, 0x7, 0x6, 0x80, 0xffffffff, 0xb08, 0x8ff0, 0x9, 0xec, 0x9, 0x3, 0x4, 0x9, 0x1, 0x83, 0x3f43fedd, 0x3, 0xa, 0x8, 0xf3, 0xd, 0x6, 0x3, 0xb7, 0x2, 0x0, 0x8, 0x8001, 0x7, 0x8, 0x3, 0x9, 0x3, 0x0, 0xfffffff6, 0x3ff, 0x3, 0x0, 0x6, 0x4, 0x5, 0x7, 0xc, 0xfffffff9, 0xffffd4cf, 0x9, 0x800, 0x4, 0xff, 0x7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0x3, 0x10, 0x1, 0x0, 0x6, 0x6, 0x0, 0xfffffffe, 0x5, 0x8, 0x6, 0x5, 0x3, 0xe7b, 0x1000, 0xfffffffc, 0x6, 0x9, 0xd, 0x6ba, 0x4, 0x804, 0x5, 0xf0f5, 0x5, 0x6, 0x604, 0x7, 0x2, 0x3ff, 0x0, 0x7d2, 0x2, 0xfffffffe, 0x7, 0x40, 0xa6a9, 0x2, 0x2, 0x0, 0x0, 0xbce0, 0x2, 0x0, 0x80000000, 0x14, 0x1, 0x7, 0x800, 0x3, 0x2, 0xb269, 0x3ecb, 0xe391, 0x9, 0xc96, 0x7, 0x6, 0x8000, 0x6, 0x0, 0xb7, 0x800, 0x7, 0x6, 0xe64, 0x10, 0x7, 0x9, 0x4, 0x5, 0x9a7e, 0xfffffff8, 0x5, 0x8, 0x6, 0x190, 0x6, 0xb9c, 0xee, 0x4, 0x5, 0x5, 0x1, 0x7, 0x7, 0x0, 0x7, 0x3, 0x80000000, 0x40, 0x8, 0x4, 0x0, 0xfb4, 0x6, 0x1, 0x7, 0x78d5, 0x7, 0x3, 0x4, 0x9418, 0x2, 0x7ff, 0x8, 0x1, 0x2, 0x2, 0xd8, 0x2, 0x81, 0x9b7, 0x6, 0x3, 0x4, 0x3, 0x1, 0x9, 0x1, 0x401, 0xfff, 0x6, 0x8, 0x1, 0x5, 0x400, 0xfffffffd, 0x6, 0x0, 0x81, 0x2, 0x2, 0x10001, 0x1, 0x10000, 0x8, 0x2, 0x7, 0x0, 0x8, 0x5, 0x6, 0x7, 0x8, 0xbb, 0x9, 0xfffffffe, 0x9f8, 0x9, 0x6, 0xfff, 0x4, 0x0, 0x4, 0x4cb1, 0xa790, 0x9, 0x2, 0x5, 0xf, 0x3e, 0x8000, 0x6, 0xe24, 0x4, 0xd70, 0x1, 0xc, 0x8000, 0xfc000000, 0x4, 0x8, 0x2, 0x1, 0x4f1, 0x1, 0x6, 0x40, 0xffffffff, 0x1000, 0x8, 0x2, 0x79, 0xeb70, 0x3, 0x2, 0x37b, 0xe9, 0xc36c, 0x319, 0x1, 0x10001, 0x401, 0x3, 0x9, 0x400, 0xa20, 0x2, 0xe, 0x80, 0x400, 0x1, 0xb2f, 0x4, 0xa57, 0x8, 0xe06, 0xcd2, 0x9, 0xfffffffb, 0x5, 0x9, 0x3, 0x4, 0x58, 0xff, 0x4, 0x4b47, 0x2, 0x5, 0x1, 0x59fe, 0x2, 0x7, 0x3, 0xfffffffe, 0x2, 0x81, 0x5, 0xa, 0x401, 0x3, 0x1, 0x2, 0xfffffff8, 0x3, 0x7, 0x800, 0xf2b, 0x8000, 0x8, 0x0, 0x2, 0x9e, 0x8, 0x800, 0x5, 0x6, 0x9, 0x4, 0x6, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x6, 0xb, 0x4, 0x89, {0x3, 0x0, 0x0, 0x0, 0x4, 0x8}, {0x9, 0x1, 0x7, 0x6, 0x101, 0x370c}, 0x476, 0x7, 0x4}}]}, @TCA_RSVP_DST={0x8, 0x2, @remote}]}}, @f_rsvp6={{0xa}, {0xa0, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc000, 0x10, 0x7}, {0x7, 0xa0000000, 0x1ad}, 0x8, 0x9d}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x19, 0x9}}, @TCA_RSVP_DST={0x14, 0x2, @empty}]}}, @f_tcindex={{0xc}, {0x234, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_ACT={0x228, 0x7, [@m_ctinfo={0x60, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x2c, 0x6, "c5e5e4c7d4b8fe82b072206c95329b76c02a845f9e607aefe6da265d602510ceda4c39394ed61805"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x9c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8}]}, {0x4d, 0x6, "73d822a5e9ab80c3ecca6dc112fcee5a04ca6505f24e940e8ccd35c01e5483fa41996f1c55661316a57c4b018258db9574f7386a5c12683f4141d12ff2faf777b589dcb2ccd62110a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x4c, 0x13, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x16, 0x6, "b3eb8b328b39c5f5cc3e379c218965687a86"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xdc, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffff01, 0x40, 0x3, 0xfffffffd, 0x10000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xfffffff8, 0x7, 0x5, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40, 0x9, 0x20000000, 0x3, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x4e, 0x6, "7d9a573dc25054ab7fe86c5b09e150f65819fe6cdb4398c809e0790670f4d9bab29286155201f100590539f08e17f184a5bf40cca514d94bf4590252e2bf44f3c8af2a4ecb9e5e71074e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x185c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x1848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x4, 0xa, 0x0, 0x4, 0xb, 0x8, 0x1000, 0x7977, 0x7, 0xd, 0x3, 0xe44, 0xc, 0x10001, 0x4100, 0x6, 0x0, 0xfffffffe, 0x10001, 0x1, 0x5, 0x55c1, 0x7, 0x3, 0x3, 0x7a, 0x8, 0x1, 0x7fff, 0x1, 0x3, 0x7f, 0x1, 0xb7, 0x1, 0x9, 0x7, 0x6, 0x72, 0x4, 0xffff0001, 0x2a, 0xfffffffb, 0x5, 0x0, 0x9, 0x0, 0x6, 0xdba5, 0x3, 0x2, 0xb7, 0x80000001, 0x0, 0x9, 0x9, 0x6, 0xfffffff9, 0x101, 0xa9, 0x1, 0x1000, 0x8, 0x8, 0x6d83, 0x4, 0x220519d0, 0x9, 0x8001, 0x89aa, 0x5, 0x2, 0x7, 0x9, 0x22, 0x8, 0xffffffff, 0x5, 0x0, 0x3, 0x6, 0x6, 0x5, 0x8, 0x9, 0x1, 0x1, 0x0, 0x3ff, 0x7, 0x7, 0x5, 0xa0bd, 0xfff, 0x4, 0x565, 0x5, 0x60a2, 0x2, 0x0, 0x36, 0x7, 0x8000, 0x3, 0x3215, 0x5, 0x7a, 0x8, 0x9, 0x0, 0x7, 0x10, 0x1, 0x401, 0x7000, 0x1d, 0xfffffffd, 0x7, 0x3, 0x8000, 0x5, 0xb, 0x3, 0x7, 0x5, 0x200, 0xfffffffd, 0x5, 0x6, 0x0, 0x55b4, 0x80000001, 0x10001, 0x8, 0xf86, 0x8a75, 0xa995, 0x1, 0x7, 0x5, 0x6a, 0x1, 0x7, 0xffffffff, 0x4, 0x6, 0x5, 0x3ff, 0x2, 0x2, 0x0, 0x89, 0x6, 0x8, 0xffff0bc0, 0x0, 0x4c50a6c4, 0x7fffffff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x127, 0x8001, 0xfff, 0x5, 0xffff5287, 0x2, 0x7fff, 0x4, 0x2, 0x0, 0x0, 0x10, 0x428a, 0x0, 0x4, 0x8, 0x7fffffff, 0x40, 0x1, 0xff, 0xe998, 0x2, 0x4, 0x8, 0x10, 0x4, 0x10001, 0x1, 0x7, 0x46, 0x1ff, 0x80000000, 0x0, 0x40, 0x1, 0x4, 0xffffff8d, 0x1, 0x5, 0x5, 0x7, 0x8, 0x80000000, 0x8, 0x5, 0x4, 0xe, 0x78b1, 0x1, 0x1, 0x3c0000, 0x4, 0x814, 0x3, 0x9, 0xfffffffa, 0x3, 0x2, 0x400, 0x5ee5, 0xffff, 0x352, 0x9, 0xdcd9, 0x7, 0x3, 0x7fffffff, 0x6, 0x3, 0x6, 0x80, 0x3, 0x7, 0x2, 0x18a5, 0x6, 0x4d4, 0x5, 0x1, 0x6, 0x80000000, 0x6, 0x40, 0x400, 0x25a, 0x0, 0x6, 0x8, 0x7, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x3, 0x6651, 0x9, 0x9, 0x2, 0x20000000, 0x0, 0x9ee4, 0x1, 0x7, 0xb, 0x6, 0x100, 0x10001, 0x7, 0x7f, 0x9, 0x1, 0xaba, 0x5, 0x8000, 0x4, 0x400000, 0x1a000, 0x101, 0x64, 0x5, 0x6, 0x0, 0x101, 0xfffff4cd, 0xffffffff, 0x3, 0xffffff80, 0x2, 0x8, 0x663, 0x7a, 0x0, 0x338, 0x3dc, 0xff, 0xa, 0x4, 0x4, 0x3, 0xfffffff7, 0x7, 0x0, 0x981, 0x5, 0x2, 0x9, 0x5, 0x4, 0xfffffc01, 0xb, 0x55, 0x4, 0x8, 0x80000001, 0x5, 0x8, 0x8, 0x6156cdf6, 0xe4ec, 0x7, 0x400, 0x1a8, 0x4, 0x1, 0x5, 0x6, 0x3, 0x2, 0xbe, 0x6ec, 0x8, 0x8, 0x5, 0x4, 0xe3d1, 0x4, 0x1, 0x3, 0x8, 0x6, 0x632e1951, 0x4, 0x7, 0x40, 0xcaf, 0x7b1d59f2, 0x100, 0x5, 0x3, 0x9c9d, 0xffffffff, 0x7, 0x7, 0x390, 0xe5, 0x7, 0x1, 0xfffffffd, 0x2, 0x9, 0xc82, 0x0, 0xd, 0x9, 0x7, 0x9, 0x9, 0x1, 0x101, 0x6956, 0x6, 0xffff, 0x5, 0x3, 0x3, 0xfffffffb, 0x9, 0x7fff, 0x6b2a, 0x3, 0x0, 0x200, 0x40, 0x7, 0x0, 0x91, 0x4, 0x1000, 0xf4d, 0xe, 0x80000001, 0x5, 0x5, 0xa370, 0xe, 0x4, 0x4, 0x7, 0xe, 0x9, 0x1, 0x1, 0xfffffff7, 0x0, 0x3, 0x972, 0x9, 0x4fe, 0x1, 0x800, 0x7fffffff, 0xb18, 0x1, 0x2, 0x5, 0xffffff81, 0x4, 0x2, 0xffffff81, 0xfffffff0, 0x9, 0x4, 0x61, 0xd, 0x4, 0xf4, 0x40, 0xfa, 0x1ff, 0x4, 0xfffffffc, 0x4, 0x1, 0x7, 0x7, 0x13, 0x0, 0x400, 0xecf, 0xe52, 0x93c6, 0x6, 0x2, 0x9, 0x2, 0xc123, 0xffffffff, 0x6, 0x182, 0xffffffff, 0x3, 0x6a1, 0x1ff, 0x4, 0x4, 0xd002, 0x81, 0x8, 0x8, 0x7, 0x6, 0x4, 0x0, 0x9, 0xfffff801, 0x740, 0x200, 0x40, 0x6, 0x0, 0x1, 0x2, 0x1000, 0x5, 0x24af, 0x8000000, 0x20000000, 0x70, 0x4476, 0x8, 0xce, 0xffff, 0x800, 0xfffffff7, 0x90000000, 0x1, 0x80000001, 0x7, 0x9, 0x6, 0x0, 0x60e, 0x40, 0x1, 0x0, 0x180, 0x1800, 0xc, 0x8, 0x3ff, 0x401, 0x0, 0x3, 0x2, 0x400, 0x8, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x2, 0x0, 0x668, 0x6, 0x6, 0x3ff, 0x5, 0x68ff, 0x4, 0x2, 0x7, 0x1, 0x7bd4f890, 0x3, 0x0, 0x8, 0x9, 0x0, 0x40, 0x9, 0x51, 0x5, 0x5, 0x83a, 0x7, 0x8, 0x800, 0x996c, 0x557, 0x6, 0x5, 0x9, 0x774, 0x1, 0xda, 0xc, 0x7, 0x5, 0x5, 0x6, 0x4, 0xf5, 0x4, 0xdd, 0x0, 0x10, 0xbd, 0xb861, 0x8, 0xffff8001, 0x2, 0x8, 0x81, 0xe0c, 0x10001, 0x7fffffff, 0x8, 0x10, 0xe1, 0x6, 0x10001, 0x0, 0xc7b5, 0x0, 0x2, 0x1ff, 0x8, 0x7ff, 0xf7bb857, 0xb, 0x6, 0x0, 0x1, 0xffff8000, 0x9, 0xfffffffa, 0x5, 0x8, 0x2, 0xc, 0x5, 0x0, 0x8a6, 0x1180, 0x1, 0x3ff, 0x9, 0x8, 0x734, 0x3af, 0x9, 0x3, 0x7f, 0x2, 0x81, 0x9, 0x3ff, 0x7fffffff, 0x4, 0x58, 0x4, 0x7f, 0x8, 0x8, 0x80000001, 0x6, 0xd45b, 0x40, 0x9, 0x0, 0x0, 0x8498, 0xe87, 0x1, 0x2, 0xffffffff, 0x7, 0x5, 0xf, 0x13d, 0xb, 0x8, 0x2, 0x5, 0x0, 0x200, 0x0, 0x200000, 0x9, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x9, 0xb8, 0x1, 0xaaac, 0x1, 0x1000, 0x0, 0x6662, 0x8, 0x0, 0x5, 0x80000001, 0xc4, 0x4, 0x0, 0xfc9, 0x6, 0x41, 0xc, 0x5, 0x5f4, 0x1d0, 0x0, 0x0, 0xffffff7f, 0x9, 0x2, 0x490, 0x6, 0xffffff4b, 0x9, 0xff, 0x3, 0x6, 0x5, 0xe156, 0x2e, 0x9, 0x8, 0x3, 0x2, 0x7, 0x0, 0x4, 0xfe700000, 0xfffffffb, 0x6, 0x0, 0x8, 0x7f, 0x8, 0x5, 0x8, 0x7, 0x6, 0x9, 0xfffffff8, 0xb7b, 0xa, 0x3, 0x9, 0x0, 0x6, 0x3800, 0x80, 0x100, 0x7, 0x5, 0x10, 0xff, 0x55b, 0x3, 0xfffffffa, 0x8, 0x4, 0x64d6, 0x7, 0x0, 0x4, 0x7, 0xfffffff8, 0x5, 0xfffffff7, 0x2, 0x8, 0x2, 0x3, 0x400, 0xfffff000, 0x2, 0x100, 0x8, 0x5, 0x2, 0xfffffff0, 0x7, 0x0, 0x8c0, 0x1, 0x9, 0xbc0, 0x9, 0x7fffffff, 0x1ff, 0xf, 0xffffffff, 0x2, 0x61, 0x400, 0x3, 0x5, 0x1, 0x5, 0x8000, 0x3, 0x0, 0x401, 0xfff, 0x800, 0x9, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x7, 0x6, 0x23fc, 0x2, 0x8, 0x8, 0xd, 0xfffff078, 0x3, 0x0, 0x6, 0x3, 0x62, 0x3, 0x4, 0x401, 0x4, 0x100, 0x7, 0x3, 0xfffffffb, 0x4, 0xfff, 0x0, 0x2, 0xfff, 0x60, 0xc, 0xfffff800, 0x4, 0x9, 0x3, 0x2, 0x0, 0x3ff, 0x3, 0x80000000, 0x7, 0x10000, 0x9, 0x8, 0x7fff, 0xfff, 0x100, 0x5, 0xde, 0xbce, 0x9, 0x5, 0x4, 0x8001, 0x7, 0xb06, 0x26d8b99c, 0xfffffff5, 0x9, 0x6, 0x5, 0x2, 0x7, 0x4a, 0xb4, 0x2c, 0x25, 0x28, 0x8001, 0x8, 0xe116, 0xccf7, 0x9, 0x67, 0xfffffff8, 0x81, 0x5, 0x30a, 0x6, 0x90, 0x9, 0xe, 0x7, 0x6, 0x8, 0x88, 0x3, 0x7, 0x8, 0x100, 0x319, 0x4, 0x5253a8e1, 0x0, 0x5, 0x5, 0x7f, 0x1, 0x5, 0x5, 0x9, 0x3, 0x229d, 0x5, 0xd, 0x9, 0x5f, 0x8426, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0x5, 0x68f27629, 0x10000, 0xe, 0x0, 0x6, 0x8, 0x9, 0x7, 0x3385, 0x3, 0x1, 0x871, 0x7f, 0x1ff, 0x8, 0x6, 0x2, 0x3, 0x1, 0x3, 0xffffffff, 0x3, 0x1, 0x7, 0x7f, 0x80000001, 0x2, 0x80000001, 0x1, 0x33c, 0x7, 0xb8a1, 0x6, 0x0, 0xe, 0x100, 0x3, 0x80000001, 0x400, 0xddbb, 0x9, 0x9, 0xa03f, 0x90000000, 0xfffffff2, 0x3, 0x8, 0x10001, 0x4, 0x8, 0x8001, 0x1, 0x1, 0x7f, 0x7, 0x0, 0xdc89, 0x6, 0x7fffffff, 0x5, 0xffffffff, 0x2, 0x1, 0xffffff00, 0x3cd3, 0x80000000, 0x2, 0x9, 0xbd87, 0x7, 0x0, 0x8, 0x3, 0x4, 0x3, 0xd, 0x7, 0x5, 0xd4, 0x7, 0xdada, 0x3, 0xfffffff7, 0x0, 0x4, 0x2, 0xc33, 0x5, 0xfffffd0b, 0x0, 0x0, 0xa83, 0xa78, 0x5, 0x3, 0x0, 0x4, 0x6, 0x4, 0xfff, 0x9, 0x1540, 0x8, 0x6, 0x40, 0xd, 0x9, 0x4, 0x9, 0x200, 0x10, 0x7, 0x1, 0x100, 0x6, 0x8ff1, 0xbf2e, 0x3, 0xfffffff9, 0x1ff, 0x9, 0x1ff, 0x5a2, 0x401, 0x0, 0x3ff, 0x4, 0x9, 0x2800000, 0x7, 0x4, 0x0, 0x587, 0x3, 0x8000, 0x8, 0x0, 0x5e98, 0x4, 0xb, 0x5, 0xa1306fa, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x681}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x2d, 0x2, 0x55366d53, 0xaf, 0xe, 0x1, 0x3, 0x762, 0x2, 0x0, 0x6, 0x5, 0xfffffff7, 0x8, 0x2000000, 0xd47, 0x5, 0x80, 0x42800000, 0x7ff, 0x18, 0xf00000, 0x5, 0xb8b, 0x2, 0x8, 0x5, 0xaa2, 0x80000000, 0x3, 0x3, 0xe38, 0x7, 0x9, 0xffff, 0xb, 0xb8, 0x1, 0xf, 0x2, 0x66e, 0x6, 0x923, 0xf, 0x0, 0x7, 0xffff7fff, 0x6, 0x81, 0x4, 0xff, 0xe, 0xae8, 0x8, 0x1, 0x40, 0x9, 0x1, 0xffffff01, 0x1, 0x7, 0xef, 0x5, 0x5, 0x2, 0x6, 0x3, 0x1d, 0x3, 0x0, 0x10001, 0x5, 0x9027, 0x3, 0x9, 0x1, 0xfffffffa, 0x364, 0xa, 0x200, 0x93, 0x40, 0x4, 0x10, 0x6, 0x4, 0x8000, 0x800, 0x9, 0x2, 0x93f, 0x3, 0xffffffff, 0x0, 0x9, 0xb00, 0x7f, 0xb98, 0xfffff468, 0x2, 0x0, 0x5, 0x2, 0x1, 0x8a, 0x8, 0x2, 0x5, 0xfff, 0x8001, 0x401, 0x8, 0x2, 0x7ff, 0x0, 0xd591, 0x2, 0x7, 0xa00000, 0x8001, 0x3, 0x3, 0x3, 0x8, 0x200, 0xfffffffd, 0x101, 0xdc34, 0x8f8, 0x5, 0xfb08, 0x5, 0xb8, 0x5, 0x8, 0x6, 0x6, 0x3, 0x0, 0x1ff, 0x0, 0x0, 0x7, 0x8, 0x279, 0x4, 0x7, 0xc770, 0x2, 0x2, 0xb1a6, 0x5, 0x8, 0x4, 0x3, 0x6, 0x6, 0x3, 0x8001, 0x8, 0x4, 0xd4ef, 0x491, 0x3, 0x81, 0x8, 0x5, 0x4, 0x0, 0x81, 0xffff, 0x10000, 0x4, 0x5, 0x1, 0x4, 0x4, 0x5, 0x8001, 0x9, 0x7ff, 0x8, 0x5, 0x80, 0x6, 0x655903ee, 0x6, 0xa, 0xa4b, 0x8, 0x9, 0x0, 0x9, 0xfd, 0xffffffff, 0x4, 0x3ff, 0xff, 0xfffffff8, 0x200, 0x1, 0xc8fc17b9, 0x0, 0x1, 0x3, 0x3, 0xf86, 0xfffffff7, 0x6, 0x3ff, 0x8000, 0x7, 0x97, 0x1, 0xfffffffb, 0x8, 0x81, 0x6, 0xd, 0x1, 0xb, 0x3, 0x6608, 0x63ac, 0x8, 0x10, 0x3, 0x7, 0x8, 0x7fffffff, 0x9, 0x8d2f, 0x9, 0x8, 0xf, 0x7fffffff, 0x1, 0x0, 0x4, 0xfffffffa, 0x9, 0x4, 0x5, 0x8, 0x3, 0x3a6, 0x8, 0x0, 0xd, 0x0, 0x81, 0x1, 0x1, 0x0, 0x81]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0x9, 0x6, 0x4, 0x0, 0x5, 0x87250cf, 0x31e5e834, 0x9, 0x6, 0x6, 0xfffffff0, 0x1, 0x1000, 0x7, 0x9, 0x3, 0x21e, 0x7fff, 0xf, 0xa, 0x7, 0x6, 0x1, 0x1, 0x5, 0xf, 0x2, 0x1, 0xb, 0x7102, 0xe, 0x4, 0x8, 0xb, 0x4, 0x1, 0xffff, 0x2, 0x1, 0x9e, 0xcad1, 0x12c, 0x40, 0x5, 0xfffffff7, 0x22a, 0x7, 0x2, 0xe, 0xffffff52, 0xdef36145, 0x4, 0xd, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x8, 0x7fff, 0x9, 0x3, 0x2, 0x6, 0x2, 0x3, 0x3aa0, 0x800, 0x5, 0x3ae, 0x2, 0xb, 0x8, 0x0, 0x1, 0xa, 0x7, 0x9, 0xafb, 0x10000, 0x1, 0x0, 0x647, 0xec, 0x7f, 0x2, 0x5, 0x0, 0x1, 0x49a5, 0x6, 0xff, 0x4, 0x48cd, 0x81, 0x9, 0x7, 0x6c6, 0x863, 0x8, 0x4, 0x1, 0x5, 0x4, 0x3, 0x0, 0x9, 0x8, 0x2, 0x2, 0x7, 0x3ff, 0x3, 0x5, 0x60, 0xffff, 0x899, 0xf, 0x5, 0x8, 0xdfed, 0x4, 0x0, 0x5040, 0x8, 0x3, 0x9, 0x8, 0x8, 0x1, 0x6, 0x101, 0xfffffff9, 0x2, 0x7, 0x1, 0x400, 0x30, 0x7ff, 0x9859, 0x1, 0x8, 0x40, 0xf, 0x6, 0x3166, 0x8, 0xffff8001, 0x5, 0x10000, 0x10001, 0xffffffff, 0x2dbc05d7, 0x401, 0x3, 0xff, 0xffffffff, 0x4, 0x5, 0xeb, 0x4, 0xff, 0x2, 0x2, 0xeb, 0x7, 0x8, 0x20, 0x5, 0x6, 0x4, 0x3, 0x200, 0x5, 0x4, 0x9, 0x3, 0x9, 0xd, 0x1, 0x6, 0x9, 0x0, 0xffffffc0, 0x9, 0x3392, 0x6, 0x100, 0xfff, 0x5, 0x401, 0x2, 0x4, 0x800, 0xced, 0x5, 0x3, 0x89, 0x5, 0x6, 0xa, 0x0, 0x5, 0x76, 0x6d, 0x1000, 0xcea, 0x0, 0x0, 0x9d8, 0x1, 0xffff, 0x7e6, 0x9, 0x3, 0x9, 0xcb, 0xfc, 0x1, 0x1, 0x80000001, 0x1, 0x4, 0x8, 0xfe5, 0x9, 0x1, 0x5, 0x3, 0x8, 0xd0d3, 0x3, 0x3, 0x5, 0x5, 0xd8, 0x3, 0x81, 0x2, 0x6, 0x4, 0x3, 0x20f8, 0x6e00, 0xffff, 0x7, 0x4, 0x0, 0x0, 0x5, 0x7, 0x0, 0xc1b3, 0x10000, 0x6]}]}]}}]}, 0x3a44}}, 0x8000) r4 = syz_open_dev$sndctrl(&(0x7f0000002800), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000000)) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000001c0)={@dev}, &(0x7f0000000200)=0x14) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 490.440115][ T1015] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 490.619879][ T1015] usb 5-1: Using ep0 maxpacket: 32 [ 490.635583][ T1015] usb 5-1: no configurations [ 490.637093][ T1015] usb 5-1: can't read configurations, error -22 [ 490.789884][ T1015] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 490.939902][ T1015] usb 5-1: Using ep0 maxpacket: 32 [ 490.942517][ T1015] usb 5-1: no configurations [ 490.944189][ T1015] usb 5-1: can't read configurations, error -22 [ 490.952132][ T1015] usb usb5-port1: attempt power cycle [ 491.329910][ T1015] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 491.350748][ T1015] usb 5-1: Using ep0 maxpacket: 32 [ 491.353370][ T1015] usb 5-1: no configurations [ 491.355173][ T1015] usb 5-1: can't read configurations, error -22 [ 491.479943][ T1015] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 491.500750][ T1015] usb 5-1: Using ep0 maxpacket: 32 [ 491.503948][ T1015] usb 5-1: no configurations [ 491.505523][ T1015] usb 5-1: can't read configurations, error -22 [ 491.510790][ T1015] usb usb5-port1: unable to enumerate USB device [ 492.269126][ T5981] usbhid 8-1:0.0: can't add hid device: -71 [ 492.273828][ T5981] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 492.278815][ T5981] usb 8-1: USB disconnect, device number 51 [ 492.426063][T12443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1570'. [ 492.432851][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 492.435717][T12443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1570'. [ 492.438844][T12443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1570'. [ 493.972199][T12469] ip6tnl1: entered promiscuous mode [ 493.973942][T12469] ip6tnl1: entered allmulticast mode [ 493.976908][T12469] team0: Device ip6tnl1 is of different type [ 494.756947][T12480] __nla_validate_parse: 1 callbacks suppressed [ 494.756959][T12480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1579'. [ 495.167637][T12486] ip6tnl1: entered promiscuous mode [ 495.172617][T12486] ip6tnl1: entered allmulticast mode [ 495.177336][T12486] team0: Device ip6tnl1 is of different type [ 495.569432][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'. [ 495.572935][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 495.576366][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'. [ 495.581944][T12489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'. [ 496.124262][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 497.928561][T12519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1588'. [ 498.073028][T12528] ip6tnl1: entered promiscuous mode [ 498.074680][T12528] ip6tnl1: entered allmulticast mode [ 498.076868][T12528] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 499.489503][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'. [ 499.746984][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1595'. [ 499.762069][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 499.765280][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1595'. [ 499.768305][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1595'. [ 500.941655][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.944293][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.963069][T12561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1597'. [ 501.659451][T12568] ip6tnl1: entered promiscuous mode [ 501.665068][T12568] ip6tnl1: entered allmulticast mode [ 501.673766][T12568] team0: Device ip6tnl1 is of different type [ 502.631565][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 502.935742][T12595] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1607'. [ 502.956329][T12595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1607'. [ 504.177766][T12620] ip6tnl1: entered promiscuous mode [ 504.186854][T12620] ip6tnl1: entered allmulticast mode [ 504.197331][T12620] team0: Device ip6tnl1 is of different type [ 504.368207][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 504.786636][T12632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1616'. [ 504.806277][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1616'. [ 505.188930][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 505.193233][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1617'. [ 505.196568][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 505.199548][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 506.484571][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 507.590330][T12674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1626'. [ 507.688657][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1626'. [ 509.270332][ T5844] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 509.274038][T12700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1633'. [ 509.442806][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.449681][ T5844] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 509.454056][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.463829][ T5844] usb 9-1: config 0 descriptor?? [ 509.474316][ T5844] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 509.676276][ T5844] usb 9-1: USB disconnect, device number 33 [ 510.310632][ T5844] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 510.480134][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 510.486514][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.497692][ T5844] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 510.502665][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.511037][ T5844] usb 9-1: config 0 descriptor?? [ 510.521839][ T5844] ldusb 9-1:0.0: Interrupt in endpoint not found [ 510.529644][ T5844] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 510.764781][T12715] __nla_validate_parse: 3 callbacks suppressed [ 510.764793][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1637'. [ 510.820201][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1632'. [ 511.011370][ T65] usb 9-1: USB disconnect, device number 34 [ 511.188173][T12723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1638'. [ 511.310426][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 511.315064][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 512.191087][T12737] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1641'. [ 513.369961][ T5981] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 513.730057][ T5981] usb 8-1: device descriptor read/64, error -71 [ 513.990209][ T5981] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 514.150336][ T5981] usb 8-1: device descriptor read/64, error -71 [ 514.200916][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 514.250068][ T5844] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 514.260387][ T5981] usb usb8-port1: attempt power cycle [ 514.400012][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 514.404865][ T5844] usb 9-1: no configurations [ 514.406822][ T5844] usb 9-1: can't read configurations, error -22 [ 514.482574][T12766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1649'. [ 514.500675][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 514.504533][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 514.560194][ T5844] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 514.610023][ T5981] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 514.691054][ T5981] usb 8-1: device descriptor read/8, error -71 [ 514.730163][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 514.733046][ T5844] usb 9-1: no configurations [ 514.734812][ T5844] usb 9-1: can't read configurations, error -22 [ 514.738766][ T5844] usb usb9-port1: attempt power cycle [ 514.893550][T12774] ip6tnl1: entered promiscuous mode [ 514.895508][T12774] ip6tnl1: entered allmulticast mode [ 514.897732][T12774] team0: Device ip6tnl1 is of different type [ 514.944205][T12775] ip6tnl1: entered promiscuous mode [ 514.946216][T12775] ip6tnl1: entered allmulticast mode [ 514.951583][T12775] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 514.970106][ T5981] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 514.993848][ T5981] usb 8-1: device descriptor read/8, error -71 [ 515.089928][ T5844] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 515.110288][ T5981] usb usb8-port1: unable to enumerate USB device [ 515.120328][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 515.131601][ T5844] usb 9-1: no configurations [ 515.133216][ T5844] usb 9-1: can't read configurations, error -22 [ 515.260031][ T5844] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 515.280524][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 515.283081][ T5844] usb 9-1: no configurations [ 515.284746][ T5844] usb 9-1: can't read configurations, error -22 [ 515.287004][ T5844] usb usb9-port1: unable to enumerate USB device [ 515.644495][T12779] netlink: 'syz.1.1653': attribute type 3 has an invalid length. [ 516.791181][T12797] __nla_validate_parse: 2 callbacks suppressed [ 516.791192][T12797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1658'. [ 516.815304][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 516.819158][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 516.921059][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1660'. [ 516.923919][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1660'. [ 516.926811][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1660'. [ 516.930510][T12804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1660'. [ 516.936970][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 517.319550][T12809] ip6tnl1: entered promiscuous mode [ 517.327803][T12809] ip6tnl1: entered allmulticast mode [ 517.346230][T12809] team0: Device ip6tnl1 is of different type [ 517.597746][T12813] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 517.608652][T12813] FAULT_INJECTION: forcing a failure. [ 517.608652][T12813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.614164][T12813] CPU: 1 UID: 0 PID: 12813 Comm: syz.0.1663 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 517.614182][T12813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.614189][T12813] Call Trace: [ 517.614193][T12813] [ 517.614197][T12813] dump_stack_lvl+0x16c/0x1f0 [ 517.614218][T12813] should_fail_ex+0x512/0x640 [ 517.614237][T12813] _copy_from_user+0x2e/0xd0 [ 517.614253][T12813] move_addr_to_kernel+0x65/0x170 [ 517.614270][T12813] __sys_sendto+0x1be/0x510 [ 517.614286][T12813] ? __pfx___sys_sendto+0x10/0x10 [ 517.614312][T12813] ? ksys_write+0x1b9/0x240 [ 517.614325][T12813] ? __pfx_ksys_write+0x10/0x10 [ 517.614337][T12813] __ia32_sys_sendto+0xdd/0x1b0 [ 517.614353][T12813] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.614366][T12813] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 517.614379][T12813] __do_fast_syscall_32+0x73/0x120 [ 517.614394][T12813] do_fast_syscall_32+0x32/0x80 [ 517.614407][T12813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.614422][T12813] RIP: 0023:0xf709e579 [ 517.614431][T12813] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.614441][T12813] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 517.614452][T12813] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 517.614459][T12813] RDX: 0000000000034000 RSI: 0000000000000041 RDI: 0000000080000380 [ 517.614465][T12813] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 517.614471][T12813] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.614477][T12813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.614490][T12813] [ 518.050428][ T5844] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 518.200285][ T5844] usb 9-1: device descriptor read/64, error -71 [ 518.440313][ T5844] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 518.579956][ T5844] usb 9-1: device descriptor read/64, error -71 [ 518.702892][ T5844] usb usb9-port1: attempt power cycle [ 519.060055][ T5844] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 519.090450][ T5844] usb 9-1: device descriptor read/8, error -71 [ 519.339906][ T5844] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 519.370471][ T5844] usb 9-1: device descriptor read/8, error -71 [ 519.492421][ T5844] usb usb9-port1: unable to enumerate USB device [ 519.904759][T12845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1671'. [ 519.908300][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1671'. [ 520.903761][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 520.903773][ T40] audit: type=1804 audit(1745657231.778:104): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1673" name="/newroot/425/file0" dev="tmpfs" ino=2313 res=1 errno=0 [ 522.735445][T12882] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 522.914959][T12886] __nla_validate_parse: 3 callbacks suppressed [ 522.914971][T12886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1681'. [ 522.998254][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1681'. [ 523.006373][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1681'. [ 523.250025][ T5844] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 523.261828][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 523.390040][ T5844] usb 9-1: device descriptor read/64, error -71 [ 523.629986][ T5844] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 523.770074][ T5844] usb 9-1: device descriptor read/64, error -71 [ 523.899974][ T5844] usb usb9-port1: attempt power cycle [ 524.260064][ T5844] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 524.282976][ T5844] usb 9-1: device descriptor read/8, error -71 [ 524.529899][ T5844] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 524.551413][ T5844] usb 9-1: device descriptor read/8, error -71 [ 524.670966][ T5844] usb usb9-port1: unable to enumerate USB device [ 524.811795][T12920] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1689'. [ 524.882447][T12921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1689'. [ 524.885357][T12921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1689'. [ 526.093467][T12943] IPv6: Can't replace route, no match found [ 526.337689][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 526.967266][T12960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1700'. [ 526.993528][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 529.026024][T12996] __nla_validate_parse: 1 callbacks suppressed [ 529.026037][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1705'. [ 530.507322][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1709'. [ 530.511325][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1709'. [ 530.520393][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1709'. [ 530.523833][T13009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1709'. [ 530.841695][T13016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 530.844605][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 530.847485][T13016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 530.851061][T13016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 532.194780][T13034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1714'. [ 533.380126][ T10] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 533.400358][ T5844] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 533.529981][ T5844] usb 5-1: device descriptor read/64, error -71 [ 533.792356][ T5844] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 533.940398][ T5844] usb 5-1: device descriptor read/64, error -71 [ 534.052597][ T5844] usb usb5-port1: attempt power cycle [ 534.420122][ T5844] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 534.443510][ T5844] usb 5-1: device descriptor read/8, error -71 [ 534.699944][ T5844] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 534.741022][ T5844] usb 5-1: device descriptor read/8, error -71 [ 534.861502][ T5844] usb usb5-port1: unable to enumerate USB device [ 535.037862][T13075] __nla_validate_parse: 3 callbacks suppressed [ 535.037883][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1723'. [ 535.044831][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1723'. [ 535.053956][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1723'. [ 535.075726][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1723'. [ 535.507421][T13077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1725'. [ 536.215843][T13090] FAULT_INJECTION: forcing a failure. [ 536.215843][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.226472][T13090] CPU: 0 UID: 0 PID: 13090 Comm: syz.0.1727 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 536.226504][T13090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 536.226511][T13090] Call Trace: [ 536.226517][T13090] [ 536.226524][T13090] dump_stack_lvl+0x16c/0x1f0 [ 536.226544][T13090] should_fail_ex+0x512/0x640 [ 536.226564][T13090] _copy_from_user+0x2e/0xd0 [ 536.226581][T13090] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 536.226599][T13090] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 536.226614][T13090] ? __lock_acquire+0x5ca/0x1ba0 [ 536.226630][T13090] do_ip_getsockopt+0x27f/0x2100 [ 536.226646][T13090] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 536.226659][T13090] ? _kstrtoull+0x145/0x200 [ 536.226670][T13090] ? __pfx__kstrtoull+0x10/0x10 [ 536.226686][T13090] ? __lock_acquire+0x5ca/0x1ba0 [ 536.226707][T13090] ? get_pid_task+0xfc/0x250 [ 536.226722][T13090] ? __pfx___might_resched+0x10/0x10 [ 536.226738][T13090] ip_getsockopt+0x9b/0x1e0 [ 536.226751][T13090] ? __pfx_ip_getsockopt+0x10/0x10 [ 536.226764][T13090] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.226778][T13090] ? find_held_lock+0x2b/0x80 [ 536.226789][T13090] raw_getsockopt+0x4d/0x1f0 [ 536.226802][T13090] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 536.226817][T13090] do_sock_getsockopt+0x3fc/0x800 [ 536.226833][T13090] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 536.226845][T13090] ? __fget_files+0x204/0x3c0 [ 536.226869][T13090] __sys_getsockopt+0x123/0x1a0 [ 536.226888][T13090] __ia32_sys_getsockopt+0xbc/0x160 [ 536.226905][T13090] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.226918][T13090] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 536.226932][T13090] __do_fast_syscall_32+0x73/0x120 [ 536.226947][T13090] do_fast_syscall_32+0x32/0x80 [ 536.226960][T13090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.226975][T13090] RIP: 0023:0xf709e579 [ 536.226989][T13090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 536.227000][T13090] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 536.227012][T13090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 536.227018][T13090] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000040 [ 536.227025][T13090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.227031][T13090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 536.227037][T13090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.227049][T13090] [ 536.601795][ T40] audit: type=1326 audit(1745657247.478:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.1.1730" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x0 [ 536.740826][T13100] No source specified [ 536.852710][T13102] mmap: syz.1.1730 (13102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 538.098127][T13114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1734'. [ 538.411114][ T1015] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 538.550676][ T1015] usb 9-1: device descriptor read/64, error -71 [ 538.714168][T13125] input: syz0 as /devices/virtual/input/input7 [ 538.722647][T13125] input: failed to attach handler leds to device input7, error: -6 [ 538.799937][ T1015] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 538.929928][ T1015] usb 9-1: device descriptor read/64, error -71 [ 539.031202][T13134] FAULT_INJECTION: forcing a failure. [ 539.031202][T13134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.046626][T13134] CPU: 3 UID: 0 PID: 13134 Comm: syz.0.1738 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 539.046644][T13134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 539.046651][T13134] Call Trace: [ 539.046655][T13134] [ 539.046662][T13134] dump_stack_lvl+0x16c/0x1f0 [ 539.046681][T13134] should_fail_ex+0x512/0x640 [ 539.046699][T13134] _copy_to_user+0x32/0xd0 [ 539.046716][T13134] simple_read_from_buffer+0xcb/0x170 [ 539.046734][T13134] proc_fail_nth_read+0x197/0x270 [ 539.046749][T13134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.046755][ T1015] usb usb9-port1: attempt power cycle [ 539.046765][T13134] ? rw_verify_area+0xcf/0x680 [ 539.046780][T13134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.046795][T13134] vfs_read+0x1de/0xc70 [ 539.046806][T13134] ? __pfx___mutex_lock+0x10/0x10 [ 539.046820][T13134] ? __pfx_vfs_read+0x10/0x10 [ 539.046832][T13134] ? __fget_files+0x20e/0x3c0 [ 539.046852][T13134] ksys_read+0x12a/0x240 [ 539.046862][T13134] ? __pfx_ksys_read+0x10/0x10 [ 539.046872][T13134] ? rcu_is_watching+0x12/0xc0 [ 539.046884][T13134] __do_fast_syscall_32+0x73/0x120 [ 539.046899][T13134] do_fast_syscall_32+0x32/0x80 [ 539.046913][T13134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.046927][T13134] RIP: 0023:0xf709e579 [ 539.046935][T13134] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 539.046946][T13134] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 539.046959][T13134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f508e620 [ 539.046966][T13134] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 539.046972][T13134] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 539.046978][T13134] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 539.046984][T13134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.046997][T13134] [ 539.113832][T13137] Bluetooth: MGMT ver 1.23 [ 539.126680][T13137] dvmrp1: entered allmulticast mode [ 539.479954][ T1015] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 539.521659][ T1015] usb 9-1: device descriptor read/8, error -71 [ 539.770121][ T1015] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 539.801072][ T1015] usb 9-1: device descriptor read/8, error -71 [ 539.930297][ T1015] usb usb9-port1: unable to enumerate USB device [ 541.167072][T13165] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1747'. [ 541.268878][T13169] ip6tnl1: entered promiscuous mode [ 541.272173][T13169] ip6tnl1: entered allmulticast mode [ 541.274618][T13169] team0: Device ip6tnl1 is of different type [ 542.428762][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 542.487924][T13174] lo speed is unknown, defaulting to 1000 [ 542.526504][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'. [ 542.699222][ T40] audit: type=1800 audit(1745657253.568:106): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1753" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 542.767144][T13186] IPv6: syztnl0: Disabled Multicast RS [ 542.974635][T13191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1754'. [ 542.978606][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'. [ 542.983106][T13191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1754'. [ 542.986130][T13191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1754'. [ 543.482355][T13202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1756'. [ 543.485392][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1756'. [ 543.491782][T13202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1756'. [ 547.505134][T13240] __nla_validate_parse: 10 callbacks suppressed [ 547.505146][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 548.226904][T13247] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 548.244672][T13251] ip6tnl1: entered promiscuous mode [ 548.250319][T13251] ip6tnl1: entered allmulticast mode [ 548.252803][T13251] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 548.838847][T13265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1778'. [ 550.667975][T13280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 550.671267][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1773'. [ 550.674619][T13280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 550.678929][T13280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 551.557390][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 551.870313][ T5844] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 552.041598][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.044969][ T5844] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.047739][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.140383][ T5844] usb 8-1: config 0 descriptor?? [ 552.252443][T13302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1781'. [ 552.384357][ T5844] usbhid 8-1:0.0: can't add hid device: -71 [ 552.393146][ T5844] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 552.410205][ T5844] usb 8-1: USB disconnect, device number 56 [ 552.650010][T13308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 552.966784][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1783'. [ 552.976260][T13313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1783'. [ 553.478469][T13322] ip6tnl1: entered promiscuous mode [ 553.481614][T13322] ip6tnl1: entered allmulticast mode [ 553.485029][T13322] team0: Device ip6tnl1 is of different type [ 554.564240][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 554.909073][T13340] lo speed is unknown, defaulting to 1000 [ 555.157718][T13352] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1794'. [ 555.521488][T13364] loop7: detected capacity change from 0 to 16384 [ 555.593733][T13364] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.617752][T13364] Buffer I/O error on dev loop7, logical block 3, async page read [ 555.624594][T13364] loop7: unable to read partition table [ 555.628890][T13364] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 555.909167][T13375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 555.912319][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1797'. [ 555.915317][T13375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 555.918619][T13375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 556.050411][ T1015] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 556.212033][ T1015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.215691][ T1015] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 556.218666][ T1015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.241279][ T1015] usb 9-1: config 0 descriptor?? [ 556.454775][ T1015] usbhid 9-1:0.0: can't add hid device: -71 [ 556.461838][ T1015] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 556.467896][ T1015] usb 9-1: USB disconnect, device number 52 [ 556.899904][ T1015] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 557.052151][ T1015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.057786][T13407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1807'. [ 557.062037][ T1015] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 557.066281][ T1015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.091199][ T1015] usb 9-1: config 0 descriptor?? [ 557.251852][T13413] loop7: detected capacity change from 0 to 16384 [ 557.601126][ T1015] usbhid 9-1:0.0: can't add hid device: -71 [ 557.603613][ T1015] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 557.630240][ T1015] usb 9-1: USB disconnect, device number 53 [ 557.821546][ T5942] Bluetooth: Frame is too long (len 28, expected len 9) [ 558.331615][T13440] __nla_validate_parse: 1 callbacks suppressed [ 558.331627][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1816'. [ 558.434485][T13444] block device autoloading is deprecated and will be removed. [ 559.318880][T13460] netlink: 'syz.0.1821': attribute type 11 has an invalid length. [ 559.590720][ T40] audit: type=1326 audit(1745657270.458:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.609681][ T40] audit: type=1326 audit(1745657270.468:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.617029][ T40] audit: type=1326 audit(1745657270.468:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.624191][ T40] audit: type=1326 audit(1745657270.468:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.631227][ T40] audit: type=1326 audit(1745657270.468:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.638211][ T40] audit: type=1326 audit(1745657270.468:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.646309][ T40] audit: type=1326 audit(1745657270.468:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.677394][ T40] audit: type=1326 audit(1745657270.468:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.687218][ T40] audit: type=1326 audit(1745657270.478:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.695795][ T40] audit: type=1326 audit(1745657270.478:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.3.1825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 559.810562][T13476] ip6tnl1: entered promiscuous mode [ 559.812359][T13476] ip6tnl1: entered allmulticast mode [ 559.816363][T13476] team0: Device ip6tnl1 is of different type [ 560.760044][ T1015] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 560.971745][ T1015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.975159][ T1015] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.977971][ T1015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.020542][ T1015] usb 8-1: config 0 descriptor?? [ 561.226821][ T1015] usbhid 8-1:0.0: can't add hid device: -71 [ 561.228701][ T1015] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 561.246502][ T1015] usb 8-1: USB disconnect, device number 57 [ 561.739911][ T1015] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 561.925268][ T1015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.929073][ T1015] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 561.936256][ T1015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.953573][ T1015] usb 8-1: config 0 descriptor?? [ 562.221344][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 562.382696][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.383525][ T1015] usbhid 8-1:0.0: can't add hid device: -71 [ 562.385778][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.388540][ T1015] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 562.470558][ T1015] usb 8-1: USB disconnect, device number 58 [ 562.902081][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 563.163861][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 563.604197][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 563.772608][T13532] lo speed is unknown, defaulting to 1000 [ 564.764605][T13553] lo speed is unknown, defaulting to 1000 [ 565.812583][T13576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1855'. [ 565.902819][T13583] syz.3.1856: attempt to access beyond end of device [ 565.902819][T13583] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 565.907451][T13583] qnx4: unable to read the superblock [ 566.001095][T13590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1858'. [ 567.122792][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1860'. [ 567.126145][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 567.129420][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1860'. [ 567.133315][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1860'. [ 567.947638][T13605] overlayfs: missing 'workdir' [ 568.341633][T13615] netlink: set zone limit has 4 unknown bytes [ 568.882132][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'. [ 569.110061][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 569.133048][T13634] syz.1.1871: attempt to access beyond end of device [ 569.133048][T13634] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 569.137859][T13634] SQUASHFS error: Failed to read block 0x0: -5 [ 569.141565][T13634] unable to read squashfs_super_block [ 569.269892][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 569.274599][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 569.278909][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 569.286239][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 569.299755][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.303156][ T10] usb 5-1: Product: syz [ 569.315620][ T10] usb 5-1: Manufacturer: syz [ 569.317251][ T10] usb 5-1: SerialNumber: syz [ 569.325337][ T10] usb 5-1: config 0 descriptor?? [ 569.466938][T13643] random: crng reseeded on system resumption [ 569.556917][ T10] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 569.564461][ T10] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 569.592054][ T10] usb 5-1: USB disconnect, device number 60 [ 569.749078][T13651] block device autoloading is deprecated and will be removed. [ 569.810881][T13649] md2: using deprecated bitmap file support [ 569.812942][T13649] md2: error: bitmap file must be a regular file [ 570.693042][T13668] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 570.934693][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 571.345887][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 571.555062][T13693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.275689][T13709] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 572.780446][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 572.797469][T13713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.192010][T13755] FAULT_INJECTION: forcing a failure. [ 575.192010][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 575.197302][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.1.1904 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 575.197318][T13755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 575.197324][T13755] Call Trace: [ 575.197329][T13755] [ 575.197333][T13755] dump_stack_lvl+0x16c/0x1f0 [ 575.197351][T13755] should_fail_ex+0x512/0x640 [ 575.197366][T13755] ? __kmalloc_noprof+0xbf/0x510 [ 575.197379][T13755] ? kernfs_fop_write_iter+0x237/0x510 [ 575.197392][T13755] should_failslab+0xc2/0x120 [ 575.197405][T13755] __kmalloc_noprof+0xd2/0x510 [ 575.197420][T13755] kernfs_fop_write_iter+0x237/0x510 [ 575.197435][T13755] vfs_write+0x5ba/0x1180 [ 575.197446][T13755] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 575.197460][T13755] ? __pfx___mutex_lock+0x10/0x10 [ 575.197497][T13755] ? __pfx_vfs_write+0x10/0x10 [ 575.197525][T13755] ksys_write+0x12a/0x240 [ 575.197535][T13755] ? __pfx_ksys_write+0x10/0x10 [ 575.197546][T13755] ? rcu_is_watching+0x12/0xc0 [ 575.197559][T13755] __do_fast_syscall_32+0x73/0x120 [ 575.197574][T13755] do_fast_syscall_32+0x32/0x80 [ 575.197588][T13755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.197601][T13755] RIP: 0023:0xf7f36579 [ 575.197610][T13755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 575.197621][T13755] RSP: 002b:00000000f503555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 575.197631][T13755] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 575.197638][T13755] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.197644][T13755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.197650][T13755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 575.197656][T13755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.197669][T13755] [ 575.210196][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1904'. [ 575.418605][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'. [ 575.971690][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 576.090246][ T5986] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 576.341853][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.350387][ T5986] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 576.353336][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.357589][ T5986] usb 9-1: config 0 descriptor?? [ 576.574230][ T5986] usbhid 9-1:0.0: can't add hid device: -71 [ 576.576293][ T5986] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 576.586398][ T5986] usb 9-1: USB disconnect, device number 54 [ 577.050883][ T10] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 577.213737][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.218727][ T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 577.222575][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.229133][ T10] usb 9-1: config 0 descriptor?? [ 577.670171][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 578.033329][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 578.035854][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 578.061904][ T10] usb 9-1: USB disconnect, device number 55 [ 578.089956][ T1015] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 578.264452][T13805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 578.267760][T13805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 578.271227][T13805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 578.274873][T13805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 578.319630][ T1015] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.324657][ T1015] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.333063][ T1015] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.337098][ T1015] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.362878][T13797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 578.375385][ T1015] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.667855][ T65] usb 8-1: USB disconnect, device number 59 [ 582.100151][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1930'. [ 582.103556][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1930'. [ 582.106762][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1930'. [ 582.111028][T13855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1930'. [ 582.138833][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.147680][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.506667][T13868] Cannot find add_set index 3 as target [ 582.906314][T13870] ip6tnl1: entered promiscuous mode [ 582.907990][T13870] ip6tnl1: entered allmulticast mode [ 582.910321][T13870] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 583.763873][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 583.983426][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 583.983438][ T40] audit: type=1326 audit(1745657294.858:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13874 comm="syz.1.1936" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7fc00000 [ 584.414270][T13898] netlink: 'syz.4.1944': attribute type 10 has an invalid length. [ 584.490180][ T65] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 584.510888][T13900] input: syz1 as /devices/virtual/input/input8 [ 584.651698][ T65] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.654950][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.660198][ T65] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 584.663408][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.670658][T13908] lo speed is unknown, defaulting to 1000 [ 584.672526][ T65] usb 8-1: config 0 descriptor?? [ 584.677915][ T65] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 584.792474][T13913] tmpfs: Bad value for 'nr_inodes' [ 584.858107][T13911] lo speed is unknown, defaulting to 1000 [ 584.880567][ T9] usb 8-1: USB disconnect, device number 60 [ 585.329912][ T9] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 585.399788][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 585.519845][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 585.523219][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.526870][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.539880][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 585.542967][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.550450][ T9] usb 8-1: config 0 descriptor?? [ 585.561058][ T9] ldusb 8-1:0.0: Interrupt in endpoint not found [ 585.563853][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 585.879170][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1943'. [ 586.096773][ T9] usb 8-1: USB disconnect, device number 61 [ 588.065226][T13952] ip6tnl1: entered promiscuous mode [ 588.067198][T13952] ip6tnl1: entered allmulticast mode [ 588.070494][T13952] team0: Device ip6tnl1 is of different type [ 588.294785][T13961] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1957'. [ 588.740861][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'. [ 589.795029][ T40] audit: type=1326 audit(1745657300.668:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.813721][ T40] audit: type=1326 audit(1745657300.668:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fe65a7 code=0x7ffc0000 [ 589.849892][ T40] audit: type=1326 audit(1745657300.668:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.860043][ T40] audit: type=1326 audit(1745657300.668:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.867045][ T40] audit: type=1326 audit(1745657300.668:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.883629][ T40] audit: type=1326 audit(1745657300.668:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.892671][ T40] audit: type=1326 audit(1745657300.668:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.903911][ T40] audit: type=1326 audit(1745657300.678:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 589.918143][ T40] audit: type=1326 audit(1745657300.678:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fe65a7 code=0x7ffc0000 [ 589.928026][ T40] audit: type=1326 audit(1745657300.678:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 590.206574][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 590.282059][T13997] hub 6-0:1.0: USB hub found [ 590.287589][T13997] hub 6-0:1.0: 1 port detected [ 590.291407][T13996] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 590.298358][T13996] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 590.307902][T13996] bridge0: port 1(netdevsim0) entered disabled state [ 590.412940][T13999] FAULT_INJECTION: forcing a failure. [ 590.412940][T13999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.422535][T13999] CPU: 3 UID: 0 PID: 13999 Comm: syz.0.1972 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 590.422564][T13999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.422576][T13999] Call Trace: [ 590.422583][T13999] [ 590.422591][T13999] dump_stack_lvl+0x16c/0x1f0 [ 590.422626][T13999] should_fail_ex+0x512/0x640 [ 590.422656][T13999] _copy_to_user+0x32/0xd0 [ 590.422687][T13999] simple_read_from_buffer+0xcb/0x170 [ 590.422717][T13999] proc_fail_nth_read+0x197/0x270 [ 590.422744][T13999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.422772][T13999] ? rw_verify_area+0xcf/0x680 [ 590.422798][T13999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.422824][T13999] vfs_read+0x1de/0xc70 [ 590.422845][T13999] ? __pfx___mutex_lock+0x10/0x10 [ 590.422868][T13999] ? __pfx_vfs_read+0x10/0x10 [ 590.422894][T13999] ? __fget_files+0x20e/0x3c0 [ 590.422931][T13999] ksys_read+0x12a/0x240 [ 590.422947][T13999] ? __pfx_ksys_read+0x10/0x10 [ 590.422966][T13999] ? rcu_is_watching+0x12/0xc0 [ 590.422988][T13999] __do_fast_syscall_32+0x73/0x120 [ 590.423013][T13999] do_fast_syscall_32+0x32/0x80 [ 590.423035][T13999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.423059][T13999] RIP: 0023:0xf709e579 [ 590.423075][T13999] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 590.423093][T13999] RSP: 002b:00000000f508e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 590.423131][T13999] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f508e620 [ 590.423142][T13999] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 590.423153][T13999] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 590.423163][T13999] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 590.423174][T13999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.423201][T13999] [ 591.031196][T14004] /dev/nullb0: Can't open blockdev [ 591.257245][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 592.482591][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1980'. [ 593.279580][T14039] FAULT_INJECTION: forcing a failure. [ 593.279580][T14039] name failslab, interval 1, probability 0, space 0, times 0 [ 593.319609][T14039] CPU: 3 UID: 0 PID: 14039 Comm: syz.1.1981 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 593.319627][T14039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 593.319634][T14039] Call Trace: [ 593.319637][T14039] [ 593.319642][T14039] dump_stack_lvl+0x16c/0x1f0 [ 593.319660][T14039] should_fail_ex+0x512/0x640 [ 593.319675][T14039] ? __kmalloc_node_noprof+0xc5/0x500 [ 593.319689][T14039] should_failslab+0xc2/0x120 [ 593.319702][T14039] __kmalloc_node_noprof+0xd8/0x500 [ 593.319713][T14039] ? rcu_is_watching+0x12/0xc0 [ 593.319723][T14039] ? obj_cgroup_charge+0x365/0x640 [ 593.319736][T14039] ? alloc_slab_obj_exts+0x41/0xa0 [ 593.319754][T14039] alloc_slab_obj_exts+0x41/0xa0 [ 593.319775][T14039] __memcg_slab_post_alloc_hook+0x27b/0x940 [ 593.319802][T14039] ? kasan_save_track+0x14/0x30 [ 593.319817][T14039] kmem_cache_alloc_node_noprof+0x312/0x3b0 [ 593.319829][T14039] ? get_page_from_freelist+0x133c/0x3920 [ 593.319840][T14039] ? __alloc_skb+0x2b2/0x380 [ 593.319859][T14039] __alloc_skb+0x2b2/0x380 [ 593.319874][T14039] ? __pfx___alloc_skb+0x10/0x10 [ 593.319896][T14039] alloc_skb_with_frags+0xe0/0x860 [ 593.319909][T14039] ? __pfx_get_page_from_freelist+0x10/0x10 [ 593.319919][T14039] ? should_fail_alloc_page+0xee/0x130 [ 593.319933][T14039] sock_alloc_send_pskb+0x7fb/0x990 [ 593.319949][T14039] ? trace_mm_page_alloc+0x11f/0x1a0 [ 593.319967][T14039] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 593.319984][T14039] ? __lock_acquire+0x5ca/0x1ba0 [ 593.320002][T14039] unix_dgram_sendmsg+0x463/0x1910 [ 593.320018][T14039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 593.320034][T14039] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 593.320047][T14039] ? aa_sk_perm+0x2f4/0xb10 [ 593.320061][T14039] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.320076][T14039] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 593.320091][T14039] ____sys_sendmsg+0xa95/0xc70 [ 593.320106][T14039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.320118][T14039] ? get_compat_msghdr+0x11a/0x170 [ 593.320140][T14039] ___sys_sendmsg+0x134/0x1d0 [ 593.320151][T14039] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.320185][T14039] __sys_sendmsg+0x16d/0x220 [ 593.320195][T14039] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.320210][T14039] ? rcu_is_watching+0x12/0xc0 [ 593.320221][T14039] __do_fast_syscall_32+0x73/0x120 [ 593.320236][T14039] do_fast_syscall_32+0x32/0x80 [ 593.320250][T14039] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.320263][T14039] RIP: 0023:0xf7f36579 [ 593.320272][T14039] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 593.320282][T14039] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 593.320293][T14039] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800006c0 [ 593.320300][T14039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.320306][T14039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.320312][T14039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 593.320318][T14039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.320331][T14039] [ 593.517128][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1982'. [ 593.521452][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1982'. [ 593.525227][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1982'. [ 593.528902][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1982'. [ 595.267540][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 596.005160][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1990'. [ 596.008386][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1990'. [ 596.012272][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1990'. [ 596.015589][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1990'. [ 598.219988][T14107] FAULT_INJECTION: forcing a failure. [ 598.219988][T14107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.231516][T14107] CPU: 3 UID: 0 PID: 14107 Comm: syz.3.1996 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 598.231556][T14107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 598.231566][T14107] Call Trace: [ 598.231572][T14107] [ 598.231579][T14107] dump_stack_lvl+0x16c/0x1f0 [ 598.231607][T14107] should_fail_ex+0x512/0x640 [ 598.231638][T14107] _copy_from_user+0x2e/0xd0 [ 598.231664][T14107] sctp_setsockopt+0x2045/0xb870 [ 598.231703][T14107] ? __pfx_sctp_setsockopt+0x10/0x10 [ 598.231733][T14107] ? __lock_acquire+0x5ca/0x1ba0 [ 598.231758][T14107] ? __pfx_aa_sk_perm+0x10/0x10 [ 598.231777][T14107] ? find_held_lock+0x2b/0x80 [ 598.231796][T14107] ? sock_common_setsockopt+0x2e/0xf0 [ 598.231819][T14107] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 598.231848][T14107] do_sock_setsockopt+0x221/0x470 [ 598.231866][T14107] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 598.231895][T14107] __sys_setsockopt+0x120/0x1a0 [ 598.231922][T14107] __ia32_sys_setsockopt+0xbc/0x160 [ 598.231946][T14107] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.231966][T14107] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 598.231988][T14107] __do_fast_syscall_32+0x73/0x120 [ 598.232012][T14107] do_fast_syscall_32+0x32/0x80 [ 598.232032][T14107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.232054][T14107] RIP: 0023:0xf7fe6579 [ 598.232069][T14107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 598.232085][T14107] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 598.232102][T14107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 598.232113][T14107] RDX: 0000000000000085 RSI: 00000000800001c0 RDI: 0000000000000090 [ 598.232124][T14107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.232134][T14107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 598.232144][T14107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.232183][T14107] [ 598.314167][ C3] vkms_vblank_simulate: vblank timer overrun [ 598.459679][T14114] ./file1: Can't lookup blockdev [ 598.514820][T14116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1998'. [ 598.961448][T14123] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.967224][T14142] __nla_validate_parse: 3 callbacks suppressed [ 600.967235][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 601.346612][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 601.350900][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2009'. [ 601.361097][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 601.365030][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 601.681328][T14158] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 602.615980][T13382] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 603.282769][T14183] veth1_macvtap: left promiscuous mode [ 603.284704][T14183] macsec0: entered promiscuous mode [ 603.534853][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'. [ 603.548276][T14193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'. [ 603.553827][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'. [ 603.558659][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2019'. [ 604.431037][T14202] ip6tnl1: entered promiscuous mode [ 604.432756][T14202] ip6tnl1: entered allmulticast mode [ 604.435209][T14202] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 605.190731][T14218] FAULT_INJECTION: forcing a failure. [ 605.190731][T14218] name failslab, interval 1, probability 0, space 0, times 0 [ 605.195839][T14218] CPU: 2 UID: 0 PID: 14218 Comm: syz.1.2027 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 605.195864][T14218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 605.195876][T14218] Call Trace: [ 605.195883][T14218] [ 605.195890][T14218] dump_stack_lvl+0x16c/0x1f0 [ 605.195916][T14218] should_fail_ex+0x512/0x640 [ 605.195941][T14218] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 605.195965][T14218] should_failslab+0xc2/0x120 [ 605.195988][T14218] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 605.196008][T14218] ? d_instantiate+0x77/0x90 [ 605.196026][T14218] ? alloc_empty_file+0x55/0x1e0 [ 605.196053][T14218] alloc_empty_file+0x55/0x1e0 [ 605.196076][T14218] alloc_file_pseudo+0x13a/0x230 [ 605.196101][T14218] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 605.196131][T14218] sock_alloc_file+0x50/0x210 [ 605.196153][T14218] do_accept+0x240/0x530 [ 605.196178][T14218] ? do_raw_spin_lock+0x12c/0x2b0 [ 605.196206][T14218] ? __pfx_do_accept+0x10/0x10 [ 605.196248][T14218] __sys_accept4+0x100/0x1b0 [ 605.196273][T14218] ? __pfx___sys_accept4+0x10/0x10 [ 605.196297][T14218] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 605.196327][T14218] ? syscall_user_dispatch+0x78/0x140 [ 605.196359][T14218] __ia32_sys_accept4+0x94/0x100 [ 605.196386][T14218] __do_fast_syscall_32+0x73/0x120 [ 605.196412][T14218] do_fast_syscall_32+0x32/0x80 [ 605.196435][T14218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 605.196457][T14218] RIP: 0023:0xf7f36579 [ 605.196471][T14218] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 605.196489][T14218] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 605.196508][T14218] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 605.196520][T14218] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 605.196532][T14218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.196543][T14218] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 605.196553][T14218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.196579][T14218] [ 605.944347][T14224] capability: warning: `syz.1.2030' uses 32-bit capabilities (legacy support in use) [ 606.178928][T14229] dvmrp0: entered allmulticast mode [ 606.583147][T14240] fuse: Unknown parameter '<ç.$‡Þ8Ïf\a&H œ±]dÆCól™3ÕÓmñ»1tŠ™R@Õ’ìAÔœôò¨÷Ž÷L*¾)¸©ÇeAûjh:#øœ ¯¶Ñ·:Ý4˜ÀÏ1§' [ 607.231611][ T5986] Process accounting resumed [ 607.699913][ T9] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 607.803674][T13382] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 607.805978][T14262] syzkaller1: entered promiscuous mode [ 607.808613][T14262] syzkaller1: entered allmulticast mode [ 607.871715][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.876270][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 607.890033][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.900645][ T9] usb 9-1: config 0 descriptor?? [ 607.975270][T14268] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 608.007567][T14270] fuse: Bad value for 'fd' [ 608.078829][T14271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 608.083463][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 608.087798][T14271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 608.092941][T14271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 608.113914][T14273] FAULT_INJECTION: forcing a failure. [ 608.113914][T14273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.118850][T14273] CPU: 1 UID: 0 PID: 14273 Comm: syz.1.2045 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 608.118868][T14273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 608.118876][T14273] Call Trace: [ 608.118882][T14273] [ 608.118887][T14273] dump_stack_lvl+0x16c/0x1f0 [ 608.118907][T14273] should_fail_ex+0x512/0x640 [ 608.118929][T14273] _copy_to_user+0x32/0xd0 [ 608.118950][T14273] simple_read_from_buffer+0xcb/0x170 [ 608.118971][T14273] proc_fail_nth_read+0x197/0x270 [ 608.118991][T14273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.119010][T14273] ? rw_verify_area+0xcf/0x680 [ 608.119029][T14273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.119045][T14273] vfs_read+0x1de/0xc70 [ 608.119057][T14273] ? __pfx___mutex_lock+0x10/0x10 [ 608.119072][T14273] ? __pfx_vfs_read+0x10/0x10 [ 608.119131][T14273] ? __fget_files+0x20e/0x3c0 [ 608.119153][T14273] ksys_read+0x12a/0x240 [ 608.119163][T14273] ? __pfx_ksys_read+0x10/0x10 [ 608.119174][T14273] ? rcu_is_watching+0x12/0xc0 [ 608.119187][T14273] __do_fast_syscall_32+0x73/0x120 [ 608.119203][T14273] do_fast_syscall_32+0x32/0x80 [ 608.119217][T14273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.119232][T14273] RIP: 0023:0xf7f36579 [ 608.119242][T14273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 608.119253][T14273] RSP: 002b:00000000f500c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 608.119264][T14273] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f500c620 [ 608.119271][T14273] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 608.119278][T14273] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 608.119284][T14273] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 608.119291][T14273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.119304][T14273] [ 608.288967][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 608.291806][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 608.296870][ T9] usb 9-1: USB disconnect, device number 56 [ 608.432737][T14280] netlink: 'syz.1.2047': attribute type 4 has an invalid length. [ 608.746057][ T9] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 608.919889][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 608.930487][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.948614][ T9] usb 9-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 608.967410][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.024311][ T9] usb 9-1: config 0 descriptor?? [ 609.070282][ T2296] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 609.250815][ T2296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.261941][ T2296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.270195][ T2296] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 609.274216][ T2296] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 609.277425][ T2296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.302148][ T2296] usb 8-1: config 0 descriptor?? [ 609.310696][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2040'. [ 609.431147][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 609.436077][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 609.456003][ T9] usb 9-1: USB disconnect, device number 57 [ 609.802924][ T2296] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 609.840452][ T2296] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 610.023749][T14285] /dev/nullb0: Can't open blockdev [ 610.832013][T14299] tmpfs: Unknown parameter 's' [ 611.093727][ C2] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 611.230161][ T1015] usb 8-1: reset high-speed USB device number 62 using dummy_hcd [ 611.292743][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 612.033327][ T5981] usb 8-1: USB disconnect, device number 62 [ 612.115255][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'. [ 612.456624][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 612.540019][ T5844] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 612.727258][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.781427][ T5844] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.795053][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.810331][ T5844] usb 5-1: config 0 descriptor?? [ 613.031461][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 613.034045][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 613.060441][ T5844] usb 5-1: USB disconnect, device number 61 [ 613.550233][ T29] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 613.700209][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 613.707674][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.712700][ T29] usb 5-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 613.716157][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.766854][ T29] usb 5-1: config 0 descriptor?? [ 614.148099][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'. [ 614.224571][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 614.227063][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 614.235856][ T29] usb 5-1: USB disconnect, device number 62 [ 614.318047][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 616.796024][T14405] serio: Serial port ptm0 [ 617.228722][T14413] random: crng reseeded on system resumption [ 617.340108][T14414] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 617.351247][T14413] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 618.000437][ T5981] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 618.151608][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.155550][ T5981] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.170695][ T5981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.174550][ T5981] usb 9-1: config 0 descriptor?? [ 618.207137][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 618.214000][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 618.387642][ T5981] usbhid 9-1:0.0: can't add hid device: -71 [ 618.390291][ T5981] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 618.404261][ T5981] usb 9-1: USB disconnect, device number 58 [ 618.450248][T14437] FAULT_INJECTION: forcing a failure. [ 618.450248][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 618.455675][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.1.2086 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 618.455700][T14437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 618.455711][T14437] Call Trace: [ 618.455732][T14437] [ 618.455739][T14437] dump_stack_lvl+0x16c/0x1f0 [ 618.455782][T14437] should_fail_ex+0x512/0x640 [ 618.455809][T14437] ? __kmalloc_noprof+0xbf/0x510 [ 618.455830][T14437] ? io_cache_alloc_new+0x45/0xf0 [ 618.455844][T14437] should_failslab+0xc2/0x120 [ 618.455866][T14437] __kmalloc_noprof+0xd2/0x510 [ 618.455890][T14437] io_cache_alloc_new+0x45/0xf0 [ 618.455909][T14437] __io_prep_rw+0x227/0xf40 [ 618.455932][T14437] ? __pfx___io_prep_rw+0x10/0x10 [ 618.455950][T14437] ? mark_held_locks+0x49/0x80 [ 618.455974][T14437] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 618.456001][T14437] io_prep_rw+0x24/0x220 [ 618.456020][T14437] io_prep_writev+0x23/0xa0 [ 618.456038][T14437] io_submit_sqes+0x825/0x25d0 [ 618.456076][T14437] __do_sys_io_uring_enter+0xd6a/0x1630 [ 618.456104][T14437] ? __fget_files+0x20e/0x3c0 [ 618.456131][T14437] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 618.456158][T14437] ? fput+0x70/0xf0 [ 618.456179][T14437] ? ksys_write+0x1b9/0x240 [ 618.456198][T14437] ? __pfx_ksys_write+0x10/0x10 [ 618.456219][T14437] ? rcu_is_watching+0x12/0xc0 [ 618.456240][T14437] __do_fast_syscall_32+0x73/0x120 [ 618.456266][T14437] do_fast_syscall_32+0x32/0x80 [ 618.456295][T14437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.456318][T14437] RIP: 0023:0xf7f36579 [ 618.456333][T14437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 618.456351][T14437] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 618.456371][T14437] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000003516 [ 618.456383][T14437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.456394][T14437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.456405][T14437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 618.456416][T14437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.456442][T14437] [ 618.840287][ T5981] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 619.030549][ T5981] usb 9-1: Using ep0 maxpacket: 32 [ 619.035585][ T5981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.040611][ T5981] usb 9-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 619.050771][ T5981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.063278][ T5981] usb 9-1: config 0 descriptor?? [ 619.329493][T14447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2081'. [ 619.451722][ T5981] usbhid 9-1:0.0: can't add hid device: -71 [ 619.451794][T14451] loop8: detected capacity change from 0 to 7 [ 619.453665][ T5981] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 619.460534][T14451] Dev loop8: unable to read RDB block 7 [ 619.463531][T14451] loop8: unable to read partition table [ 619.466529][T14451] loop8: partition table beyond EOD, truncated [ 619.469242][T14451] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 619.469242][T14451] ) failed (rc=-5) [ 619.588672][ T5981] usb 9-1: USB disconnect, device number 59 [ 621.189024][T14478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2096'. [ 621.192775][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2096'. [ 621.195664][T14478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2096'. [ 621.199352][T14478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2096'. [ 621.782365][T14480] lo speed is unknown, defaulting to 1000 [ 622.864664][T14496] mkiss: ax0: crc mode is auto. [ 623.780057][ T5983] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 623.831571][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.834170][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.960491][ T5983] usb 8-1: Using ep0 maxpacket: 8 [ 623.971768][ T5983] usb 8-1: config 0 has no interfaces? [ 623.973964][ T5983] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.976882][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.001920][ T5983] usb 8-1: config 0 descriptor?? [ 624.259265][T14511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.265373][T14511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.276590][ T9] usb 8-1: USB disconnect, device number 63 [ 624.812449][T14526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2106'. [ 624.817929][T14526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2106'. [ 624.823794][T14526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2106'. [ 624.828181][T14526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2106'. [ 625.745602][T14548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2115'. [ 625.749528][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2115'. [ 625.754569][T14548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2115'. [ 625.757994][T14548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2115'. [ 626.736425][T14555] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 626.763440][T14555] CIFS mount error: No usable UNC path provided in device string! [ 626.763440][T14555] [ 626.767746][T14555] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 629.182779][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2121'. [ 629.186103][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2121'. [ 631.389462][T14621] __nla_validate_parse: 2 callbacks suppressed [ 631.389472][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 631.400623][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2132'. [ 631.403605][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 631.409885][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 631.446759][T14616] lo speed is unknown, defaulting to 1000 [ 632.417266][T14640] netlink: 'syz.0.2136': attribute type 11 has an invalid length. [ 632.420209][T14640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2136'. [ 633.408304][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 633.415271][T14657] netlink: 'syz.4.2142': attribute type 39 has an invalid length. [ 633.420043][T14657] veth0_macvtap: left promiscuous mode [ 633.550247][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 633.553454][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2141'. [ 633.556932][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 633.569060][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'. [ 633.605603][T14665] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 633.847461][T14667] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 633.861052][ T5942] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 634.342164][ T5844] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 634.633698][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.637828][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.674437][ T5844] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 634.677532][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.697129][ T5844] usb 8-1: config 0 descriptor?? [ 634.910945][ T5844] usbhid 8-1:0.0: can't add hid device: -71 [ 634.914650][ T5844] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 634.927630][ T5844] usb 8-1: USB disconnect, device number 64 [ 635.399908][ T5844] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 635.433288][T14687] Cannot find set identified by id 0 to match [ 635.559948][ T5844] usb 8-1: Using ep0 maxpacket: 32 [ 635.565212][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.569122][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.573380][ T5844] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 635.576198][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.580268][ T5844] usb 8-1: config 0 descriptor?? [ 635.583614][ T5844] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 635.587458][ T5844] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 635.880881][T14613] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 635.921474][ T4305] usb 8-1: USB disconnect, device number 65 [ 636.025435][ T4305] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 636.111723][T14613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.115778][T14613] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.118753][T14613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.127984][T14613] usb 9-1: config 0 descriptor?? [ 636.344060][T14613] usbhid 9-1:0.0: can't add hid device: -71 [ 636.346254][T14613] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 636.350461][T14613] usb 9-1: USB disconnect, device number 60 [ 636.785408][T14613] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 636.940692][T14613] usb 9-1: Using ep0 maxpacket: 32 [ 636.945260][T14613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.948658][T14613] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 636.951671][T14613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.957787][T14613] usb 9-1: config 0 descriptor?? [ 636.962476][T14613] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 636.967559][T14613] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 637.239350][T14710] __nla_validate_parse: 1 callbacks suppressed [ 637.239429][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2153'. [ 637.457349][T14613] usb 9-1: USB disconnect, device number 61 [ 637.463597][T14613] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 637.559934][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2157'. [ 637.563499][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'. [ 637.566493][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2157'. [ 637.569464][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2157'. [ 638.636793][T14729] ip6tnl1: entered promiscuous mode [ 638.638495][T14729] ip6tnl1: entered allmulticast mode [ 638.641662][T14729] team0: Device ip6tnl1 is of different type [ 640.430587][ T2296] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 640.601464][ T2296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.605001][ T2296] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.628290][ T2296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.633256][ T2296] usb 9-1: config 0 descriptor?? [ 640.840186][ T2296] usbhid 9-1:0.0: can't add hid device: -71 [ 640.842287][ T2296] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 640.853580][ T2296] usb 9-1: USB disconnect, device number 62 [ 641.145790][T14755] ip6tnl1: entered promiscuous mode [ 641.147581][T14755] ip6tnl1: entered allmulticast mode [ 641.150466][T14755] team0: Device ip6tnl1 is of different type [ 641.160966][T14757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2165'. [ 641.794016][T14763] ip6tnl1: entered promiscuous mode [ 641.795739][T14763] ip6tnl1: entered allmulticast mode [ 641.799462][T14763] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 642.260191][ T5983] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 642.421289][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.424703][ T5983] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 642.427796][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.451613][ T5983] usb 8-1: config 0 descriptor?? [ 642.667420][ T5983] usbhid 8-1:0.0: can't add hid device: -71 [ 642.669625][ T5983] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 642.682686][ T5983] usb 8-1: USB disconnect, device number 66 [ 642.735178][T14773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'. [ 642.738514][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 642.742707][T14773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'. [ 642.747562][T14773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'. [ 643.110774][ T5983] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 643.280234][ T5983] usb 8-1: Using ep0 maxpacket: 32 [ 643.284972][ T5983] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.299191][ T5983] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 643.310536][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.370607][ T5983] usb 8-1: config 0 descriptor?? [ 643.381384][ T5983] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 643.390367][ T5983] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 643.652509][T14781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2169'. [ 643.723231][ T5983] usb 8-1: USB disconnect, device number 67 [ 643.735293][ T5983] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 643.872313][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2172'. [ 643.875696][T14786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2172'. [ 643.879337][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2172'. [ 643.883351][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2172'. [ 645.295896][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 645.361638][T14794] fuse: Unknown parameter 'fdy0x0000000000000003' [ 646.343174][ T40] kauditd_printk_skb: 343 callbacks suppressed [ 646.343190][ T40] audit: type=1326 audit(1745657357.218:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.4.2177" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12579 code=0x0 [ 646.747745][T14809] bridge0: entered promiscuous mode [ 647.149980][ T5844] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 647.360193][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.365135][ T5844] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 647.369284][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.424673][ T5844] usb 5-1: config 0 descriptor?? [ 647.633659][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 647.645023][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 647.660158][ T5844] usb 5-1: USB disconnect, device number 63 [ 647.916002][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'. [ 648.060146][T14832] ubi: mtd0 is already attached to ubi31 [ 648.340227][T14613] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 648.551835][T14613] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.555844][T14613] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 648.559249][T14613] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.575567][T14613] usb 8-1: config 0 descriptor?? [ 648.804910][T14613] usbhid 8-1:0.0: can't add hid device: -71 [ 648.806916][T14613] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 648.866932][T14613] usb 8-1: USB disconnect, device number 68 [ 649.300523][ T9] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 649.415649][T14839] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2187'. [ 649.480308][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 649.483823][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.493027][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 649.502136][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.513758][ T9] usb 8-1: config 0 descriptor?? [ 649.526343][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 649.552889][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 649.666692][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2188'. [ 649.669876][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'. [ 649.674658][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2188'. [ 649.679132][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2188'. [ 649.782119][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 649.878269][ T9] usb 8-1: USB disconnect, device number 69 [ 649.886090][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 652.147703][T14873] syz.0.2195: attempt to access beyond end of device [ 652.147703][T14873] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 652.152472][T14873] exFAT-fs (nbd0): unable to read boot sector [ 652.154414][T14873] exFAT-fs (nbd0): failed to read boot sector [ 652.156348][T14873] exFAT-fs (nbd0): failed to recognize exfat type [ 652.630533][T14885] ip6tnl1: entered promiscuous mode [ 652.632241][T14885] ip6tnl1: entered allmulticast mode [ 652.635578][T14885] team0: Device ip6tnl1 is of different type [ 652.662974][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 652.843757][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.847091][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 652.863110][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.882803][ T9] usb 5-1: config 0 descriptor?? [ 653.090446][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 653.092470][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 653.109993][ T9] usb 5-1: USB disconnect, device number 64 [ 653.503154][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 655.085229][T14904] /dev/nullb0: Can't open blockdev [ 655.154093][T14907] kvm: pic: non byte read [ 655.163712][T14907] kvm: pic: non byte read [ 655.177208][T14907] kvm: pic: non byte read [ 655.182296][T14907] kvm: pic: non byte read [ 655.212652][T14907] kvm: pic: non byte read [ 655.222814][T14907] kvm: pic: non byte read [ 655.235222][T14907] kvm: pic: non byte read [ 655.245036][T14907] kvm: pic: non byte read [ 655.256802][T14907] kvm: pic: non byte read [ 655.279916][T14907] kvm: pic: non byte read [ 655.663257][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2203'. [ 655.669882][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2203'. [ 655.673266][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2203'. [ 655.676383][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2203'. [ 656.976299][T14938] /dev/nullb0: Can't open blockdev [ 657.935488][T14945] ip6tnl1: entered promiscuous mode [ 657.937255][T14945] ip6tnl1: entered allmulticast mode [ 657.941169][T14945] team0: Device ip6tnl1 is of different type [ 658.772649][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2213'. [ 658.777754][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2213'. [ 658.784007][T14953] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2213'. [ 658.821894][T14953] sctp: [Deprecated]: syz.0.2213 (pid 14953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.821894][T14953] Use struct sctp_sack_info instead [ 658.964903][T14965] bridge_slave_0: left allmulticast mode [ 658.967721][T14965] bridge_slave_0: left promiscuous mode [ 658.969854][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.997859][T14955] netlink: 'syz.4.2212': attribute type 10 has an invalid length. [ 658.998276][T14965] bridge_slave_1: left allmulticast mode [ 659.003335][T14965] bridge_slave_1: left promiscuous mode [ 659.049408][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.064736][T14965] bond0: (slave bond_slave_0): Releasing backup interface [ 659.090748][T14965] bond0: (slave bond_slave_1): Releasing backup interface [ 659.116879][T14965] team0: Port device team_slave_0 removed [ 659.129622][T14965] team0: Port device team_slave_1 removed [ 659.134051][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.136747][T14965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.143615][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.146594][T14965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.250792][ T2296] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 659.421778][ T2296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.436358][ T2296] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 659.443879][ T2296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.455061][ T2296] usb 5-1: config 0 descriptor?? [ 659.672438][ T2296] usbhid 5-1:0.0: can't add hid device: -71 [ 659.674451][ T2296] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.714407][ T2296] usb 5-1: USB disconnect, device number 65 [ 660.219428][ T2296] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 660.321190][T14989] usb usb8: selecting invalid altsetting 60671 [ 660.373192][ T2296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.378115][ T2296] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 660.404565][ T2296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.425946][ T2296] usb 5-1: config 0 descriptor?? [ 660.708343][T14992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2214'. [ 660.788468][ T2296] usbhid 5-1:0.0: can't add hid device: -71 [ 660.810872][ T2296] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.815084][ T2296] usb 5-1: USB disconnect, device number 66 [ 661.633939][T15002] 9pnet_fd: Insufficient options for proto=fd [ 662.232226][T15012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2224'. [ 662.239902][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2224'. [ 662.242869][T15012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2224'. [ 662.250082][T15012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2224'. [ 662.585167][T15015] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2225'. [ 662.589034][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 665.420054][T12358] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 665.599987][T12358] usb 5-1: Using ep0 maxpacket: 8 [ 665.605048][T12358] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 665.611196][T12358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.614206][T12358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 665.616886][T12358] usb 5-1: SerialNumber: syz [ 665.623636][T12358] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 665.833163][T15043] netlink: 'syz.0.2230': attribute type 10 has an invalid length. [ 665.857646][ T5983] usb 5-1: USB disconnect, device number 67 [ 667.600989][T15092] __nla_validate_parse: 2 callbacks suppressed [ 667.601003][T15092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'. [ 667.606223][T15092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'. [ 667.609455][T15092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'. [ 667.612876][T15092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'. [ 670.295131][T15123] ip6tnl1: entered promiscuous mode [ 670.297327][T15123] ip6tnl1: entered allmulticast mode [ 670.301759][T15123] team0: Device ip6tnl1 is of different type [ 671.180320][ T2296] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 671.373529][ T2296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.377113][ T2296] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 671.390304][ T2296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.394392][ T2296] usb 9-1: config 0 descriptor?? [ 671.621169][ T2296] usbhid 9-1:0.0: can't add hid device: -71 [ 671.626719][ T2296] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 671.635779][ T2296] usb 9-1: USB disconnect, device number 63 [ 672.060459][ T2296] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 672.220361][ T2296] usb 9-1: Using ep0 maxpacket: 32 [ 672.223609][ T2296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.227388][ T2296] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 672.240281][ T2296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.250578][ T2296] usb 9-1: config 0 descriptor?? [ 672.262533][ T2296] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 672.280293][ T2296] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 672.552302][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2250'. [ 672.644125][ T9] usb 9-1: USB disconnect, device number 64 [ 672.648221][ T9] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 673.789488][T15174] program syz.3.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.264487][T15202] ip6tnl1: entered promiscuous mode [ 675.266421][T15202] ip6tnl1: entered allmulticast mode [ 675.272474][T15202] team0: Device ip6tnl1 is of different type [ 676.096501][T15217] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 676.099636][T15217] batadv0: left allmulticast mode [ 676.113852][T15217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.128972][T15217] batadv0: entered allmulticast mode [ 676.145801][T15217] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 678.112411][T15262] FAULT_INJECTION: forcing a failure. [ 678.112411][T15262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.117213][T15262] CPU: 3 UID: 0 PID: 15262 Comm: syz.3.2277 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 678.117230][T15262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 678.117237][T15262] Call Trace: [ 678.117242][T15262] [ 678.117246][T15262] dump_stack_lvl+0x16c/0x1f0 [ 678.117264][T15262] should_fail_ex+0x512/0x640 [ 678.117283][T15262] _copy_from_user+0x2e/0xd0 [ 678.117300][T15262] kstrtouint_from_user+0xd6/0x1d0 [ 678.117313][T15262] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 678.117325][T15262] ? __lock_acquire+0xaa4/0x1ba0 [ 678.117347][T15262] proc_fail_nth_write+0x83/0x250 [ 678.117364][T15262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.117384][T15262] vfs_write+0x25c/0x1180 [ 678.117393][T15262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.117411][T15262] ? __pfx___mutex_lock+0x10/0x10 [ 678.117426][T15262] ? __pfx_vfs_write+0x10/0x10 [ 678.117440][T15262] ? __fget_files+0x20e/0x3c0 [ 678.117462][T15262] ksys_write+0x12a/0x240 [ 678.117472][T15262] ? __pfx_ksys_write+0x10/0x10 [ 678.117483][T15262] ? rcu_is_watching+0x12/0xc0 [ 678.117496][T15262] __do_fast_syscall_32+0x73/0x120 [ 678.117511][T15262] do_fast_syscall_32+0x32/0x80 [ 678.117525][T15262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.117539][T15262] RIP: 0023:0xf7fe6579 [ 678.117548][T15262] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 678.117559][T15262] RSP: 002b:00000000f50e5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 678.117570][T15262] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e5620 [ 678.117577][T15262] RDX: 0000000000000001 RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 678.117584][T15262] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 678.117590][T15262] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 678.117596][T15262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.117610][T15262] [ 679.225452][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 679.246525][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2284'. [ 679.250553][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2284'. [ 679.256192][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2284'. [ 679.261446][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2284'. [ 683.225601][T13382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.232395][T13382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.242786][T13382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.251888][T13382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.255002][T13382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.307206][T15356] lo speed is unknown, defaulting to 1000 [ 683.724221][T15356] chnl_net:caif_netlink_parms(): no params data found [ 683.973007][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.976076][T15356] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.978849][T15356] bridge_slave_0: entered allmulticast mode [ 683.983298][T15356] bridge_slave_0: entered promiscuous mode [ 683.991312][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.994845][T15356] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.997796][T15356] bridge_slave_1: entered allmulticast mode [ 684.002892][T15356] bridge_slave_1: entered promiscuous mode [ 684.006093][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 684.081552][T15371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2300'. [ 684.090430][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2300'. [ 684.094325][T15371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2300'. [ 684.098802][T15371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2300'. [ 684.194142][T15356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.206250][T15356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.239218][T15373] /dev/nullb0: Can't open blockdev [ 684.303138][ T40] audit: type=1326 audit(1745657402.180:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.322625][ T40] audit: type=1326 audit(1745657402.180:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.340347][ T40] audit: type=1326 audit(1745657402.180:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.351381][ T40] audit: type=1326 audit(1745657402.190:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.365905][ T40] audit: type=1326 audit(1745657402.190:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.381856][ T40] audit: type=1326 audit(1745657402.190:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.390425][ T40] audit: type=1326 audit(1745657402.190:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.406203][ T40] audit: type=1326 audit(1745657402.190:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.426545][ T40] audit: type=1326 audit(1745657402.190:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.436421][ T40] audit: type=1326 audit(1745657402.190:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15374 comm="syz.3.2301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 684.607339][T15356] team0: Port device team_slave_0 added [ 684.621673][T15356] team0: Port device team_slave_1 added [ 684.734281][T15356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.737131][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.748726][T15356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.761174][T15356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.764143][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.776068][T15356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.867387][T15356] hsr_slave_0: entered promiscuous mode [ 684.870220][T15356] hsr_slave_1: entered promiscuous mode [ 684.874726][T15356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.878988][T15356] Cannot create hsr debugfs directory [ 685.185329][T15356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.263370][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.265927][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.282779][T15356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.340255][ T5942] Bluetooth: hci1: command tx timeout [ 685.388935][T15356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.505162][T15356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.601673][T15389] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 685.631839][T15389] bond1: entered promiscuous mode [ 685.634141][T15389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.809037][T15356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.822825][T15356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.827837][T15356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.845125][T15356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.982926][T15356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.011291][T15356] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.023478][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.026490][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.055033][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.057494][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.480494][T15356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.582621][T15356] veth0_vlan: entered promiscuous mode [ 686.591352][T15356] veth1_vlan: entered promiscuous mode [ 686.675527][T15356] veth0_macvtap: entered promiscuous mode [ 686.704823][T15356] veth1_macvtap: entered promiscuous mode [ 686.756792][T15356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.770538][T15356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.788177][T15356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.795900][T15356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.801242][T15356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.816597][T15356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.847030][T15356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.870166][T15356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.873948][T15356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.877372][T15356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.022011][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2306'. [ 687.025267][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2306'. [ 687.028856][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2306'. [ 687.039892][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2306'. [ 687.057410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.064137][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.141338][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.145557][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.430229][ T5942] Bluetooth: hci1: command tx timeout [ 687.576726][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'. [ 687.581600][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'. [ 687.583054][T15414] batadv_slave_0: left allmulticast mode [ 687.585362][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'. [ 687.592229][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.595385][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2297'. [ 689.129320][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 689.458134][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 689.500007][ T5942] Bluetooth: hci1: command tx timeout [ 689.704648][T15430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.710294][T15430] bond0: (slave bond1): Enslaving as an active interface with an up link [ 689.820210][T15430] netlink: 'syz.0.2314': attribute type 1 has an invalid length. [ 689.901449][T15432] ip6erspan0: entered promiscuous mode [ 691.580102][ T5942] Bluetooth: hci1: command tx timeout [ 691.861132][T15458] ip6tnl1: entered promiscuous mode [ 691.863415][T15458] ip6tnl1: entered allmulticast mode [ 691.870809][T15458] team0: Device ip6tnl1 is of different type [ 692.880626][T15471] __nla_validate_parse: 4 callbacks suppressed [ 692.880638][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2326'. [ 692.889896][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2326'. [ 692.893095][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2326'. [ 692.896341][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2326'. [ 695.591405][T15503] overlay: Unknown parameter 'mask' [ 696.138311][T15520] netlink: 'syz.1.2341': attribute type 2 has an invalid length. [ 696.323616][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2340'. [ 696.328954][T15525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 696.350047][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2340'. [ 696.356988][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2340'. [ 696.389047][T15527] hfs: unable to load iocharset "io#harset" [ 699.667607][T15584] ip6tnl1: entered promiscuous mode [ 699.670607][T15584] ip6tnl1: entered allmulticast mode [ 699.677351][T15584] team0: Device ip6tnl1 is of different type [ 701.664221][T15607] hsr0: entered promiscuous mode [ 701.666583][T15607] hsr0: left allmulticast mode [ 701.864941][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 701.878702][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2363'. [ 701.889424][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 701.899600][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'. [ 702.220691][T15617] FAULT_INJECTION: forcing a failure. [ 702.220691][T15617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.226473][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.3.2364 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 702.226502][T15617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 702.226515][T15617] Call Trace: [ 702.226523][T15617] [ 702.226532][T15617] dump_stack_lvl+0x16c/0x1f0 [ 702.226582][T15617] should_fail_ex+0x512/0x640 [ 702.226621][T15617] _copy_to_user+0x32/0xd0 [ 702.226653][T15617] simple_read_from_buffer+0xcb/0x170 [ 702.226685][T15617] proc_fail_nth_read+0x197/0x270 [ 702.226713][T15617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.226744][T15617] ? rw_verify_area+0xcf/0x680 [ 702.226771][T15617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.226798][T15617] vfs_read+0x1de/0xc70 [ 702.226822][T15617] ? __pfx___mutex_lock+0x10/0x10 [ 702.226846][T15617] ? __pfx_vfs_read+0x10/0x10 [ 702.226873][T15617] ? __fget_files+0x20e/0x3c0 [ 702.226912][T15617] ksys_read+0x12a/0x240 [ 702.226930][T15617] ? __pfx_ksys_read+0x10/0x10 [ 702.226951][T15617] ? rcu_is_watching+0x12/0xc0 [ 702.226975][T15617] __do_fast_syscall_32+0x73/0x120 [ 702.227003][T15617] do_fast_syscall_32+0x32/0x80 [ 702.227024][T15617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 702.227044][T15617] RIP: 0023:0xf7fe6579 [ 702.227055][T15617] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 702.227071][T15617] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 702.227086][T15617] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 702.227095][T15617] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 702.227104][T15617] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 702.227113][T15617] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 702.227121][T15617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.227141][T15617] [ 702.917699][T15635] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 703.520967][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 703.520981][ T40] audit: type=1326 audit(1745657421.400:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.573501][T15653] loop6: detected capacity change from 0 to 524287999 [ 703.577563][ T40] audit: type=1326 audit(1745657421.400:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.588223][T14613] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 703.601591][ T40] audit: type=1326 audit(1745657421.430:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.634437][ T40] audit: type=1326 audit(1745657421.430:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.660520][ T40] audit: type=1326 audit(1745657421.430:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.682947][ T40] audit: type=1326 audit(1745657421.430:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.694596][ T40] audit: type=1326 audit(1745657421.430:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.732925][ T40] audit: type=1326 audit(1745657421.430:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.760215][ T40] audit: type=1326 audit(1745657421.430:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.785540][ T40] audit: type=1326 audit(1745657421.430:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.4.2374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 703.804243][T14613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 703.807526][T14613] usb 6-1: no configurations [ 703.809592][T14613] usb 6-1: can't read configurations, error -22 [ 703.941984][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 704.041201][T15661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2376'. [ 704.145584][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 704.162913][T15669] lo: entered promiscuous mode [ 704.165047][T15669] lo: left allmulticast mode [ 704.169123][T15669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.529979][T15405] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 705.682498][T15405] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.688538][T15405] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.692642][T15405] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.700497][T15405] usb 9-1: config 0 descriptor?? [ 705.909239][T15405] usbhid 9-1:0.0: can't add hid device: -71 [ 705.911723][T15405] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 705.929308][T15405] usb 9-1: USB disconnect, device number 65 [ 706.352430][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.372911][T15720] bond0: (slave rose0): Enslaving as an active interface with an up link [ 706.390408][T14613] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 706.552325][T14613] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.566551][T14613] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 706.578731][T14613] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.619740][T14613] usb 9-1: config 0 descriptor?? [ 706.671302][T15729] rdma_rxe: rxe_newlink: failed to add lo [ 706.708444][T15718] syz.1.2394 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 706.955754][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 707.425337][T14613] usbhid 9-1:0.0: can't add hid device: -71 [ 707.427786][T14613] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 707.437178][T14613] usb 9-1: USB disconnect, device number 66 [ 707.573849][T15750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2397'. [ 707.576820][T15750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2397'. [ 708.766437][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2402'. [ 709.258854][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 712.186438][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 712.223444][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'. [ 712.423021][T13382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.427728][T13382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.435193][T13382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.439543][T13382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.450496][T13382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.505451][T15826] lo speed is unknown, defaulting to 1000 [ 712.869235][T15826] chnl_net:caif_netlink_parms(): no params data found [ 712.971802][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.975253][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.978154][T15826] bridge_slave_0: entered allmulticast mode [ 712.981284][T15826] bridge_slave_0: entered promiscuous mode [ 712.985572][T15826] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.988678][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.992477][T15826] bridge_slave_1: entered allmulticast mode [ 712.996651][T15826] bridge_slave_1: entered promiscuous mode [ 713.085162][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.094281][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.134566][T15826] team0: Port device team_slave_0 added [ 713.139105][T15826] team0: Port device team_slave_1 added [ 713.189042][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.192313][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.202032][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.206460][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.208623][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.220615][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.274820][T15826] hsr_slave_0: entered promiscuous mode [ 713.281628][T15826] hsr_slave_1: entered promiscuous mode [ 713.284397][T15826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.288256][T15826] Cannot create hsr debugfs directory [ 713.724560][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 713.826028][ T45] BUG: sleeping function called from invalid context at mm/util.c:743 [ 713.829951][ T45] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 45, name: kcompactd1 [ 713.834843][ T45] preempt_count: 1, expected: 0 [ 713.837299][ T45] RCU nest depth: 0, expected: 0 [ 713.839079][ T45] 1 lock held by kcompactd1/45: [ 713.841166][ T45] #0: ffff88801df87cc8 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x25b/0x690 [ 713.845606][ T45] Preemption disabled at: [ 713.845617][ T45] [<0000000000000000>] 0x0 [ 713.849743][ T45] CPU: 0 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 713.849766][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 713.849775][ T45] Call Trace: [ 713.849782][ T45] [ 713.849803][ T45] dump_stack_lvl+0x16c/0x1f0 [ 713.849829][ T45] __might_resched+0x3c0/0x5e0 [ 713.849848][ T45] ? __free_frozen_pages+0x72a/0xff0 [ 713.849874][ T45] ? __pfx___might_resched+0x10/0x10 [ 713.849896][ T45] folio_mc_copy+0xfb/0x190 [ 713.849921][ T45] __migrate_folio.constprop.0+0xa1/0x3d0 [ 713.849948][ T45] __buffer_migrate_folio+0x5cd/0x690 [ 713.849973][ T45] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 713.849994][ T45] move_to_new_folio+0x1d9/0x700 [ 713.850019][ T45] migrate_pages_batch+0x201d/0x31a0 [ 713.850045][ T45] ? __pfx_compaction_free+0x10/0x10 [ 713.850077][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 713.850101][ T45] ? __lock_acquire+0xaa4/0x1ba0 [ 713.850125][ T45] migrate_pages_sync+0x12d/0x8a0 [ 713.850146][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 713.850168][ T45] ? __pfx_compaction_free+0x10/0x10 [ 713.850195][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 713.850219][ T45] ? find_held_lock+0x2b/0x80 [ 713.850234][ T45] ? isolate_movable_page+0x124/0x750 [ 713.850257][ T45] migrate_pages+0x1b28/0x2350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 713.850278][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 713.850299][ T45] ? __pfx_compaction_free+0x10/0x10 [ 713.850328][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 713.850355][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 713.850381][ T45] ? __pfx___might_resched+0x10/0x10 [ 713.850398][ T45] ? rcu_is_watching+0x12/0xc0 [ 713.850416][ T45] compact_zone+0x1f6c/0x45f0 [ 713.850459][ T45] ? __pfx_compact_zone+0x10/0x10 [ 713.850474][ T45] ? compaction_suitable+0x18c/0x3d0 [ 713.850492][ T45] ? compaction_suit_allocation_order+0x1d0/0x320 [ 713.850510][ T45] kcompactd_do_work+0x4a1/0xa50 [ 713.850528][ T45] ? __pfx_kcompactd_do_work+0x10/0x10 [ 713.850540][ T45] ? sched_clock_cpu+0x6c/0x530 [ 713.850576][ T45] ? psi_memstall_enter+0x220/0x310 [ 713.850594][ T45] ? rcu_is_watching+0x12/0xc0 [ 713.850609][ T45] ? psi_memstall_enter+0x225/0x310 [ 713.850625][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.850649][ T45] kcompactd+0x406/0xea0 [ 713.850668][ T45] ? __pfx_kcompactd+0x10/0x10 [ 713.850678][ T45] ? find_held_lock+0x2b/0x80 [ 713.850693][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 713.850709][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.850726][ T45] ? __kthread_parkme+0x19e/0x250 [ 713.850744][ T45] ? __pfx_kcompactd+0x10/0x10 [ 713.850757][ T45] kthread+0x3c2/0x780 [ 713.850775][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850792][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850811][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850829][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850849][ T45] ? rcu_is_watching+0x12/0xc0 [ 713.850863][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850886][ T45] ret_from_fork+0x45/0x80 [ 713.850910][ T45] ? __pfx_kthread+0x10/0x10 [ 713.850930][ T45] ret_from_fork_asm+0x1a/0x30 [ 713.850961][ T45] [ 714.407390][T10614] syz_tun (unregistering): left allmulticast mode [ 714.445021][T15858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.584110][T15858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.711204][T15858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.791969][T15858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.900610][T15858] bridge_slave_1: left allmulticast mode [ 714.902869][T15858] bridge_slave_1: left promiscuous mode [ 714.905963][T15858] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.912633][T15858] bridge_slave_0: left allmulticast mode [ 714.914938][T15858] bridge_slave_0: left promiscuous mode [ 714.917511][T15858] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.298678][T15858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.303909][T15858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.307814][T15858] bond0 (unregistering): Released all slaves [ 715.686583][T15858] hsr_slave_0: left promiscuous mode [ 715.688860][T15858] hsr_slave_1: left promiscuous mode [ 715.691114][T15858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.693408][T15858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.696377][T15858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.699377][T15858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.757905][T15858] veth1_macvtap: left promiscuous mode [ 715.760637][T15858] veth0_macvtap: left promiscuous mode [ 715.762474][T15858] veth1_vlan: left promiscuous mode [ 715.764243][T15858] veth0_vlan: left promiscuous mode [ 716.500286][T15858] team0 (unregistering): Port device team_slave_1 removed [ 716.585612][T15858] team0 (unregistering): Port device team_slave_0 removed [ 717.492455][T15858] bridge_slave_1: left allmulticast mode [ 717.494775][T15858] bridge_slave_1: left promiscuous mode [ 717.497100][T15858] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.504047][T15858] bridge_slave_0: left allmulticast mode [ 717.506838][T15858] bridge_slave_0: left promiscuous mode [ 717.509431][T15858] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.665523][T15858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.671903][T15858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.676052][T15858] bond0 (unregistering): Released all slaves [ 717.886978][T15858] hsr_slave_0: left promiscuous mode [ 717.889296][T15858] hsr_slave_1: left promiscuous mode [ 717.895942][T15858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.898626][T15858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.081678][T15858] team0 (unregistering): Port device team_slave_1 removed [ 718.118908][T15858] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 08:50:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf175 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc9000070ee68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002c R14=ffffffff9addcb40 R15=ffffffff854bf110 RIP=ffffffff854bf19f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000567604c0 CR3=0000000048e24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3bf440 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8dcca585 RDI=ffffffff8bf467a0 RBP=0000000000000002 RSP=ffffc9000366f018 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=000000000001057e R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197aa73 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f06e40 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=81fcdd18 EBX=00000000 ECX=00000000 EDX=00001d18 ESI=81fcdd18 EDI=ffffffff EBP=f7420000 ESP=ffa91eb8 EIP=f70be6ae EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56760440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4724b24ba0 CR3=000000007702a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88802b532de8 RCX=ffffc90006870001 RDX=0000000000000000 RSI=ffffffff8bf46720 RDI=ffffffff8dce2d18 RBP=0000000000000003 RSP=ffffc9000686eae0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012921 R12=ffffffff81699d14 R13=ffffc9000686ebb0 R14=ffffc9000686ee28 R15=ffffc9000686ebe4 RIP=ffffffff81a072ad RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f508dcc0 CR3=000000005f916000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000