last executing test programs: 9.323125145s ago: executing program 3 (id=3245): r0 = userfaultfd(0x801) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)="f765c7", 0x3}, {&(0x7f0000000440)="61dd8358637bef1c372cd1beeff12ed5cd5485909d06bfaad1088d186e16446454409afc0279c82757375aad990c85c0207967167b7c91e4", 0x38}, {&(0x7f0000000a80)="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", 0x259}, {&(0x7f0000000580)="b1c6b992f10d37ea811e2169364d6d13916159f63a2172a2778ca0d94304fad992ba2107068580d6a974ab6d122ed39ee1da430847169ca7aa91802cf79a8958d8c250eb674a13a919e33a65198a83938c1c8951e6ffcb4a173d5e2e255d9283048ec0af0f416ca7c640b314a3cfc50babd15b9d1b5ecc9a99b15d25035dd5f71b5ea47af7ba486ab03a9fbeea6f002a9e166161a56154aca9c8320d73977acce5f4028a27cb88f118fdf0af1a21264ef8e7e5d3f2a377515043bdfdf765113748f759bfb74f01e60d9177bc04a4cbc035d846797db9ef", 0xd7}, {&(0x7f0000000680)="92579c6f740527ee4aadb8158041a332e49e06c4feb5c74cd4acf62022b33094c877f23d5fba86fc85d598f4efb34f1c24c33ba38acbc77db68231380a7cc472fbd52e77b6d558c279feb9f01bb2b02e29f72d36fba619fda7df130e2068dfd72a09309b2296d53ea7332f2e4ffe842deae3a7e7b7c185aa8140dd9520e0fe9e73d76cd935549b1935f8672a63208ab13a60a8ee85eaba5f3c5abc94018c202e562f9134b31e02858446bdae58c00d197af7", 0xb2}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000780)="ad6f64cb9cd5784f773e86e63dc16eab57914414faf43621dbae45892ff3c960358c7d0ad622b8b36049e1154cbb7a51ffa64a822bd5cc0480fba7d3a079bdfaac58da313b70ec59496e8a523f1ef681860526d7a432b527ff24cee95d548f0be174786349ae81abe9ebec1a3546426085d1c0909a3a45756876975f552c860872f1db6cd35bc88218d15e1bb164e94da720e483dfa3df148758526bf0d99dd0c068999f5d3549c196f904b85a41e4e6c170b8100e02231df13441e94bde50ad5cdad89226b172d53f0b43af56fa306ee95d9bdc", 0xd4}, {&(0x7f0000000d00)="5bc08aa5c578b81f7d62a1ebd4700bbe503e1b2f98bb938570bfef4e0d3081ddf17011b6f211f1a8e32e778fa80269d35f87c607de158d57b1fe983b0e2b5bd5a38b4b4694f5010c73921c7295f867ff1ed750ba50580b9f37790f5bd0eb6ee75e5f17b2f5c98eb26c0a01280446e04e578e14c6dac3f9ce6e69d7bc21a2eec61324720090c88179267fcc30d18c2c0397aa48fd6fdded2289e05e764268b246ed7587c08f3c349dcb0e76e0503fcd2c6daf475680ae93d157f1bd7277e6781a994af351f3f03d25c4298623b4c4c450b87bb2cb0528b1a5f8817bb0333c38fbfa49a52f3a8b86258202328909ff6e312d208f71bc0cbecce5df3067d4d14da1d2b9d52927515bcefacf8b0720bf4b47c98f7749b2e86532c2b133b3409ae1072b8cdd6daec462a7805d95f78022b83bc3d82807ceec1778cdf5d21c7d51185b1b3ede922258934995ef7473737578b4982313ac79b5b6e3ec4d5f18784d1d3d10c69d23f22adedb93e5e974266dc1e637d69e9d99338afd5dc49c453cfe3b166f323d5a500ab7c32fa4f655c6f7c4a67a736d5416dd84fbca262517b3fd61f90718a5f0d10f57aa1d353938a77dd99fa037e31212cf5b2a1e52139db8f57182536cd41640de0322dc386535d5c094f9c58236df6b293780864afa47b34efe0ac520f14a2b5b5438ae6b72571d0798007d121a044aebf06f732a22170ce8a34d45b478e1dcace65b9da647ca063106966368b3d9e2829240b4bc4044172fc26f65bac4b933fdc6b5df1f8c0c45674b54dc6a98201c04bf93156abb31d43c0b8c4a9f9fdab16eab5ffe3e04738f0c43425962c730e1022df5752b9f172e267cd37423c8d82532d533468d383389840c6e7b2cf636de85b04f9b8233f7a4a74bb257488d90af8adb6e2bd4534448a5d29a9e36391c6fde6268c1c7df058022cc6831c6ba024a17e9f78ee798bb0f1afd7fd058d2f548dcaf8f242c910a24156438ffb8e9d8dca181c735207a18e39843c9116833afd93aac728bb4f486d8c387a81d3782c6a8eca25eff527accd3e05196b40e1e6028197edd180ce1b4bfcf4e867505d2aa417f89bb7dea0b7356d91510fc8d0af8906f7e3d4d5b18bfb17f4b9fe156b9a6ca20a857693bdff408dc7f7aea1886c9e2e5a3be365ad0bf487d62459d8299d2aca22a419548f3c430426d38adda115be66f3b913e2fa5d944dcae16fc2e8cee823dd128c40032c0d77a6d4563ec6c7bc18a6497e57a4079cd6b8b37fb5999a4fa412d30ad317ab3195ce30f8a7f4f5c7cc703a964fef0d1966000edd87cc85c740328f757363a527af9d6658b457233b700fbd545ed0011092d580e466e7cc52027b742740ea0b777e5fc9c0e9d56820c679ede8bd165b6161eafb3fb4fc283b990fddb168109bb7e9d6a011b8b8c98a42de86d8425692dc934d959ae59fef0707fc39b1352458832996feebd5918e5799ca9a70d9187c469c85c697cd0a34bd793915a76b391ee7f46781021173625d002a02ea16482934306e6459bdb62b125361d5229a9b2edc7e17ee057b886e4be9c129e6cb85fffacd38fb3ec26bbed08cdcbd83786faac0a4b72117eaf086e70147d85e405454aef99e9d3ff27a6a079873f43b7718685e019c067a29479b6a8bad4439a68624ef025e92dae295900cb282602e769717fdddaa3594f9fadaa5ea1f89d22f74e6879f7cc4b88541d97658c3441637e218995159bd33a3ca45b4ad07753c5a805455fc29753e49c2d050de7d6cab2df16ae5ce9b84de9356b32621bf8bfa3f5878add4b059cc8d68ed6b08d2576541de17948c6b4aab1814f47cc200fe8c7a45c699e97d16ea6a731f486fa63dec888a96b5cad916ed1b0807d8583061d0f6a3969b107ee9648a4dede117260a0801c305573959c9b53b93c8acaa314365e0b5d71bd1567f4e52a63c76447589088782cb6d9c1e48c41f71f4b5d860a18345045ac2b56eb53673756d38f186ce7c1c4fa4d276e13d3eb86f188861c46769e8730cf03435e5dea3c672659d3fb6a8b8d2c93915d5d9707c085407006b965328d42b65b8bf09f88dc8e2fe730cabd9e55b725e3e73c3038f5cfde21c92419bca3f7eff5204d972dd3e09f9c780124843f5b1fa142d122d233f8aacd10913bc8a3b0ad0e5cd690cab291df358a1350f6dd480283b3b091e13a0945d6ab636a63542feaa6a0d4fa182e466f6f846383f6685cd44f9a33e00bfc293e5b25d9efb02e3ec0890b608dbd9433390e835f1d9f1826b8071c090a22d43d820cf9dfe5c5ea4afa8a4dee4bf451a9ac0a8e3e2889a3948f0a2c03244dfd0fdc630def66210f3c957e362b605de442f6dfefe180cbc53ec5f2a4670d6a9d5c26d52f470d4b43573d540db3afaf4d3716bfa36e701f5074f8b08123b616702025c36b716822ea8dd96720114abdc3ae8d0d3bdff1eb2c394d01ce9c6e4f914bff4465b6aec2e39fa7beccba3c57de964966610ddc8a4229d708b588ef2ba789895970bb9b8ce68e4b448b70804c2c34c3d2f31278a43a238e87b2b62630775cf0812e2735474446c2f94fff39e5fed26fd20bedc6e884dec40042740f36bd899140e6d7282bfcadbb97e6ee177c3902372632ef8bcec7dc9aa942594ac329c796550743021326a203030db8d1e0b0abed10316f3403a66392c03ef7a0cc449976cc197706cde50d3227dc9aaacb7ff296d7c7ecb7efcb7a98420fa5fc10dd62c87ae50df0eb052ff0cce03aafb1497c6e9936cfc82a7c98cbd2f1a80768ebd702b9d3dacd7b7dc2320d187509e07938856d1cfbf9e04fa1679b4bac5241dc0f0b141854134130d865a3ed2104a6a665da17b04d7773bc31c616d2a0a5c248671c66acd7ab63bb122d1a6613722b92cde25c55da4629b97a1fa9a2237840d16da4ca8c594406e6f07e1a77523f02bea743204cecc68aff6929a9367f372eb5ddf339f724a96adf74d3e54ed9a1e2175c2509410b5b68871b4ffe6909c14b74e3cf47b76db72f7f74ebf780d223fc5509fd20685739e05b2825b7b39e990ceaf68299739cd38832910a3295390fce12b408fa2f9d6d6f29ba5ccd5abca6a6f5bd4ebbb0b79ce62d8b04a4a39d63914416704cd903ac0911be360cd6ea5d84efcb8868791c95b274762318c13c9d591297e291f8fc63710f0dcc5e113cc206ef569c925d831d091ce41f9dc6ac093784d3eefbf59920d880f6cb090bfa8ca103cd3b0a5fbe98bacbfa86d4ca814ff2fa5f26c0d51cf7fcd8b3c3ae3e1c29e34cb8904ecdbefd31b792e140baece03bef5f7be0a97d44714033f24db7e6a1d14dbdeca9d7faaea92aa628f66373d715c4fe445446d3afec94b77c886e3d04486ca0b696c4dd9842f6d35fdb6ee956ed7f38b6c35a3011f1520dfb9daea6039b59468a2b489e9f7d271e2275b6ec8498de5ac98d863a845867f6924ca6a470cd57a3f5efd158c9691ce55143bb7138dfa92de380aa3c8663c2c83546feed608c58da6c778fdc16d3ac15c143c5a7cb0d30dddcbad8ad1f3c15063761106109e2f28964fb08ffc9497e4234a9f9bb0841f9852e647e1572e884b5272f42c3bde7994d4dd408e685260870c3ab44bbabd61e726671d927e8155396cc777dd1ea3acafd19fa9aa29774be0ac1db2447fda31bd126ad4ac79e4cd21e2d2dec0d2dbd4afa749434bdbf754aa5d7df6ebb8c473728d59df64e6e6bdbf1bcfb9708361f7ce164f02cf2376afec1d2e39be06997164ffc0c710b0651bc167c01fee62a285b2402431c9e36f8e2d12773efeea9c2439d67d6170e299ee751c758f5ee1b3976d293c0b12fa564cc3adce026488787297dad36fa2dc050856ce3ba4c7dbcadc378749aed626b05d8adc0b51922eab59556fbd5cfc9bc72fcd2cd75e25eb4b503b2764f56ab3651cd1f38cd9b20301b96fa839499766ef303da108e659f62feff4741df1b1bfba073895acacca55401fd0a9927d7b5ef96e43e7d9996a13f9ba1a6dadf8d6fd95c8b76af8eb41b2afdd2ac8e11f6fe13a7828b69d218e64eecfab764833067d1bb31f2bbf3d9f644b29039f5692d54963f6b15aee2d9fb5d90147232345c8f08396661c6877ce6fb317ea3a2390d23ee101ec1701000c5c4b64fa79ecaca6f3cbde49e5637eedf221a87d704acc16110762cd51edf5990c0f77f2f463ed1c6b8534510472acccd03e038ba27da94611c391c49c34a1e2a90f427e0137113936fb723e54752a4a26b3be57a3ccecaff54be13d34a6f5c1cbe44fc208143736e47e4901e47836266f7920fcd3ffd8ada039d48606cdf720bed87bf8bea55ec62e08bd9551eccff9d7f0b2ce2c8ec1ca17fbd69a8cf58b82d32addc6a822903ed889baca582424161ae70787d60b28dadabef63c3d8bfefbdfd1c8637a89710c04792eab634628d21284772291be399a24f55705821feb696dddeffdd0dfe4fb27a9eb02fc0f29d85d17b027be40c5c44a45bd033d943586721c52e989d3cdca598ad1bdf9d9457fd69df877654e89168bc0fdc11cb43451b9c6d14fc6b386980d75a1b03b58d9ae6d8f71f55cc3c8c40329344020bdf3302ed80c29dab53cdcccc1afbee2c5f2b87c2a74324ec847d1ae42bcda0e64639cfcac660e8be596d01f7378f3b47395e06de01e163f799519c0d2e3557773d717da06d65a38df12c2f3fd0d824409227f99217056cc2e582adb265f7bd106a49bc4a4284a07cb64e87a7576b295ee87aa3e3c703d83f51f2c05f856d791a65a1f517b222efcdb65ec3fe790f9b9073df1fd994170acb410d7fb44b6dfa449901ef1f288fb30837ff9442c3deca23eea40b98dbe99804e5b33f495edd2dc85794dd217321dd5b727b35a130d27fc18d5f8364f472bca9943bef4c1a3884b2b57ba5ea6397ecf9844f6223ed019705a5398acd2ca60a66988dffc0436fcae68f88f777ed6a528a28cb957998f40a8988c62e336c2464d6b877bbdceadc6bff2c24f03d124fe1eeb6f3bad8c8c924d8d5255ce9529d64947fba7e77230cad1aa0ca1efe5e3127a1c96009f0523f7c82430a755ed9288c7d225248685b199b6f5ebdb8edbaf718ded678f164d64a3f0fb50db4f830bdc06f47b5a346ba2bb599ba0538e7dfe8851bb3c039a4efa4b5fd7dcb9988277f61ec5891616146d97b7b037ecda79820025fb8a3ed0a8da08bc6443780fb4b0a589f24d87e52ab6cae22dc1bd6b975466bc208d33cdaf6045f7009b9424d9af1828fe81f272504f3aa3fb04b5d9feb2b1a53ba55838236d16ce73fd6a4ed5c8cb3cf93279fb894462396bc3b1769cd0ab408b64b089d707230bd84155a727a684f5ee66d70f049cccd4ee2efe7f36104c1a1b25d1069f8ca79ff56298dd0c588a3ca801fafc9b4da95671df0c1c9fe4f089dfd0092d89327c13ab487a3161eb4fd642d09929d34554a5cb545f7f62076d3df4aee1e63634945fb9be57f5f31dee49d5bf05c1d327631854984d87a58187b1add48addad5f572eff7c1e43ac842df1f6d4fce68d9471bf36ffa6c07edca0d531987d0323a6b1a0da2fc11e4ac04e3e7e2655653024bb1f60f0082c37fec870eeeac80d6bed5ca969d7fff9ebd4d85bdb4c933c1486f1fc412ffd1f57089bf39edac1da034a0841d1fd024f1b7f5f65c613a09ceef311606e82ff6cc7d1095eace286962975e69113ac8d4f352660f9abcf595667a9e3a87516236cd9457c3c1da1c0fa0c3c98d5bad6554db651ead56dca2aa2aa17c7c2f7afc13f167b1822819e3439dca4ce03aa1a7beee", 0x1000}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="180300000100e5ff02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="200000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES64=r0, @ANYBLOB="340000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="180000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYRES32=r1], 0x10c, 0x4004051}}, {{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002340)="58048414074cfc2ba8526a1478ac071df0a905d229f49dc32ee21c8ed3268d0ff5600c4a6da5a9e5b5c975ef7652e652d52677f053ae237fd184a4d0434802d5fcf7c3136b278f00ecf0859d095111b7eccb7a76983d13ff425342803375de11b5ee7ae63af14436cd3fe4550329a0a19bda29f082ab8737fd4468a94552", 0x7e}, {&(0x7f00000023c0)="10f784764f5ac8183b8e1000dd118748f895e7b9f4e6c5d0eb6f8f2fa1a3cffb43c1b084d239e8754e9c0c9ab196", 0x2e}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000100000001000000d36513201ae2b82e1bacaa43e0a385609ec94b8538dd75af49d48ca0627e8f3e8602c0c8609a53fab4cf6af7447ac385b94ce63c7229d2f15381dc8118ce31d4b8fc1901e337fa01900335daa3c649ca8b829a9a7c3171a0b3aedd1dcb605ae524a286d93742df9a3c36c2df18341d587d13faf782a51ca5993aedc3d73a4596a85c5397a58042cedad014a78b", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2], 0x2c, 0x40000080}}], 0x3, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x65}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000002000/0xe000)=nil, 0xe000}, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a9", 0x6}], 0x1}, 0x0) recvmmsg(r6, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}, 0x3c}], 0x1, 0x2043, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x2200, 0x4) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) r9 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x38, &(0x7f00000001c0)=ANY=[@ANYRES16=r8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket$igmp6(0xa, 0x3, 0x2) 9.14021571s ago: executing program 3 (id=3247): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000040)='page_pool_state_hold\x00', r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x48) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 4.084289742s ago: executing program 3 (id=3248): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff"], 0x1}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$getown(r5, 0x9) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000001500000008000300", @ANYRES32=r4, @ANYBLOB="050029"], 0x24}, 0x1, 0x0, 0x0, 0x480d2}, 0x40804) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0xfffffffffffffd9e, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000040c0)={0x7, 0x21, 0x1}, 0x7) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x8}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) getpeername$packet(r0, &(0x7f0000004cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004d00)=0x14) sendmmsg$inet(r1, &(0x7f0000004dc0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="ccaac3985aec5bb99d4e4bedd6613221875b54d32cf06134d0a6d1bd3c4a40f6639701f1cdda377f444b3fc92af8aff7e95b628ccfd20594656c04c06c63eecc765d2848a79281", 0x47}, {&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000000380)="ecb3dea8f1c376cef28ccf131bd923e9a6e3e69ba28cd63cc3f47e4dc91ebf5d57dbac4169bf09d955a7b56b8746e0c2e13112567cda60aea80f89bce733da6cb79f3f5cf79c8c", 0x47}, {&(0x7f0000000500)="2642cf7e86bba1d982988508da6b63c5c4030787069dbb86ef501c043ff3f217d55f25d48d01b4222d0cbc75fbae9e7462fa611719b4d03ab13140b93f2beb3deabdcafcd1a4d89a0248cf66326df8f8d7f220fd4fdc8bf2e7f0775cfa2dc7ab90071fe8d135058a7b1f409ebab7ddb28980b0ccee9bccc42fa5258d010318da416ba6cb39ad5c88a225fbb3532f5aefdc62b6e2f6afc3b564376e020e975e6832b41884176d282df07a810accf9b06f911184575e82463e60235abac53938fb49558556af42d19ea6d045f01117be90ea0f5c2217e3ffa12f0f486c16b6b15aa859f7621a0832917b78277fdf504f9144ba82ec2572b685eb", 0xf9}], 0x5, &(0x7f0000000600)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0xc, "73e898810dea08b671f7"}, @generic={0x86, 0x11, "bf3a68a1914ce55be60d15d4738ee4"}, @generic={0x86, 0x2}, @ssrr={0x89, 0x13, 0x18, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, @timestamp={0x44, 0x14, 0x68, 0x0, 0x7, [0x0, 0x2, 0x0, 0x400]}, @generic={0x0, 0x9, "bd4ae53255f11a"}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0xc, "8eaba41f13c73f564bbb"}, {0x2, 0x10, "6817a4ec851d817040ad2d95bf54"}]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xa, [@multicast2, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x10, 0x0, 0x2, 0x80000001}}], 0xdc}}, {{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000700)="3ae827276850d78a363e7f380a29c4e93723496ee7a258bec0f20b8fa5e1adf7f5a1dcd0df5462106ef25089d6f7554d1e61d9161700bfd4440169557f90b7019652637d85bb2e998f1056fcd42c3ba8ef47e6ca0bbe4cefbf7075825b796da06539e2d2b2aa5cee1fa808258b8b397ec82c3ec32f22bc4ce1d0899fa0c4963d7d9db484ae242de5bad86692cd99ef54a0182294242510dbf1fdccbb3ad463990290a24b30bf2d421624bf1e1461c9860028adedef79f9ac4f439248cb0dd81d08114f081b497f4b481bd1b54d7d908a1bc2fd84b4db1c38f186663c145b3337e8d2", 0xe2}, {&(0x7f0000000400)="45471e5f1f0421024ca96123d6e6b91c9e8b19818370ee46ae6ac4fe4c6101379a1678b0980f620269c5280a68d8a2a9731dd03aa6d090bc6288472f75836cc9a16792f6bc3c6114fc91f0c99348ad15d0", 0x51}, {&(0x7f0000000900)="ffdd5fe6f80e384dc090e95f841676869faac24ce1aabf3428cddca4049a7fe82154117fc151ad5e7532026b87e6ab6375d2eec20b825b9e8c2773bef526c26e95622658f003b77144a1b1abc7a3c937ea86fb9744020df5bab8b0a96d5e96874c254beeb3a7042913a60780653b70c7b771124e6e81fc3d784bb01b6bc2dc24fae0ccd2d7891c412ad3c7cfd0f80571ebdccfd86ccfeee23ba26ff60d1141dc7cc49717a068867fa329ac98e12ea5a1b2602386fa8d892902c2cff768702ef3c1686a19e374380dc7f6f9815bf5d6", 0xcf}, {&(0x7f0000000480)="8077882c892d16f04e86551b87b95ec5a4215780fdaa70dc15042a87f2adf60a5ed5597e96e192a13bb1e4e8ac55", 0x2e}, {&(0x7f0000000800)="d0c8c3df335db433e5fef8f90e5b8faad4fb32a635178928f140d64652348a8e7107c3e4a75b4f362d7c8fd1bd68595f3a44aa88d1a7e419a4c445a69e6f0578d0700377fc7b5d07c7210695b5bf1f391dad3d21194b5bb9b16b9be8cba13f058b4e46985f58373e6bd806eea6de49f977295c974b0fdeb2c6cd55fbe03d3acd8bbb0ee7361f4bfe5b7859e1842c206b580b56514880ed02e98c1dd9d5fb8a7d936eaa4d8b97c0509323f3cb19420e923106f5089fa2384dd1a8bc1fa26d", 0xbe}, {&(0x7f0000000a00)="ea939019cc4ef28f25aa8752b2e07dcce3697461bab5e5727b08451a6820fa8d4fa5349b7d1e0c9706a064a28a131321b2e29bc0a7f490f02163787914321eba09906669ab9cf380f90348cb5acd1b0b7a2ae7b51a17d0d27118797d7e4ad6583ec031f29718c1c308b887de61968cf8372fce4c80fdf9a94a4cca788df816c1c38cd9fe5413adbb0c563c62dbd019756161cc0b452872d72c9bd594921e05312ce68be1a934ba3ec8e1228875648ce7360e7ac02d34dc430657ef0ffbefc9bac9d7ba0c7d124a39ac79b871b32cfdd90d16ad745d920af3813bc876e752785b5bc3c796ea3199c98d5555c35cf621c1967c9f07444769", 0xf7}], 0x6, &(0x7f0000000b40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000001ec0)="51f81dbd594faeca7c14dafdfa5ba663ee74f894b5c2e4a6aaa468695dd813a45aef01c64c73902aeafba01a152886383e55440bbd4de2bec69678b6d406c75b8cbe5b1008b99333416f25f69259b0d6978145a0b073a955a9d2907814ddb66d9a15eb685064c068adcdae9e1d52490cb3bd12d96e267194293f5629d81959af620e113335cddc92630f55023372403a0fe4254e6179e3fb0619b07556c793b3cfd316575a3226ee88514353cc2137865cd2c24b8022a25ee32c85098d9d8983a86e800c5d2ac1c0bb95ff7f7683b4261b66b1bf2f6e1fc38cfd559f667cd2d41fc33ea00b09d032dbb2be889ae499e284c57680e1825265e8fb031f387ada443657263ee70fcc0f08308bdef2213fb66d90f0d4d9503327b4f095bdad0aaf1c5938dcfb2c3795c594e975f7ae0547e922b614a641bcb3a9f7b684ceea8e4b8e5ede5b90d819dcf131b1ce41eded2468b474462aa1ed31eab747993db62690cca99ec5f306382afe2b19ad4e2df43e003473e7722bf1bb90176c29a1884646775a6c3f22fcefdb2e901f757a902c67b201678f5842c12dda77dc1e019239a2d2cf27139df6363753a1b6ddacad1b123b6f958bd020c65b66c38ffdcf2508ecfac6c45a8290fc344f46f29ba41e3fb7021232c8286e9c186df00a42e3c68b4edd6e3f85ca8268f1d02aff571f6b6c3364491e4868903f6e6728e2156afde237983bec718bfd823500811a7865eb1069aa428a158c093d213d4698a7197c7738db9c70e9caff4dc4f9420643e3fc81a4efe3874e24714b6ab91740a7359e314401a095114ebadf401034f071d96a6a8d4a56229db08367d8129435eef37cfacb7661d1329f794fb7adff914494985c897f41a1327bb6eadfd5a293820b27409999f0363933e5bc1ca58bb7873fc90e7f85cd9e77fd70deada1c408d54a815888f3705d779712d5f46f4a9cd3b05b430f3a5414c8c411a08be026322ff28a6388ac515afddc35e12e0834712d1b216e159fb7d89ec8a901915e8f9c1b73bd77ef1a102366fdf54b2f7c7c460c755507c55ec1948de7446564f7e9db74aee6ff2002375f75a29bb72ef6b86c36e28c3568946bfe37f1aea0e1182d0723050275931218c29672b6cbfddcd345171d9c309e54414e2f18391e1151f697a5aa60cf56c3b322285a2e427e466cd6c842193714c9c61715f3d10c45290b370fa95444afc3a17d6184bf5076e1432014e115bbb1380751a50befad766c9e944ef29f4879e3b71d9c5eb34caf73bf178a30106f29bb4f04dc7af09965135b108671ce159dde64282f50164dcfde53934ac337a6c13c67b687198443bfacb6e4da89d6ec10b8d81a08cefd3b9eb6f9d4815ce6c964bc1f38cc29cdf07145755e13b66168e66f0cf6fb9ab78430217e0517ac9f242af1819f7ba8be2326a6589a489faef8d99586d531841d7bb906adc78821c9f93a8f98c3309669f71df186b63b5beb782f2f59c581c7eee2ef270bc8ab4145ba77a545e0ea050fcf38eee71528dda8eb0d0c93c719b1812aee3c504eb7111693339fe1fb8ab99a9ca9a6288240c52451d04fb538a31375060dc743849cfbbabdeef14eb6096bc2e18dbc79ea3990584e964ea8f01ca459b4a7b972e1774b7343385c6b06420ea91d05c7b3664d28625570ca516053975a31a99904cce9f0dc5b5ff40102d8b3b7ef6064134287c6be021c220d9a5501693cf0bf3dfb7873e6606b525a0a96beb9dc11414a7bdfa89c7f6254f2596cb2e5e995fdfdfc9dddc5e1eeb30e84f36c786426f42a544f980528189a4ef8378d7eb39270432b4aa3e3be322eaa4e9a4324a85ce038dcb9128552a68be9969f657797ff5162b4d15dc90018e607f78d2ac97f407fc4273c69b934d488c9abdedf513f4bb434f48b7ee46e4acfa021ae5d16e521d817c5fc9e1036966bff569e2670c89362125e65cdfb8de53c4dec2a51b3571e3bcf67899e714dd006b3e529c036c0bd60029008d6c0f7a2d89dd80955c36a059e51188bd71ac906eb7e946170512763729d7ba96760761e37e1665324a4a05ab5d014763d358b1e0172628797032ed0a48427249c82703b2474b2a545aee0a98f538ced17bb6043236ff768490b694fd058d5acf018c63bb159cfd35c4b4bfdf10d846e6bf262c052db3ed40aba474279887418863fc6648050d511bcd13e5f48551eb52190f4760a48b21d977fc35f55b4b9399fdbe90fc6c4b6bf6d56e8dd75af766a33c6af7024dd039145aef9a1bf84dcd3dc8de325552845539d0278e6a44e7c943976be04d0a5d2a5ccd8d0eccf9f9fe6c6984bc62f2e30ec071d8eba19194eb950452abc3e02ceb41834a37e2a047ba8ce58e9f315e79eea39906eaea5752b6eb1c2ce03359fb6898a7fb2a756ec0829a26b4e69e8e7094dfb0dfbce8bf4de41ceb831c6d46f857ac92ab2689e396d1030fb247c6cb87cce497990eb498fbeb77dea19bee3159057fef956991b71cad7605af3bcaf2ab206126610300337a6fd0f4588908c12ac662e8df5e402bdf6744bc65257c154b3f18cf91aac56bc0f3bd6895be8711aa6d67af9c1fd9d44cd919c82fb46d114de71d6739004aad19462d51e3e3e021f3069a557ebe5db724d532f15b4637ea8d06f0aa9d5eecb13d375d804a67d734e5fd3d25094e92ad0992078f8a8edae1e3f15ca7535b025ac59b26c183ed6b0c5cd95639f1ddf1dcdebac83515e10c4358ff97e987522435140e462022d71bcc0c57d3c79dc22e39900a953200c9ea4574e13a070a18abe1ce9a73ad902b9693e8530bec3a05de1ea59ac3c5b9e6d14c199d62e2049ed3705c20c817ecb2a3051e23c040936f0edda989578748df25bbb1ee61a68fff4ea33fca2f22a61df3b438b235739ca82ce7ee10d5e8664bf72f366d10bcee8aab5163434aad6e554c924db4bf4bac9bf317ee0abbe46c4805d24bfeb855aa251502931e54cfcc61fb6c87d277c3fc3605d7f7e847a9c5aef97d1f38db4f054ddf25fe0b94692d5063ebd7ddb2952ec4f76402b5ab49f6826ce49601ca410b0dd3e4886bbb06c6fb335603cd7948dd48a65dfe5f88e5527059b67843aec4c7d928f93371e7233c282edc7c7d5a8783934a620241c724528839a02146380b45f8071602d3a201224dc4376fc1aec705c702a5e03b03f859f31e7992b8d4d4c7eba7730a4aaf16618dc6fe375b20ad19f73f2b3ae91646b71e112ce3c1bcd72b8db6619484a574777c3911145a866cd1055e0f25d9f0e409449c74591863052085677adc0afc68f4c382ff76d30fbbd3787e42226652fce53520c45f224c484a6134eef355d96d805a895ed7cbde5dbf3bec21b01923f40b9754968ce8f8e8d70c698037c8dca032ce6024438211baad4579be9d42b8098e9965bf2ae09d444fe420b867c01e41088d9407520da16660d4d220bd9233dacb340c814d2124a25917e5cf941ba17cc932a25cbd02a91d8315804dde767342696402bbe36d17e7d6605477a95fd2018c39cd1f9d5e7b3159d8a510a80a632c9ffd2fb828cc78f2121811c83106fc87e5c4ff7b52f8f2c6a2b9b8762dc27fb4f77dc12ffdcf34b7ff4e3c43297109492dd2ea2d84c7894a9959b7567c29b6a64e51c1ae025e5190757ce72ca9a987811f9fd884d754f4ad0b0e940d059fd0b64fc60f9c9ce9b5045aa6f8ca72ea8e3fbf984a4ee82f62efb7594ede785aed124ca6164b3d49726e4d0def2bfbef4bda120f5b9d58b26c958103f457911db132fc39fd9681543f004558a6dcf1e7e0265edb3bb363ea2c49e032fc0ec323b48a890e5fe0060a635b8b75e7753f0262003cb6909463c4e520e86eefeda7ebc5671bc2bfc1859841ae6b524b8e5962df90a2dd5fda89960236bccdd4672d54a9c883f92e531167af764f3dbd2d7c53112a27c3533375a215464ac8661017b9fc4f083f7b77bef1bdba9fcbb2fbf814f5bbdd265a3dad4846c85b49b03e94f0a56bc157731b73bcd2df42906fba3a2e3ae8f40299217fa11567577822d757ad91d1842e197b4dac39bc88b2719e57b4b6423416c446f7cd96df0b89c223b38931455dd0b52e10a4f69e6d7dcad3531ddf649e75c72a95c3a64363ab1d04f5ecc3551eae83b4b5cbc79d1ae87ec0628d76a6068f29746981101288b39ac94344e4c55b8f9f9ad5b03276bb1521ff649c9134e5126d27abe45822977797979e63067d97915d2d7d5cadbc3d51ef27b6748bf8357be6f353a752fef3d500e8c1116c6e3a188c8acb26ea522add763c374b95a24628007050c2ce005b215e7acfa03ddc6e2454a054aa446e6e30880a2bc936b581aa9c387a581f30d0201981626b575f2fefd24daab5301d28bfb1699e670231a58e671069eefe2ca7e7b117c49d5acad623bac1fde8a3277f793053de443587a683996c643072dc7641289f60d769bdbff546b2063c75962d47dcfba4ccc25f1847fe39f599ff8ff814d4370d19c41dc65013c988f7541bc05ac7b6be7d6dd2f4f7335b19aa78d29bbef584603343c67c162bc65e2e956ab9718e0db3c184946da5ce87ba489ff9dff9e39a4a51beddeafb5d9a611e52a52076938386ea3d188cf33eb5efd9f23eb021b9803567b788322312685792b798479ab1f2c0a137cb3975cbf064e760ca8516ec395febc62eb09618068ac41e597642a68d7d31a07a92feb8b86549cb3ccd5e1e2fe5f1304288317c11d0cc067a831bae62e4420bfa3c7fca6bd3bcfbecdb0d16debe383f962ac3e1888809553d5a65152d7ad5c7729e39573064033efdefe589581dca834db721fb585e11fb12a8293d20a4568346e41a32e40a5cf4d0dfdd8661fc5a2893a69b5361e6c879322067df0e6537f2b8105f81837a9e5ebb93e3221f54405ef2010e6270f74366f1851d4d4d39167577dd305d1383f50da0f48ba54196e506d26512d3df2cb0d70d679acd36a829b65d43a225f36e1761c6403d8b89604a3f5bc700b7e471a7671d273ef21c1dbc0dbe075ba78bf967a5305bd253f547a576934ad90091b0a76e2bdfb70650d5e110ab311dcdc3fae2e6a5c10dea34f073bf481be02c361512f6089ebc75c4a471f965ce6f24cfc923bafa5f94046f8450a04602c8fa8582ce0f26ca51494e1a53ea85ce3b44324b4619b06eb8dfe4ddb8b22596e2d9bbdab8619d3e77efb511448004f8436a65b07d52cb32b1baaf8c0bb5a336b657dda93a6a2d80813724c8fe8bce221dbbbd40d4f51129e17f93abbff2c8dbdb217f7c2dc5de34c437005389c80575aa6ac6a17a1fdd42adbcae1492d4357d13f25350098b2ae8c1874a0e69442f1a635cc9791c40df124bd1ca507c377cbd677baefab223221107e43a06de2d2442fa5bc18eea8a02cc1cb3525f517289c4232205aa9ed25eb1d9e017c6dc49d4390950caea50913e15b35150a294cf0b969eb83ee24d88072c5491612f2d9c4c4b4aa60c100741b62a483cbb3c6bfa2b98d0d78c5270cbf2850186c510bc1be9cbdeb96f7cf388943da69aa939e0729b1bd641def6699f8ff305464d268e2345145fab3ef5a5e53eeb4ca7c5b64197084664653b21c6e7d5e6e124aee197f5e22301222b9aa517453aa76ff55d0884b692039633c6a6124f763f0efa7963229102330b8582ab1bb5c3ce2c44dae6d78f376102c8e89c8cc8068fce5104a7e9b84fb007fcb054ea6af87f2373a4270cfaca7dd53381e25e7136f14a3702432457dc4eeaf63d597db7054317488a65c03e22b57b5314f5ec0f201969ec68c4d95fca2146a", 0x1000}, {&(0x7f0000000b80)="fc6ea572b770cddaebef70ce88d7bc15e08d8d2f9f98a68f202bdbc9216464403c844a7de01bb5e89535cf32f17b3871478e51c644a774a29f187305cd0e3f7b117d4e906de6a975f66b2dc706a06eb1f584b43f7709a4a9bb3a8e99a3cb1ed1f509ddd4a36c0d5d63f354085b051fbae73eb51115c37afb755777b243e6eecb14769e", 0x83}, {&(0x7f0000000c40)="f91ee08ab1d96b4e999cbe1a673f58a59478e42e1e635e179d06671084613eca32b88c983dbfee63de4384a2da3833d995afbcfd291d6c3363b67cf89b12f5a6cba4b107e979da1371a726afc3f93fc722ff52f08763b261877037852a684e5f7051c0032fdce67140337a28b4c436ad2527b45d89d8c1ccd34c32ebcdcc78e8f3cfa4673bc7496bf85c3288861a12", 0x8f}, {&(0x7f0000000d00)="cc91243d66199bc906044baad4a65b", 0xf}, {&(0x7f0000005880)="a296b8cc8797624d028d1e4dfd872cc5db8c4bdf23d89d095a87eb3abf9c3ee14a936076fb65662f1b4f0cdaaa47b987013975aba9829251b9ca4aa155956325251288c8a49e43ba52f3e69646d221179db5c95b793b1d8cc281c4db821cb40365ef776af2adf4658f0a061651b7bb9d7647d03a8722e0988411d2f7adbd2aa2923b53c5b196059764e933a6ac670ad192f1ae48c23231396c579398f2063322447dd088a2e114ea0ae6010f2629c7e2190c328465e6fbd125c34f0f4f6d69722aea9f1cc2ac689a751a10e5929961e434e8341022fb8fb60b7811e51a9d1a2b6eb6664b959fcd9be8b3dcc2668f53a067bb934eb99e0cb97abe54550ed3bb736e7876843e82dc7518ee1af9d9a09b1fe551f98d636307b67e7715c5aa006a581c90bd9a3ee3cb9e9ff84d77875498e1f5b4f30af9f8d30ca1d3c0d9b595362a55891131c1890f20815962f03075c03fee4677ec08e0228d38320e9b7edc07f14a8e3001ccc1ca6f520728397d2235280932fdb6e6032a42f5fdf1b08b4723e8647ce73fec7ca694d8fb1a77a068f7b83c36067296a7a0e36b07564103105a5edaedf6ce03aa71e74b811b0d93685daad48763be53b757b39f1576fa2e06b378bb845acb21230162107e68e387349c87d689023d232abdedfcb4e4439d1f319fa3224b1253a69d6aee3e51a794d69b4348daeaca02119769addd59a76718963d1942ce04f6df4ed0b3ba85775560c443d720d9fef5750807de674e8a4b99a3cbfbcbc239c0de8cbb7bb5243aec5f5ef430de5d90e771cf986a18e041472cbcd4a83f20eb672c805a27b372c4e982275b67bba3adfac78d5acb5600be0e8b6c62d5a613ff836b2e251b57800c23aba2e27d966e54da6aca24f63d41e7d5bc037fbc69a8f91b4d33469202d89cf745ce2422d92891c17fce605f229c700c038d1dcbc4feaa10da62f2d7529d9c142528f714a4486f0921373368105d9e2a476bc2994bf2556c471ce7bda62cc7b1eaa42ac08bbfe2ee01bb8574e27515a0b2d72ec2294eb3d428c121d6305b91aaa8f1c490516b0e4585e00ac182d644adc7f8dfc018628dab17fba24faeed7fd02efaaf494bc733ebf2b1749402cad5e5bed2ef2d773d9caa5d107d21ef4ce024ac7dd7b32fdbe535509597348d9a3fd8068acdaa972af32fb40cb74b47da47d09bcc238f3c8dd98a74e6fb187c088098a5f695d3dd40e130d63da649e54fd95eaaaa51b4cf3477628b21ac9d311c2b0d8e03be733a30ad38a509691c44b5c83c6e9df934af74a2f2ef5ad41a52dc8d312e6f24ad330be91ad0a04fb9c113cde5cc437c6442b1068b33679b25e5ee1b791b16728645a61530d490893a9149dbc05f7074f59702d859978a12e5af56b80fd4d208a6a8cbab5e949694808f5a167e986b1364c99ce55a740b2d292d725fa10407cbb186206eb9b66c2b8cdc906aac0b72cd6724d6b64403ca9ab8c5a91c8684a7b534a416e856ec54c1f2fde6510a8146a87830b460c6674a0c320532eaff564c21faff422f8cd3ba84d686352e16744ad2a795612c04c71eba95a5ee426067d8e5665d4084b9d84599b59ef35ee15de8cdb6addb355738dd1c0e97709a730276a61d7709f556ef469d62c26c098a6b82349dd1ca181e073e7481fd86fcf4f8424638549adccf724981888c17c50f5989d6e050e105b1a72b6ba5ba7f2258522f182278423471b95983f2a6f211c71bfe9308f599807ffbf886c77b791e98c4df2cde9e911e268ddd1d14bd4b4efddef8f5e2cf398c2b2df5f5b61cff661a0cb636d86274adbfbd67e280c7ca8684c9fc1b6ffaf62990f0e9d53bea7abab218ce0b18597a42fe61ea8840e48d5a062aae6741f48604e91271c8a468128704e1b008d2c7e489898889213c8d97dc92f01adc72650e87b46cdd7b06adcae3f60e540bea0a220c43ff696d698225be705b1721302d902c766a4cd99c8073d81cb44d1644f44a869368b6fe0b5a789547f1da29d5f85c3e45eb867b2bfc01451014382dcbc7c4facd2abe8abb5c455797c11cd182c62d2550b56e62fd910cb06a05ee5db4203211dbef4e7550f594decc03a3e4e757efa5c09366f7b40fd2ffa0cada71ce39a2d226896415cb7c44b58d35bd13db5240830d8062f770f04a7d7c6c02a628edb9535dcb7cafb7cae9e4335d881a798969ffe127588dc86ee343a19a3c8360151027fd207a246784c53b1a228dc4a31b32d4d98973cf37979c9c2fd933550f0c9fe4997fa6f257fe7e91206ff514d26fac3ffd95b6b24eafec38e199bccb6292d4c73d21976a58961777ee68dbbb2fc1c0660f0e9a2133129fab4318114cc54715e619cb2c3fd682d17d5a625dc546f95511eedd74e8043d4578eb9312d5281828e911ff6f5c01602b17b95be7e0c22cf4c8c1ebe5532fa99ea5be70a6822fc34ae7fd954e2400f1efee0e53d2a50a90568a49b90b5c0cc19008e142a9c15bf14c45940631c8b921185c6b22fe77439851c0d965fde612517839adcf7cf567762e0ff65701ea8387b55ad60643e2f709f36bfb8936226937ec42376376ab92bbbedbb93aaa4a33ba80aa5fa02e4478fa969022f6a7419fe0a35dfff94e6b6234395861b7a6878c82e59a7a28ce16254999cb128f755c0f5665989dd6a5cd77461c6bfc6578367919357102deb52bc658bc64b827f7d354d351c98fbd74f415aa04bec8fa96db06c06da6d6f28052404b4cfff88a94d0a7e90ad65f0a6b308d2a82de9977ffb1769b1ad8680570853a379fdc55ef7a7609cb4322260d66d2eae43938c82a594ed654680f00d591d7b0bff0c151496eeba473ca0ca25b69179a5416e9f200b817b78556d7fabc6c7fb9b82f92311a815cc5bb662971a44fca3f07921feb98efb84358a810facaa1ffbb959b7fc564b9ff7b90382060c563f8032a1bce5a4afe8717fd16b945db475e0282607e6f20315f5a05ba20743912fc7e1accbd19870b73bde4953093bc0d2abea3b847d9c3af1678d7ff62067ccef704df9cf7968e3e2c27f93b99f626f11f57e146fd9254f240a55c5dd70c3e611541d67fba85324b5e581a0e6cec1d811710487ede483bc9ce72a25c9c7f09478f5fe030e67f9f7deccf267a2a45541f3d9f39698074502a4e6062d4fc7225d1d2180ffeddfeed5ad30c2143328b02c99693ab4b4846624c8c617600ac271221571fc6a6098d7d89456e76f1246fff21af10ef6505c767e8bd55fcfd426b0c919597e2a14091a07783bdf1d21f84588411f733d0540bd1ec1f62e1fd6681a14dd0c2067c99141488b9f06b7f4673336a6e8859b4658866a60a48a706f7fcef9ca34f4fc8f485a0e9eb807362254373b05595d0dba523166d1ec4361d430010b174a1ecb3ae9edaae329e2e31d5684a5fc501f74a9880ccb1a763133b72fc6cd184db15bcff383d9f26fb2507bc773a83da0fd867a1b02d74eb3efb780d663a89e44c4aa0e095eec35650583cd7c44d206dd8f9ab4275f4fb8c4335bf1800eb229684bba565e5ec87a46796d4d6db2751982bd574b704f5c0aea65eead3f0fff7df4098691343dc3e524cce1cd69ea76561a36bc59f94214e302e784c502edb2faeda92ceff7dc6195f596fd46647db92cccc36bef7300c17814f0014f92dea2b6ff6306b987e6420c273caf1fe3c1379fd90b3c7cde383ff2d2dba7721a2dc4a05c39f43a765407d5d8f9f7f00b3686e565b7ee1f90f07fdafa6e69cd4ca923def5c27efc73e12cfb0766c47180da20f6c0a3d6c781358da2ac3d64e929bcc4262ef1cc6a5e27e54c8a579cc814e44cad4073c942b20699cf92bb6467bf5893701f5dc968028bca031cfd42c0bc97365478705917aa344053b2e50bb43549344244c75f041d1b32023857fceb53ef10a7a77cab838bad82d2c01c46de0143d3d926faa8ffaea4f5419c9b4cad6f072170727bf76b24e0daab1f5a96a9be0e637c542d351443e110e1d56a9a291a54d19cee844134250a7147ac22d6c478b19aeabdccb14bde48adf23a292339ffcf681be1a4179b1fbcbf08139747719115e6a98c337bc554b6cc86da31fdee721c38c5af428a40a0e4efed25a8de1eb0d45fd0538fdbf739a878abaa17905202c4fa434232c7bfa982a31319274d3c8ba5a73d27286d6808c9b12cb95421dc2c5053acbbca4814e0c88899d70ab71c870eae71923cf3119cc09551d6c8edc89efa6deccd1d082b99796da6468ed172d1c7be707343ab330545177a3696026238eb359451c970e700e835b8436c1f1cb220f76e69034caf07559fe29520881e51b97174d6bd64c40275e3a921441c1301179566451c89f0ca01264fb0932802fe9005310beed16c7393a9d515215c1a27dc8e49d898daaf92fd74c7c109603476edcb1d980508218b3a53985828d65239ff3d5c2578455bc8e391e3d4f554a15c176c00d0388d75077999cf7e5ef700dc2517167edc32821d028ad57422ff329c79f11ca3cf7f4ef7fb109d9bbb572330b58be9a658ec5fa5fb8eda5fc847310db335804853a54b9048bc840850d64c09e0f0bfd6aff4be78f8ae6183cf0ab2531df40439805c94020c9b8fb030862a61b2c963bf4c197c0cb664751d1af0525cf2be8f144a0b3c6892f7c3b7ab7f2c1f0d1164862e23df0ee624c01fe0342400fece47d222460ea5a12522adf9884766f52990c29015675fcc8900a67414d8ba377c1dd69e3424251a54d924cc475d4c22e25a086af2fe87a5a5d23d021cbff9487425c6742c664d15c034d417e761884ab6f2084104b6d6807be023a4c645695b6fafc81cd36a4c939ea13e6baf12afbf83b02e155cd156285b7f3a08781165bdb1f5aab000678c9e5a27084af767e42754bed9550b4d9795fd5ac6bee556e298d17d8dcde40c0c650392619739d846f46cb1b3b42909f25cdf96c5f64f486832b6900260e095a368d5c41a51edbb86a2ee47841577963c8ab84597409298ff5c061b96870bb30eafd98dac5a578bf8043fe5b781a213f629bfa117e9879b7c72b9cd2ede4314a797700bcac6fcbb32af706084c533d2cf4af2fbeb8bb21731c4e1f6adcabbaed0cd62df8f77e6e69078b7ef6181c139794c949b6f273e804881b744238941f3d6bd6de94e4c2eced0f0a6ed39032323bbdcf855555c26492b09cf8dbf6d15073cba39ad344fc7d76d0eb1a4cc420dad6b62d35f44567eadb2b4f09f9eff71c0750ffd60a09612afede3f78a9e755f935501662b20688f7e55bf44fcb3e1868677fb3e55739d112f462ff4f6e5d329bcffae48d897c64895efa2f53cfa413920739c2c5de5bd072b6d7f59257c34f30da82e3e59f709948a3587cf821703647f915d1843f0fe73c34e7b45bc7482d6b1be8d8a3955e39b554f2d8478395ccd326cb2bdc801fe35818c6d32906d139cbc1d460903cad5895fc936b3b9f0d16935ef6adaa32c71a623da0b389132b746b86545328fea7fca43e95ef7dc296cbe39cc61005c36ee435d9d59e64d62576840ea0b7d7dd972702fbdaf38890f7f11c8d4e0ffa65eeda39d3e449a821dc4d474c3b5bad0114928821ed91c9842f07632b7c03c082b9bb3bad0951f08fa91edf9761ae23a62bd461bf86219be0ecadb9ca925363a3317da17b90cb15d3db8985d16e3db61fa49e27a7ab5dfcd03c93d66508e5f874446e8f8557363234247129f48cf1b66566dde6cd92f74f3e57cac7f9c02553694ee7178a18a36a8e71240fc158eb7df02e645566c2fe8c38a688ee316b22febd08fbbe249abef383", 0x1000}, {&(0x7f0000000dc0)="f9f3c4973be51369db4430d35014db94014f31a1365b8911002b78e37cf6877a5c097b071f3cf0a958fe026cf183e7a45683ec2deda41fbc2482934bf5dcb80b4638c022835ce89cfd05717152bb56c0fe86a074844d63db2cf3e0fbd5e3341e113c7dceb2210f4d552103b4", 0x6c}], 0x6, &(0x7f0000000e40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}], 0x10}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003ec0)="6c87e2a0439ef7f5c5bab2f5a2c0c4c87e932824c85c4b6d4042086818c271c9f4f42c121fe9779a18a9b965950f521889a60ca42bfc50740911fa1b2214f793c5a9c1f0166a8c933dda3edb2f49bbd46030212c417979f462fbc0c790dcc50d0aa1379350ff170f22d85af245cc737f676fa8a6da8c8e743e42b7c24058b766116cea6a4157e816f8ac7b21925ab854ed8d9796582da5bbb8a3f30c57ca40d1d788969f45b517e534d012cfa3", 0xad}, {&(0x7f0000003f80)="249954b23d808f2d8ebb16067925910c59c9b51fee028d2e27828c275a73aefcc917e1c2b0ded77114414166b40162d02e78428b8618945e17dd21dce2606e972e7f09eb779314bee7b095cd844ded08ab17e0fa381d8fa74b67fba124c1917f2a2f1eae84e06408fa8929972b7b95622d55b89ea9d7fd03451dd930", 0x7c}, {&(0x7f0000004000)="655285ec1d2fac3786947d98939e69f49bc0ab8259ec7838ac210a258da34302895d4ad9c85342e69053c093fa17dc530cc5f0d9400cd9da2717092795294f62e6a8ea8de54d1b926b73c609d793c15d3e953b4a312babfbcc2a5de755e9e8031562e1a87d40a760cd0e6df1e9b017b1ef8622b209c04cb996721e0ad1f2245c372015df60673e763c399e1ff9e72e440de6b20b78c1ffd87aab7fe9", 0x9c}, {&(0x7f00000040c0)}, {&(0x7f0000004100)="916f3d0d206eb02de48a87e57f0e6cf04ddc062ea9d29c09502655d0904593a37f8d1e208868c5ff4d39aaede28be77baa769165d39c90c506ec8677dc4bef759d9ac79e8ea07cd5390b1b5d484325ca200bd6b9ca19252b7ee51133298107d47f100f5fa75d9e77c96a3c0b98077d612768213b40e9b555479fa7e1f48af750467819943f9ba000c68aa88a33f16f113fea1c664b37ac4b06", 0x99}, {&(0x7f00000041c0)="dba4d1a0ee15a29d57471b6a1f7240579a1957dbd5fdaccfc4b6aa152d2c9fe7e5d9e6e5a1e0762e7c1f04dd2579096ae17cc9be24d2bfe7cd3a9ea74d4820336bec121fa84ff48239411b9232e59badb73167d858a930607f4e9814949164c55baeac7c8f59e505507317bd62412ad31345f9fc83fbb195f536675ca8051ce29ed3fcfa88e43534d4658b40fd5c7d2010611c1b3a1ed2d3376e9d96111ddcd7575fb080cf5cb411f4012b4bdc0c66ab08e9a4b92abc89ca2cbd", 0xba}, {&(0x7f0000004280)="60668f0c450d3cabe3bcb5913c2e666de5991296f9af7f160b9728f306757b99a64d9c7a2f35fd6b12e0b450fed065eb1423f4cefd360e3040b03624e6e608fc67ae6a1cb21b9e2fed6ffdca543236749ee1b2503ed226598dbe799a5b8c38444f", 0x61}], 0x7, &(0x7f0000004340)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x27, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x8000}]}, @rr={0x7, 0xb, 0xed, [@multicast1, @broadcast]}, @noop, @lsrr={0x83, 0x7, 0xc1, [@empty]}, @lsrr={0x83, 0xf, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @end]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xd3d}}], 0x54}}, {{&(0x7f00000043c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004400)="4d92b634938d5a1eac91a481ed6bd7aa4ace4fa27d488231fb9b86104973a83bb50b050b1c6446638b481eb3ea6facaa35576845939882362868caaa38dceaac89e945e59d78355b19b21165882d457f8cc2b52a582a9d2e0c342b1f90b906c2b54493302861abe073fc77b351e1c4d752718c0040be73d3a9f7df3fd7a0bb1f1418c5f7ae417d3caa06a73a16ef7fb01b86d10a335712523669ec66d738d255a3815b755c71609344e92f6c42bba092c755a2c093d3d1e00a828f0b8a072a0899ab3d503edc7b19feb45372397ba9951471023b", 0xd4}, {&(0x7f0000004500)="9f189a86b31478cb7997fa1ea905677ab04f130cbb029d00", 0x18}, {&(0x7f0000004540)="530a00097fe4c83eef01b104f9c3eeae230b8ea1e7ccad63e80993946b921c6dc52120a6ac036ea014dec308fd098fe57b06d4e421dadb2bfc055fe2883ccd1ad060b9c8e1d5bc714d6f27012d0feb5f2b7c8b8c940632dafec0e1a03893b1a6cbe3b99972bd404ee6e6cb136d42db09e3c68b7546d84dde08628e2e4f17e0921beb8fd9e27b3d280d6cb57c2ca0e3b81d94e9e4789e9033c20bfc9f9f1d807aa7d13cbc7d292066bc38764456ec95b5986804e2d7295ecd91df6c4cb46c", 0xbe}], 0x3, &(0x7f0000004640)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4b}}], 0x20}}, {{&(0x7f0000004680)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000047c0)=[{&(0x7f00000046c0)="6f481659035a7bab066eb11ec66bb11d33f6245279737e722cd713210ea1b110c8744e12a871", 0x26}, {&(0x7f0000004700)="7b6c13064dc5aeb056c62f8c9a9be7df952d562af213fc760bfc907667b57fb9d465b76722f3a7da7c694b9ad1a9a5ecc96d723f1c2db7d19ed08ba5af368818d177eef02141a7a8f140f3fafcb1a99640024e8bc576d2c7157103a5336738076e33f4832674862567da5f7113b81f4fe4d0d351a2bdb7112bac600e0da64174d3ef52d6366a0423e69d3750d53c6ec45bdcf7dc622661f74cfeb12d6c1ba0065adefbe7", 0xa4}], 0x2, &(0x7f0000004800)=[@ip_tos_int={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010100}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x57}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0xd}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000048c0)="461bcda3050057aa8cc6b5db183d", 0xe}, {&(0x7f0000004900)="f6549124eaaa830904882bd3e7aecfa7df8c03521659025d7aa5696ea1b85d54faada8b45b3b6df281b4340c469e3310b80719dcb80aa3b371c23f737d82eb0b95c4b1ef48d5f21f5f859b258c7a8bf111cc65fcfc40fd7ae17ae78642b35285896481eb2100a48d00159cf078c689efb991f3ea89fb051d1627bf64c393dc4fac4d9d8c31804530e8816d70d94f355f73371ff447570032abf8df12cb03f9097111c023c9893dc1734d7b051bbf9b207afdcfd2a919dfbd3057e5c2189758d3fe9feb93116b66d87b5ec266ec7c50e88aeffccc7bb0201acdaf0ad58a8d6b8dcf", 0xe1}], 0x2, &(0x7f0000004a40)=ANY=[@ANYBLOB="540000000000000007000000831f1800000000ac14141dac141403ffffffff7f0000017f000001ac1e00014428ff30000007ff0000005d005c00007fff7fff0000000700000008fffffffd0000ee2326f10ca11df204fd315503f800000d720010000000"], 0x64}}, {{&(0x7f0000004ac0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000004b40)=[{&(0x7f0000004b00)="15dc6ca66681006f7d7b98675a0cb9", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004b80)="930d5d3624ccafc303f02dd603af0a067dec6e18d62f7cb80153e55fca7076061c295fe74254b1db4139e26056c96fdc392732266ebda5fa7bbbaefa9ee60fa69f65a9311b2d98dc803cb5966a3a158a0fca97f320790d1aef32b2b9c3b3baedadd69a03cb865c88910be7cc66f091efc71a2bccf5418a48d5889eb7f2de7c1cd2d6ff2b51ee98af86e958b34ddad146e2fc622dffa8", 0x96}, {&(0x7f0000004c40)="ad708e911c467afd8265f533e1afd49cc786b7", 0x13}], 0x2, &(0x7f0000004d40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r13, @broadcast, @remote}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}], 0x48}}], 0x9, 0x4084) write$binfmt_misc(r1, &(0x7f0000000140), 0x4240a2ca) r14 = socket(0x9, 0x3, 0x0) r15 = userfaultfd(0x1) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r15, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) sendto$inet6(r14, 0x0, 0x0, 0x0, 0x0, 0x0) 3.157535688s ago: executing program 3 (id=3274): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000040)='page_pool_state_hold\x00', r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x48) gettid() r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 2.650896668s ago: executing program 1 (id=3278): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000007c850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000ac0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.650620488s ago: executing program 1 (id=3279): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x1fffffbf, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x401]}}]}, 0x60) (fail_nth: 11) 2.343267309s ago: executing program 1 (id=3280): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}}, 0x24, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4008088) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.251222103s ago: executing program 1 (id=3282): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}, @sack={0x5, 0x2}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f]}]}}]}, 0x454}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000000100)) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}) 2.139511545s ago: executing program 2 (id=3283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xba, &(0x7f00000001c0)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 2.011529666s ago: executing program 2 (id=3284): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}}, 0x24, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4008088) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.807628738s ago: executing program 2 (id=3286): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.stat\x00', 0x26e1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x10}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}]}}]}, 0xa4}}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, &(0x7f0000000040)={0xeee, 0xc}) 1.755104386s ago: executing program 1 (id=3287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x700, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) getpid() socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0407ff00aaaaaa"], 0x102) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) 1.754755565s ago: executing program 2 (id=3288): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0xa4, 0x11, 0x9, 0x4, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0x8}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x2, 0xf0c, 0x3, 0x2, 0xc, 0x5, 0x6}}, {0x10, 0x2, [0x200, 0x6000, 0x9, 0x7, 0xffff, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x2, 0x7fffffff, 0x1, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x8, 0x9f5, 0x5]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xa4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) iopl(0xd8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1000) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0x1b0}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0xc}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000340), 0x6) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r9, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x30cb8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='console\x00', r10}, 0x10) r11 = socket(0x18, 0x1, 0x0) write(r11, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b0001000000", 0x24) 1.718920615s ago: executing program 0 (id=3289): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc08c5334, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f00000000c0)={0x10003, 0x0, {0x0, 0x1}}) tkill(r0, 0x7) 1.58022229s ago: executing program 2 (id=3290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)={@val={0x700, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x15}}, {0x0, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "32f9650722c798e9caab0b51779f764dd050842462b46d7f09574cd03b22dd88", "93fe54f15d8a5e1700", {"7024b0cb6826c3cb7e7eca1ecc0fa7d3", "2e8e194133bcf89c71384b81a329cdf0"}}}}}}, 0x86) 1.576821557s ago: executing program 3 (id=3291): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r1, 0x0, 0x3, 0x1}}, 0x20) 1.48725777s ago: executing program 3 (id=3292): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) r2 = socket(0x1d, 0x2, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x100005, [{0xc, 0x2, 0xfffffffe}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x5f, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x4e, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x48, 0x2}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0x72aa, [{0xc, 0x4, 0x3}, {0x6, 0x5, 0x200}]}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/215, 0x87, 0xd7, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x80000001, 0x4, 0x2, 0x6, 0xfff, 0x23d56276, 0xffff8001}, {0x7, 0x8, 0x4, 0x9, 0x3, 0x9, 0x4b9}]}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x1, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) socket$inet6(0xa, 0x6, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r9, 0x0, 0x0, 0x4}, 0x20) r10 = socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x9c, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x1, 0x1, 0x0, 0x20, 0xf8, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "c25cd3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x5ca, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xea, 0x2}, @obex={0x5, 0x24, 0x15, 0xfff6}, @mdlm={0x15, 0x24, 0x12, 0x4c4e}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x3, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xfffd}, @obex={0x5, 0x24, 0x15, 0x91}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6b, 0x1, 0xdd}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xcc, 0xf1, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x51, 0x2, 0x7, 0x8, 0xff, 0xd}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x38, &(0x7f00000005c0)=@string={0x38, 0x3, "c10e5ee5901c5ef36e51e645936790d456f0583811ebc02b8dc820434918dff39657d2506e51dedc8aeba83b422beefbd859b0dd638d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x843}}]}) r11 = socket$inet(0x2, 0x80001, 0x2) syz_usb_connect(0x3, 0x113f, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xe, 0x9, 0x2e, 0x10, 0x1554, 0x5010, 0x4001, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112d, 0x4, 0x4, 0x1, 0xb0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0xd, 0x97, 0x8d, 0xe3, 0xf, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0xa, 0x9, "ce"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x2, 0x59, 0x0, 0x0, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x2, 0xb, 0x4, 0xf}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x5}]}, @generic={0x9a, 0x23, "c0263cc395a5f0272c097e812af1cb69158fceb12c57c6f46458ef18f81985d6fe4c42e49d8a836a331a2eac3250ab3f1e20098c78fe9c42f8cc92b75a9dbb400be7756dc72cdd75ba77d4fc6d150603bebd5cbb920dec74fc8ac06abaeb817507b2cd901b5b6f5e8fdc700e06b68a1ced89898461680a5eee9f44226eb083789ae86e0f54a632585bf990d5b6dfaf65a24e02d601495f3b"}], [{{0x9, 0x5, 0xa, 0x6, 0x400, 0xfb, 0xbb, 0x9, [@generic={0xe9, 0xa, "16bcdf89a111aadf8b630cd647a1873bfe8c9662b263687080ad7bf926d2b3aabde4f0d514e16c2b594d7b380197bb8c4136c14e0004457897f604cb0d4df2672d099ac97edb708d6ee594afd22f3815ed733b49b1ae63e046d4e7369b55ec171d9c705a8415715388a4fb301b2d1337dae9e379cc07e517d9bba0eabf9573dd762b4427b7d507dd13f649a760e4162f85cf3c7e3a4b70776b93e4c73de85e95d51888d2c6f941c6bc3e75cb76ffe47421c344446aa9ab5c8d58e05ed1f83c01f2af8970c39fe2ca14f23023f69a2b6a0eaa3f986bf3aa7ef1af8cedf17cc1ba974e27a2537cb6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0xc0, 0xe, [@generic={0x7c, 0x7, "8cbd88e93373f3654dfeb7adf036f9e6b5f1e74c24f360762093988b4a65becc8e8035670e30bb2dbc2446c58b1111f59bf8c1bc9bd61d0137943a896e84c5155186aa190ce7a2b4f4f73c301a3a47ebb2010d2846302ab705b8f554891b9735801728f3b8ea2d69475644b2afac8644b518be470b163a87c1af"}]}}, {{0x9, 0x5, 0x0, 0x13, 0x8, 0xfc, 0x2, 0xe5}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x1, 0x80, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0xa9, 0x3, 0xff, [@generic={0x6e, 0x4, "0ad988eb90645cef128be4be9bd55f3b7e668c239eec767947ae722ba4173ed2ebf9dfb7a451dc4e141184cad2ae6ffd7f879eb4615dcd4491f0ca51789c3a06cc1222d7d2eb2a19609b66b9e57d91820c3a1346121dfccb774e01d2cedd7178d89d67f99589b45fd382a03c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xf7, 0xd, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x2}, @generic={0xdb, 0x22, "db34171b5dee711e51df8866394acb4b75692d25e00d633058ac761051672102831f3ea708608de399db4cdd00913b5ce4b5b9dcd279afd1cc330d6fa317a5f5c3cee0b36a6bba0467e1c139d246842fead0c311e00e3bcb6c932b9ccc30fa0d084ca0e4c51d6dce9c3c70151693618c58435ca0a24f9bb1693cfaa31e4f0f4586cc05c010b7c32b30b717d5c556b5d984c24a2c12772e9cb59f195e64c511793d6435c92dc47ac99fb436482a07abb5469b54f1420f566a2f01c1d1daedfbd6b2178173d735d837da5a3a258c1f1e0321b80183088e4fd1ea"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x0, 0x9, 0x8b}}, {{0x9, 0x5, 0xe, 0x0, 0xd8038d191bdd6643, 0x39, 0xfc, 0x7b}}, {{0x9, 0x5, 0xc, 0x4, 0xa00, 0x6, 0x6d, 0x5, [@generic={0xf1, 0x23, "33cf827030aab180074b9bd36bb5a05ae253b068930019f2c8ce0173f4b415b213436ba44ff8da999c703a323ecc2eef8e059f3809a4920fc8a166b9a752a83d2dc0101651008b94fb00bee0572c8df1defe4ca68f2805eec821018bc948f4650324b54705415ae6167d25fdf50d8095594e285628e179752cc949ebc49b4b4585a4d5b662f8ef87eaed6395118353fca5c8559dfc406ab728c9d41bcf83f12120d0605652d34607e82327c6220896837b14592fd585e05515fa5df01c9fa31c12b6b1382cb2b5879287ffecf4735824795e0c1e0c86b6cf4f778a86524b49c57f85505ca20afddc3dcaba1cfac0d5"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x6, 0x48, [@generic={0x7b, 0x23, "46f12cf86bd5f855efeb1b9fa89e5fd1d3457847aab4bd64359a5bbd14f73227f1d88ad3d2192aea8ea3690d9b2daa6adfd12cf435e9d62a4e2bae0e11d2d1c0f2b81b57ed48a2d6695996afcf300bb86550cc00c884715016f085ac0309b1d58ccd38be453cc37125df3e95ca2a417ef5b65aa42fc8a10739"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x64, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x81, 0x2, 0xa}}]}}, {{0x9, 0x4, 0x14, 0x80, 0xb, 0x3e, 0x5f, 0x9e, 0xe1, [@hid_hid={0x9, 0x21, 0xe, 0x6, 0x1, {0x22, 0xa3e}}], [{{0x9, 0x5, 0xb, 0x3, 0x0, 0x5, 0x5, 0x1a}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xe, 0x7, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x3b, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x2}, @generic={0x81, 0x1, "3588853ed4d044c109e3dbc869eb2bf76999c2d9c319c8268d59ccb946faa4c9516d3074c977e70e1dbc496c51ca2dd08146fdb4da51317656e78114cad89c5fcf9ba9a5f4023c6b3c691b8b979ad77110bdd5fc7eca00f30563d929c3092bba3b417421afc9e8446a1ca7ec1e5f267a2bb0af0f590420eee4a19fbe475f52"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0x1, 0x18, [@generic={0xf5, 0x4, "b50d9420ea0936c33be646c66aa5e2824f34fecd4e3d07a8291378b9eefadd48abf37becb4d36328f6d50458c5f6f7664e3cf0fe3043453aa4da62941cb9e04205db9cee8186572ddeb9ffe6d9f181039a3cf2a1326b3389570bfbbabfb7a0193184673ce3fe8becb372c030d530249ea5a38a3a518e8f86ce20c55226adba0cea0ba0b1602ce5e3308848325f085d1f3456b93b12f132437b18597e8f57d0859b44e992add5c9b7a141f6f57f6bdab0ac688d383c32a0fde7b0c8f6bcc0dfad5356ce2bc3a915ed342e0bf8d10b9f622ebe9f9f0e4b708e25987813dc674bf9ca18ad89e2ef525db1226ed4151c0dbfcfa019"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x418, 0x40, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x83, 0xbe}]}}, {{0x9, 0x5, 0xe, 0x4, 0x0, 0x5, 0xfa, 0xdd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x18, 0x9}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x6, 0x4, 0x4, [@generic={0xbb, 0x19, "b6777e7bbe40aaf46d717013059b8b28df1961b89684f8767ae428f87def0f91fd80792846d5164a3ddc5be97b9c3abcf51abe1190419d2a406e950af7ba2bf911f1097dba1010fc3bdd83efe3ec1c40e8f6ed83ba7c159a36b0947c8c7a2a5a7ce62f974ca6e009814adb2cd15df367e80e5584c54d4dcc0e45313661b9d4e607b56b5bf1f22b00cb152088cf4e59ed48e37c93e6738139dce54b5f9bd928599b8fa184c8a718dc5ec0fae00b90749d692044842c58408d5e"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x4, 0x9, 0x7, [@generic={0xff, 0xe, "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"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x5, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0xa, 0x29, 0x6}}]}}, {{0x9, 0x4, 0x45, 0x4, 0x10, 0xa, 0x16, 0x5b, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x3, 0x1, 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, "1a"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x8, 0x4, 0x1], 0x40}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x2, 0x3, 0x4, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x4}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x5, 0x10, "f266437710"}]}], [{{0x9, 0x5, 0xb, 0x8, 0x400, 0x2, 0x4, 0x43}}, {{0x9, 0x5, 0x9, 0x8, 0x78, 0xc6, 0x5, 0xcb}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6a, 0x3, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x3, 0xb1, 0x3}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0xf7, 0xa8}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x7, 0xb5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x9, 0xa, 0xa, [@generic={0x73, 0x5, "b3bb8e0690631f2eb6a431221697e26d74f62562659c52785e86b6ab3379aa14bd4c527b05e52f0eb82ee02789cada28c7c6f27a84d69363b178efa77e4b29321a70800590d12b6e2fda80a2543d6aaa6cd26cd5bee9cbddc7744afbe6cc85546d34f942354e85a41a792db149520d6427"}, @generic={0x50, 0x10, "cfdd185b00bf0b456410dc517d19b13d520c365f1585b096f39f4b02e8dae7fd555ea660289361e08f99e141ab75dfa465608d46af189609480515068a89b35080dd31f7e4a5393be9dced2334ea"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0x0, 0xda, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0x0, 0xf3, [@generic={0x80, 0x24, "8bcea86a068c389cd9dbbcec9a6c9f20e8675d68d97513e9e0126e1c43f6142f2f63d239ca301437e9a53387c58ddd45217263e0fa582acb9d22b6b497367f2e94b4819a213ebd35cc08325ced26c97cd6325463eec1fb533b3069ee6e2db05905cc4512243e00b694105ad612a46f037e41a2147182765ce03c17ca402d"}, @generic={0x7f, 0x30, "0a1ef3044bde1072d52d5067d935e2295bff4d7dbb08a9319f6be524bb656b5fc34122c4b498e2e515d215631ad5849834fc9d7590403732291624032f538a2a2292620132cf03672d1f8b99968a46fbe194b86a3fb797ca4ed7de94b0b2ffeeba043fae227feae4e15e3150401f47ab35fe80894c711475eae914d9a8"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x6, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x5, 0x8, [@generic={0xe7, 0x3, "3e73fc94ba0040395ad9f2db9c6718416da657474bf8534db9e47538e4a0eccd37ca71bb26eb05e628d4d0e496156960a06ebe28342104c039f973a79f1c7a1c42ffbd3d981fad0723749879a2d42e850da0df66f1b4f103deba5075fdebf0493d3cd72b1a1f5e6c3cbb691d6b0dfa261879f4e047ae8aea2ed7c6120e218080df5cdea6cde95b81922aac098bba7fa536d534f2561328811ce4cf4703c1955ac10296b0ce66f6c4cc08c88e61779efe9e3995b6da91185d211876d8775ace39c4263d9c68a1fbaf4ae2a3bbcf72d112d3095a98a07875dba6da956ed64439ee8bb1bf06b4"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xf, 0x1, 0xf, [@generic={0x50, 0x21, "96eac5b494f17ca5d0656e30132a1a6c480e1f927c4871d17891117b0c8b365f18fcfd727e32eeaa2e51b67f16d1834b8a857ccc9598f455ef594a73df3a8d422bd094c5e6f7f37454212b591a01"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x2, 0x8, 0x2}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9f, 0x6}]}}]}}, {{0x9, 0x4, 0x90, 0x81, 0x8, 0x65, 0xf8, 0x75, 0x8, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x9, 0x0, "8e337a1b55fc15"}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x3}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x2}]}], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x0, 0x82, 0xf9}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x80, 0x33, 0x6, [@generic={0x79, 0x4, "9bfb75a07e9ac881171000578be053148b6d74c46559246bf0090f216c9375db352e7aee0011f32fe32130eadf7d6e8c0c26f9c7757092bf393a06d8a383be8f1d5e684ac7f8346723655366bd5af2a250d9c2c19d9e38ad8e84ce3336fe68cf68888889e142678b6ac1824e4fb9b423f55697531a3214"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x2, 0x8, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xdc, 0x8}]}}, {{0x9, 0x5, 0x4, 0x4, 0x240, 0x10, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x400}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x81, 0x5, 0x0, [@generic={0x7f, 0x23, "73eff58b0f63430d7de4f4ca14a5d19e8e6827a3ab7533285856d6ca3b55773f3596ade223434d0d6a4882c4a77433acf76ab3cda409236b46a75e3ded8af085ee74070a1aa2da35df5fed89577cb0c645f7e734ce216e88a79592ad02afaf284e3742bbadef70570e6acd41705c4cb203f650a3381cdf3aae0efa9384"}, @generic={0xd6, 0xe, "00bc9dabb81ff64e5b3c495074cc13a52a58db5e0a30ad82b78d81f799b5249fc86f6a6fbeca510ebeb8c6f529b431f953c6e9ad56860bb821c028e03888f41ad72aea22dd1f797c3db29b794c6f972892ee9c8d2096474595c421aed11db6c3a6331f12c317e8af8baed7615ade4ed3d8b6a3044dc6838fb3756afdcfd483aad6eecfb4c04f09f075b3d18937c430d2bbc6db31de73391f9eebd7564d0f4b588bbf47d6447c5572f1bf5f9232c49cf4bebf062a555ca4190f507f0d069ea415d1fe0bd7664c3320ba16973dbc0fa2058f4259d0"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x8, 0xf, 0x5, [@generic={0xe7, 0x1, "825dc932e454aa41ce33cd8b0c9159e1dd3eafea4a8396df20425ca1c2faa343161ded68ebf57997b8be3150eac37f60691dad275151add7493412910c077faa4daa8790a6e11bc2fbce5befad53fcb8e654531feeeaa4dd0d37fc2dd57d8b5bcef4cd81f94afbf46c394ccf480307c38b317371bc065e08413b42bfab6ee7b1bacaebd3aea5b9eae87c0f50f9ba90af50a1e8ff5817cb8bd4a37a873c5581fe14104390c0f8ac1a66411bdcca2e8d57ee5a2cdddcda6e573afb6cba1f9f228c0887fadc9d74add2f22fcc2327a64ebabc6b0ae54de59c269a8c5e9ef2898632471f06499c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x14, 0x5, 0x40, [@generic={0xe3, 0x2, "974e3e95e23f2766ed9d2afb097ebbbdbd11fb0660ebf7e08a1f29e2846977bf0c6807f28b77e53e5bf0928b0c44ba6de17938fbc11b160d1d7f60bb7b19ba905f4310fdd04d86c667cb54f01555800349c5d0a11c0968550fbc99a3c4d35b92387725f1576f741e265c58552ca1eff0d9503f9dbde72af9e3db2bc4285a50fafa86a1989ce2b31db1bc5cfc40f5a09ed078daf218a36b7912e97af4eb0551e12c23b6a1f0963ca2312d4e194361abd7e0fe79ffaa0db1005ffcee9d8540e9871b9181fa01dadb5fb180a1c2745581e3428e2575223e6741f9b401a5ec2f8a0211"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x40, 0x9}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x53, 0x2, 0x8, 0x10}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="3a030e39063eeb8de963542c7d5bd8a006db95524b3489030e5c6de1078a7282020017b8aabb7595be49230b10da1eb17f5bb9529f925379c306"]}]}) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 'dvmrp1\x00'}) getsockopt$inet_int(r10, 0x10d, 0x9a, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.357867694s ago: executing program 2 (id=3293): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa08, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3f000000}) io_setup(0x8, &(0x7f0000000000)=0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) io_submit(r5, 0x2, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="d1f7624a6b0e", 0x6}, 0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x8c, &(0x7f0000000540)=""/140, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x8, 0xe92b}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 1.35636553s ago: executing program 0 (id=3301): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xffffffff}]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB]) r1 = socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xfe, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x10, 0x20, 0xfffffb1b, 0xbd508318}}) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000580)={0x1ff, 0x81, 0x5, 0x6, 0x2, 0x7}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cc3, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r5, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0xb) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 188.189081ms ago: executing program 0 (id=3294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0xfe0f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x4, 0x10a5}]}, 0x4c}}, 0x0) 97.760979ms ago: executing program 1 (id=3295): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000019380)='(\x15^H\\', &(0x7f0000019300)='\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b", 0x3b, 0x8084, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x61, &(0x7f0000000040)={&(0x7f0000019340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES64=r1, @ANYBLOB="81ff11efecbaff974c481cca10e46ea1208662cfe7726574617000"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x9, 0xa, 0x0, 0x70bd25, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xe, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210500000000000000004a00000008000300", @ANYRES32=r10], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r11, 0x4059, &(0x7f0000000200)="11a3ab1ef20ef7fde5e6752f0049cd509f860856d7483a70dd400bba0c6d6c2de621f2d673efe6e6300dd206251a56ca18e8247f676d74") ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 97.546162ms ago: executing program 0 (id=3296): semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000100)=""/239) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) set_mempolicy_home_node(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x0) 1.492213ms ago: executing program 0 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x0) listen(r2, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000001c0)={0x1, 0x7fff, 0x3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r3, 0x1000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x4008080) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003980)=""/4103, 0x1007}], 0x1}}], 0x1, 0x60, 0x0) 0s ago: executing program 0 (id=3298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000840)={0x0, 0x4, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x9, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r0}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x181283, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000011000304000000000000000000ea0000", @ANYRES16=r6], 0x20}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000000)={@mcast2, 0x2e}) 0s ago: executing program 3 (id=3299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (fail_nth: 11) kernel console output (not intermixed with test programs): 5E:07DA.0008: unknown main item tag 0x0 [ 489.482941][ T5352] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 489.485465][ T5352] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 489.488075][ T5352] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 489.497707][ T5352] HID 045e:07da: Invalid code 65791 type 1 [ 489.503672][ T5352] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input31 [ 489.518140][ T5352] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 489.672780][ T5405] usb 7-1: USB disconnect, device number 43 [ 489.678472][ T5707] usb 6-1: USB disconnect, device number 56 [ 490.195296][ T5352] usb 8-1: USB disconnect, device number 53 [ 490.476873][ T39] audit: type=1326 audit(1727891924.568:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.487500][ T39] audit: type=1326 audit(1727891924.568:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.493447][ T39] audit: type=1326 audit(1727891924.568:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.500044][ T39] audit: type=1326 audit(1727891924.568:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.505822][ T39] audit: type=1326 audit(1727891924.568:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.513209][ T39] audit: type=1326 audit(1727891924.568:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.518883][ T39] audit: type=1326 audit(1727891924.568:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.524492][ T39] audit: type=1326 audit(1727891924.568:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.531274][ T39] audit: type=1326 audit(1727891924.568:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.536743][ T39] audit: type=1326 audit(1727891924.568:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15403 comm="syz.2.2783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ff00000 [ 490.699464][ T5707] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 490.795804][T15417] FAULT_INJECTION: forcing a failure. [ 490.795804][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 490.800024][T15417] CPU: 3 UID: 0 PID: 15417 Comm: syz.3.2786 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 490.803695][T15417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.807508][T15417] Call Trace: [ 490.808722][T15417] [ 490.809801][T15417] dump_stack_lvl+0x16c/0x1f0 [ 490.811500][T15417] should_fail_ex+0x497/0x5b0 [ 490.813179][T15417] ? fs_reclaim_acquire+0xae/0x160 [ 490.814997][T15417] should_failslab+0xc2/0x120 [ 490.816706][T15417] kmem_cache_alloc_node_noprof+0x71/0x310 [ 490.818790][T15417] ? __alloc_skb+0x2b3/0x380 [ 490.820437][T15417] __alloc_skb+0x2b3/0x380 [ 490.822040][T15417] ? __pfx___alloc_skb+0x10/0x10 [ 490.823838][T15417] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 490.825664][T15417] netlink_ack+0x164/0xb20 [ 490.827238][T15417] netlink_rcv_skb+0x327/0x410 [ 490.828898][T15417] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.830525][T15417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.831947][T15417] ? netlink_deliver_tap+0x1ae/0xcf0 [ 490.833346][T15417] netlink_unicast+0x53c/0x7f0 [ 490.834623][T15417] ? __pfx_netlink_unicast+0x10/0x10 [ 490.836358][T15417] ? __phys_addr_symbol+0x30/0x80 [ 490.838002][T15417] ? __check_object_size+0x488/0x710 [ 490.839560][T15417] netlink_sendmsg+0x8b8/0xd70 [ 490.840861][T15417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.842719][T15417] ? lock_acquire+0x2f/0xb0 [ 490.844351][T15417] ____sys_sendmsg+0x9ae/0xb40 [ 490.846034][T15417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.847879][T15417] ? get_compat_msghdr+0x11b/0x170 [ 490.849708][T15417] ? __pfx___lock_acquire+0x10/0x10 [ 490.851547][T15417] ___sys_sendmsg+0x135/0x1e0 [ 490.853113][T15417] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.854504][T15417] ? lock_acquire+0x2f/0xb0 [ 490.855747][T15417] ? __fget_files+0x40/0x3f0 [ 490.857172][T15417] ? fdget+0x176/0x210 [ 490.858599][T15417] __sys_sendmsg+0x117/0x1f0 [ 490.860430][T15417] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.862309][T15417] ? __fget_files+0x244/0x3f0 [ 490.864085][T15417] __do_fast_syscall_32+0x73/0x120 [ 490.865794][T15417] do_fast_syscall_32+0x32/0x80 [ 490.867422][T15417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.869614][T15417] RIP: 0023:0xf7f95579 [ 490.871021][T15417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 490.877202][T15417] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 490.879897][T15417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 490.882154][T15417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.884596][T15417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.886912][T15417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 490.889288][T15417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.891850][T15417] [ 490.901969][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 490.919278][ T5707] usb 5-1: config 0 has no interfaces? [ 490.923565][ T5707] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.926622][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.929457][ T5707] usb 5-1: Product: syz [ 490.930945][ T5707] usb 5-1: Manufacturer: syz [ 490.932556][ T5707] usb 5-1: SerialNumber: syz [ 490.937797][ T5707] usb 5-1: config 0 descriptor?? [ 491.171182][ T5387] usb 5-1: USB disconnect, device number 56 [ 491.848034][T15449] FAULT_INJECTION: forcing a failure. [ 491.848034][T15449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.851421][T15449] CPU: 3 UID: 0 PID: 15449 Comm: syz.0.2798 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 491.854235][T15449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 491.857208][T15449] Call Trace: [ 491.858119][T15449] [ 491.858925][T15449] dump_stack_lvl+0x16c/0x1f0 [ 491.860231][T15449] should_fail_ex+0x497/0x5b0 [ 491.861515][T15449] strncpy_from_user+0x3b/0x2a0 [ 491.862844][T15449] getname_flags.part.0+0x8f/0x550 [ 491.864274][T15449] getname+0x8d/0xe0 [ 491.865345][T15449] do_sys_openat2+0x104/0x1e0 [ 491.866631][T15449] ? __pfx_do_sys_openat2+0x10/0x10 [ 491.868359][T15449] ? __fget_files+0x244/0x3f0 [ 491.869768][T15449] __ia32_compat_sys_openat+0x16e/0x210 [ 491.871271][T15449] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 491.872931][T15449] ? ksys_write+0x1ad/0x260 [ 491.874172][T15449] __do_fast_syscall_32+0x73/0x120 [ 491.875575][T15449] do_fast_syscall_32+0x32/0x80 [ 491.876914][T15449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.878630][T15449] RIP: 0023:0xf73fe579 [ 491.879755][T15449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.884932][T15449] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 491.887175][T15449] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020004280 [ 491.889415][T15449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.891574][T15449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.893703][T15449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 491.895846][T15449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.897981][T15449] [ 492.028477][T15454] Bluetooth: MGMT ver 1.23 [ 492.031021][T15453] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 492.045645][ T5707] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 492.227402][ T5707] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.230285][ T5707] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.232828][ T5707] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.236221][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.246887][T15437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 492.255923][ T5707] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.830667][ T5386] usb 6-1: USB disconnect, device number 57 [ 493.438653][T15468] Bluetooth: MGMT ver 1.23 [ 493.459055][T15470] netlink: 'syz.0.2805': attribute type 9 has an invalid length. [ 493.461071][T15470] netlink: 'syz.0.2805': attribute type 7 has an invalid length. [ 493.463215][T15470] netlink: 'syz.0.2805': attribute type 8 has an invalid length. [ 493.568752][T15484] devtmpfs: Cannot disable swap on remount [ 493.585614][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'. [ 493.818986][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2813'. [ 493.820044][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 494.013088][ T1420] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 494.068489][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2815'. [ 494.074852][T15513] ip6t_REJECT: ECHOREPLY is not supported [ 494.173664][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 494.178621][ T5357] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 494.208559][T15517] tipc: Can't bind to reserved service type 2 [ 494.216762][ T1420] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.222869][ T1420] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.225510][ T1420] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.231663][ T1420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.247628][T15497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.259014][ T1420] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.472562][ T1420] usb 5-1: USB disconnect, device number 57 [ 495.556591][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 496.057429][T15570] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2830'. [ 496.060851][T15570] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2830'. [ 496.120905][T15575] FAULT_INJECTION: forcing a failure. [ 496.120905][T15575] name failslab, interval 1, probability 0, space 0, times 0 [ 496.136000][T15575] CPU: 3 UID: 0 PID: 15575 Comm: syz.1.2832 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 496.139589][T15575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 496.143194][T15575] Call Trace: [ 496.144341][T15575] [ 496.145348][T15575] dump_stack_lvl+0x16c/0x1f0 [ 496.146862][T15575] should_fail_ex+0x497/0x5b0 [ 496.148497][T15575] ? fs_reclaim_acquire+0xae/0x160 [ 496.150250][T15575] should_failslab+0xc2/0x120 [ 496.151773][T15575] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 496.153527][T15575] ? alloc_empty_file+0x73/0x1e0 [ 496.155202][T15575] alloc_empty_file+0x73/0x1e0 [ 496.156765][T15575] alloc_file_pseudo+0x13d/0x200 [ 496.158379][T15575] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 496.160181][T15575] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 496.162341][T15575] ? hugetlbfs_get_inode+0x32d/0x530 [ 496.164175][T15575] hugetlb_file_setup+0x4cd/0x620 [ 496.167505][T15575] newseg+0xa7d/0xe60 [ 496.168938][T15575] ? __pfx_newseg+0x10/0x10 [ 496.170489][T15575] ipcget+0xe5/0xd80 [ 496.171804][T15575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.173838][T15575] ? __pfx_ipcget+0x10/0x10 [ 496.175414][T15575] __ia32_sys_shmget+0x13f/0x1b0 [ 496.177135][T15575] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 496.178975][T15575] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 496.181217][T15575] __do_fast_syscall_32+0x73/0x120 [ 496.182927][T15575] do_fast_syscall_32+0x32/0x80 [ 496.184618][T15575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.186692][T15575] RIP: 0023:0xf741e579 [ 496.188057][T15575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 496.194330][T15575] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 000000000000018b [ 496.197066][T15575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000004000 [ 496.199569][T15575] RDX: 0000000000000800 RSI: 0000000020a02000 RDI: 0000000000000000 [ 496.202206][T15575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.204763][T15575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 496.207411][T15575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.210089][T15575] [ 496.400429][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 496.403575][ T5357] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 496.521350][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2829'. [ 496.785659][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 496.799795][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2837'. [ 496.811686][T15601] ip6t_REJECT: ECHOREPLY is not supported [ 497.168524][T15615] FAULT_INJECTION: forcing a failure. [ 497.168524][T15615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.171831][T15615] CPU: 2 UID: 0 PID: 15615 Comm: syz.3.2841 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 497.174548][T15615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 497.177254][T15615] Call Trace: [ 497.178101][T15615] [ 497.178868][T15615] dump_stack_lvl+0x16c/0x1f0 [ 497.180126][T15615] should_fail_ex+0x497/0x5b0 [ 497.181372][T15615] ? fs_reclaim_acquire+0xae/0x160 [ 497.182673][T15615] should_fail_alloc_page+0xe7/0x130 [ 497.184095][T15615] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 497.185732][T15615] __alloc_pages_noprof+0x190/0x25c0 [ 497.187132][T15615] ? hlock_class+0x4e/0x130 [ 497.188345][T15615] ? mark_lock+0xb5/0xc60 [ 497.189490][T15615] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 497.190991][T15615] ? __pfx_mark_lock+0x10/0x10 [ 497.192264][T15615] ? hlock_class+0x4e/0x130 [ 497.193460][T15615] ? mark_lock+0xb5/0xc60 [ 497.194604][T15615] ? hlock_class+0x4e/0x130 [ 497.195824][T15615] ? mark_lock+0xb5/0xc60 [ 497.196959][T15615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.198507][T15615] ? policy_nodemask+0xea/0x4e0 [ 497.199799][T15615] alloc_pages_mpol_noprof+0x2c9/0x610 [ 497.201202][T15615] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 497.202855][T15615] ? find_held_lock+0x2d/0x110 [ 497.204116][T15615] folio_alloc_mpol_noprof+0x36/0xd0 [ 497.205465][T15615] vma_alloc_folio_noprof+0xee/0x1b0 [ 497.206819][T15615] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 497.208341][T15615] ? __pfx___lock_acquire+0x10/0x10 [ 497.209670][T15615] do_wp_page+0x10d1/0x4930 [ 497.210870][T15615] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 497.212344][T15615] ? __pfx_do_wp_page+0x10/0x10 [ 497.213590][T15615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.214968][T15615] ? lock_acquire+0x2f/0xb0 [ 497.216165][T15615] ? __handle_mm_fault+0xdcd/0x2a10 [ 497.217658][T15615] __handle_mm_fault+0x1a93/0x2a10 [ 497.219342][T15615] ? __pfx___handle_mm_fault+0x10/0x10 [ 497.221084][T15615] ? __pfx_lock_release+0x10/0x10 [ 497.222778][T15615] ? vm_normal_page+0x13c/0x2b0 [ 497.224383][T15615] ? follow_page_pte+0x50d/0x1eb0 [ 497.226006][T15615] handle_mm_fault+0x3fa/0xaa0 [ 497.227601][T15615] __get_user_pages+0x90f/0x3b90 [ 497.229279][T15615] ? __pfx___get_user_pages+0x10/0x10 [ 497.231033][T15615] ? down_read_killable+0xcc/0x380 [ 497.232766][T15615] ? __pfx_down_read_killable+0x10/0x10 [ 497.234580][T15615] __gup_longterm_locked+0x22e/0x1b30 [ 497.236341][T15615] ? __pfx_lock_release+0x10/0x10 [ 497.238056][T15615] ? __pfx___gup_longterm_locked+0x10/0x10 [ 497.239970][T15615] ? sanity_check_pinned_pages+0x23/0x11c0 [ 497.241892][T15615] gup_fast_fallback+0x180b/0x2690 [ 497.243584][T15615] ? __pfx_gup_fast_fallback+0x10/0x10 [ 497.245668][T15615] ? __kernel_text_address+0xd/0x40 [ 497.247476][T15615] ? unwind_get_return_address+0x59/0xa0 [ 497.249299][T15615] ? hlock_class+0x4e/0x130 [ 497.250785][T15615] ? mark_lock+0xb5/0xc60 [ 497.252237][T15615] pin_user_pages_fast+0xa8/0x100 [ 497.253892][T15615] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 497.255748][T15615] ? hlock_class+0x4e/0x130 [ 497.257281][T15615] ? __lock_acquire+0xbdd/0x3ce0 [ 497.258882][T15615] iov_iter_extract_pages+0x397/0x1f30 [ 497.260705][T15615] ? __pfx___lock_acquire+0x10/0x10 [ 497.262452][T15615] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 497.264451][T15615] ? find_held_lock+0x2d/0x110 [ 497.266076][T15615] bio_iov_iter_get_pages+0x37e/0x14c0 [ 497.267919][T15615] ? trace_lock_acquire+0x14a/0x1d0 [ 497.269674][T15615] ? find_held_lock+0x2d/0x110 [ 497.271258][T15615] ? __pfx_lock_release+0x10/0x10 [ 497.272924][T15615] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 497.274932][T15615] __blkdev_direct_IO_simple+0x318/0x7c0 [ 497.276839][T15615] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 497.278849][T15615] ? hlock_class+0x4e/0x130 [ 497.280338][T15615] ? __lock_acquire+0xbdd/0x3ce0 [ 497.281960][T15615] ? find_held_lock+0x2d/0x110 [ 497.283555][T15615] ? iov_iter_is_aligned+0xf2/0x5a0 [ 497.285255][T15615] blkdev_direct_IO+0xa0b/0x1a80 [ 497.286888][T15615] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 497.288717][T15615] ? aa_file_perm+0x4d5/0xfe0 [ 497.290163][T15615] ? __pfx_mark_lock+0x10/0x10 [ 497.291405][T15615] ? __pfx_aa_file_perm+0x10/0x10 [ 497.292943][T15615] blkdev_read_iter+0x258/0x480 [ 497.294392][T15615] do_iter_readv_writev+0x614/0x7f0 [ 497.296099][T15615] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 497.297639][T15615] ? bpf_lsm_file_permission+0x9/0x10 [ 497.299354][T15615] ? security_file_permission+0x71/0x210 [ 497.301203][T15615] vfs_readv+0x4cf/0x890 [ 497.302591][T15615] ? __pfx_vfs_readv+0x10/0x10 [ 497.304167][T15615] ? find_held_lock+0x2d/0x110 [ 497.305609][T15615] ? __pfx_lock_release+0x10/0x10 [ 497.307161][T15615] ? trace_lock_acquire+0x14a/0x1d0 [ 497.308512][T15615] ? __fget_files+0x244/0x3f0 [ 497.309749][T15615] ? do_preadv+0x1b4/0x270 [ 497.310898][T15615] do_preadv+0x1b4/0x270 [ 497.312028][T15615] ? __pfx_do_preadv+0x10/0x10 [ 497.313277][T15615] ? ksys_write+0x1ad/0x260 [ 497.314468][T15615] ? __pfx_ksys_write+0x10/0x10 [ 497.315699][T15615] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 497.317091][T15615] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 497.318803][T15615] __do_fast_syscall_32+0x73/0x120 [ 497.320143][T15615] do_fast_syscall_32+0x32/0x80 [ 497.321351][T15615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.322963][T15615] RIP: 0023:0xf7f95579 [ 497.324041][T15615] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 497.329143][T15615] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 000000000000017a [ 497.331667][T15615] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000080 [ 497.333929][T15615] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.336196][T15615] RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000 [ 497.338234][T15615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.340279][T15615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.342335][T15615] [ 497.425041][ T5707] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 497.591999][ T5707] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.595754][ T5707] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 497.606305][ T5707] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.609209][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.621964][T15613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.629532][ T5707] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.610670][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 498.615499][T15623] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 498.730304][ T5707] usb 5-1: USB disconnect, device number 58 [ 499.494741][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 499.630789][T15660] sctp: [Deprecated]: syz.0.2852 (pid 15660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.630789][T15660] Use struct sctp_sack_info instead [ 500.275008][T15676] FAULT_INJECTION: forcing a failure. [ 500.275008][T15676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.280408][T15676] CPU: 2 UID: 0 PID: 15676 Comm: syz.1.2855 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 500.284217][T15676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 500.287217][T15676] Call Trace: [ 500.288132][T15676] [ 500.288931][T15676] dump_stack_lvl+0x16c/0x1f0 [ 500.290179][T15676] should_fail_ex+0x497/0x5b0 [ 500.291443][T15676] _copy_from_user+0x30/0xf0 [ 500.292724][T15676] __sys_bpf+0x215/0x5780 [ 500.294291][T15676] ? ksys_write+0x21e/0x260 [ 500.296029][T15676] ? __pfx___sys_bpf+0x10/0x10 [ 500.297886][T15676] ? vfs_write+0x14d/0x1140 [ 500.299643][T15676] ? __mutex_unlock_slowpath+0x164/0x650 [ 500.301697][T15676] ? fput+0x30/0x390 [ 500.303126][T15676] ? ksys_write+0x1ad/0x260 [ 500.304797][T15676] ? __pfx_ksys_write+0x10/0x10 [ 500.306145][T15676] __ia32_sys_bpf+0x76/0xe0 [ 500.307345][T15676] __do_fast_syscall_32+0x73/0x120 [ 500.308692][T15676] do_fast_syscall_32+0x32/0x80 [ 500.309972][T15676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.310603][ T5405] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 500.311606][T15676] RIP: 0023:0xf741e579 [ 500.311636][T15676] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 500.320787][T15676] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 500.323323][T15676] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000200002c0 [ 500.325698][T15676] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.327977][T15676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.330141][T15676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 500.332362][T15676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.334449][T15676] [ 500.405955][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 500.544450][ T5405] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.548379][ T5405] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 500.551774][ T5405] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.554871][ T5405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.562172][T15672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.566770][ T5405] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.718110][T15693] program syz.0.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.845370][ T5357] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 500.845426][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 500.858266][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 501.774310][ T5707] usb 7-1: USB disconnect, device number 44 [ 502.384996][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'. [ 502.530262][T15716] block nbd2: NBD_DISCONNECT [ 502.624582][ T112] EXT4-fs warning (device sda1): es_reclaim_extents:1841: forced shrink of precached extents [ 502.636590][ T112] EXT4-fs warning (device sda1): es_reclaim_extents:1841: forced shrink of precached extents [ 502.791286][T15727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'. [ 503.058485][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 503.173267][T15733] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 503.315812][ T57] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 503.477450][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.484689][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.491530][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.495332][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.510270][T15731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.515929][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.881725][ T5405] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 504.063515][ T5405] usb 7-1: Using ep0 maxpacket: 8 [ 504.067688][ T5405] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.072594][ T5405] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.077531][ T5405] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 504.084722][ T5405] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 504.091111][ T5405] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.098020][ T5405] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.100388][ T5405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.329252][ T5405] usb 7-1: GET_CAPABILITIES returned 0 [ 504.330854][ T5405] usbtmc 7-1:16.0: can't read capabilities [ 504.391292][T15756] netlink: 'syz.3.2880': attribute type 11 has an invalid length. [ 504.393448][T15756] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.2880'. [ 504.548782][T15744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.562470][T15744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.586356][ T1420] usb 7-1: USB disconnect, device number 45 [ 504.595854][ T5386] usb 5-1: USB disconnect, device number 59 [ 504.599867][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2880'. [ 505.069179][T15767] FAULT_INJECTION: forcing a failure. [ 505.069179][T15767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.072877][T15767] CPU: 2 UID: 0 PID: 15767 Comm: syz.3.2881 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 505.075706][T15767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 505.078702][T15767] Call Trace: [ 505.079622][T15767] [ 505.080628][T15767] dump_stack_lvl+0x16c/0x1f0 [ 505.082248][T15767] should_fail_ex+0x497/0x5b0 [ 505.083886][T15767] _copy_from_user+0x30/0xf0 [ 505.085505][T15767] bpf_test_init.isra.0+0xf1/0x150 [ 505.087073][T15767] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 505.088657][T15767] bpf_prog_test_run_skb+0x250/0x2140 [ 505.090066][T15767] ? lock_acquire+0x2f/0xb0 [ 505.091394][T15767] ? __fget_files+0x40/0x3f0 [ 505.092642][T15767] ? __fget_files+0x244/0x3f0 [ 505.093896][T15767] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 505.095446][T15767] ? fput+0x30/0x390 [ 505.096506][T15767] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 505.098033][T15767] __sys_bpf+0x1921/0x5780 [ 505.099220][T15767] ? ksys_write+0x21e/0x260 [ 505.100433][T15767] ? __pfx___sys_bpf+0x10/0x10 [ 505.101726][T15767] ? vfs_write+0x14d/0x1140 [ 505.102922][T15767] ? __mutex_unlock_slowpath+0x164/0x650 [ 505.104421][T15767] ? fput+0x30/0x390 [ 505.105475][T15767] ? ksys_write+0x1ad/0x260 [ 505.106675][T15767] ? __pfx_ksys_write+0x10/0x10 [ 505.107990][T15767] __ia32_sys_bpf+0x76/0xe0 [ 505.109203][T15767] __do_fast_syscall_32+0x73/0x120 [ 505.110558][T15767] do_fast_syscall_32+0x32/0x80 [ 505.111869][T15767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.113540][T15767] RIP: 0023:0xf7f95579 [ 505.114627][T15767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 505.119697][T15767] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 505.121870][T15767] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000240 [ 505.123948][T15767] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 505.125900][T15767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.128045][T15767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 505.130116][T15767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.132245][T15767] [ 505.283937][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 505.514373][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 505.560343][ T57] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 505.723457][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 505.726517][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 505.729452][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 505.737481][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.747454][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.758287][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.766369][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.834673][T15808] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 505.836902][T15808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2892'. [ 505.992574][ T57] usb 5-1: usb_control_msg returned -32 [ 505.995768][ T57] usbtmc 5-1:16.0: can't read capabilities [ 506.169952][ T5599] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 506.301488][T15785] netlink: 'syz.0.2889': attribute type 8 has an invalid length. [ 506.304351][T15785] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2889'. [ 506.331931][ T1420] usb 5-1: USB disconnect, device number 60 [ 506.342421][ T5599] usb 6-1: Using ep0 maxpacket: 8 [ 506.346274][ T5599] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.349912][ T5599] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.384651][ T5599] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 506.388306][ T5599] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 506.391855][ T5599] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.400628][ T5599] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.403995][ T5599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.667367][ T5599] usb 6-1: GET_CAPABILITIES returned 0 [ 506.676954][ T5599] usbtmc 6-1:16.0: can't read capabilities [ 506.831001][T15816] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 506.888335][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.890796][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.894726][ T57] usb 6-1: USB disconnect, device number 58 [ 507.238649][T15830] syz.0.2900: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 507.244431][T15830] CPU: 1 UID: 0 PID: 15830 Comm: syz.0.2900 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 507.248337][T15830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 507.252216][T15830] Call Trace: [ 507.253455][T15830] [ 507.254529][T15830] dump_stack_lvl+0x16c/0x1f0 [ 507.256212][T15830] warn_alloc+0x24d/0x3a0 [ 507.257695][T15830] ? __pfx_warn_alloc+0x10/0x10 [ 507.258977][T15830] ? __pfx_stack_trace_save+0x10/0x10 [ 507.260368][T15830] ? kasan_save_stack+0x42/0x60 [ 507.261623][T15830] ? kasan_save_stack+0x33/0x60 [ 507.263012][T15830] ? kasan_save_track+0x14/0x30 [ 507.264806][T15830] ? __kasan_kmalloc+0xaa/0xb0 [ 507.266536][T15830] ? xskq_create+0x52/0x1d0 [ 507.268167][T15830] ? do_sock_setsockopt+0x222/0x480 [ 507.270071][T15830] ? __sys_setsockopt+0x1a4/0x270 [ 507.271956][T15830] ? __ia32_sys_setsockopt+0xbc/0x160 [ 507.273906][T15830] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 507.276079][T15830] ? xskq_create+0xfb/0x1d0 [ 507.277757][T15830] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.279728][T15830] ? xskq_create+0xfb/0x1d0 [ 507.281285][T15830] vmalloc_user_noprof+0x6b/0x90 [ 507.283002][T15830] ? xskq_create+0xfb/0x1d0 [ 507.284688][T15830] xskq_create+0xfb/0x1d0 [ 507.286280][T15830] xsk_setsockopt+0x869/0xac0 [ 507.288028][T15830] ? __pfx_xsk_setsockopt+0x10/0x10 [ 507.289955][T15830] ? __pfx_xsk_setsockopt+0x10/0x10 [ 507.291845][T15830] do_sock_setsockopt+0x222/0x480 [ 507.293593][T15830] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 507.295633][T15830] ? fdget+0x176/0x210 [ 507.296865][T15830] __sys_setsockopt+0x1a4/0x270 [ 507.298121][T15830] ? __pfx___sys_setsockopt+0x10/0x10 [ 507.299498][T15830] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 507.301079][T15830] __ia32_sys_setsockopt+0xbc/0x160 [ 507.302878][T15830] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.304755][T15830] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 507.304950][T15831] FAULT_INJECTION: forcing a failure. [ 507.304950][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 507.306975][T15830] __do_fast_syscall_32+0x73/0x120 [ 507.312141][T15830] do_fast_syscall_32+0x32/0x80 [ 507.313944][T15830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.316275][T15830] RIP: 0023:0xf73fe579 [ 507.317782][T15830] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.324568][T15830] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 507.327739][T15830] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 507.330548][T15830] RDX: 0000000000000005 RSI: 0000000020000840 RDI: 0000000000000004 [ 507.333367][T15830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.336265][T15830] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 507.338332][T15830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.340910][T15830] [ 507.344455][T15831] CPU: 3 UID: 0 PID: 15831 Comm: syz.0.2900 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 507.347265][T15831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 507.350050][T15831] Call Trace: [ 507.350917][T15831] [ 507.351185][T15830] Mem-Info: [ 507.351679][T15831] dump_stack_lvl+0x16c/0x1f0 [ 507.352746][T15830] active_anon:3755 inactive_anon:9 isolated_anon:0 [ 507.352746][T15830] active_file:11656 inactive_file:41045 isolated_file:0 [ 507.352746][T15830] unevictable:768 dirty:217 writeback:0 [ 507.352746][T15830] slab_reclaimable:5077 slab_unreclaimable:58044 [ 507.352746][T15830] mapped:22520 shmem:946 pagetables:767 [ 507.352746][T15830] sec_pagetables:329 bounce:0 [ 507.352746][T15830] kernel_misc_reclaimable:0 [ 507.352746][T15830] free:55679 free_pcp:6292 free_cma:0 [ 507.353825][T15831] should_fail_ex+0x497/0x5b0 [ 507.353845][T15831] ? fs_reclaim_acquire+0xae/0x160 [ 507.353859][T15831] should_failslab+0xc2/0x120 [ 507.353874][T15831] kmem_cache_alloc_node_noprof+0x71/0x310 [ 507.369925][T15830] Node 0 active_anon:4kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:420kB dirty:0kB writeback:0kB shmem:1604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9456kB pagetables:1500kB sec_pagetables:1244kB all_unreclaimable? no [ 507.382095][T15831] ? __alloc_skb+0x2b3/0x380 [ 507.382125][T15831] __alloc_skb+0x2b3/0x380 [ 507.382139][T15831] ? __pfx___alloc_skb+0x10/0x10 [ 507.382153][T15831] ? genl_rcv_msg+0x4bd/0x800 [ 507.382170][T15831] netlink_ack+0x164/0xb20 [ 507.382186][T15831] netlink_rcv_skb+0x327/0x410 [ 507.382198][T15831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.391490][T15831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.392923][T15831] ? down_read+0xc9/0x330 [ 507.394080][T15831] ? __pfx_down_read+0x10/0x10 [ 507.395380][T15831] ? netlink_deliver_tap+0x1ae/0xcf0 [ 507.396806][T15831] genl_rcv+0x28/0x40 [ 507.397912][T15831] netlink_unicast+0x53c/0x7f0 [ 507.399195][T15831] ? __pfx_netlink_unicast+0x10/0x10 [ 507.400581][T15831] ? __phys_addr_symbol+0x30/0x80 [ 507.401915][T15831] ? __check_object_size+0x488/0x710 [ 507.403324][T15831] netlink_sendmsg+0x8b8/0xd70 [ 507.404642][T15831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.406060][T15831] ? lock_acquire+0x2f/0xb0 [ 507.407273][T15831] ____sys_sendmsg+0x9ae/0xb40 [ 507.407711][T15830] Node 1 active_anon:15016kB inactive_anon:4kB active_file:46624kB inactive_file:164172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89660kB dirty:868kB writeback:0kB shmem:2180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2676kB pagetables:1568kB sec_pagetables:72kB all_unreclaimable? no [ 507.417366][T15831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.417389][T15831] ? get_compat_msghdr+0x11b/0x170 [ 507.417404][T15831] ? __pfx___lock_acquire+0x10/0x10 [ 507.417421][T15831] ___sys_sendmsg+0x135/0x1e0 [ 507.417438][T15831] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.417458][T15831] ? lock_acquire+0x2f/0xb0 [ 507.423757][T15830] Node 0 [ 507.425904][T15831] ? __fget_files+0x40/0x3f0 [ 507.425933][T15831] ? fdget+0x176/0x210 [ 507.427590][T15830] DMA free:928kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:228kB free_cma:0kB [ 507.429351][T15831] __sys_sendmsg+0x117/0x1f0 [ 507.439472][T15831] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.441245][T15831] ? __fget_files+0x244/0x3f0 [ 507.442913][T15831] __do_fast_syscall_32+0x73/0x120 [ 507.444788][T15831] do_fast_syscall_32+0x32/0x80 [ 507.446515][T15831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 507.448561][T15831] RIP: 0023:0xf73fe579 [ 507.449995][T15831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 507.456494][T15831] RSP: 002b:00000000f56c556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 507.458921][T15831] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000080 [ 507.461016][T15831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 507.463077][T15831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 507.465160][T15831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 507.467232][T15831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 507.469328][T15831] [ 507.479111][T15830] lowmem_reserve[]: 0 273 0 0 0 [ 507.483593][T15830] Node 0 DMA32 free:20656kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:2744kB local_pcp:1468kB free_cma:0kB [ 507.495059][T15830] lowmem_reserve[]: 0 0 0 0 0 [ 507.496920][T15830] Node 1 DMA32 free:211688kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:14916kB inactive_anon:4kB active_file:46624kB inactive_file:164172kB unevictable:1536kB writepending:868kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:19808kB local_pcp:332kB free_cma:0kB [ 507.507092][T15830] lowmem_reserve[]: 0 0 0 0 0 [ 507.516027][T15830] Node 0 DMA: 10*4kB (U) 9*8kB (U) 10*16kB (U) 21*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 944kB [ 507.520854][T15830] Node 0 DMA32: 170*4kB (UMEH) 147*8kB (UEH) 30*16kB (UMEH) 101*32kB (UMEH) 49*64kB (UMEH) 22*128kB (UMEH) 6*256kB (UMH) 2*512kB (MH) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 21248kB [ 507.529979][T15830] Node 1 DMA32: 572*4kB (UME) 290*8kB (UM) 261*16kB (UME) 224*32kB (UME) 121*64kB (UME) 33*128kB (UME) 24*256kB (UME) 31*512kB (UM) 27*1024kB (UME) 13*2048kB (UME) 31*4096kB (UM) = 231184kB [ 507.537896][T15830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.540971][T15830] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.544123][T15830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.544928][T15837] netlink: 'syz.1.2902': attribute type 11 has an invalid length. [ 507.546862][T15830] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.550154][T15837] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.2902'. [ 507.553025][T15830] 54304 total pagecache pages [ 507.558601][T15830] 657 pages in swap cache [ 507.560181][T15830] Free swap = 113512kB [ 507.561584][T15830] Total swap = 124996kB [ 507.563004][T15830] 524155 pages RAM [ 507.564278][T15830] 0 pages HighMem/MovableOnly [ 507.565870][T15830] 206681 pages reserved [ 507.567277][T15830] 0 pages cma reserved [ 507.740858][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 507.884684][T15852] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 508.650327][ T5387] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 508.768033][ T5707] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 508.811079][ T5387] usb 5-1: Using ep0 maxpacket: 8 [ 508.814520][ T5387] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.817633][ T5387] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.820164][ T5387] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 508.832092][ T5387] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 508.835439][ T5387] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.838838][ T5387] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.841189][ T5387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.938036][ T5707] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 508.942305][ T5707] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 508.945838][ T5707] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.949417][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.949729][ T5405] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 508.959612][T15867] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.969575][ T5707] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.067047][ T5387] usb 5-1: GET_CAPABILITIES returned 0 [ 509.068825][ T5387] usbtmc 5-1:16.0: can't read capabilities [ 509.112644][ T5405] usb 8-1: config index 0 descriptor too short (expected 65316, got 36) [ 509.114861][ T5405] usb 8-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 509.117236][ T5405] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.119837][ T5405] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 509.122443][ T5405] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.126078][ T5405] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.129950][ T5405] usb 8-1: config 0 descriptor?? [ 509.139498][T15875] overlayfs: overlapping lowerdir path [ 509.290353][T15869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.295569][T15869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.304403][ T5707] usb 5-1: USB disconnect, device number 61 [ 509.518768][ T5599] usb 8-1: USB disconnect, device number 54 [ 509.896912][ T5386] usb 6-1: USB disconnect, device number 59 [ 509.956806][ T5707] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 510.113893][T15893] netlink: 'syz.3.2922': attribute type 11 has an invalid length. [ 510.119155][T15893] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.2922'. [ 510.195163][ T5707] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.199700][ T5707] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 510.206467][ T5707] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 510.210850][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.230836][T15884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 510.255714][ T5707] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.358959][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 511.523355][ T5386] usb 7-1: USB disconnect, device number 46 [ 512.266787][T15935] team0: Port device team_slave_0 removed [ 512.269834][T15935] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 512.280900][T15939] netlink: 5672 bytes leftover after parsing attributes in process `syz.2.2932'. [ 512.388786][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.371466][T15952] netlink: 'syz.1.2938': attribute type 11 has an invalid length. [ 513.373608][T15952] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.2938'. [ 513.540145][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 513.925911][T15970] netlink: 'syz.1.2942': attribute type 11 has an invalid length. [ 513.928678][T15970] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.2942'. [ 514.059904][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 514.103232][ T5386] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 514.165789][T15968] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 514.277635][ T5386] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 514.281245][ T5386] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 514.297594][ T5386] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.300750][ T5386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.312852][T15966] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.339223][ T5386] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.595473][T15993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 514.695701][T15992] syzkaller0: entered promiscuous mode [ 514.697364][T15992] syzkaller0: entered allmulticast mode [ 515.676265][ T5707] usb 5-1: USB disconnect, device number 62 [ 516.592166][T16010] netlink: 'syz.0.2952': attribute type 11 has an invalid length. [ 516.595223][T16010] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.2952'. [ 516.769257][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2952'. [ 517.345645][T16022] FAULT_INJECTION: forcing a failure. [ 517.345645][T16022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.349049][T16022] CPU: 2 UID: 0 PID: 16022 Comm: syz.2.2961 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 517.351900][T16022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.354825][T16022] Call Trace: [ 517.355754][T16022] [ 517.356542][T16022] dump_stack_lvl+0x16c/0x1f0 [ 517.357797][T16022] should_fail_ex+0x497/0x5b0 [ 517.359048][T16022] _copy_from_user+0x30/0xf0 [ 517.360283][T16022] get_compat_msghdr+0xa8/0x170 [ 517.361574][T16022] ? __pfx_get_compat_msghdr+0x10/0x10 [ 517.363003][T16022] ? __pfx___lock_acquire+0x10/0x10 [ 517.364414][T16022] ___sys_sendmsg+0x1b0/0x1e0 [ 517.365687][T16022] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.367129][T16022] ? lock_acquire+0x2f/0xb0 [ 517.368333][T16022] ? __fget_files+0x40/0x3f0 [ 517.369554][T16022] ? __pfx___might_resched+0x10/0x10 [ 517.371321][T16022] ? fdget+0x176/0x210 [ 517.372723][T16022] __sys_sendmmsg+0x2a5/0x450 [ 517.374318][T16022] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.376096][T16022] ? vfs_write+0x14d/0x1140 [ 517.377647][T16022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 517.379718][T16022] ? fput+0x30/0x390 [ 517.381052][T16022] ? ksys_write+0x1ad/0x260 [ 517.382594][T16022] ? __pfx_ksys_write+0x10/0x10 [ 517.384153][T16022] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 517.385615][T16022] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 517.387315][T16022] __do_fast_syscall_32+0x73/0x120 [ 517.388679][T16022] do_fast_syscall_32+0x32/0x80 [ 517.389963][T16022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.391627][T16022] RIP: 0023:0xf741e579 [ 517.392707][T16022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.397722][T16022] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 517.399898][T16022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 517.401959][T16022] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.404155][T16022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.406566][T16022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.409142][T16022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.411816][T16022] [ 517.603493][T16055] 9pnet_fd: Insufficient options for proto=fd [ 517.613345][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 517.613361][ T39] audit: type=1326 audit(1727891949.952:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.621814][ T39] audit: type=1326 audit(1727891949.952:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.627150][ T5707] IPVS: starting estimator thread 0... [ 517.628132][ T39] audit: type=1326 audit(1727891949.952:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.628152][ T39] audit: type=1326 audit(1727891949.952:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.653182][ T39] audit: type=1326 audit(1727891949.952:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.659005][ T39] audit: type=1326 audit(1727891949.952:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm="syz.2.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 517.713953][T16062] FAULT_INJECTION: forcing a failure. [ 517.713953][T16062] name failslab, interval 1, probability 0, space 0, times 0 [ 517.720008][T16062] CPU: 3 UID: 0 PID: 16062 Comm: syz.0.2967 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 517.723967][T16062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.727675][T16062] Call Trace: [ 517.728848][T16062] [ 517.728863][T16059] IPVS: using max 19 ests per chain, 45600 per kthread [ 517.729752][T16062] dump_stack_lvl+0x16c/0x1f0 [ 517.733540][T16062] should_fail_ex+0x497/0x5b0 [ 517.735305][T16062] ? fs_reclaim_acquire+0xae/0x160 [ 517.737170][T16062] should_failslab+0xc2/0x120 [ 517.738861][T16062] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 517.740809][T16062] ? sk_prot_alloc+0x60/0x2a0 [ 517.742546][T16062] sk_prot_alloc+0x60/0x2a0 [ 517.744217][T16062] sk_alloc+0x36/0xb90 [ 517.745540][T16062] tipc_sk_create+0xcd/0x2100 [ 517.746787][T16062] ? __sock_create+0x2f1/0x800 [ 517.748074][T16062] ? __pfx_lock_release+0x10/0x10 [ 517.749566][T16062] ? trace_lock_acquire+0x14a/0x1d0 [ 517.751572][T16062] ? inode_init_always+0xc7c/0xf90 [ 517.753513][T16062] __sock_create+0x32e/0x800 [ 517.755289][T16062] __sys_socketpair+0x25d/0x5a0 [ 517.757100][T16062] ? __pfx___sys_socketpair+0x10/0x10 [ 517.759090][T16062] ? fput+0x30/0x390 [ 517.760511][T16062] ? __pfx_ksys_write+0x10/0x10 [ 517.762219][T16062] __ia32_sys_socketpair+0x95/0x100 [ 517.764244][T16062] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 517.766679][T16062] __do_fast_syscall_32+0x73/0x120 [ 517.768571][T16062] do_fast_syscall_32+0x32/0x80 [ 517.770353][T16062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.772116][T16062] RIP: 0023:0xf73fe579 [ 517.773201][T16062] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.778201][T16062] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 517.780395][T16062] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000005 [ 517.782606][T16062] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000000 [ 517.784717][T16062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.786776][T16062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.788866][T16062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.790948][T16062] [ 520.163591][T10524] Bluetooth: hci5: Frame reassembly failed (-84) [ 520.659560][T10518] Bluetooth: hci6: Frame reassembly failed (-84) [ 520.992711][T16108] team0: Port device team_slave_0 removed [ 520.995304][T16108] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 521.517050][T16116] ahci 0000:00:1f.2: Using 39-bit DMA addresses [ 522.045752][T16123] netlink: 5672 bytes leftover after parsing attributes in process `syz.0.2987'. [ 522.135770][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 522.304365][ T4782] Bluetooth: hci5: command 0x1003 tx timeout [ 522.305021][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 522.336094][ T5707] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 522.424138][T16129] grow_buffers: requested out-of-range block 144149272936316928 for device sda1 [ 522.426892][T16129] EXT4-fs warning (device sda1): ext4_resize_fs:2017: can't read last block, resize aborted [ 522.512316][ T5707] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.518412][ T5707] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.521518][ T5707] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.524289][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.531671][T16124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 522.536736][ T5707] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.649423][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 522.817488][ T5354] Bluetooth: hci6: command 0x1003 tx timeout [ 522.821845][ T5357] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 523.203308][ T5599] usb 7-1: USB disconnect, device number 47 [ 523.906037][T10520] Bluetooth: hci5: Frame reassembly failed (-84) [ 524.171356][T16154] netlink: 'syz.3.2999': attribute type 10 has an invalid length. [ 524.296060][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 524.298526][T16157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.300649][T16157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.303192][T16157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.305822][T16157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.301025][T16175] netlink: 5672 bytes leftover after parsing attributes in process `syz.3.3004'. [ 525.435894][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 525.867148][T16180] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 526.067893][ T5357] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 526.258842][ T39] audit: type=1400 audit(1727891958.033:291): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16184 comm="syz.1.3007" [ 526.570109][ T5599] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 526.634885][ T5386] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 526.745693][ T5599] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.748642][ T5599] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.751183][ T5599] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.754088][ T5599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.773428][T16186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 526.785391][ T5599] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.801758][T16193] (syz.0.3010,16193,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 526.807497][ T5386] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.811223][T16193] (syz.0.3010,16193,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 526.814624][ T5386] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.819361][ T5386] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.823077][ T5386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.847449][T16189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 526.866529][ T5386] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.913962][T16195] bridge_slave_1: left allmulticast mode [ 526.916118][T16195] bridge_slave_1: left promiscuous mode [ 526.918318][T16195] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.924987][T16195] bridge_slave_0: left allmulticast mode [ 526.927316][T16195] bridge_slave_0: left promiscuous mode [ 526.929539][T16195] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.168415][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.170648][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.173611][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'. [ 527.180636][ T39] audit: type=1326 audit(1727891958.903:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.0.3015" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 527.252233][T16203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 527.260697][T16203] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.262814][T16203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.264970][T16203] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.267194][T16203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.270496][T16203] bridge0: entered promiscuous mode [ 527.272327][T16203] bridge0: entered allmulticast mode [ 527.408286][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 527.410058][T10524] Bluetooth: hci5: Frame reassembly failed (-84) [ 527.567314][T13544] usb 6-1: USB disconnect, device number 60 [ 527.898931][ T5404] usb 7-1: USB disconnect, device number 48 [ 528.665480][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'. [ 529.290628][T16223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3020'. [ 529.574606][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 529.575238][ T4782] Bluetooth: hci5: command 0x1003 tx timeout [ 529.855834][ T39] audit: type=1326 audit(1727891961.400:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.870719][ T39] audit: type=1326 audit(1727891961.400:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.876469][ T39] audit: type=1326 audit(1727891961.400:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.881820][ T39] audit: type=1326 audit(1727891961.400:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.888908][ T39] audit: type=1326 audit(1727891961.400:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.895192][ T39] audit: type=1326 audit(1727891961.400:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.901690][ T39] audit: type=1326 audit(1727891961.400:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.907983][ T39] audit: type=1326 audit(1727891961.400:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.1.3023" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 529.984321][T16236] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 529.987774][T16236] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 529.990010][T16236] EXT4-fs warning (device sda1): ext4_resize_fs:2017: can't read last block, resize aborted [ 530.002409][ T5354] Bluetooth: hci1: command 0x0406 tx timeout [ 531.060832][ T5386] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 531.247702][ T5386] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.252519][ T5386] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 531.257357][ T5386] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 531.259681][ T5386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.265448][T16248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 531.305915][ T5386] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.787151][T10524] Bluetooth: hci5: Frame reassembly failed (-84) [ 531.896535][T16264] netlink: 'syz.1.3031': attribute type 11 has an invalid length. [ 531.898771][T16264] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3031'. [ 532.049683][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 532.279698][ T5386] usb 8-1: USB disconnect, device number 55 [ 532.371023][T16274] netlink: 'syz.0.3032': attribute type 11 has an invalid length. [ 532.373847][T16274] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.3032'. [ 532.514675][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'. [ 532.676298][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 532.880583][T16288] vivid-001: disconnect [ 532.895923][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 532.904537][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 532.904547][ T39] audit: type=1326 audit(1727891964.252:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.3037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 532.943039][T16287] vivid-001: reconnect [ 533.936984][ T4782] Bluetooth: hci5: command 0x1003 tx timeout [ 533.947603][ T5357] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 535.134889][ T39] audit: type=1326 audit(1727891966.338:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.3.3042" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 535.372280][T16324] tipc: Enabling of bearer rejected, failed to enable media [ 535.384284][T16325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 535.386355][T16325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 535.390681][T16325] vhci_hcd vhci_hcd.0: Device attached [ 535.487251][ T5357] Bluetooth: hci3: command 0x0406 tx timeout [ 535.743968][ T5599] usb 18-1: SetAddress Request (2) to port 0 [ 535.753502][ T5599] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 535.855472][T16337] netlink: 'syz.1.3048': attribute type 11 has an invalid length. [ 535.858645][T16337] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3048'. [ 535.954686][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 536.175514][T16326] vhci_hcd: connection reset by peer [ 536.177465][T10518] vhci_hcd: stop threads [ 536.178805][T10518] vhci_hcd: release socket [ 536.183533][T10518] vhci_hcd: disconnect device [ 536.525439][T16347] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.3052'. [ 536.595458][ T39] audit: type=1400 audit(1727891967.704:305): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16344 comm="syz.1.3051" [ 536.877218][ T5404] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 536.962896][ T5707] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 537.000816][T16361] netlink: 'syz.3.3057': attribute type 11 has an invalid length. [ 537.002905][T16361] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.3057'. [ 537.042416][ T5404] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.045481][ T5404] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.048093][ T5404] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.051211][ T5404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.059408][T16349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.063377][ T5404] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.153607][ T5707] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.161195][ T5707] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.164868][ T5707] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.180364][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.183987][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 537.193665][T16353] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 537.217161][ T5707] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.582912][T16369] Bluetooth: MGMT ver 1.23 [ 537.947174][T16379] syz.3.3060(16379): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 538.278932][ T5408] usb 6-1: USB disconnect, device number 61 [ 538.435603][T13544] usb 5-1: USB disconnect, device number 63 [ 538.825129][T16384] overlayfs: missing 'lowerdir' [ 539.251059][T13544] libceph: connect (1)[c::]:6789 error -101 [ 539.253070][T13544] libceph: mon0 (1)[c::]:6789 connect error [ 539.268193][T13544] libceph: connect (1)[c::]:6789 error -101 [ 539.270324][T13544] libceph: mon0 (1)[c::]:6789 connect error [ 539.322559][T16403] bridge_slave_1: left allmulticast mode [ 539.324652][T16403] bridge_slave_1: left promiscuous mode [ 539.327505][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.331976][T16403] bridge_slave_0: left allmulticast mode [ 539.333466][T16403] bridge_slave_0: left promiscuous mode [ 539.334992][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.554787][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 539.557242][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 539.631622][T16411] netlink: 'syz.1.3072': attribute type 11 has an invalid length. [ 539.634085][T16411] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3072'. [ 539.643387][T16409] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 539.723700][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'. [ 540.008523][T16417] netlink: 'syz.2.3073': attribute type 11 has an invalid length. [ 540.010737][T16417] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.3073'. [ 540.119514][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 540.121165][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 540.121587][T16396] ceph: No mds server is up or the cluster is laggy [ 540.198627][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 540.257457][T16421] netlink: 'syz.1.3074': attribute type 11 has an invalid length. [ 540.259624][T16421] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3074'. [ 540.558579][T16431] bridge_slave_1: left allmulticast mode [ 540.560098][T16431] bridge_slave_1: left promiscuous mode [ 540.561753][T16431] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.569906][T16431] bridge_slave_0: left allmulticast mode [ 540.571467][T16431] bridge_slave_0: left promiscuous mode [ 540.572939][T16431] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.617649][T10518] Bluetooth: hci5: Frame reassembly failed (-84) [ 540.655609][T16433] macvlan0: entered allmulticast mode [ 540.657201][T16433] veth1_vlan: entered allmulticast mode [ 540.900405][T16448] netlink: 'syz.0.3082': attribute type 11 has an invalid length. [ 541.220199][ T5599] usb 18-1: device descriptor read/8, error -110 [ 541.695317][ T5599] usb usb18-port1: attempt power cycle [ 541.983921][T16464] __nla_validate_parse: 3 callbacks suppressed [ 541.983938][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 542.193713][T16468] netlink: 'syz.0.3086': attribute type 11 has an invalid length. [ 542.195925][T16468] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.3086'. [ 542.282194][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 542.438665][ T5599] usb usb18-port1: unable to enumerate USB device [ 542.730837][T16478] netlink: 'syz.2.3090': attribute type 3 has an invalid length. [ 542.733870][T16478] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 542.742311][T16478] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3090'. [ 542.832858][ T5357] Bluetooth: hci5: command 0x1003 tx timeout [ 542.837192][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 542.916193][T16485] FAULT_INJECTION: forcing a failure. [ 542.916193][T16485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 542.920594][T16485] CPU: 1 UID: 0 PID: 16485 Comm: syz.2.3092 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 542.924249][T16485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.927931][T16485] Call Trace: [ 542.929122][T16485] [ 542.930566][T16485] dump_stack_lvl+0x16c/0x1f0 [ 542.932298][T16485] should_fail_ex+0x497/0x5b0 [ 542.933963][T16485] get_futex_key+0x1b1/0x1090 [ 542.935649][T16485] ? __pfx_get_futex_key+0x10/0x10 [ 542.937315][T16485] ? kasan_save_track+0x14/0x30 [ 542.938715][T16485] ? __kasan_kmalloc+0xaa/0xb0 [ 542.940386][T16485] futex_requeue+0x1c7/0x1cf0 [ 542.942051][T16485] ? __pfx_futex_requeue+0x10/0x10 [ 542.943832][T16485] ? ksys_write+0x12f/0x260 [ 542.945418][T16485] ? find_held_lock+0x2d/0x110 [ 542.947084][T16485] ? ksys_write+0x21e/0x260 [ 542.948666][T16485] ? __pfx_lock_release+0x10/0x10 [ 542.950929][T16485] ? vfs_write+0x14d/0x1140 [ 542.952561][T16485] do_futex+0x1af/0x350 [ 542.954007][T16485] ? __pfx_do_futex+0x10/0x10 [ 542.955684][T16485] __ia32_sys_futex_time32+0x1da/0x460 [ 542.957591][T16485] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 542.959684][T16485] ? ksys_write+0x1ad/0x260 [ 542.961272][T16485] ? __pfx_ksys_write+0x10/0x10 [ 542.962978][T16485] __do_fast_syscall_32+0x73/0x120 [ 542.964774][T16485] do_fast_syscall_32+0x32/0x80 [ 542.966274][T16485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.968460][T16485] RIP: 0023:0xf741e579 [ 542.969893][T16485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.976539][T16485] RSP: 002b:00000000f56c456c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 542.979364][T16485] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 000000000000000c [ 542.982041][T16485] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020048000 [ 542.984739][T16485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.987437][T16485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.990106][T16485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.992854][T16485] [ 543.720983][T16506] netlink: 'syz.0.3100': attribute type 11 has an invalid length. [ 543.723663][T16506] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.3100'. [ 543.895146][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'. [ 544.245266][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 545.703772][T16562] netlink: 'syz.3.3115': attribute type 11 has an invalid length. [ 545.706456][T16562] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.3115'. [ 545.908367][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 546.041798][T16577] tmpfs: Unknown parameter 'Î ' [ 546.236020][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 547.366576][T16614] FAULT_INJECTION: forcing a failure. [ 547.366576][T16614] name failslab, interval 1, probability 0, space 0, times 0 [ 547.370371][T16614] CPU: 0 UID: 0 PID: 16614 Comm: syz.3.3130 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 547.373214][T16614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.376003][T16614] Call Trace: [ 547.376873][T16614] [ 547.377649][T16614] dump_stack_lvl+0x16c/0x1f0 [ 547.378874][T16614] should_fail_ex+0x497/0x5b0 [ 547.380131][T16614] ? fs_reclaim_acquire+0xae/0x160 [ 547.381509][T16614] should_failslab+0xc2/0x120 [ 547.382841][T16614] __kmalloc_node_noprof+0xd1/0x440 [ 547.384303][T16614] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 547.385792][T16614] __kvmalloc_node_noprof+0xad/0x1a0 [ 547.387195][T16614] alloc_netdev_mqs+0xc9/0x12a0 [ 547.388465][T16614] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 547.389877][T16614] __ip_tunnel_create+0x1ef/0x4c0 [ 547.391197][T16614] ? __pfx___ip_tunnel_create+0x10/0x10 [ 547.392634][T16614] ? bpf_lsm_capable+0x9/0x10 [ 547.393849][T16614] ? security_capable+0x7e/0x260 [ 547.395236][T16614] ip_tunnel_ctl+0x543/0xb90 [ 547.396527][T16614] vti_tunnel_ctl+0x2de/0x4f0 [ 547.397886][T16614] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 547.399354][T16614] ip_tunnel_siocdevprivate+0x109/0x1b0 [ 547.400784][T16614] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 547.402373][T16614] ? netdev_name_node_lookup+0xf0/0x140 [ 547.403817][T16614] dev_ifsioc+0x529/0x10b0 [ 547.404985][T16614] ? __pfx_dev_ifsioc+0x10/0x10 [ 547.406254][T16614] ? dev_ioctl+0x1a1/0x10c0 [ 547.407460][T16614] ? __pfx___mutex_lock+0x10/0x10 [ 547.408758][T16614] ? __pfx_lock_release+0x10/0x10 [ 547.410138][T16614] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 547.411837][T16614] dev_ioctl+0x1b2/0x10c0 [ 547.413137][T16614] sock_ioctl+0x5b9/0x6c0 [ 547.414389][T16614] ? __pfx_sock_ioctl+0x10/0x10 [ 547.415747][T16614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.417274][T16614] ? unix_ioctl+0x2c6/0x5c0 [ 547.418460][T16614] ? __pfx_unix_ioctl+0x10/0x10 [ 547.419832][T16614] compat_sock_ioctl+0x619/0x7e0 [ 547.421127][T16614] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 547.422545][T16614] ? __fget_files+0x244/0x3f0 [ 547.423778][T16614] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 547.425199][T16614] __do_compat_sys_ioctl+0x259/0x2b0 [ 547.426577][T16614] __do_fast_syscall_32+0x73/0x120 [ 547.427945][T16614] do_fast_syscall_32+0x32/0x80 [ 547.429225][T16614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.430892][T16614] RIP: 0023:0xf7f95579 [ 547.432022][T16614] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.437136][T16614] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 547.439259][T16614] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 547.441287][T16614] RDX: 00000000200005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.443369][T16614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.445766][T16614] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 547.447947][T16614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.450002][T16614] [ 547.450898][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.546543][T16619] FAULT_INJECTION: forcing a failure. [ 547.546543][T16619] name failslab, interval 1, probability 0, space 0, times 0 [ 547.552439][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz.1.3132 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 547.555586][T16619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.558426][T16619] Call Trace: [ 547.559358][T16619] [ 547.560141][T16619] dump_stack_lvl+0x16c/0x1f0 [ 547.561398][T16619] should_fail_ex+0x497/0x5b0 [ 547.562638][T16619] ? fs_reclaim_acquire+0xae/0x160 [ 547.564012][T16619] should_failslab+0xc2/0x120 [ 547.565263][T16619] __kmalloc_noprof+0xcb/0x410 [ 547.566546][T16619] ? hlock_class+0x4e/0x130 [ 547.567810][T16619] offload_action_alloc+0x29/0xf0 [ 547.569189][T16619] tcf_action_offload_add_ex+0x1b7/0x670 [ 547.570714][T16619] ? tcf_action_init_1+0x2d4/0x6c0 [ 547.572068][T16619] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 547.573674][T16619] ? __pfx___lock_acquire+0x10/0x10 [ 547.575094][T16619] tcf_action_init+0x590/0x810 [ 547.576373][T16619] ? __pfx_tcf_action_init+0x10/0x10 [ 547.577758][T16619] ? __pfx_mark_lock+0x10/0x10 [ 547.579047][T16619] ? finish_task_switch.isra.0+0x212/0xcc0 [ 547.580621][T16619] ? __pfx_lock_release+0x10/0x10 [ 547.582038][T16619] ? trace_lock_acquire+0x14a/0x1d0 [ 547.583546][T16619] tcf_action_add+0xfd/0x5d0 [ 547.584831][T16619] ? __pfx_tcf_action_add+0x10/0x10 [ 547.586232][T16619] ? __nla_parse+0x40/0x60 [ 547.587418][T16619] tc_ctl_action+0x35d/0x470 [ 547.588653][T16619] ? __pfx_tc_ctl_action+0x10/0x10 [ 547.589997][T16619] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 547.591356][T16619] ? __pfx_tc_ctl_action+0x10/0x10 [ 547.592707][T16619] rtnetlink_rcv_msg+0x3c7/0xea0 [ 547.594026][T16619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.595485][T16619] ? __pfx___lock_acquire+0x10/0x10 [ 547.596899][T16619] netlink_rcv_skb+0x165/0x410 [ 547.598251][T16619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.599872][T16619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.601450][T16619] ? netlink_deliver_tap+0x1ae/0xcf0 [ 547.602856][T16619] netlink_unicast+0x53c/0x7f0 [ 547.604150][T16619] ? __pfx_netlink_unicast+0x10/0x10 [ 547.605533][T16619] ? __phys_addr_symbol+0x30/0x80 [ 547.606849][T16619] ? __check_object_size+0x4a1/0x710 [ 547.608242][T16619] netlink_sendmsg+0x8b8/0xd70 [ 547.609502][T16619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.610881][T16619] ? lock_acquire+0x2f/0xb0 [ 547.612094][T16619] ____sys_sendmsg+0x9ae/0xb40 [ 547.613353][T16619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.614743][T16619] ? get_compat_msghdr+0x11b/0x170 [ 547.616115][T16619] ? __pfx___lock_acquire+0x10/0x10 [ 547.617495][T16619] ___sys_sendmsg+0x135/0x1e0 [ 547.618682][T16619] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.620063][T16619] ? lock_acquire+0x2f/0xb0 [ 547.621255][T16619] ? __fget_files+0x40/0x3f0 [ 547.622473][T16619] ? fdget+0x176/0x210 [ 547.623561][T16619] __sys_sendmsg+0x117/0x1f0 [ 547.624791][T16619] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.626135][T16619] ? __fget_files+0x244/0x3f0 [ 547.627389][T16619] __do_fast_syscall_32+0x73/0x120 [ 547.628730][T16619] do_fast_syscall_32+0x32/0x80 [ 547.630120][T16619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.631900][T16619] RIP: 0023:0xf741e579 [ 547.633095][T16619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.639345][T16619] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 547.642106][T16619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 547.644711][T16619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.647342][T16619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.649995][T16619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 547.652588][T16619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.655277][T16619] [ 547.656538][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.456596][ T5405] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 548.628863][ T5405] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.632182][ T5405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.635151][ T5405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 548.640730][ T5405] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.645078][ T5405] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.647883][ T5405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.660614][ T5405] usb 7-1: config 0 descriptor?? [ 548.991255][ T1420] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 549.130197][ T1420] usb 5-1: device descriptor read/64, error -71 [ 549.246225][ T5405] usbhid 7-1:0.0: can't add hid device: -71 [ 549.253393][ T5405] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 549.259822][ T5405] usb 7-1: USB disconnect, device number 49 [ 549.408372][ T1420] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 549.464822][T16655] binder: 16653:16655 ioctl 40046210 0 returned -14 [ 549.473515][T16655] input: syz0 as /devices/virtual/input/input33 [ 549.568819][ T1420] usb 5-1: device descriptor read/64, error -71 [ 549.686417][ T1420] usb usb5-port1: attempt power cycle [ 549.813300][ T1103] Bluetooth: hci5: Frame reassembly failed (-84) [ 550.071111][ T1420] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 550.092968][ T1420] usb 5-1: device descriptor read/8, error -71 [ 550.360208][ T1420] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 550.381869][ T1420] usb 5-1: device descriptor read/8, error -71 [ 550.397698][T16675] @: renamed from vlan0 (while UP) [ 550.496989][T16679] __nla_validate_parse: 2 callbacks suppressed [ 550.497000][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'. [ 550.509715][ T1420] usb usb5-port1: unable to enumerate USB device [ 551.666798][T16696] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 551.669619][T16696] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 551.672367][T16696] netlink: 616 bytes leftover after parsing attributes in process `syz.3.3158'. [ 551.985071][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 552.013234][T16705] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3160'. [ 552.448817][T16721] overlayfs: failed to resolve './file0': -2 [ 552.591297][T16724] netlink: 'syz.2.3165': attribute type 8 has an invalid length. [ 552.733678][ T5386] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 552.898284][ T5386] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.902151][ T5386] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 552.910161][ T5386] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.918862][ T5386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.955790][T16719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 553.020694][ T5386] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.512794][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.638713][ T5357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.656357][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.658342][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.659431][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 553.666143][ T5357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 553.669237][ T5357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 553.671515][ T5357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.799414][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.805694][T16727] chnl_net:caif_netlink_parms(): no params data found [ 553.869258][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.871999][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.875360][T16727] bridge_slave_0: entered allmulticast mode [ 553.879345][T16727] bridge_slave_0: entered promiscuous mode [ 553.894245][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.901678][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.906218][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.909085][T16727] bridge_slave_1: entered allmulticast mode [ 553.913557][T16727] bridge_slave_1: entered promiscuous mode [ 553.953116][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.965981][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.065268][T16727] team0: Port device team_slave_0 added [ 554.077751][T16727] team0: Port device team_slave_1 added [ 554.163173][ T5357] Bluetooth: hci5: sending frame failed (-49) [ 554.171134][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 554.174119][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.176721][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.185903][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.196664][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.199679][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.206567][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.431353][ T5352] usb 8-1: USB disconnect, device number 56 [ 554.688238][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.698747][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.719828][ T11] bond0 (unregistering): Released all slaves [ 554.852300][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 554.871195][T16727] hsr_slave_0: entered promiscuous mode [ 554.895146][T16727] hsr_slave_1: entered promiscuous mode [ 555.254706][T16766] x_tables: duplicate underflow at hook 2 [ 555.296014][ T11] hsr_slave_0: left promiscuous mode [ 555.300212][ T11] hsr_slave_1: left promiscuous mode [ 555.364329][T16769] netlink: 'syz.3.3175': attribute type 3 has an invalid length. [ 555.370008][T16769] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3175'. [ 555.385571][ T11] veth1_macvtap: left promiscuous mode [ 555.391292][ T11] veth0_macvtap: left promiscuous mode [ 555.393889][ T11] veth1_vlan: left promiscuous mode [ 555.399901][ T11] veth0_vlan: left promiscuous mode [ 555.839215][ T5354] Bluetooth: hci1: command tx timeout [ 556.544889][ T11] team0 (unregistering): Port device team_slave_1 removed [ 556.722007][ T11] team0 (unregistering): Port device team_slave_0 removed [ 557.101134][T10524] Bluetooth: hci5: Frame reassembly failed (-84) [ 557.102824][T10523] Bluetooth: hci5: Frame reassembly failed (-84) [ 558.068989][ T5357] Bluetooth: hci1: command tx timeout [ 558.144000][ T5386] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 558.310084][ T5386] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 558.313083][ T5386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.328096][ T5386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 558.340506][ T5386] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.353382][ T5386] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.356547][ T5386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.385003][ T5386] usb 6-1: config 0 descriptor?? [ 558.387046][T16801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.471200][T16727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 558.479444][T16727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 558.482847][T16727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 558.486584][T16727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 558.569458][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.587979][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.617030][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.618840][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.638695][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.640603][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.646363][ T5386] usbhid 6-1:0.0: can't add hid device: -71 [ 558.648053][ T5386] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 558.657771][ T5386] usb 6-1: USB disconnect, device number 62 [ 558.680306][T16727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.682994][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.750427][T16841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3183'. [ 558.834222][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.878793][T16727] veth0_vlan: entered promiscuous mode [ 558.907206][T16727] veth1_vlan: entered promiscuous mode [ 558.935245][T16727] veth0_macvtap: entered promiscuous mode [ 558.940574][T16727] veth1_macvtap: entered promiscuous mode [ 558.949005][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.952370][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.955646][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.958503][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.963063][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.968664][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.971460][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.973917][T16727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.976484][T16727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.979827][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.986625][T16727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.990095][T16727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.992342][T16727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.994558][T16727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.144575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.147295][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.167159][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.169103][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.253799][T16866] netlink: 'syz.2.3185': attribute type 11 has an invalid length. [ 559.256322][T16866] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.3185'. [ 559.268849][ T5354] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 559.271014][ T5357] Bluetooth: hci5: command 0x1003 tx timeout [ 559.461192][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 559.803969][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3188'. [ 559.806641][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 560.282145][ T5354] Bluetooth: hci1: command tx timeout [ 560.479671][T16899] netlink: 'syz.3.3193': attribute type 11 has an invalid length. [ 560.481737][T16899] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.3193'. [ 560.746685][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3193'. [ 561.837119][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3199'. [ 562.042483][T16938] netlink: 'syz.0.3203': attribute type 11 has an invalid length. [ 562.044706][T16938] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.3203'. [ 562.220425][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3203'. [ 562.506005][ T5354] Bluetooth: hci1: command tx timeout [ 562.658001][T16959] netlink: 'syz.0.3208': attribute type 11 has an invalid length. [ 562.860298][ T5354] Bluetooth: hci0: command 0x0c20 tx timeout [ 564.171096][T16994] __nla_validate_parse: 2 callbacks suppressed [ 564.171108][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3213'. [ 564.176617][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 564.762929][T17004] netlink: 'syz.1.3216': attribute type 11 has an invalid length. [ 564.765012][T17004] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3216'. [ 564.819306][T17006] 9pnet_fd: Insufficient options for proto=fd [ 564.823695][T17006] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3226'. [ 564.974922][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 565.154094][T17019] overlayfs: failed to resolve './file1': -2 [ 565.202573][T17021] FAULT_INJECTION: forcing a failure. [ 565.202573][T17021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.207307][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.0.3222 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 565.211085][T17021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 565.214802][T17021] Call Trace: [ 565.216016][T17021] [ 565.217106][T17021] dump_stack_lvl+0x16c/0x1f0 [ 565.218836][T17021] should_fail_ex+0x497/0x5b0 [ 565.220495][T17021] _copy_from_iter+0x29b/0x13e0 [ 565.222315][T17021] ? irqentry_exit+0x3b/0x90 [ 565.224013][T17021] ? __pfx__copy_from_iter+0x10/0x10 [ 565.225809][T17021] ? __check_object_size+0x488/0x710 [ 565.227676][T17021] netlink_sendmsg+0x813/0xd70 [ 565.229421][T17021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.231272][T17021] ? lock_acquire+0x2f/0xb0 [ 565.232865][T17021] ____sys_sendmsg+0x9ae/0xb40 [ 565.234578][T17021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.236522][T17021] ? get_compat_msghdr+0x11b/0x170 [ 565.238335][T17021] ? __pfx___lock_acquire+0x10/0x10 [ 565.240211][T17021] ___sys_sendmsg+0x135/0x1e0 [ 565.241909][T17021] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.243751][T17021] ? lock_acquire+0x2f/0xb0 [ 565.245431][T17021] ? __fget_files+0x40/0x3f0 [ 565.247127][T17021] ? fdget+0x176/0x210 [ 565.248501][T17021] __sys_sendmsg+0x117/0x1f0 [ 565.250166][T17021] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.252008][T17021] ? __fget_files+0x244/0x3f0 [ 565.253735][T17021] __do_fast_syscall_32+0x73/0x120 [ 565.255597][T17021] do_fast_syscall_32+0x32/0x80 [ 565.257273][T17021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.259541][T17021] RIP: 0023:0xf73fe579 [ 565.260982][T17021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 565.267585][T17021] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 565.270638][T17021] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000180 [ 565.273423][T17021] RDX: 000000003a7a1790 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.276255][T17021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.278968][T17021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 565.281691][T17021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.284425][T17021] [ 565.368372][ T5354] Bluetooth: hci5: sending frame failed (-49) [ 565.373346][ T5357] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 565.460495][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 566.513728][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3228'. [ 566.762171][T17051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3232'. [ 567.013752][T10524] Bluetooth: hci5: Frame reassembly failed (-84) [ 567.325864][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 567.328502][T17072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.330450][T17072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.335219][T17072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.337150][T17072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.681069][ T5707] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 567.866549][ T5707] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 567.869393][ T5707] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 567.871883][ T5707] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 567.876772][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.883693][T17067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.890113][ T5707] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.802528][ T5707] usb 8-1: USB disconnect, device number 57 [ 568.814579][T17077] binder: 17076:17077 ioctl 4018620d 0 returned -22 [ 569.177841][ T5357] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 569.471689][T17091] Process accounting resumed [ 569.514495][T17095] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3244'. [ 569.678603][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.807546][ T5354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.813352][ T5354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.816302][ T5354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.824419][ T5354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.826724][ T5354] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 569.829086][ T5354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.859957][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.999231][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.015822][T17103] chnl_net:caif_netlink_parms(): no params data found [ 570.180793][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.186493][T17103] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.188602][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.190621][T17103] bridge_slave_0: entered allmulticast mode [ 570.192651][T17103] bridge_slave_0: entered promiscuous mode [ 570.197869][T17103] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.199801][T17103] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.201793][T17103] bridge_slave_1: entered allmulticast mode [ 570.203923][T17103] bridge_slave_1: entered promiscuous mode [ 570.224078][T17103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.231148][T17103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.280554][T17103] team0: Port device team_slave_0 added [ 570.286979][T17103] team0: Port device team_slave_1 added [ 570.314611][T17103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.316674][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.321725][ T5387] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 570.323875][T17103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.339643][T17103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.341908][T17103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.350050][T17103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.413022][ T11] team0: left allmulticast mode [ 570.414541][ T11] team_slave_0: left allmulticast mode [ 570.416944][ T11] team_slave_1: left allmulticast mode [ 570.419477][ T11] team0: left promiscuous mode [ 570.420910][ T11] team_slave_0: left promiscuous mode [ 570.423185][ T11] team_slave_1: left promiscuous mode [ 570.424956][ T11] bridge0: port 3(team0) entered disabled state [ 570.431792][ T11] bridge_slave_1: left allmulticast mode [ 570.433524][ T11] bridge_slave_1: left promiscuous mode [ 570.435314][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.440912][ T11] bridge_slave_0: left allmulticast mode [ 570.442602][ T11] bridge_slave_0: left promiscuous mode [ 570.444699][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.483520][ T5387] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.487967][ T5387] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.490519][ T5387] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.493662][ T5387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.497604][T17114] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.500998][ T5387] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.697516][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 570.902576][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.908344][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.913821][ T11] bond0 (unregistering): Released all slaves [ 570.921923][T17103] hsr_slave_0: entered promiscuous mode [ 570.925267][T17103] hsr_slave_1: entered promiscuous mode [ 570.930204][T17103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.932590][T17103] Cannot create hsr debugfs directory [ 571.032670][ T11] IPVS: stopping master sync thread 9218 ... [ 571.408164][ T11] hsr_slave_0: left promiscuous mode [ 571.413429][ T11] hsr_slave_1: left promiscuous mode [ 571.457387][ T11] veth1_macvtap: left promiscuous mode [ 571.459274][ T11] veth0_macvtap: left promiscuous mode [ 571.461076][ T11] veth1_vlan: left promiscuous mode [ 571.462680][ T11] veth0_vlan: left promiscuous mode [ 571.547065][T17136] netlink: 'syz.0.3260': attribute type 11 has an invalid length. [ 571.552644][ T11] pim6reg (unregistering): left allmulticast mode [ 571.552694][T17136] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.3260'. [ 571.757929][ T5707] usb 7-1: USB disconnect, device number 50 [ 571.845082][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3260'. [ 572.014435][ T5354] Bluetooth: hci4: command tx timeout [ 572.497015][T17149] 9pnet_fd: Insufficient options for proto=fd [ 572.508297][T17149] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3254'. [ 572.768175][ T11] team0 (unregistering): Port device team_slave_1 removed [ 572.894238][ T11] team0 (unregistering): Port device team_slave_0 removed [ 574.218607][T17103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 574.222091][T17103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 574.228626][T17103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 574.231932][T17103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.235140][ T5354] Bluetooth: hci4: command tx timeout [ 574.277909][T17103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.290695][T17103] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.295351][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.297905][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.313466][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.315984][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.445970][T17103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.476949][T17103] veth0_vlan: entered promiscuous mode [ 574.484645][T17103] veth1_vlan: entered promiscuous mode [ 574.508073][T17103] veth0_macvtap: entered promiscuous mode [ 574.514447][T17103] veth1_macvtap: entered promiscuous mode [ 574.525370][T17103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.528535][T17103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.531096][T17103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.534213][T17103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.539881][T17103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.543584][T17103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.547809][T17103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.551158][T17103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.554428][T17103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.559067][T17103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.565566][T17103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.570567][T17103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.573728][T17103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.576844][T17103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.624476][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.629936][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.643656][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.645830][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.776346][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3248'. [ 574.781631][T17204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3248'. [ 574.784873][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'. [ 574.846384][T17207] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 574.850040][T17207] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 574.852515][T17207] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 575.025889][T17210] netlink: 'syz.1.3265': attribute type 11 has an invalid length. [ 575.028167][T17210] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.3265'. [ 575.166788][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3265'. [ 575.460820][T17231] Cannot find set identified by id 0 to match [ 575.480285][T17231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3270'. [ 575.574593][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3271'. [ 575.760952][T17242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.763672][T17242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.770322][T17242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.780384][T17242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.204961][T17255] warn_alloc: 3 callbacks suppressed [ 576.204972][T17255] syz.1.3279: vmalloc error: size 12288, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 576.211477][T17255] CPU: 0 UID: 0 PID: 17255 Comm: syz.1.3279 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 576.214360][T17255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 576.217220][T17255] Call Trace: [ 576.218119][T17255] [ 576.218927][T17255] dump_stack_lvl+0x16c/0x1f0 [ 576.220210][T17255] warn_alloc+0x24d/0x3a0 [ 576.221379][T17255] ? __pfx_warn_alloc+0x10/0x10 [ 576.222689][T17255] ? policy_nodemask+0xea/0x4e0 [ 576.224009][T17255] ? alloc_pages_mpol_noprof+0x315/0x610 [ 576.225508][T17255] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 576.227119][T17255] ? __pfx___might_resched+0x10/0x10 [ 576.228531][T17255] ? __kmalloc_node_noprof+0x22f/0x440 [ 576.229997][T17255] __vmalloc_node_range_noprof+0x1326/0x15a0 [ 576.231609][T17255] ? xt_compat_init_offsets+0xe1/0x1f0 [ 576.233069][T17255] ? __mutex_lock+0x1a6/0x9c0 [ 576.234339][T17255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 576.236037][T17255] ? __pfx___mutex_lock+0x10/0x10 [ 576.237381][T17255] ? hlock_class+0x4e/0x130 [ 576.238602][T17255] ? __lock_acquire+0x163e/0x3ce0 [ 576.239966][T17255] ? xt_compat_init_offsets+0xe1/0x1f0 [ 576.241420][T17255] vmalloc_noprof+0x6b/0x90 [ 576.242640][T17255] ? xt_compat_init_offsets+0xe1/0x1f0 [ 576.244108][T17255] xt_compat_init_offsets+0xe1/0x1f0 [ 576.245530][T17255] translate_compat_table+0x1f0/0x18e0 [ 576.247000][T17255] ? __pfx_translate_compat_table+0x10/0x10 [ 576.248579][T17255] ? __might_fault+0x13b/0x190 [ 576.249865][T17255] ? __pfx_lock_release+0x10/0x10 [ 576.251229][T17255] compat_do_replace+0x35d/0x500 [ 576.252554][T17255] ? __pfx_compat_do_replace+0x10/0x10 [ 576.254126][T17255] ? aa_get_newest_label+0x376/0x680 [ 576.255574][T17255] ? sockopt_release_sock+0x52/0x60 [ 576.256967][T17255] ? __pfx_aa_get_newest_label+0x10/0x10 [ 576.258452][T17255] ? bpf_lsm_capable+0x9/0x10 [ 576.259720][T17255] ? security_capable+0x7e/0x260 [ 576.261052][T17255] do_ip6t_set_ctl+0x686/0xc20 [ 576.262331][T17255] ? trace_contention_end+0xea/0x140 [ 576.263742][T17255] ? __mutex_lock+0x1a6/0x9c0 [ 576.264996][T17255] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 576.266384][T17255] ? __pfx___mutex_lock+0x10/0x10 [ 576.267725][T17255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.269321][T17255] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 576.270922][T17255] nf_setsockopt+0x8a/0xf0 [ 576.272122][T17255] ipv6_setsockopt+0x135/0x170 [ 576.273396][T17255] udpv6_setsockopt+0x7d/0xd0 [ 576.274661][T17255] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 576.276233][T17255] do_sock_setsockopt+0x222/0x480 [ 576.277567][T17255] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 576.279029][T17255] ? fdget+0x176/0x210 [ 576.280126][T17255] __sys_setsockopt+0x1a4/0x270 [ 576.281427][T17255] ? __pfx___sys_setsockopt+0x10/0x10 [ 576.282857][T17255] ? fput+0x30/0x390 [ 576.283919][T17255] ? ksys_write+0x1ad/0x260 [ 576.285132][T17255] ? __pfx_ksys_write+0x10/0x10 [ 576.286425][T17255] __ia32_sys_setsockopt+0xbc/0x160 [ 576.287806][T17255] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.289186][T17255] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 576.290928][T17255] __do_fast_syscall_32+0x73/0x120 [ 576.292291][T17255] do_fast_syscall_32+0x32/0x80 [ 576.293586][T17255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.295272][T17255] RIP: 0023:0xf741e579 [ 576.296358][T17255] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.301380][T17255] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 576.303572][T17255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 576.305641][T17255] RDX: 0000000000000040 RSI: 0000000020000140 RDI: 0000000000000060 [ 576.307725][T17255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.309797][T17255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 576.311876][T17255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.313958][T17255] [ 576.317123][T17255] Mem-Info: [ 576.318107][T17255] active_anon:3557 inactive_anon:176 isolated_anon:0 [ 576.318107][T17255] active_file:11598 inactive_file:41128 isolated_file:0 [ 576.318107][T17255] unevictable:768 dirty:197 writeback:0 [ 576.318107][T17255] slab_reclaimable:5093 slab_unreclaimable:58052 [ 576.318107][T17255] mapped:22254 shmem:928 pagetables:722 [ 576.318107][T17255] sec_pagetables:331 bounce:0 [ 576.318107][T17255] kernel_misc_reclaimable:0 [ 576.318107][T17255] free:62655 free_pcp:950 free_cma:0 [ 576.331941][T17255] Node 0 active_anon:52kB inactive_anon:836kB active_file:12kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:992kB dirty:0kB writeback:0kB shmem:1600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9428kB pagetables:1724kB sec_pagetables:1244kB all_unreclaimable? no [ 576.340215][T17255] Node 1 active_anon:14036kB inactive_anon:8kB active_file:46380kB inactive_file:164512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88024kB dirty:788kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2640kB pagetables:1164kB sec_pagetables:80kB all_unreclaimable? no [ 576.349069][T17255] Node 0 DMA free:920kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:4kB free_cma:0kB [ 576.356653][T17255] lowmem_reserve[]: 0 273 0 0 0 [ 576.358227][T17255] Node 0 DMA32 free:21288kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:44kB inactive_anon:768kB active_file:12kB inactive_file:0kB unevictable:1536kB writepending:0kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:792kB local_pcp:56kB free_cma:0kB [ 576.366474][T17255] lowmem_reserve[]: 0 0 0 0 0 [ 576.370663][T17255] Node 1 DMA32 free:229380kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:14036kB inactive_anon:8kB active_file:46380kB inactive_file:164512kB unevictable:1536kB writepending:788kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:2332kB local_pcp:200kB free_cma:0kB [ 576.379466][T17255] lowmem_reserve[]: 0 0 0 0 0 [ 576.381035][T17255] Node 0 DMA: 33*4kB (U) 25*8kB (U) 14*16kB (U) 12*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 940kB [ 576.384743][T17255] Node 0 DMA32: 453*4kB (UMEH) 102*8kB (UMEH) 33*16kB (UMEH) 73*32kB (UMEH) 42*64kB (UMEH) 25*128kB (UMEH) 6*256kB (UMH) 3*512kB (UMH) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 21620kB [ 576.389879][T17255] Node 1 DMA32: 283*4kB (UM) 282*8kB (UME) 255*16kB (UME) 240*32kB (UME) 150*64kB (UME) 54*128kB (UME) 26*256kB (UME) 43*512kB (UM) 27*1024kB (UM) 11*2048kB (UME) 29*4096kB (UM) = 229292kB [ 576.395885][T17255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.398758][T17255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.401621][T17255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.404390][T17255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.407160][T17255] 54317 total pagecache pages [ 576.408752][T17255] 663 pages in swap cache [ 576.410101][T17255] Free swap = 113588kB [ 576.411482][T17255] Total swap = 124996kB [ 576.413098][T17255] 524155 pages RAM [ 576.414327][T17255] 0 pages HighMem/MovableOnly [ 576.415844][T17255] 206681 pages reserved [ 576.417303][T17255] 0 pages cma reserved [ 576.448820][ T5354] Bluetooth: hci4: command tx timeout [ 577.013008][T17276] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 577.033535][T17276] __nla_validate_parse: 3 callbacks suppressed [ 577.033545][T17276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 577.546029][T17307] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 577.548572][T17307] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 577.551356][T17307] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 577.624399][ T5387] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 577.795475][ T5387] usb 8-1: Using ep0 maxpacket: 32 [ 577.801749][ T5387] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 577.809331][ T5387] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 577.816621][ T5387] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.831222][ T5387] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 577.833899][ T5387] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 577.840799][ T5387] usb 8-1: Product: syz [ 577.842206][ T5387] usb 8-1: Manufacturer: syz [ 577.847614][ T5387] usb 8-1: SerialNumber: syz [ 577.859282][T17300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.863407][ T5387] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input35 [ 577.923838][T17309] nbd0: detected capacity change from 0 to 22 [ 577.928984][T17310] block nbd0: shutting down sockets [ 577.937098][ C3] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.939711][ C3] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.942059][ T5595] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.946446][ T5595] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.952130][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.954880][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.957661][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.961366][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.967976][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.973935][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.984251][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.991057][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 577.999149][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.001578][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.003816][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.006188][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.008265][ T5336] ldm_validate_partition_table(): Disk read failed. [ 578.013822][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.016228][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.018344][ T5336] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.023020][ T5336] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.025966][ T5336] Dev nbd0: unable to read RDB block 0 [ 578.027582][ T5336] nbd0: unable to read partition table [ 578.029198][ T5336] nbd0: partition table beyond EOD, truncated [ 578.038595][ T5336] ldm_validate_partition_table(): Disk read failed. [ 578.040678][ T5336] Dev nbd0: unable to read RDB block 0 [ 578.043652][ T5336] nbd0: unable to read partition table [ 578.045280][ T5336] nbd0: partition table beyond EOD, truncated [ 578.099406][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.103528][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.166429][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.174601][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.240897][ T5387] usb 8-1: USB disconnect, device number 58 [ 578.268948][ T5387] appletouch 8-1:1.0: input: appletouch disconnected [ 578.704910][ T5354] Bluetooth: hci4: command tx timeout [ 578.942093][T17324] FAULT_INJECTION: forcing a failure. [ 578.942093][T17324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.942138][T17324] [ 578.942143][T17324] ====================================================== [ 578.942147][T17324] WARNING: possible circular locking dependency detected [ 578.942153][T17324] 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 Not tainted [ 578.942162][T17324] ------------------------------------------------------ [ 578.942167][T17324] syz.3.3299/17324 is trying to acquire lock: [ 578.942175][T17324] ffffffff8dda5478 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 578.942217][T17324] [ 578.942217][T17324] but task is already holding lock: [ 578.942221][T17324] ffff88802b52a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 578.942256][T17324] [ 578.942256][T17324] which lock already depends on the new lock. [ 578.942256][T17324] [ 578.942261][T17324] [ 578.942261][T17324] the existing dependency chain (in reverse order) is: [ 578.942266][T17324] [ 578.942266][T17324] -> #3 (&base->lock){-.-.}-{2:2}: [ 578.942284][T17324] _raw_spin_lock_irqsave+0x3a/0x60 [ 578.942301][T17324] lock_timer_base+0x5d/0x220 [ 578.942317][T17324] __mod_timer+0x426/0xdc0 [ 578.942334][T17324] add_timer_global+0x8a/0xc0 [ 578.942351][T17324] __queue_delayed_work+0x1ba/0x2e0 [ 578.942365][T17324] queue_delayed_work_on+0x12a/0x150 [ 578.942377][T17324] psi_task_change+0x1b4/0x2e0 [ 578.942394][T17324] enqueue_task+0x1a5/0x350 [ 578.942407][T17324] wake_up_new_task+0x662/0xd30 [ 578.942428][T17324] kernel_clone+0x236/0x960 [ 578.942444][T17324] user_mode_thread+0xb4/0xf0 [ 578.942461][T17324] rest_init+0x23/0x2b0 [ 578.942480][T17324] start_kernel+0x3e4/0x4d0 [ 578.942497][T17324] x86_64_start_reservations+0x18/0x30 [ 578.942513][T17324] x86_64_start_kernel+0xb2/0xc0 [ 578.942529][T17324] common_startup_64+0x13e/0x148 [ 578.942546][T17324] [ 578.942546][T17324] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 578.942563][T17324] _raw_spin_lock_nested+0x31/0x40 [ 578.942576][T17324] raw_spin_rq_lock_nested+0x29/0x130 [ 578.942595][T17324] task_rq_lock+0xcf/0x3b0 [ 578.942614][T17324] cgroup_move_task+0x82/0x250 [ 578.942631][T17324] css_set_move_task+0x288/0x5f0 [ 578.942649][T17324] cgroup_post_fork+0x1c6/0x910 [ 578.942670][T17324] copy_process+0x54dd/0x6f00 [ 578.942685][T17324] kernel_clone+0xfd/0x960 [ 578.942700][T17324] user_mode_thread+0xb4/0xf0 [ 578.942717][T17324] rest_init+0x23/0x2b0 [ 578.942736][T17324] start_kernel+0x3e4/0x4d0 [ 578.942751][T17324] x86_64_start_reservations+0x18/0x30 [ 578.942768][T17324] x86_64_start_kernel+0xb2/0xc0 [ 578.942783][T17324] common_startup_64+0x13e/0x148 [ 578.942799][T17324] [ 578.942799][T17324] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 578.942815][T17324] _raw_spin_lock_irqsave+0x3a/0x60 [ 578.942829][T17324] try_to_wake_up+0x9a/0x1440 [ 578.942847][T17324] up+0x79/0xb0 [ 578.942863][T17324] __up_console_sem+0x85/0xe0 [ 578.942905][T17324] console_unlock+0x1dc/0x210 [ 578.942921][T17324] vga_remove_vgacon+0x90/0xd0 [ 578.942939][T17324] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 578.942955][T17324] bochs_pci_probe+0x101/0x1150 [ 578.942975][T17324] local_pci_probe+0xde/0x1b0 [ 578.942995][T17324] pci_device_probe+0x5ad/0x7b0 [ 578.943008][T17324] really_probe+0x23e/0xa90 [ 578.943028][T17324] __driver_probe_device+0x1de/0x440 [ 578.943052][T17324] driver_probe_device+0x4c/0x1b0 [ 578.943071][T17324] __driver_attach+0x283/0x580 [ 578.943091][T17324] bus_for_each_dev+0x13c/0x1d0 [ 578.943108][T17324] bus_add_driver+0x2e9/0x690 [ 578.943125][T17324] driver_register+0x15c/0x4b0 [ 578.943139][T17324] bochs_pci_driver_init+0x67/0x80 [ 578.943156][T17324] do_one_initcall+0x128/0x630 [ 578.943175][T17324] kernel_init_freeable+0x58f/0x8b0 [ 578.943192][T17324] kernel_init+0x1c/0x2b0 [ 578.943212][T17324] ret_from_fork+0x45/0x80 [ 578.943224][T17324] ret_from_fork_asm+0x1a/0x30 [ 578.943243][T17324] [ 578.943243][T17324] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 578.943261][T17324] __lock_acquire+0x250b/0x3ce0 [ 578.943280][T17324] lock_acquire.part.0+0x11b/0x380 [ 578.943299][T17324] _raw_spin_lock_irqsave+0x3a/0x60 [ 578.943313][T17324] down_trylock+0x12/0x70 [ 578.943330][T17324] __down_trylock_console_sem+0x40/0x140 [ 578.943351][T17324] vprintk_emit+0x3e3/0x6f0 [ 578.943366][T17324] vprintk+0x7f/0xa0 [ 578.943381][T17324] _printk+0xc8/0x100 [ 578.943400][T17324] should_fail_ex+0x46c/0x5b0 [ 578.943420][T17324] strncpy_from_user+0x3b/0x2a0 [ 578.943438][T17324] strncpy_from_user_nofault+0x7f/0x180 [ 578.943459][T17324] bpf_probe_read_compat_str+0x131/0x170 [ 578.943477][T17324] bpf_prog_5c83d719bb699f4a+0x46/0x48 [ 578.943489][T17324] bpf_trace_run2+0x231/0x590 [ 578.943504][T17324] enqueue_timer+0x2b4/0x550 [ 578.943518][T17324] __mod_timer+0x8d7/0xdc0 [ 578.943534][T17324] inet_frag_find+0x8c1/0x2260 [ 578.943553][T17324] ip_defrag+0x29a/0x2530 [ 578.943570][T17324] ipv4_conntrack_defrag+0x404/0x600 [ 578.943588][T17324] nf_hook_slow+0xbb/0x200 [ 578.943605][T17324] raw_sendmsg+0x27f6/0x3ad0 [ 578.943619][T17324] inet_sendmsg+0x119/0x140 [ 578.943632][T17324] __sys_sendto+0x426/0x4d0 [ 578.943650][T17324] __ia32_sys_sendto+0xdd/0x1b0 [ 578.943669][T17324] __do_fast_syscall_32+0x73/0x120 [ 578.943688][T17324] do_fast_syscall_32+0x32/0x80 [ 578.943706][T17324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.943725][T17324] [ 578.943725][T17324] other info that might help us debug this: [ 578.943725][T17324] [ 578.943729][T17324] Chain exists of: [ 578.943729][T17324] (console_sem).lock --> &rq->__lock --> &base->lock [ 578.943729][T17324] [ 578.943748][T17324] Possible unsafe locking scenario: [ 578.943748][T17324] [ 578.943752][T17324] CPU0 CPU1 [ 578.943755][T17324] ---- ---- [ 578.943759][T17324] lock(&base->lock); [ 578.943766][T17324] lock(&rq->__lock); [ 578.943775][T17324] lock(&base->lock); [ 578.943784][T17324] lock((console_sem).lock); [ 578.943792][T17324] [ 578.943792][T17324] *** DEADLOCK *** [ 578.943792][T17324] [ 578.943796][T17324] 4 locks held by syz.3.3299/17324: [ 578.943804][T17324] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: raw_sendmsg+0x2714/0x3ad0 [ 578.943847][T17324] #1: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: inet_frag_find+0x12d/0x2260 [ 578.943883][T17324] #2: ffff88802b52a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 578.943917][T17324] #3: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 578.943952][T17324] [ 578.943952][T17324] stack backtrace: [ 578.943956][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.3.3299 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 578.943973][T17324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 578.943982][T17324] Call Trace: [ 578.943987][T17324] [ 578.943993][T17324] dump_stack_lvl+0x116/0x1f0 [ 578.944015][T17324] print_circular_bug+0x419/0x5d0 [ 578.944037][T17324] check_noncircular+0x31a/0x400 [ 578.944061][T17324] ? __pfx_check_noncircular+0x10/0x10 [ 578.944082][T17324] ? __pfx__prb_read_valid+0x10/0x10 [ 578.944102][T17324] ? __pfx_format_decode+0x10/0x10 [ 578.944120][T17324] ? lockdep_lock+0xc6/0x200 [ 578.944137][T17324] ? __pfx_lockdep_lock+0x10/0x10 [ 578.944156][T17324] __lock_acquire+0x250b/0x3ce0 [ 578.944180][T17324] ? __pfx___lock_acquire+0x10/0x10 [ 578.944200][T17324] ? vprintk_store+0x222/0xbb0 [ 578.944216][T17324] lock_acquire.part.0+0x11b/0x380 [ 578.944236][T17324] ? down_trylock+0x12/0x70 [ 578.944256][T17324] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 578.944277][T17324] ? rcu_is_watching+0x12/0xc0 [ 578.944294][T17324] ? trace_lock_acquire+0x14a/0x1d0 [ 578.944311][T17324] ? down_trylock+0x12/0x70 [ 578.944331][T17324] ? lock_acquire+0x2f/0xb0 [ 578.944351][T17324] ? down_trylock+0x12/0x70 [ 578.944370][T17324] ? vprintk+0x7f/0xa0 [ 578.944387][T17324] _raw_spin_lock_irqsave+0x3a/0x60 [ 578.944404][T17324] ? down_trylock+0x12/0x70 [ 578.944422][T17324] down_trylock+0x12/0x70 [ 578.944439][T17324] __down_trylock_console_sem+0x40/0x140 [ 578.944461][T17324] vprintk_emit+0x3e3/0x6f0 [ 578.944477][T17324] ? __pfx_vprintk_emit+0x10/0x10 [ 578.944494][T17324] ? hlock_class+0x4e/0x130 [ 578.944510][T17324] ? __lock_acquire+0xbdd/0x3ce0 [ 578.944533][T17324] vprintk+0x7f/0xa0 [ 578.944549][T17324] _printk+0xc8/0x100 [ 578.944570][T17324] ? __pfx__printk+0x10/0x10 [ 578.944590][T17324] ? ___ratelimit+0x24c/0x570 [ 578.944609][T17324] ? __pfx____ratelimit+0x10/0x10 [ 578.944630][T17324] should_fail_ex+0x46c/0x5b0 [ 578.944651][T17324] strncpy_from_user+0x3b/0x2a0 [ 578.944668][T17324] ? rcu_is_watching+0x12/0xc0 [ 578.944684][T17324] strncpy_from_user_nofault+0x7f/0x180 [ 578.944705][T17324] bpf_probe_read_compat_str+0x131/0x170 [ 578.944724][T17324] bpf_prog_5c83d719bb699f4a+0x46/0x48 [ 578.944737][T17324] bpf_trace_run2+0x231/0x590 [ 578.944754][T17324] ? __pfx_bpf_trace_run2+0x10/0x10 [ 578.944773][T17324] ? lock_acquire+0x2f/0xb0 [ 578.944793][T17324] ? lock_timer_base+0x5d/0x220 [ 578.944812][T17324] enqueue_timer+0x2b4/0x550 [ 578.944830][T17324] __mod_timer+0x8d7/0xdc0 [ 578.944851][T17324] ? __pfx___mod_timer+0x10/0x10 [ 578.944870][T17324] ? __pfx_ip4_frag_init+0x10/0x10 [ 578.944891][T17324] inet_frag_find+0x8c1/0x2260 [ 578.944909][T17324] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 578.944927][T17324] ? __pfx_ip4_key_hashfn+0x10/0x10 [ 578.944948][T17324] ? __pfx_inet_frag_find+0x10/0x10 [ 578.944968][T17324] ? hlock_class+0x4e/0x130 [ 578.944989][T17324] ip_defrag+0x29a/0x2530 [ 578.945011][T17324] ? __pfx_ip_defrag+0x10/0x10 [ 578.945031][T17324] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 578.945058][T17324] ? ipv4_conntrack_defrag+0x3ee/0x600 [ 578.945077][T17324] ipv4_conntrack_defrag+0x404/0x600 [ 578.945096][T17324] ? __pfx_ipv4_conntrack_defrag+0x10/0x10 [ 578.945114][T17324] nf_hook_slow+0xbb/0x200 [ 578.945132][T17324] raw_sendmsg+0x27f6/0x3ad0 [ 578.945150][T17324] ? __pfx_raw_sendmsg+0x10/0x10 [ 578.945164][T17324] ? __pfx_tomoyo_check_inet_acl+0x10/0x10 [ 578.945185][T17324] ? __pfx_dst_output+0x10/0x10 [ 578.945203][T17324] ? __pfx___might_resched+0x10/0x10 [ 578.945222][T17324] ? __pfx_aa_sk_perm+0x10/0x10 [ 578.945243][T17324] ? __pfx_raw_sendmsg+0x10/0x10 [ 578.945259][T17324] ? inet_sendmsg+0x119/0x140 [ 578.945273][T17324] inet_sendmsg+0x119/0x140 [ 578.945288][T17324] __sys_sendto+0x426/0x4d0 [ 578.945308][T17324] ? __pfx___sys_sendto+0x10/0x10 [ 578.945337][T17324] ? ksys_write+0x1ad/0x260 [ 578.945353][T17324] ? __pfx_ksys_write+0x10/0x10 [ 578.945368][T17324] __ia32_sys_sendto+0xdd/0x1b0 [ 578.945387][T17324] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.945405][T17324] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 578.945426][T17324] __do_fast_syscall_32+0x73/0x120 [ 578.945446][T17324] do_fast_syscall_32+0x32/0x80 [ 578.945466][T17324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.945487][T17324] RIP: 0023:0xf73de579 [ 578.945499][T17324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.945514][T17324] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 578.945529][T17324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 578.945539][T17324] RDX: 000000000000ffeb RSI: 0000000000000000 RDI: 0000000020001100 [ 578.945549][T17324] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 578.945559][T17324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.945569][T17324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.945583][T17324] [ 579.280022][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.3.3299 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 579.283865][T17324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 579.287139][T17324] Call Trace: [ 579.288028][T17324] [ 579.288814][T17324] dump_stack_lvl+0x116/0x1f0 [ 579.290054][T17324] should_fail_ex+0x497/0x5b0 [ 579.291334][T17324] strncpy_from_user+0x3b/0x2a0 [ 579.292612][T17324] ? rcu_is_watching+0x12/0xc0 [ 579.293876][T17324] strncpy_from_user_nofault+0x7f/0x180 [ 579.295363][T17324] bpf_probe_read_compat_str+0x131/0x170 [ 579.296852][T17324] bpf_prog_5c83d719bb699f4a+0x46/0x48 [ 579.298271][T17324] bpf_trace_run2+0x231/0x590 [ 579.299526][T17324] ? __pfx_bpf_trace_run2+0x10/0x10 [ 579.300901][T17324] ? lock_acquire+0x2f/0xb0 [ 579.302106][T17324] ? lock_timer_base+0x5d/0x220 [ 579.303402][T17324] enqueue_timer+0x2b4/0x550 [ 579.304624][T17324] __mod_timer+0x8d7/0xdc0 [ 579.305895][T17324] ? __pfx___mod_timer+0x10/0x10 [ 579.307398][T17324] ? __pfx_ip4_frag_init+0x10/0x10 [ 579.308753][T17324] inet_frag_find+0x8c1/0x2260 [ 579.310015][T17324] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 579.311373][T17324] ? __pfx_ip4_key_hashfn+0x10/0x10 [ 579.312746][T17324] ? __pfx_inet_frag_find+0x10/0x10 [ 579.314101][T17324] ? hlock_class+0x4e/0x130 [ 579.315277][T17324] ip_defrag+0x29a/0x2530 [ 579.316446][T17324] ? __pfx_ip_defrag+0x10/0x10 [ 579.317709][T17324] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 579.319190][T17324] ? ipv4_conntrack_defrag+0x3ee/0x600 [ 579.320614][T17324] ipv4_conntrack_defrag+0x404/0x600 [ 579.322005][T17324] ? __pfx_ipv4_conntrack_defrag+0x10/0x10 [ 579.323530][T17324] nf_hook_slow+0xbb/0x200 [ 579.324709][T17324] raw_sendmsg+0x27f6/0x3ad0 [ 579.325960][T17324] ? __pfx_raw_sendmsg+0x10/0x10 [ 579.327272][T17324] ? __pfx_tomoyo_check_inet_acl+0x10/0x10 [ 579.328800][T17324] ? __pfx_dst_output+0x10/0x10 [ 579.330081][T17324] ? __pfx___might_resched+0x10/0x10 [ 579.331481][T17324] ? __pfx_aa_sk_perm+0x10/0x10 [ 579.332776][T17324] ? __pfx_raw_sendmsg+0x10/0x10 [ 579.334092][T17324] ? inet_sendmsg+0x119/0x140 [ 579.335347][T17324] inet_sendmsg+0x119/0x140 [ 579.336648][T17324] __sys_sendto+0x426/0x4d0 [ 579.337849][T17324] ? __pfx___sys_sendto+0x10/0x10 [ 579.339193][T17324] ? ksys_write+0x1ad/0x260 [ 579.340394][T17324] ? __pfx_ksys_write+0x10/0x10 [ 579.341678][T17324] __ia32_sys_sendto+0xdd/0x1b0 [ 579.342986][T17324] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.344367][T17324] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 579.346319][T17324] __do_fast_syscall_32+0x73/0x120 [ 579.347665][T17324] do_fast_syscall_32+0x32/0x80 [ 579.348947][T17324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 579.350815][T17324] RIP: 0023:0xf73de579 [ 579.352289][T17324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 579.359194][T17324] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 579.362167][T17324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 579.364946][T17324] RDX: 000000000000ffeb RSI: 0000000000000000 RDI: 0000000020001100 [ 579.367629][T17324] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 579.370491][T17324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 579.372758][T17324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.374834][T17324] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.555644][ T1107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.649682][ T1107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.787518][ T1107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.851187][ T1107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.099725][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.104343][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.108525][ T1107] bond0 (unregistering): Released all slaves [ 580.255786][ T1107] IPVS: stopping backup sync thread 14089 ... [ 580.417689][ T1107] hsr_slave_0: left promiscuous mode [ 580.420126][ T1107] hsr_slave_1: left promiscuous mode [ 580.424681][ T1107] veth1_macvtap: left promiscuous mode [ 580.428032][ T1107] veth0_macvtap: left promiscuous mode [ 580.430125][ T1107] veth1_vlan: left promiscuous mode [ 580.432079][ T1107] veth0_vlan: left promiscuous mode [ 580.742684][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 581.351858][ T1107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.434219][ T1107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.496643][ T1107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.566809][ T1107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.649099][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.732798][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.808900][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.880897][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.969645][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.022282][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.109503][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.181525][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.237460][ T1107] bridge_slave_1: left allmulticast mode [ 582.239519][ T1107] bridge_slave_1: left promiscuous mode [ 582.241563][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.245680][ T1107] bridge_slave_0: left allmulticast mode [ 582.247714][ T1107] bridge_slave_0: left promiscuous mode [ 582.249746][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.253726][ T1107] bridge_slave_1: left allmulticast mode [ 582.257910][ T1107] bridge_slave_1: left promiscuous mode [ 582.259948][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.263459][ T1107] bridge_slave_0: left allmulticast mode [ 582.267351][ T1107] bridge_slave_0: left promiscuous mode [ 582.269409][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.503407][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.506687][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.509673][ T1107] bond0 (unregistering): Released all slaves [ 582.516559][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.520523][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.524068][ T1107] bond0 (unregistering): Released all slaves [ 582.530314][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.534011][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.537208][ T1107] bond0 (unregistering): Released all slaves [ 583.115698][ T1107] hsr_slave_0: left promiscuous mode [ 583.117797][ T1107] hsr_slave_1: left promiscuous mode [ 583.123970][ T1107] hsr_slave_0: left promiscuous mode [ 583.127026][ T1107] hsr_slave_1: left promiscuous mode [ 583.131826][ T1107] hsr_slave_0: left promiscuous mode [ 583.133582][ T1107] hsr_slave_1: left promiscuous mode [ 583.135364][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.137319][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.139548][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.141666][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.146508][ T1107] veth1_macvtap: left promiscuous mode [ 583.147995][ T1107] veth0_macvtap: left promiscuous mode [ 583.149452][ T1107] veth1_vlan: left promiscuous mode [ 583.150859][ T1107] veth0_vlan: left promiscuous mode [ 583.152924][ T1107] veth1_macvtap: left promiscuous mode [ 583.154398][ T1107] veth0_macvtap: left promiscuous mode [ 583.155947][ T1107] veth1_vlan: left promiscuous mode [ 583.157388][ T1107] veth0_vlan: left promiscuous mode [ 583.159475][ T1107] veth1_macvtap: left promiscuous mode [ 583.160980][ T1107] veth0_macvtap: left promiscuous mode [ 583.162463][ T1107] veth1_vlan: left allmulticast mode [ 583.163834][ T1107] veth1_vlan: left promiscuous mode [ 583.165251][ T1107] veth0_vlan: left promiscuous mode [ 583.477725][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 583.534014][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 583.745270][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 583.796842][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 584.009603][ T1107] macvlan0 (unregistering): left allmulticast mode [ 584.173141][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 585.187927][ T1107] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 18:00:47 Registers: info registers vcpu 0 CPU#0 RAX=ffff7fffffffffff RBX=ffffea0000bb0dc0 RCX=ffffffff81c7e789 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea0000bb0dc0 RBP=ffffea0000bb0dc0 RSP=ffffc90000ecf290 R8 =0000000000000000 R9 =0000000000000000 R10=ffffea0000bb0dc7 R11=ffff88802b428a40 R12=dffffc0000000000 R13=ffffea0000bb0dc0 R14=ffff88801acb4048 R15=0000000000000000 RIP=ffffffff81edf0fc RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005801c4c0 CR3=0000000061aca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc900074def20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff850359b0 R15=0000000000000000 RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020010000 CR3=00000000004f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000001bf2a RBX=0000000000000003 RCX=ffffc900233ab000 RDX=0000000000040000 RSI=ffffffff813c485b RDI=0000000000000000 RBP=ffff88802b52a840 RSP=ffffc90006286b28 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=00000000000a201e R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fdc0 R15=ffffed10056a5508 RIP=ffffffff813c485c RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000005 CR3=0000000029f84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b52a840 RCX=ffffffff8b158074 RDX=ffffed10056a5509 RSI=0000000000000004 RDI=ffff88802b52a840 RBP=0000000000000003 RSP=ffffc9000631f708 R8 =0000000000000000 R9 =ffffed10056a5508 R10=ffff88802b52a843 R11=ffffffff818cba75 R12=ffffed10056a5508 R13=0000000000000000 R14=ffff88802b73fdc0 R15=0000000000000003 RIP=ffffffff8b1580b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056b98a1c CR3=0000000067b3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000